last executing test programs: 9m36.472666794s ago: executing program 32 (id=90): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x18a, &(0x7f0000000380)="$eJzsVb1OMkEUPbM77MJXfPmarzEmFhKFQlgWNVppZXgAH0ACKxIXf1gShZCIFe9hw2tYmPgIFhobLIyJBfZmzc7cXYdeQkzmJLvn3DP3ztxp7hwF54EN4HPSr2EXAib+4pExcABLTHp7tuQ3S3KB4lcuOU/+DfETcdDtHVd932vPTNz/B2Z9xlxEeKU4bP79aKHFLAX/+Z2/w51rA+9ilj1M+rVIHAAIwzCMvLr8mJpjArhTcha4+JiJMMmJhl8UrAIodlpnxaDbW2u2qg2v4Z24bnnTWXecDbd42PQ9R/y3aW6KcoN0xHkA0VpGaSEF4JkG7B9Mgymt0TpTay1lOOeWp2tNpTZmhtuk1lby9rGCNICLAVPcrOiaQ1ysAgaTghJX+pN3S4uFQu3Urw/BwOKyEXiyR2mMFIwMgKbvuSKglfLWIG57SJwlrhCPiMfE8ZsVv0Vc7PBCUW4AWLisdjrtUmRJlXhu4rn/kpMNOvXDmr7cog0NDQ0NDQ0NjV+GrwAAAP//ZVpfyw==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001007369740024000280050009000000000008000200e00000020600080000"], 0x50}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2800) r1 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@loopback, @multicast2}) 9m32.864401829s ago: executing program 33 (id=99): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a00)="56eeaf46fb6806001cef6623df1e33c976ef35845e4a2c6d8a5b7324878db0b28de55b", 0x23}, {&(0x7f00000005c0)="9d7552373897fdf40b8362c98be476c2bc4127716c98a2d5dd46bf9d1ca87a74ba1fecd89677ce79d8e0b9fffd166faa2bbdddc81c0601abfe2e9147a32738c74f3ed48d6b07d4280b51908cd05e2ed9337e33969dc7779f9962ba3bb6873ca8500904ffefff7149b4de6a4afc6e7e041bbd884ddfe6a4b4928a6b6464d1f5e441c73a6fdc5d696c8149d6cac109b525e7322d8a7aab0deb5be5f464b5e0", 0x9e}], 0x2}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000680)=""/4, 0x4}], 0x2}}], 0x1, 0x0, 0x0) 9m22.866799316s ago: executing program 34 (id=119): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x16) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100)="00fea535cf568a09f8", 0x9) 7m57.685309761s ago: executing program 1 (id=459): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES8, @ANYBLOB="d7a0b32492a37c2225c0b2273c7184ca54eb12d1661cc6ac6f864931f11d6fbf11eb17efdafd828516c951f08dc17e059c566fbeb3deed701ad30acbfbb75253611906163e09693bf388d7348fc0132bf9ac881cbada27e3d77e0330e5b3cd76d3f77acd4f5571e281b1f84d293874f20070a899173188446697999ec7086052b6d2a74ca6d96080eee579ce54e0dbde"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010426bd7000fddbdf250f0000002c000780"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x4) 7m56.913235885s ago: executing program 1 (id=462): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write$binfmt_script(r1, &(0x7f0000000180), 0x4) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, &(0x7f0000000100), 0x8, 0x0) 7m56.552066143s ago: executing program 1 (id=465): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 7m55.317590871s ago: executing program 1 (id=475): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 7m54.618516192s ago: executing program 1 (id=479): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {0x0}], 0x2) 7m52.523915968s ago: executing program 1 (id=483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000f00)={0x1, "a2"}) 7m52.510206662s ago: executing program 6 (id=484): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='vet'], 0x12) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) 7m52.10220421s ago: executing program 6 (id=488): r0 = syz_io_uring_setup(0xd89, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x0, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x194, 0x298f82}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 7m51.80773668s ago: executing program 6 (id=492): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/178, 0xb2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7m46.363395213s ago: executing program 6 (id=501): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0xa, 0x0) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, 0x0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x5010) 7m45.380196924s ago: executing program 6 (id=507): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1b, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x800000000000, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in6=@remote, 0xffffffff, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3503, 0x1, 0x2, 0x0, 0x9}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 7m43.439599688s ago: executing program 6 (id=510): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 7m37.404132086s ago: executing program 35 (id=483): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000f00)={0x1, "a2"}) 7m27.155512764s ago: executing program 36 (id=510): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 4m42.678710934s ago: executing program 8 (id=1207): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080)=0x4, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000004c0)=""/4096) 4m39.904119867s ago: executing program 8 (id=1213): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x8, 0x9, 0x5a) fsmount(0xffffffffffffffff, 0x0, 0x0) 4m36.584026128s ago: executing program 8 (id=1222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a280001801c00038050a245f8fe83acb3060001000100000008800200020000000800010000000400050002"], 0x64}}, 0x0) 4m32.770144641s ago: executing program 8 (id=1234): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x7ff, 0xb4, {"adc9fbaef22a5865ad240013a39ff2f1"}, 0xa9, 0xffffffffffffff75, 0x5}}}, 0xa0) 4m28.272565511s ago: executing program 8 (id=1241): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x50480240, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @remote, 0x1}, 0x1c) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008994) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x15, {0x1, 0x100000000000, 0x2, 0x305, 0x3fe, 0x80, {0x6, 0xe, 0x3fffc, 0xfe2b25d, 0x4, 0x0, 0x6, 0x4, 0xfffffffe, 0x4000, 0x7, 0x0, 0x0, 0x80008, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m26.316486628s ago: executing program 8 (id=1243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 4m10.094336408s ago: executing program 37 (id=1243): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 1m32.649728352s ago: executing program 3 (id=1901): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b", 0xa7}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1ca15ced0aede50fda81fdc111eb3e2bfa47dc25e4140a48001bc5a66599df814025dce2bbdd563b73b40f7a212bb5e89fe9bb9e55ff90d9c8ccdf5365e90ceed67935f77561c114d731a6de3cf83be5f155f349c603bb9305d1dc2195e60d6c9811ff1ea70f32bfbed39662c6a453f8c793953d706dfa280abd6886ba28d14b8b0ba58aeaf4a43065dfdf6ce14f4bfc09bafafb83c562421433d12bd345cbb282f0bf9e9ba6ac4af22b69807633f781e9a3389bafe1c8ddaf22a9758ba4246048683d1c815523045074e9e5a632", 0xeb}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4c68707", 0xc0}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b2ba904c82f561ff2099dd9e08bb802adeee7d91a", 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698d14b7f16f2c59781d0a3dfc6908dc69ec4ff2a897ee7277c2ccdff49b79ec664b5f8e7015bbb9f137759961fb67735c695628eeb618270ab32072054c1321f2fcf33141cc6ad4caedcb1", 0xa6}, {&(0x7f0000000b40)="e0bc0d024567568d24b0b25317ced07b1cf07ee8ea6e1d0779066864a692139952adfd6c02d61b668d847ea58a9814a019ee8e66ee53348f8d681715a5f0ea5b1cbcd97764bb00ec789e5332d4", 0x4d}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m32.369523885s ago: executing program 3 (id=1902): r0 = creat(&(0x7f0000000080)='./file1\x00', 0x13e) close(r0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m32.084225312s ago: executing program 3 (id=1905): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_NAT={0x7c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m31.737828253s ago: executing program 3 (id=1906): prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r0 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x400a005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 1m31.274896103s ago: executing program 3 (id=1909): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1m31.13313304s ago: executing program 3 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x44004, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1m15.391749726s ago: executing program 38 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x44004, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 19.328579638s ago: executing program 5 (id=2113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)="10f1", 0x2}], 0x1, &(0x7f0000000b80)=[{0x10, 0x1, 0x153}], 0x10}}], 0x2, 0x4044044) 12.577827032s ago: executing program 4 (id=2129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) msgget$private(0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) 12.200620668s ago: executing program 5 (id=2134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 11.827162001s ago: executing program 2 (id=2138): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x300, 0x0, 0xb3550aa4ba878396}, 0x9c) 11.651857341s ago: executing program 5 (id=2139): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, 0x0, 0x0) 11.379108018s ago: executing program 5 (id=2141): mkdirat(0xffffffffffffff9c, 0x0, 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008994) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000000340)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 11.298766797s ago: executing program 2 (id=2143): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) dup3(r0, r1, 0x0) 9.225340716s ago: executing program 5 (id=2144): io_uring_setup(0x664, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x32d014e, 0x180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000240)=0x52, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x6100204) 8.637069526s ago: executing program 2 (id=2146): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)="10f1", 0x2}], 0x1, &(0x7f0000000b80)=[{0x10, 0x1, 0x153}], 0x10}}], 0x2, 0x4044044) 8.296244209s ago: executing program 2 (id=2149): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r2, 0x2f, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7.967263666s ago: executing program 2 (id=2152): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 7.539930318s ago: executing program 2 (id=2157): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="02000000040000060000000001000000800000003799f6982b00d1deb74a95baae91ee009f4dbc4f4c1a87f90398721595714be057c1be8b96b2a9a22e6acff1af303d5c43dde5c179d1832aba805763e6304cbb1825c35bd081aae1d23590af4a27facf965e366548e4b71714695fe543e7c4648b49bcd39fe9ceb78ff6af9fd4a6aad41c1a", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0xf67, 0xa, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000280)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xb) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000047c0)="113726997a2e85e7ad846c472a05434ea5c2b9ff9d766836584a88818d9879ce5023284e2716cd090e2c78310cd9ebf4187f612f9e8d311cfbb3ec856c0d11a15edef441de79736fe4d0fecee00a2c49d5e6735a0a3c2c19e4085f763189ddc683ad4f921e984a65a94aee7be7bc1aebd6c6c2882fec58060432bcb14af182b5c6ea0d61d105eeb7838e1f651d7204a356e49b969456363931a44721de3de6157a6a5658a7bf71b18cd329566f2c0dd6bee1a93ecee84697d38976211f62f08a98a0a402d89ffba267c22a5917b7eb690ed567146ba207326e4bd52ff032cdafa212035da688095ec6e3d3fd0dd581f807e4705b0ce0310f76b41e0b40fead9b382c2a03218b5b5dc6e70dfcd3ff489191c211e61685b813ead09382e0d84af987726322bb63bff71bbb155b3a4e928fbac5e0c52650227897bb29ca4c08aec9c5f826649f5db52689ed340f050f3726a6693624c421fb19c0d2836c58d3610ffc0153ac12bfc45739ece9a3e3f971bb286f231cd008de916d3b1cd80a2299c3a89dec82fa158654d3464f047d98401298035aa775b30da90f0f89a417c7f9496ea352a80a29ae36fae0924d2be74b7826e75c0a2de541390dfea77e7751b7d6a6df5798b0acbc1d6f4f8781b518ff9e769e532f9d920e7db878683d4b8ef901574837c43aab56ac6e551c20f9b38d9476e0fcb0394769e07b76138e187a8196512adb991e834e65293cb91be02831cdb7f25be616318b35aeaff6dc009c7751ae1f2ec0ec04f93f69ecaee40eec0dc4f49774baa1f5f89ddd582ef292deb528b12f9de395081fc2699bebfe8e143442f43f8c90538789783e4a7d25423123495dcd03b0534a09a89d2c19ae729c2107d1b500f0237bf51da1c16e763c5dc7c1de50be4b339d11ecbde56c28b2f617b2420acd8b0f2c318107c0ccbb118e3a9ff08d453921e823f27a0edd6aaf4310ce30e2fe5de53642923f5a57c4d709aecf26767a7ba3774bea83fc798f3a913d8e9d6967868409b3c1502b01d17238cec58883ff25348b4a910bd7de86af50324fe5f2decb1a71e58751b577fa5ddfc807fecd38a470abf9f5b4a4cc82ba26513f78fb68a982651a22efa05dd97ed1b3ca6e5bf5338612d3f3f8d9080d93ec06862615349963f437678b3f1b9e17db9cafd6f7f51b43ab54be80b0553bc813d7bd0c228baac3c617957788a62cfd3caf6c6f1e42ad1bafe54f604b4751258bc2b50c6eb319360b5df47931aefa87bd96a97934d8bc53e27211d8b71ca9c4cfec8287bf15e49b5616a9a8e7b0b93160bfdcaa686e6de8c452ba6f3ccfd2cb49b4e10827b1095b1c02e3c4fd7b363d11520dd0848f111caa8d7b7f28fd3bbd48c4d63f49934a838109b8269fd484b2d454e52b8aeb619b0a5d86079f307e6ab34a66c9e32b74d9413559a1957cf54da99aa0f3389be8f5c9a7df68e303a3e2a958efef5bd8658ab1e406f45c2343d472fcf71ed09319563e838a71772112f17d6f2968c28b92c5948f8b6b6016539b8dee5ece5dd96e45b9a1a5bda75f1551a470138fd3a82f63ac8ccf35933e6eb649aa28e7e8bba92d122c41d130a386552f0a665fca0558dfa7e494fe562748ee9ddc70d53a2fa01d2f4ac7e02716bde694818a41eeef7ab14c804f6907a9ae887af79eb124a2aaecbb187f4494e63ecd66a3b41c36f8c2f4713d9004ec621203ee9312ae0cd8045464c5a010deacedd25f1824c3d174b28c12c82e3dee9e3a988509a326fd95c7e8956dc79e93c8867ac98697f0f915fb8ecd8c6546d45b410da4523bf30e1c4d5dfd34af677fff2b395e78ca83f295801e375ce639c0a7daac90797e6669d67bddd59b67026eeb5dd511009a618556172209ffd3b67348934bbf43f7ad67e7bf1e10269b6349e7c6a3cdddd350ac29f4e02a41f25b35a2bcf51aac6fe1c87818da5da240740116f994078823234f923d0f47341be12e0a225708f978c254fd8b6bb39adc6d0763bb34f523038609d392945497d606fcc62d988344588236093225050a0000be4371c25f3704c03cce667104508f07ebc0e47b7cd212d35ee41471d9c19ddc4b3e879ec5a39f8061250e0fb2583ed1bfd833ab680991599b8dc895ff23a0e65a976309850891633ce1311dfe3f16af4e4cfae739a630ff5f66fdc0e087fba116a6278bc2855b62a517776a5fe1f8ade2b53d3c8c6c484f1203b22babb3db0f37fb65227166b8c8f9b35afce78ec207d7f29e312af72b244ce7f22280900773e6f2b24795260cdbd9dcc1015369c830e03f356f3d6ed00cec941ebd8709a9d65ed884664e0a9bcbb92d02c9be64969c9745ea6b91fea6f3b769e87c93d2a6930241fba0c732623a4de7c320fb3f063d845aff482253f1605f78184b35fa557d651117d20897d42c2a656ddfb1d540943f2cf9bb6d871eec7ce6fc789d4521c0ab72151385e332dcd8b7c3bb556dc0f304942d247a3678daaf02433e5a793966e77cbfc82cf24a7f48153f14154f8da890091fde0024bab506e7ceec357e84aa968c19608aeec267f8215a6ffd718be80329a9151ed433673aaa6cdc2ffff2d659d0889d54b12f19c3c590c5f3daf1c9ae7193eb2c158db55ec09cf06aae2c55d05e6c67b7c1e725394875bfaee5d7dbcf28ff5799d11a1bf72639bf3603d1472f0b7994e708f2c3a16db356196e426a7e388515dfcc7005a2340ad86526670588f41afb6b2b5f2c4ace8bf27c678819db968cbbe4bedfca220d05d44796a250244afecd25f6a49e8a5458428c28558a202207327e78789ca4433fca81f24a41aa38c1004390ab6e7ebaf644acb92750cacec91d0dfda587da6422765632dac757c0c822487dbc82ad419698d63180352c1415420c857581897b3a441f154f4ceb01cc7e1504e4f7846c58d23dc5856f6a7a0896339cc2214b0c9233319a4dd7268ac76fb9be54958c49ba1e346ed0b1ae8d7cf1a6e60acaa68c5a8fe894c04b61127a19f4bd78c9978fde9a2f805e7aa1cb46a60ee8c0468b37085647aa86ed82f6b3c1dcf433c0326f9099a02eb1b4fd6d480500305704c654985e0af57d7a65e45bf67c97956ab9fc31f166282e3ef7272645f3974fac143df00c8383db6e0b8edd22e2f19ab8a6e30f593d0fc6838f5aba3c3cf6029032a912e04c36feb363a489553d1a4331c9a60dfe2e188fe18795a353ffea8362d867378a16534c2a91c66e904f6f37f36f9e851db65c6f5e225608eb7639de1cfbc68dcc922cafe54744e71ed9e0b1a0e6f75bec1a5faa8f79e4bc390634f161de80e4f6185f8631e1808e8d7966799bd80fc8e8a1f18e516c53af41a532980397d08815976dd4b82e6e55a9e4f06653e0e6a06fdf763c515580f07b3dae737eb0657c1418b32bf407bb2bd095d14fb968e6a705c7d29289172c0cd295105b6e6b9e4bc09892050b85850a9db62f491bc956198b39fbbf2cebf9cf870b094df32b55ec9ca0937dfe9d648fde06dbbc89f58afc9ff15a5faa970be577f3fc0c91dfe0a3455d0f56f68e08eea1452eb9a4fde5ff2c4f8fa07cece8ba6822ad1fe566d47f7325951d17d6a2910f7e5f17cd316459b3f19e6c28c11e82534f2f3a5a017572ccb458ad94a920242ee21ad86971540919f4e8b7cf084e776596527c55e326c1ddde64a154c83ae500cab1a36f1bd4c591af3faf5100ab9d9b8b1fed53fffa861e1a7bb8e5123476f7bf61b546452e685f4617a301cc44b0622e5971efcf1b2ac0852fc2285221ff068022a5f8ea0838b9d99e23966f10515f6d57f29bc5fa19d8a015aab914de9bc590e9a5e8b826bd802f6944b3980177b083c1faf0a724e6021ffa47203e6612c44584d3e48309f01c1dfe0d1fc9e30b9dc6c72247c0fde044497748e2a04accc26b26bd3f01707943740ec35463d70eefd19d3380f896440922cc09066147de3600b718d9e198c6e59b53d4153ffde784a6ce0c2b0a2170dd37cc0d78b69f406444eae8e13e10ceafdb7adc3cef635d6025e4aa0a1283355650f29c1a7391a3b47fd98346fcf125f0f56d4629ea6b8de4eb4d147bd7525fdbe4fc6a41176e3ced0bc3135df185183c7b8adada3c1a20ec319d7eb00dd2fafa8bf5fdea45b3638a42dff958e62a0745202fbe3b0c0f5b053b71838479cffe501860d00416fd9dcbc5e6f2caab8de2bbc92e67160dc42040f828ed3db8413b55ee03217322eeaa5ba1e914dbd64893c5785c4b9ca12ee25072b902834aff1d09d048f315daf5b4a06e16808a2e6703a817dc015f0ead1c61d2c79528de4d3112d6791949da6d74c51f1bb8fdd612217e05e1f8f5ff30cfea404eab432fce34667819527179cedbed5f625701b607c161379777a5839c163361507cc8c1e1562cbf32716a45de05a28edf89a8f012b084e5f16f88022efac5629fbeea1b7b654a8513851dcb7b7a0c43021b45df3106507a51242b5f99c18c1d451d14d26351cc95281f84fb604902060906ef0516eceee343c40639bd19f9dcbf35dd7fa807e6a9c1848676f21025b7dee19f583e60ae90c8b1d0b0b49828ebb33af2c532acfd368113794b83bcdfa2ad6f336b21a0826d9105eeb8d250d8b413d9e3f6010919f43a849ebea134627218b1ed8c82b8f7a7f3de62252c5521f860b24684483fa4bec195163da972ad4b78af4e4e9bcd607c1b2db24a511ef7861a0c6021bd1441794c02375c12f5156e13332e4d1fea516586391c55846ca2b581aa18ff974b0ad87f7918ef4f5e815a1e8f7d383b25ca3a8287d44154cdd73fc25f823e351cd251eff7d0d0e165fb7d7a79a082e161019d5928c41ab30021da4f2e2667500e3d1d88c9dbcaa0fe067605265b24a0132d4771650ee758c06ee7b11419733a6d3de17f5d3897dc7199d3600632cea498fd54f0ea6ef203d6fb73cc5ab9f2b71a45aafa09c83feca1a4ebfe102c77dd6f2787115c4f946c6fed7d215e7c06661c2c776a7c4aa21b5d93b8ae6bc00efe472949b37591ae1aa66fd4f69c2bbc8bd3d15778f8f45fc3f81a08ea2b5dd3670309d225d8a2da5eea6ad639b5688f89f0bc649d8f4fa0f5adbfe19af5e3a8b5828c9ec4e9a4653e6267ce71977d2d6a28bb99589c13120925dbb9350bd87f024062e7dadf87c50cb13048f0466dca694efc4354cc6142b519edf3f8bf369460b421b449e4f601a0cba54928bea86fb748d91af0cba293f6a05f833251e42e28b145d4952d4d77e0d35f56f2cde83c7acdd260b8dcaaecedfa4f4e7059052b23be522e51085f6792a2d339924b21ae33ee1d10d90db6ea6d0f1afd8f113aeaf8089497cf2669620179bfe90912e28fc9aa044fa79657afdd6e76f784106393f354ff6f3c70b507bc153a52ee8bea6816e5f1ebcd39eb83be405e4eb695f5691d3964990848a8a8f8ece3ce43ddf08f80643a8ae69f2426963d8c18456c2189300c5d4d698c4722f1ce61d2ba7eece5b1ce77c62263a7459aa1d480805e2300e662d0ae78bac140672b1d3b6b7b9020bfa6fe247cf01d3138b9fda9f83e940898caca17700617b260ad9f07ff58e0f3a8a12d6db7814109f6b63ab97c570bc85a08ad60530c2027ff9855e12e4a507c7a338ac54dad1c9cd6622e7de670062362440755e78d1effbac43911adf2983b47f610422521d940cc8d204db233cd020f348c77399e2769ea8eea6a2cb6798af835261c60abf0096107efc40f643683a3f6f176b5b57eb0704c55270c9d849e0030357fcc7508927955e89b5821598f011339e1d53c2cef59bab42aa86f87ad8463e45fa2d187954a9cd8e1de6f55cefea7ec4be73533909584bbae76c17387a65c84c8cab42e627f84870f3e7b8ceb2cdb172a3cb411c2ec0a75cb1dac1baed4b7b948a76c19853981330867c84ff723c87924fd1fca7b1ba38f375f60cd1ef9542e68a7bfa70c60208e3afde30195763440f2565be67f6b5e85ab50f98576f015a206fc671e294cda528bed06ca53bcdd1a64a5d573294e07aa1ec3533a70725e885c2148cfd418a7b731d1e386f8ef68aa5a271c23790c71d6490b5ba2844be94f7c43db311d0a4a111cbb10e5a13b3e0abb49ad22d1ddc05de292f8a1b1507556aa5360a26baac09ac68112c9a75d535f86872cdc9a354c8f7be67ad08d7d1f2412ee8c2799ff74b8433ce2597fb618fab3850c34880e0985e1f3c1ff1e7803f793e23fe511fe0b7c3fbeda5566dca5ccc03880bceb77bad6769b28e4a2d01ec6e5642837d0024a582b60131639e73850c2904f1511721c4f76e65758cf5c5d535fc3214561b9a8bbd5a480eafd2a56a298f5eee198dac1f249b9eac9b263eefb6255fea0812040df060a73fa6cd8c0c41ac0bea885546a16bd067e2789faba029755c206abe34cb0a25c585cd33a3d76f86239fb3082b8afb78ab1d72f9a1dd661db68251a2f462a53a01723fc8df949a389630230b6602c3f670c8c5fd5c6035769664af9330b3d4352981b03f658cb3d37715f5c2fe4d248b8194d109d6d9584a8606da828559a41aeb37ce0c20a965db116f51127eadee4fab56d52b5dc355b5f76159590fdce95462a44a2156a7aac4960ef565e543388dd42795596122599364112354060552f97f5b7e5b609ff9c219117918ab675019be8c09a9ccc98f39418e560ad4afd2ee53b25577749a93b95f7b2dbe5745631971708915aae1e6d4c2451611c62d130c545d5f68d7b18371667c08d8b960bfcb22621ce2392096b87da43e10788727d8656764b5273deffb71f3d214e73830f032a77552869a61db809455b5010f3ad9b8b464d63da102cbcc1e79178b5f27b4d268d131230ff450ba78d4f0a08eb1946315f483df02ba92ddc909900dd2a01978d088e627eb4ed8607467704e716a32c3f113d7948c7bca1ccda791afe9ea69d5138c8c91287da39e233005c39069af5df57a890bf987e088247f356eddf608de8dc95186c14cd0cebcb9a17f81ab49aa7ead6a9f699acc613dc4782cfdb3ba967823504da1ced28482a170542fab2e4f56876b296801effc9a1f36a332cf1f0e45a9e5a6fdc8b7a7a08b0e762b4150cec7de437276f57ed090fc91bf3d86c59a9e8a61454607d604e38c3d8e4c26c10c85f0907745599bb9decb6fd57ff58d4df25d2a9a6d2a221fc81f6ca09482790ee28a1acca019b0c99a2201d425aac97643eaa3c5f3d662b5d4308d258bbfdee479265d4d64abf04b32de2b921c6f2986ebb59034088806b338773e5b180875af46042cbd87716268137c830b49fa055036fac5b4faaa224c7e60ac045513fbdc04ec6c113b5103e3b12ea6088796ea6813f2d6f941701e5537b7aff943132f9a9ecd2ede3aa4c3f6c47fa7ee941d3cde8b888443e7a410d33bc049d1c118aef264745409b38cd041e5a5201e427f46851471d53e7f1df94155f31f139c8731c34876f08d41b25ec69d167051aea9258854214f75cc0a698ff3e502a70226f61118e9fb013f0820e78dfc3794de65d54d062fbd69f68e9b2a0fe9a00fb85e594fa369d1c52e1679ad3d8676b203be03f987f8350cb384dbf5dfbbe82ee731ff26d5bcb26549754cdeceace9ede556d231016b6f8de41d29a4795346b2b9e4c480eb90ecce23f3fa0a855d6e769c184b1d14a88ab71f52f206cdd87d923613a2c9b51d2866b7c66640c595fbfb2c09f654ad460f6c059c0b8cb8a1df24ca2c09f06ca7c1e9a3d45dd75ed7c582995c9bf01374e51a1d1305385e44ce2958d6d13df2631d00bfb1c0ee7acd6023bc2afdb27ee1157c77571b0371fb68b087e1cd4bffad7ddeb66fa61dc08b51fd199565bf8ca9fdb1da22810b703e85f20ce8539425beb0a900886b97447c11f06acccd7e446927acd0118cb398fe5067400ca52bc47159256be67b3539468cd2ded76caee98900cf8de5be2a284bfc91f3547ccbd7db6aac0222557cf2716b15a5bcdc9da136f2086d2f7a206afc2b3614a6536821a1d2b4d78fd6f86fd928b6a84722b6ee162b49f85613c219f20df30915172da73f653ad0d01c9c28cfaca34cff99f6a468d32c4d1a7c4a7152bb77ab0afe6f8b0a93741805d74e5ae443eb93f3a2e5b5fcebca61aa87965e9d32dd8b0f0be1f440326c8b8f7b28a4d14008136e270828c81817aae20e3f4f26c1c547b7f6f29eeb0250dd8b3adc3217f3e0476259e13ed696bf5ed4b4edc560849510392ff47cbb7838669e19458b282d2a1f49c6ef1caa02a85d216b97578e4dd31909bf31f2a872eb29b0537258b91c92d68681c9ada9bfd8435537d128586a196a009aa515da165281ecac5b3098ad9b4b28dcc0fd274136b66bb25951f5187d4cabdde577ac3831008e16f81c9291099be9e36987ef0bd93372a9e6d20fe8e1150186d620bfdb595061f3515880b401b10d0eaf25dc4c18bfbcc5fc4810fe83d53c166fa366ce2c9189f94af76b4090de8d3c0fcaea88779131aa5091a1a70dc058749e7692cb1fce6ba51cf3bd03cef5d62c108a8f0751bf8d9648f11273762bb627ec25513ecfde1132c3c53b21fddf4e1ca448ae4707ece907f38e114cce0c5162c68900b03a93acac13b59af31df1ac39437951c5954b6bd6778a594175f0e087c94239bac25a2e0fe664c7b20a0e06cc3e131824fa3244b3d56db169948493c281671b787647e972f86c8a4583becfc0175f139be08502f82c89c69aaa83aebd028fbdc051cf21f306d573f5734a1a2a125eaf4908529d41aff67cf9d1064115a7eae10477bfaea7e32d6ee2c7b871a0605f317f694f1e9c2bad4522a7662dd8d68a90884e4b0529b86da336a440b1c9c796a56f3b5c1baa543722a1553721e56da1ad9f5ff7683a0a39ca585f44f31f62a491dcc365e23dcf1ef1b00cd40d03c35fffc9d821dc19bf089dc5b075b5bccc45088d7bea5a6bb42680b2cd08ddad97aedc126f0dc42762e7c1fcd0b1bf3718b374db21e51b32faa0f8788e2cfd8e2d83abbe5124c6847b58da5164d427f8b0815a4165a4686d4f0d368d09b205095b192568f2757d10e5fd61a1b106ee7501580ddad74afcd74868e11f55cceec43cd2d74bf28e9e588344a6f0b9f44a8dd9ac82562d732ac95a9513570e8cf94c1cbac18a72c8a60f9a69030fd067880ab3519ab957dce78fd03b97784cc85326c64a6583f155fb69dcc44ad06dd042fec5fddbc73eb9fd6e8bbd862073401e974163ded66fc96303c6e6c82c3d3f2a8b7d5cbd76c2d2a14f1c0a22ab7d50dbc930128ffb3d355933864fc2f36119d2bc39af9c187984f7c851d00721aafc9c15502313251ef5d395531f6711815a34dd78723753a3a0a814c9048ecfcd39364dadab8e84999d9a3836b7b4b76e54490e08bc9afd7ddebb0f759dcc507d2b0c041e11b02a2f76e73c328a2f346c47cea94209602d55eb8d609ef74a3fbe0269a50e0218486e73e7109cd35bff00f1f6223d9e987c876e6515e2dc962cf19a7c03c0036754b05b73012e12572d551549376f24dfbbccb77c8b7d5bc2a794643a1961deca0101414fefec5a711b371c887a75d9e65619044e17f3a36ef5640c8d458e73ce2d9660ad0433ffa3096a9d6a20e5e0bce7290d0b130a33e0a9327e54d2665e612536717a847c8afcea63ff014c286191f93a5bc184d0cb727a599ee2b936ca27da538eaeb0360506ab625cc653bbf5824e812aa027dc75c0bc58b33fa28f1611874b1bdab25e836cde14c058a8f24f8841fa8bcb59472867c19b6b581c5e0876632f49e87a1813637cc632d7c859269f2c0489d29b52b33cfc3d39f566582e1bcf3b1a02f04850f42ae17d49826882dd3a2d89b6e1c1854bda2bfe8023b5e95cf9915df2d06ebd3dfb0119832c952a54ccf918b8c21e649f50ef6a2ea450848dd23139c86288df0d83be72e93b617fa9a14bfe188848cd69d6e815d0c54d5d15d8e4b75cc16caa9418e9ae8a66f210c9fb90b12a07995746b18663d986ebb77b2fafdf1c957c1d43b100ca7908240117b8f22df14ab0040339a2c715c7869df5834f25b59e492babd04aac9da8a70291569450ed3a6dbc3589fb70e407c79adbf207f43e671ea4a1fdfb833ebcff3c9ce469ec5af6cc713eea3ee09998bb823ac57743cf51a90a1bc8db7e2781bbfa10fff817124a4a1f350e79524837fb7c5bae21e82f35bab9d4ce5672076de88f71cf6fe33ecc04d720c16427bae73df70776d7b7b1ed99764cba3e750c98d040e6cac85c5d787e3b0dbb160d2da13e45548443e044eb4c4d990ba8be0360adb0b1e3bdbeaa6769c31ebb961827f73d89b81815331ea56ba4cc7ad8de381e53e5c9ad4749cd3fadf2c785a365b25a7a59658a4713c25819e074abd6cf9b48abcb6347d72c5a89f14eb4d8253ad3ead6fe0218fa320ddda5312f3a463b319b916ce40e978d3db941a8111fdcd7e21c1c753027b74155212a00b5901765a1d9f87471f4ff1317389b0f4dd47c4055a51b5051c365d470d781b95ba2d9302cb1fa5d7b752148c8a02d1b847557be275e5bd3d4647ea6c7484f50ca975b3fb6042d8dbadcd8c21ffbbb7b763d7196148683fa16ccdb4a959d5f61b53591bcc0bd36c638f1f293110915f137d82596816a9156b40614b0d6758be1a7d3edfdd576c7dd71690e167ba7ae8949c635ae145b9ec98fecfdc0aee2b85dee0028dfaa807a1ac3e591dc14d03ab77ee8795901edf7a0df6afb3a2a2bfcdbfdd89f36925784cf266ea2ffd5d0bcb9416405f573ebcd399d9471af8ed368fed2635b1e76355a809f5e1702ca56ab0f08174016f08ef8a745d8b5e45e9a53d5b0fabe673ed43ce660d0e8e148fe7870c24c03f0ec9d8173a421c41ba89355dec05e9ef55879b6231943e1672f20eb84e30e69fef7b34fffe0ca9ae6e711cbd8ebcf11e556de60fd3a68c56bd1250474dab6184f377d9f098fc2c107393e905d7971b0b04313b310ee70b93641620e8e5be4162b458c4f718bb045c1f4ba1321ba03464d284d54a246ac1d36fb2094b0e021363625d0f3137ba3413d5c3661734790383d1c0ceb1098ffc03c9ca3c9d92f5227e3c6d88781819bad43c9be467761bd6d85f1e23eee7ba7c758a2a856fa9713e5ccd7c0acd9536a4ef7eb222e55b4fa22196611ac7f2d5b531c06e8a677aa788b8305b3bf1298b48135b825fb6789d0e588355464b2548d1273240c9d2b5b646070c1a93d9260a7e4ab3952eefd1c990baf399858f4bb7b4e2e95a9e20ab6f59962e03f77b84c0385ff44c4621acf3949ab9a8910340e7847c89028b9ece8c897040173439124f1aa2a9cfb35ca14e21bca293ff210fe8ed5e84fc43dee31e5b206655e7414e444552a0dc31b6a21251442ed4fe9bae6bcf91e6211d597a711b17dab74213916c542d47f4a715f484b50ec3a535eadf05475513907a1e7a0c9265cc39ff6f1dd644a65c9ec157f1eb10ef8a10d9eb073843ebe5cdfaf8e4f8743eee08338e2e48058adde2e8a0ede7501bb43afae2e326180ca9f89ab681bea983674f4eb2c6c2b2c020ebf469477d34826037fce72f82a80a605f2ed7a5ff339f7762cf5342d5fc73caf20d89af3fa9af2d846785", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000e8cd7a1abb798265000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 6.3131784s ago: executing program 7 (id=2161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)="10f1", 0x2}], 0x1, &(0x7f0000000b80)=[{0x10, 0x1, 0x153}], 0x10}}], 0x2, 0x4044044) 6.285886027s ago: executing program 4 (id=2162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x12) flock(r6, 0x2) 5.672967905s ago: executing program 7 (id=2167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5.359792419s ago: executing program 0 (id=2169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xa, 0x4) 5.233527778s ago: executing program 9 (id=2170): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.885301102s ago: executing program 0 (id=2171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b", 0xa7}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1ca15ced0aede50fda81fdc111eb3e2bfa47dc25e4140a48001bc5a66599df814025dce2bbdd563b73b40f7a212bb5e89fe9bb9e55ff90d9c8ccdf5365e90ceed67935f77561c114d731a6de3cf83be5f155f349c603bb9305d1dc2195e60d6c9811ff1ea70f32bfbed39662c6a453f8c793953d706dfa280abd6886ba28d14b8b0ba58aeaf4a43065dfdf6ce14f4bfc09bafafb83c562421433d12bd345cbb282f0bf9e9ba6ac4af22b69807633f781e9a3389bafe1c8ddaf22a9758ba4246048683d1c815523045074e9e5a632", 0xeb}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4c68707", 0xc0}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b2ba904c82f561ff2099dd9e08bb802adeee7d91a", 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698d14b7f16f2c59781d0a3dfc6908dc69ec4ff2a897ee7277c2ccdff49b79ec664b5f8e7015bbb9f137759961fb67735c695628eeb618270ab32072054c1321f2fcf33141cc6ad4caedcb1", 0xa6}, {&(0x7f0000000b40)="e0bc0d024567568d24b0b25317ced07b1cf07ee8ea6e1d0779066864a692139952adfd6c02d61b668d847ea58a9814a019ee8e66ee53348f8d681715a5f0ea5b1cbcd97764bb00ec789e5332d4", 0x4d}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.884409285s ago: executing program 7 (id=2172): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000000c0)={0x0, 0x7a, &(0x7f00000001c0)="1f5a48b1489fa58001b444dd70441c5efd991b94db0ba533ec5cfc950794427872d867fb286b5da9fa0a5324a8e14703543d55dd8ec3dccdfa5920472da66f70017683b4033ed9e777ee33a3c7f378fbd0501ef109e463433d194f13c3207f789addb5860620a1048ceb4ef487f6b1b95e57200b3ed4dfc557ef"}) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r0, r1, 0x0) 2.599546304s ago: executing program 9 (id=2173): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) get_robust_list(r0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000280)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000400)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f00000001c0)={[0xea]}, 0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000f40)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) listxattr(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/49, 0x65) 2.483155101s ago: executing program 5 (id=2174): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) pipe(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.619692724s ago: executing program 7 (id=2175): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010326bd7000e6dbdf210400"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 1.518242976s ago: executing program 0 (id=2176): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.318023353s ago: executing program 9 (id=2177): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32, @ANYBLOB="06000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="060000000000000005"], 0x50) 1.111231551s ago: executing program 7 (id=2178): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xfdef) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) 1.111020783s ago: executing program 0 (id=2179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)="10f1", 0x2}], 0x1, &(0x7f0000000b80)=[{0x10, 0x1, 0x153}], 0x10}}], 0x2, 0x4044044) 1.108998695s ago: executing program 4 (id=2180): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}, @rdma_dest={0x18, 0x114, 0x2, {0x10001, 0x6}}], 0x48}, 0x20000000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r0 = socket$l2tp(0x2, 0x2, 0x73) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 827.469884ms ago: executing program 0 (id=2181): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, 0x0, 0x0) 782.744635ms ago: executing program 9 (id=2182): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=r2, 0x2f, 0x1, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 723.496143ms ago: executing program 4 (id=2183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048080) 667.867668ms ago: executing program 7 (id=2184): r0 = syz_open_procfs(0x0, &(0x7f0000002440)='cgroup\x00') read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f00000000c0)={0x1}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 367.355896ms ago: executing program 4 (id=2185): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 367.081842ms ago: executing program 0 (id=2186): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) 328.923185ms ago: executing program 9 (id=2187): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 71.956028ms ago: executing program 4 (id=2188): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b", 0xa7}, {&(0x7f0000000640)="43215c74775babf5edd55ac86e504abc04f348ed36a3b40c1f9712ed2e1ca15ced0aede50fda81fdc111eb3e2bfa47dc25e4140a48001bc5a66599df814025dce2bbdd563b73b40f7a212bb5e89fe9bb9e55ff90d9c8ccdf5365e90ceed67935f77561c114d731a6de3cf83be5f155f349c603bb9305d1dc2195e60d6c9811ff1ea70f32bfbed39662c6a453f8c793953d706dfa280abd6886ba28d14b8b0ba58aeaf4a43065dfdf6ce14f4bfc09bafafb83c562421433d12bd345cbb282f0bf9e9ba6ac4af22b69807633f781e9a3389bafe1c8ddaf22a9758ba4246048683d1c815523045074e9e5a632", 0xeb}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea38", 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4c68707", 0xc0}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b2ba904c82f561ff2099dd9e08bb802adeee7d91a", 0xad}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000a40)="1d21ba0cd66e3473c68037fab094c9cbe4565c1161aeb51bee605c71f26915faee4ed9170dfcd774388bdf06b356b4f709160aa83cfc1b63d25602c52b282054cd28085f7215a74e8e2a5e342150886b2a7b18dec8e7ecddccc2d698d14b7f16f2c59781d0a3dfc6908dc69ec4ff2a897ee7277c2ccdff49b79ec664b5f8e7015bbb9f137759961fb67735c695628eeb618270ab32072054c1321f2fcf33141cc6ad4caedcb1", 0xa6}, {&(0x7f0000000b40)="e0bc0d024567568d24b0b25317ced07b1cf07ee8ea6e1d0779066864a692139952adfd6c02d61b668d847ea58a9814a019ee8e66ee53348f8d681715a5f0ea5b1cbcd97764bb00ec789e5332d4", 0x4d}], 0x2}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 9 (id=2189): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) get_robust_list(r0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000280)={&(0x7f0000000180)}, 0x0, &(0x7f0000000340)={&(0x7f0000000300)}}, &(0x7f0000000400)=0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x40000) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f00000001c0)={[0xea]}, 0x8) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000f40)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) listxattr(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=""/49, 0x65) kernel console output (not intermixed with test programs): ype=1800 audit(1770742946.975:14): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.609" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 304.989524][ T8148] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 305.037204][ T8148] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 305.050631][ T8148] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 306.000892][ T6403] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.173766][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.183906][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.263062][ T7949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.408100][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.415250][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.537359][ T7949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.786466][ T6403] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.682614][ T6403] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.707735][ T8191] overlay: Unknown parameter '/' [ 307.904541][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.943274][ T7949] hsr_slave_0: entered promiscuous mode [ 307.978613][ T7949] hsr_slave_1: entered promiscuous mode [ 308.008794][ T7949] debugfs: 'hsr0' already exists in 'hsr' [ 308.038283][ T7949] Cannot create hsr debugfs directory [ 308.443745][ T7843] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.090588][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.097749][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.290193][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.297433][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.864017][ T6403] bridge_slave_1: left allmulticast mode [ 309.921606][ T6403] bridge_slave_1: left promiscuous mode [ 309.942945][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.066235][ T6403] bridge_slave_0: left allmulticast mode [ 310.075287][ T6403] bridge_slave_0: left promiscuous mode [ 310.111646][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.043656][ T6403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.094050][ T6403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.125990][ T6403] bond0 (unregistering): Released all slaves [ 314.942282][ T8259] overlay: Unknown parameter '/' [ 316.523426][ T6403] hsr_slave_0: left promiscuous mode [ 316.556185][ T6403] hsr_slave_1: left promiscuous mode [ 316.622579][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.636736][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.771994][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.831438][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.973034][ T6403] veth1_macvtap: left promiscuous mode [ 316.997349][ T6403] veth0_macvtap: left promiscuous mode [ 317.064569][ T6403] veth1_vlan: left promiscuous mode [ 317.094946][ T6403] veth0_vlan: left promiscuous mode [ 317.235233][ T8275] loop5: detected capacity change from 0 to 2048 [ 317.279024][ T8275] EXT4-fs: Ignoring removed orlov option [ 317.285172][ T8275] EXT4-fs: Ignoring removed oldalloc option [ 317.426318][ T8275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.789195][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.442676][ T8292] loop5: detected capacity change from 0 to 1024 [ 318.543986][ T8292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 318.587258][ T8292] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.650717][ T8292] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.662: lblock 0 mapped to illegal pblock 0 (length 6) [ 318.678723][ T8292] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.662: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 318.760778][ T8298] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.662: lblock 3 mapped to illegal pblock 3 (length 3) [ 318.822413][ T8298] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 318.867098][ T8298] EXT4-fs (loop5): This should not happen!! Data will be lost [ 318.867098][ T8298] [ 319.041988][ T7226] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 319.097553][ T7226] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 319.158787][ T7226] EXT4-fs (loop5): This should not happen!! Data will be lost [ 319.158787][ T7226] [ 319.200308][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 319.350382][ T6403] team0 (unregistering): Port device team_slave_1 removed [ 319.908689][ T6403] team0 (unregistering): Port device team_slave_0 removed [ 321.287387][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 321.468870][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.486234][ T8315] loop5: detected capacity change from 0 to 2048 [ 321.492702][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 321.501808][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.522235][ T8315] EXT4-fs: Ignoring removed orlov option [ 321.531271][ T9] usb 9-1: config 0 descriptor?? [ 321.533299][ T8315] EXT4-fs: Ignoring removed oldalloc option [ 321.636645][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.655328][ T8315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.667774][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.788168][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 321.795473][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 321.813843][ T9] usb 9-1: USB disconnect, device number 11 [ 321.849870][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.175648][ T8322] overlay: Unknown parameter '/' [ 322.276520][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 322.464242][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.502360][ T9] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 322.524660][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.594813][ T9] usb 9-1: config 0 descriptor?? [ 322.737854][ T7949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 322.788663][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.825202][ T7949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 322.911667][ T7949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 322.996815][ T7949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.051703][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 323.066173][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 323.112588][ T9] usb 9-1: USB disconnect, device number 12 [ 323.686690][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.773264][ T7949] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.287509][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.294725][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.374092][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.381471][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.552582][ T7843] veth0_vlan: entered promiscuous mode [ 324.641684][ T7843] veth1_vlan: entered promiscuous mode [ 324.731262][ T8371] loop8: detected capacity change from 0 to 2048 [ 324.746908][ T7843] veth0_macvtap: entered promiscuous mode [ 324.787643][ T8371] EXT4-fs: Ignoring removed orlov option [ 324.795959][ T7843] veth1_macvtap: entered promiscuous mode [ 324.807136][ T8371] EXT4-fs: Ignoring removed oldalloc option [ 324.931322][ T8371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.965067][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.112284][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.173187][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.206867][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.251627][ T6403] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.327316][ T6403] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.328504][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.997959][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.005982][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.214378][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.354969][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 327.360725][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.373467][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.809166][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.854898][ T5899] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 327.886090][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.969189][ T5899] usb 6-1: config 0 descriptor?? [ 328.035543][ T7949] veth0_vlan: entered promiscuous mode [ 328.102449][ T7949] veth1_vlan: entered promiscuous mode [ 328.210509][ T5899] usbhid 6-1:0.0: can't add hid device: -71 [ 328.230886][ T5899] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 328.267863][ T5899] usb 6-1: USB disconnect, device number 8 [ 328.319025][ T8413] veth3: entered allmulticast mode [ 328.384679][ T7949] veth0_macvtap: entered promiscuous mode [ 328.513957][ T7949] veth1_macvtap: entered promiscuous mode [ 328.609925][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.663924][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.737862][ T5899] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 328.752532][ T7226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.787071][ T7226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.869183][ T7226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.908109][ T7226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.909942][ T8434] overlay: Unknown parameter '/' [ 328.925656][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.957201][ T5899] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 328.997503][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.027210][ T5899] usb 6-1: config 0 descriptor?? [ 329.240140][ T8433] loop8: detected capacity change from 0 to 8192 [ 329.305691][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.361277][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.476618][ T5899] usbhid 6-1:0.0: can't add hid device: -71 [ 329.518563][ T5899] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 329.555934][ T6403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.596754][ T5899] usb 6-1: USB disconnect, device number 9 [ 329.607382][ T6403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.810442][ T8442] loop8: detected capacity change from 0 to 512 [ 331.666591][ T8442] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.679700][ T8442] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.859751][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.141688][ T8480] veth3: entered allmulticast mode [ 335.814751][ T8493] netlink: 216 bytes leftover after parsing attributes in process `syz.3.716'. [ 336.783223][ T8522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 337.174870][ T8532] loop7: detected capacity change from 0 to 2048 [ 337.251351][ T8532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.341665][ T30] audit: type=1800 audit(1770742979.355:15): pid=8532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.726" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 337.582498][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.167681][ T8553] overlay: Unknown parameter '/' [ 339.745891][ T8585] loop9: detected capacity change from 0 to 128 [ 341.058255][ T8612] coredump: 423(syz.0.750): Core dump to core aborted: cannot preserve file permissions [ 341.456605][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.5.754'. [ 341.490455][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'. [ 342.211622][ T8643] netlink: 'syz.8.762': attribute type 1 has an invalid length. [ 342.671117][ T8653] overlay: Unknown parameter '/' [ 343.442235][ T8681] loop9: detected capacity change from 0 to 136 [ 343.479898][ T8681] Attempt to read inode for relocated directory [ 344.053840][ T8696] loop5: detected capacity change from 0 to 256 [ 344.152900][ T8696] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.168226][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 344.286517][ T8696] nfs4: Unknown parameter 'r' [ 344.377837][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 344.406274][ T10] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 344.445619][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.471992][ T10] usb 10-1: Product: syz [ 344.476275][ T10] usb 10-1: Manufacturer: syz [ 344.524015][ T10] usb 10-1: SerialNumber: syz [ 344.555806][ T10] usb 10-1: config 0 descriptor?? [ 344.828168][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 345.682894][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.698132][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.756286][ T8737] loop3: detected capacity change from 0 to 512 [ 345.762872][ T10] gspca_sq930x: ucbus_write failed -71 [ 345.874473][ T8737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.997259][ T8737] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.014868][ T10] gspca_sq930x: Sensor ov9630 not yet treated [ 346.026199][ T10] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 346.059160][ T8737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.796: bg 0: block 248: padding at end of block bitmap is not set [ 346.093642][ T10] usb 10-1: USB disconnect, device number 2 [ 346.142667][ T8737] Quota error (device loop3): write_blk: dquota write failed [ 346.172117][ T8737] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 346.212650][ T8737] EXT4-fs error (device loop3): ext4_acquire_dquot:6991: comm syz.3.796: Failed to acquire dquot type 0 [ 346.262148][ T8751] loop8: detected capacity change from 0 to 1024 [ 346.328082][ T8751] EXT4-fs: inline encryption not supported [ 346.382883][ T8751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.495052][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.785360][ T8762] overlay: Unknown parameter '/' [ 347.362216][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.540242][ T8774] loop3: detected capacity change from 0 to 1024 [ 347.614036][ T8774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.347186][ T30] audit: type=1800 audit(1770742990.355:16): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.808" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 348.651435][ T8814] overlay: Unknown parameter '/' [ 348.709741][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.141093][ T8829] loop3: detected capacity change from 0 to 256 [ 351.651759][ T8867] loop3: detected capacity change from 0 to 512 [ 351.714695][ T8866] overlay: Unknown parameter '/' [ 352.006565][ T8867] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 352.095470][ T8887] loop9: detected capacity change from 0 to 512 [ 352.271805][ T8887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.471874][ T8887] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 353.347129][ T8904] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 353.518450][ T8925] overlay: Unknown parameter '/' [ 353.882986][ T8867] EXT4-fs (loop3): 1 orphan inode deleted [ 353.893777][ T8867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.906570][ T8867] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.980142][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.178331][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.323630][ T8942] loop7: detected capacity change from 0 to 512 [ 357.990078][ T8942] EXT4-fs warning (device loop7): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop7. [ 358.017419][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 358.485893][ T8947] loop5: detected capacity change from 0 to 512 [ 358.538304][ T8947] EXT4-fs: Ignoring removed bh option [ 358.793014][ T8947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.817625][ T8947] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.179872][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.031935][ T8991] capability: warning: `syz.5.879' uses 32-bit capabilities (legacy support in use) [ 363.409188][ T5940] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 363.645566][ T5940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.105871][ T5940] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 365.116651][ T5940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.129122][ T5940] usb 8-1: config 0 descriptor?? [ 365.713572][ T5940] usbhid 8-1:0.0: can't add hid device: -71 [ 365.747255][ T5940] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 365.799137][ T5940] usb 8-1: USB disconnect, device number 9 [ 366.278035][ T5940] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 366.303831][ T9040] netlink: 48 bytes leftover after parsing attributes in process `syz.9.877'. [ 366.447049][ T5940] usb 8-1: Using ep0 maxpacket: 32 [ 366.470365][ T5940] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.501310][ T5940] usb 8-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 366.532578][ T5940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.582453][ T5940] usb 8-1: config 0 descriptor?? [ 368.624155][ T5940] usbhid 8-1:0.0: can't add hid device: -71 [ 368.687497][ T5940] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 368.747353][ T5940] usb 8-1: USB disconnect, device number 10 [ 373.285737][ T9115] loop5: detected capacity change from 0 to 512 [ 373.371047][ T9115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.417241][ T9115] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 373.604118][ T9115] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.899: bg 0: block 248: padding at end of block bitmap is not set [ 373.715571][ T9115] Quota error (device loop5): write_blk: dquota write failed [ 373.777327][ T9115] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 374.967159][ T9115] EXT4-fs error (device loop5): ext4_acquire_dquot:6991: comm syz.5.899: Failed to acquire dquot type 0 [ 375.722807][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.878475][ T9136] loop9: detected capacity change from 0 to 1024 [ 375.929619][ T9136] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 375.982950][ T9136] System zones: 0-1, 3-36 [ 376.041849][ T9136] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.917: bad orphan inode 134217728 [ 376.129050][ T9136] loop9: lost filesystem error report for type 5 error -117 [ 376.133491][ T9136] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.343619][ T9154] loop3: detected capacity change from 0 to 512 [ 376.478722][ T9154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 376.590538][ T9154] EXT4-fs (loop3): 1 truncate cleaned up [ 376.652064][ T9154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.914508][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.828909][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.242870][ T5899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 380.367130][ T5899] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.774535][ T9193] fido_id[9193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 382.484853][ T9220] loop9: detected capacity change from 0 to 2048 [ 382.629865][ T9220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.698903][ T30] audit: type=1800 audit(1770743024.695:17): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.945" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 382.913885][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.075469][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.082060][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.562933][ T9248] loop5: detected capacity change from 0 to 7 [ 383.625146][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 383.644215][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 384.687176][ T9254] Buffer I/O error on dev loop5, logical block 0, async page read [ 384.752750][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 384.814485][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 384.863366][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 384.931384][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 384.982051][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.035968][ T9248] ldm_validate_partition_table(): Disk read failed. [ 385.114548][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.148899][ T9248] Buffer I/O error on dev loop5, logical block 0, async page read [ 385.177880][ T9248] Dev loop5: unable to read RDB block 0 [ 385.225285][ T9248] loop5: unable to read partition table [ 385.236061][ T9248] loop5: partition table beyond EOD, truncated [ 385.262829][ T9248] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 386.116375][ T9277] loop9: detected capacity change from 0 to 2048 [ 386.146819][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 386.214305][ T9277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.308537][ T30] audit: type=1800 audit(1770743028.325:18): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.961" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 386.543221][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.778583][ T9295] loop5: detected capacity change from 0 to 256 [ 386.952778][ T9304] loop9: detected capacity change from 0 to 1024 [ 387.096891][ T9304] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 387.128318][ T9304] System zones: 0-1, 3-8 [ 387.154955][ T9304] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 387.250057][ T9304] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.330893][ T9304] EXT4-fs error (device loop9): ext4_free_blocks:6727: comm syz.9.967: Freeing blocks not in datazone - block = 0, count = 16 [ 387.599026][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 389.703077][ T9335] loop5: detected capacity change from 0 to 128 [ 390.692927][ T9342] netlink: 16 bytes leftover after parsing attributes in process `syz.9.980'. [ 391.065662][ T9359] loop9: detected capacity change from 0 to 512 [ 391.227879][ T9367] loop5: detected capacity change from 0 to 1024 [ 391.262367][ T9359] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.291598][ T9367] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 391.367368][ T9359] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.423986][ T9367] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 391.476473][ T9367] EXT4-fs (loop5): invalid journal inode [ 391.545980][ T9367] EXT4-fs (loop5): can't get journal size [ 391.593778][ T9367] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #2: comm syz.5.990: blocks 3-3 from inode overlap system zone [ 391.718760][ T9367] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 391.727546][ T9367] EXT4-fs (loop5): failed to initialize system zone (-117) [ 391.797344][ T9367] EXT4-fs (loop5): mount failed [ 392.247876][ T9391] loop8: detected capacity change from 0 to 2048 [ 392.423231][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.444897][ T9391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.540016][ T9401] loop7: detected capacity change from 0 to 512 [ 392.575463][ T30] audit: type=1800 audit(1770743034.585:19): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.995" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 392.667852][ T9401] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 393.627565][ T9401] EXT4-fs (loop7): 1 truncate cleaned up [ 393.635015][ T9401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.045257][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.378502][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.468484][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 395.577404][ T5907] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 395.788891][ T9437] usb usb8: usbfs: process 9437 (syz.7.1008) did not claim interface 0 before use [ 395.919982][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.977151][ T5907] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 396.146428][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.177910][ T5907] usb 4-1: config 0 descriptor?? [ 396.711485][ T5907] usbhid 4-1:0.0: can't add hid device: -71 [ 396.719649][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 396.767816][ T9451] loop9: detected capacity change from 0 to 2048 [ 396.807352][ T5907] usb 4-1: USB disconnect, device number 4 [ 396.898580][ T9451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.103908][ T30] audit: type=1800 audit(1770743039.105:20): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1014" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 397.407173][ T5907] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 397.423726][ T9464] loop8: detected capacity change from 0 to 512 [ 397.433989][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.523908][ T9464] EXT4-fs: Ignoring removed nobh option [ 397.593853][ T9464] EXT4-fs error (device loop8): __ext4_iget:5426: inode #11: block 1: comm syz.8.1018: invalid block [ 397.647339][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 397.680859][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.692702][ T5907] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 397.703076][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.732469][ T9464] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 397.747466][ T9464] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1018: couldn't read orphan inode 11 (err -117) [ 397.788731][ T5907] usb 4-1: config 0 descriptor?? [ 397.867147][ T9464] loop8: lost filesystem error report for type 5 error -117 [ 397.879790][ T9464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.900632][ T5907] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 397.934848][ T5907] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 398.161967][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.334388][ T790] usb 4-1: USB disconnect, device number 5 [ 398.367992][ T790] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 403.120661][ T9526] loop5: detected capacity change from 0 to 512 [ 403.221843][ T9526] EXT4-fs: Ignoring removed nobh option [ 403.402928][ T9526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.470744][ T9526] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 403.585396][ T9526] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1039: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 403.670388][ T9540] loop9: detected capacity change from 0 to 128 [ 403.759878][ T9540] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.887800][ T9540] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.223751][ T7843] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.524605][ T30] audit: type=1326 audit(1770743046.535:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 404.647096][ T30] audit: type=1326 audit(1770743046.535:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 404.739156][ T30] audit: type=1326 audit(1770743046.535:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 404.767787][ T9555] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1039: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 404.847116][ T30] audit: type=1326 audit(1770743046.535:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 404.990513][ T30] audit: type=1326 audit(1770743046.545:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 405.097502][ T30] audit: type=1326 audit(1770743046.545:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 405.412404][ T30] audit: type=1326 audit(1770743046.545:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 405.749225][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 405.817194][ T30] audit: type=1326 audit(1770743046.545:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 405.860050][ T30] audit: type=1326 audit(1770743046.545:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 405.939907][ T30] audit: type=1326 audit(1770743046.545:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc77859bf79 code=0x7ffc0000 [ 406.273929][ T9576] loop8: detected capacity change from 0 to 4096 [ 406.291819][ T9583] loop7: detected capacity change from 0 to 128 [ 406.302462][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.370476][ T9583] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.433981][ T9576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.491228][ T9583] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 406.582529][ T9576] EXT4-fs: Ignoring removed i_version option [ 406.630285][ T9576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.673697][ T9576] EXT4-fs (loop8): stripe (253) is not aligned with cluster size (16), stripe is disabled [ 406.818788][ T9593] loop3: detected capacity change from 0 to 136 [ 406.884290][ T9576] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 407.007194][ T6304] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.187923][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.488399][ T9636] xt_hashlimit: size too large, truncated to 1048576 [ 409.979671][ T5940] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 410.317107][ T5940] usb 10-1: config 5 has an invalid interface number: 211 but max is 0 [ 410.358932][ T5940] usb 10-1: config 5 has no interface number 0 [ 410.387758][ T5940] usb 10-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 410.416093][ T5940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.455414][ T5940] usb 10-1: Product: syz [ 410.496652][ T5940] usb 10-1: Manufacturer: syz [ 410.513286][ T5940] usb 10-1: SerialNumber: syz [ 410.538081][ T5940] usb 10-1: bad CDC descriptors [ 410.711343][ T9697] loop7: detected capacity change from 0 to 512 [ 410.787538][ T5940] usb 10-1: USB disconnect, device number 3 [ 410.864689][ T9697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.058689][ T9697] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.122062][ T9697] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 411.179582][ T9697] Quota error (device loop7): write_blk: dquota write failed [ 411.203428][ T9697] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 411.278546][ T9697] EXT4-fs error (device loop7): ext4_acquire_dquot:6991: comm syz.7.1100: Failed to acquire dquot type 1 [ 411.586675][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.986903][ T9734] loop5: detected capacity change from 0 to 128 [ 412.082185][ T9736] loop7: detected capacity change from 0 to 128 [ 412.144802][ T9736] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.152928][ T9736] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 412.489922][ T6304] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.018082][ T9758] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1107'. [ 413.273453][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.273453][ T1302] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 413.273585][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.273585][ T1302] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 413.273681][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.273681][ T1302] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 413.273777][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.273777][ T1302] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 413.273873][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.273873][ T1302] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 413.273966][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.273966][ T1302] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 413.274059][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.274059][ T1302] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 413.274170][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.274170][ T1302] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 413.274314][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.274314][ T1302] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 413.274423][ T1302] kworker/u8:5: attempt to access beyond end of device [ 413.274423][ T1302] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 413.885770][ T9776] loop8: detected capacity change from 0 to 1024 [ 413.892757][ T9776] EXT4-fs: Ignoring removed orlov option [ 413.967567][ T9776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.097113][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 414.307118][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 414.332180][ T9] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 414.332220][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.332245][ T9] usb 10-1: Product: syz [ 414.332263][ T9] usb 10-1: Manufacturer: syz [ 414.332281][ T9] usb 10-1: SerialNumber: syz [ 414.335198][ T9] usb 10-1: config 0 descriptor?? [ 414.346061][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 414.404483][ T6383] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.450443][ T9] gspca_sq930x: reg_r 001f failed -110 [ 415.450544][ T9] sq930x 10-1:0.0: probe with driver sq930x failed with error -110 [ 415.634649][ T9794] loop7: detected capacity change from 0 to 128 [ 415.778716][ T9794] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.893305][ T9794] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 416.066219][ T9797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.070514][ T9797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.084069][ T6304] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.272075][ T9805] xt_hashlimit: size too large, truncated to 1048576 [ 417.611160][ T9815] loop5: detected capacity change from 0 to 512 [ 419.135149][ T9815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.135255][ T9815] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.268485][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.295076][ T29] usb 10-1: USB disconnect, device number 4 [ 421.033496][ T9849] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1137'. [ 423.867913][ T790] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 425.427588][ T790] usb 10-1: Using ep0 maxpacket: 8 [ 425.859121][ T790] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 425.997191][ T790] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.005512][ T790] usb 10-1: Product: syz [ 426.061396][ T790] usb 10-1: Manufacturer: syz [ 426.066153][ T790] usb 10-1: SerialNumber: syz [ 426.148117][ T790] usb 10-1: config 0 descriptor?? [ 426.214704][ T790] gspca_main: sq930x-2.14.0 probing 2770:930c [ 426.462254][ T9910] fuse: Bad value for 'fd' [ 426.822775][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.838747][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.313874][ T790] gspca_sq930x: ucbus_write failed -71 [ 428.575217][ T790] gspca_sq930x: Sensor ov9630 not yet treated [ 428.581632][ T790] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 428.597320][ T790] usb 10-1: USB disconnect, device number 5 [ 433.450165][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 433.627558][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 433.691525][ T9] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 433.711836][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.750691][ T9] usb 6-1: Product: syz [ 433.769541][ T9] usb 6-1: Manufacturer: syz [ 433.789393][ T9] usb 6-1: SerialNumber: syz [ 433.841907][ T9] usb 6-1: config 0 descriptor?? [ 433.880542][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 434.306783][ T9991] fuse: Bad value for 'fd' [ 435.527124][ T9] gspca_sq930x: ucbus_write failed -110 [ 436.248496][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.317428][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.998250][ T9] gspca_sq930x: Unknown sensor [ 437.106570][ T9] sq930x 6-1:0.0: probe with driver sq930x failed with error -22 [ 437.208185][ T9] usb 6-1: USB disconnect, device number 10 [ 437.385149][T10011] loop3: detected capacity change from 0 to 2048 [ 437.592507][T10011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.870568][T10040] fuse: Bad value for 'fd' [ 440.898108][ T6548] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 440.957141][ T6548] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 442.227072][ T6548] EXT4-fs (loop3): This should not happen!! Data will be lost [ 442.227072][ T6548] [ 442.236841][ T6548] EXT4-fs (loop3): Total free blocks count 0 [ 442.247151][ T6548] EXT4-fs (loop3): Free/Dirty block details [ 442.253697][ T6548] EXT4-fs (loop3): free_blocks=4096 [ 442.260144][ T6548] EXT4-fs (loop3): dirty_blocks=512 [ 442.265448][ T6548] EXT4-fs (loop3): Block reservation details [ 442.271589][ T6548] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 442.307892][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.026744][T10060] loop7: detected capacity change from 0 to 512 [ 443.069154][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 443.219201][T10060] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1203: invalid indirect mapped block 256 (level 2) [ 443.287346][T10060] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 443.297211][T10060] EXT4-fs (loop7): 2 truncates cleaned up [ 443.337246][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 443.372077][ T5906] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 443.383362][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.394142][ T5906] usb 4-1: Product: syz [ 443.402981][ T5906] usb 4-1: Manufacturer: syz [ 443.408136][ T5906] usb 4-1: SerialNumber: syz [ 443.420064][T10060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.434389][ T5906] usb 4-1: config 0 descriptor?? [ 443.455086][ T5906] gspca_main: sq930x-2.14.0 probing 2770:930c [ 443.497071][ T30] audit: type=1800 audit(1770743085.495:31): pid=10060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1203" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 443.769757][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.519025][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.525517][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.557272][ T5906] gspca_sq930x: ucbus_write failed -110 [ 444.609399][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.657758][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.270491][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.300440][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.729915][T10082] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1194'. [ 446.777314][ T5906] gspca_sq930x: Unknown sensor [ 446.785947][ T5906] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 447.290796][T10088] loop5: detected capacity change from 0 to 2048 [ 449.218723][T10088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.238115][ T5906] usb 4-1: USB disconnect, device number 6 [ 449.317108][ T30] audit: type=1800 audit(1770743091.315:32): pid=10088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1210" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 449.534096][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.818674][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1222'. [ 455.044675][T10151] fuse: Bad value for 'fd' [ 456.988332][T10157] loop3: detected capacity change from 0 to 512 [ 458.814962][T10157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.828356][T10157] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.029393][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.523194][T10167] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1224'. [ 461.169947][T10174] loop5: detected capacity change from 0 to 2048 [ 461.391319][T10174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.474794][ T30] audit: type=1800 audit(1770743103.485:33): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1229" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 461.812946][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.124271][T10204] loop3: detected capacity change from 0 to 256 [ 464.227162][ T5914] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 464.413210][ T5914] usb 8-1: Using ep0 maxpacket: 8 [ 464.433760][ T5914] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 464.474726][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.495668][ T5914] usb 8-1: Product: syz [ 464.510585][ T5914] usb 8-1: Manufacturer: syz [ 464.515233][ T5914] usb 8-1: SerialNumber: syz [ 464.556387][ T5914] usb 8-1: config 0 descriptor?? [ 464.591405][ T5914] gspca_main: sq930x-2.14.0 probing 2770:930c [ 464.954720][T10218] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1254'. [ 466.060954][T10215] loop5: detected capacity change from 0 to 512 [ 466.756559][ T5914] gspca_sq930x: ucbus_write failed -110 [ 466.832287][T10215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.847416][T10215] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.122382][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.506903][T10227] loop7: detected capacity change from 0 to 2048 [ 467.643052][T10227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.730392][ T30] audit: type=1800 audit(1770743109.745:34): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1258" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 467.787180][ T5914] gspca_sq930x: Unknown sensor [ 467.817352][ T5914] sq930x 8-1:0.0: probe with driver sq930x failed with error -22 [ 467.910264][ T5914] usb 8-1: USB disconnect, device number 11 [ 467.973880][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.779740][T10254] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1268'. [ 469.746572][T10256] loop7: detected capacity change from 0 to 512 [ 469.857441][T10256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.871050][T10256] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.082896][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.384981][T10282] loop5: detected capacity change from 0 to 2048 [ 472.563593][T10282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.613314][ T30] audit: type=1800 audit(1770743114.625:35): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1276" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 472.785630][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.348496][T10302] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1282'. [ 474.690126][T10311] loop5: detected capacity change from 0 to 1024 [ 475.885083][T10316] loop9: detected capacity change from 0 to 128 [ 477.172684][T10315] syzkaller1: tun_chr_ioctl cmd 35108 [ 477.207609][T10316] FAT-fs (loop9): Directory bread(block 162) failed [ 477.214362][T10316] FAT-fs (loop9): Directory bread(block 163) failed [ 477.376814][T10316] FAT-fs (loop9): Directory bread(block 164) failed [ 477.413522][ T6008] hfsplus: b-tree write err: -5, ino 8 [ 477.417202][T10316] FAT-fs (loop9): Directory bread(block 165) failed [ 477.437886][T10316] FAT-fs (loop9): Directory bread(block 166) failed [ 477.445842][T10316] FAT-fs (loop9): Directory bread(block 167) failed [ 477.497184][T10316] FAT-fs (loop9): Directory bread(block 168) failed [ 477.504138][T10316] FAT-fs (loop9): Directory bread(block 169) failed [ 477.553648][T10316] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 477.798846][T10316] FAT-fs (loop9): Directory bread(block 162) failed [ 477.810082][T10335] loop5: detected capacity change from 0 to 128 [ 477.848503][T10316] FAT-fs (loop9): Directory bread(block 163) failed [ 477.895419][T10316] bio_check_eod: 102 callbacks suppressed [ 477.895445][T10316] syz.9.1286: attempt to access beyond end of device [ 477.895445][T10316] loop9: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 477.935366][T10335] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.969156][T10335] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.057984][T10316] syz.9.1286: attempt to access beyond end of device [ 478.057984][T10316] loop9: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 478.127537][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.139183][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.151974][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.192152][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.209245][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.296442][ T5825] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.592437][T10350] loop9: detected capacity change from 0 to 2048 [ 478.648298][T10353] 9p: Bad value for 'wfdno' [ 478.719084][T10350] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.865916][T10345] syzkaller0: entered promiscuous mode [ 478.895126][ T30] audit: type=1800 audit(1770743120.905:36): pid=10350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1292" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 478.967169][T10345] syzkaller0: entered allmulticast mode [ 479.107245][T10347] tipc: Started in network mode [ 479.120346][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.143043][T10347] tipc: Node identity 6278781b6dc7, cluster identity 4711 [ 479.179995][T10347] tipc: Enabled bearer , priority 0 [ 479.384809][T10344] tipc: Resetting bearer [ 479.824756][T10372] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1298'. [ 479.861995][T10344] tipc: Disabling bearer [ 479.960519][T10374] loop9: detected capacity change from 0 to 1024 [ 479.975986][T10374] EXT4-fs: Ignoring removed nobh option [ 479.987430][T10374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.988596][T10367] bond1: (slave caif0): Device is not bonding slave [ 480.004342][T10367] bond1: option active_slave: invalid value (caif0) [ 480.029187][T10367] bond1 (unregistering): Released all slaves [ 480.108487][T10374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.277150][ T5832] Bluetooth: hci0: command tx timeout [ 480.794239][T10393] loop7: detected capacity change from 0 to 256 [ 482.500358][ T5832] Bluetooth: hci0: command tx timeout [ 482.692112][T10398] 9p: Bad value for 'wfdno' [ 482.903710][T10339] chnl_net:caif_netlink_parms(): no params data found [ 483.268407][ T6403] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.306895][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.685202][T10419] loop7: detected capacity change from 0 to 1024 [ 485.356568][ T5832] Bluetooth: hci0: command tx timeout [ 485.405660][ T6403] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.528322][T10419] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 485.608950][T10419] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 485.697638][T10419] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.1312: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 485.769709][T10419] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 485.772277][T10419] EXT4-fs (loop7): no journal found [ 486.274933][ T6403] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.467329][T10428] can0: slcan on ttyS3. [ 486.474165][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.500281][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.523373][T10339] bridge_slave_0: entered allmulticast mode [ 486.559145][T10339] bridge_slave_0: entered promiscuous mode [ 486.588945][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.596120][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.614072][T10339] bridge_slave_1: entered allmulticast mode [ 488.263460][ T5832] Bluetooth: hci0: command tx timeout [ 488.307674][T10339] bridge_slave_1: entered promiscuous mode [ 488.558599][T10427] can0 (unregistered): slcan off ttyS3. [ 488.712241][ T6403] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.954368][T10339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.019703][T10339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.183385][T10339] team0: Port device team_slave_0 added [ 489.248664][T10339] team0: Port device team_slave_1 added [ 491.563509][T10339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.597416][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.690235][T10339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.727237][ T6403] bridge_slave_1: left allmulticast mode [ 491.733646][ T6403] bridge_slave_1: left promiscuous mode [ 491.751826][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.516186][ T6403] bridge_slave_0: left allmulticast mode [ 493.567087][ T6403] bridge_slave_0: left promiscuous mode [ 493.572933][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.632087][T10469] loop3: detected capacity change from 0 to 2048 [ 493.889293][T10469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.087191][ T30] audit: type=1800 audit(1770743136.085:37): pid=10469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1306" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 494.280033][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.809256][T10489] random: crng reseeded on system resumption [ 495.286479][T10505] loop3: detected capacity change from 0 to 512 [ 495.348023][T10505] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1335: invalid indirect mapped block 256 (level 2) [ 495.366686][T10505] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 495.376081][T10505] EXT4-fs (loop3): 2 truncates cleaned up [ 495.399986][T10505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.440526][ T30] audit: type=1800 audit(1770743137.455:38): pid=10505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1335" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 495.532426][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.811448][T10529] loop9: detected capacity change from 0 to 256 [ 501.467883][ T6403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.498548][T10542] loop7: detected capacity change from 0 to 2048 [ 501.648340][ T6403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.716844][ T6403] bond0 (unregistering): Released all slaves [ 501.758524][T10339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.765682][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.871846][T10542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.890527][T10339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.944679][T10561] loop5: detected capacity change from 0 to 512 [ 502.981379][T10561] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1348: invalid indirect mapped block 256 (level 2) [ 503.093702][T10561] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 503.102851][T10561] EXT4-fs (loop5): 2 truncates cleaned up [ 503.147333][T10549] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 503.239472][T10561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.259031][ T6038] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 232 with error 28 [ 503.298345][ T30] audit: type=1800 audit(1770743145.315:39): pid=10561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1348" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 505.157049][ T6038] EXT4-fs (loop7): This should not happen!! Data will be lost [ 505.157049][ T6038] [ 505.167117][ T6038] EXT4-fs (loop7): Total free blocks count 0 [ 505.173130][ T6038] EXT4-fs (loop7): Free/Dirty block details [ 505.181882][ T6038] EXT4-fs (loop7): free_blocks=4096 [ 505.187240][ T6038] EXT4-fs (loop7): dirty_blocks=240 [ 505.194856][ T6038] EXT4-fs (loop7): Block reservation details [ 505.227455][T10549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 505.267622][ T6038] EXT4-fs (loop7): i_reserved_data_blocks=15 [ 505.406323][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.429588][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.590442][T10339] hsr_slave_0: entered promiscuous mode [ 505.640787][T10339] hsr_slave_1: entered promiscuous mode [ 505.667507][T10339] debugfs: 'hsr0' already exists in 'hsr' [ 505.673287][T10339] Cannot create hsr debugfs directory [ 505.742040][T10577] loop5: detected capacity change from 0 to 256 [ 506.159197][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.165600][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.723936][ T6403] hsr_slave_0: left promiscuous mode [ 507.781898][ T6403] hsr_slave_1: left promiscuous mode [ 507.847967][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.877120][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.980411][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.999694][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.136845][ T6403] veth1_macvtap: left promiscuous mode [ 508.195352][ T6403] veth0_macvtap: left promiscuous mode [ 508.225799][ T6403] veth1_vlan: left promiscuous mode [ 508.234528][ T6403] veth0_vlan: left promiscuous mode [ 509.331588][T10624] loop5: detected capacity change from 0 to 1024 [ 509.894158][ T49] hfsplus: b-tree write err: -5, ino 8 [ 514.458623][ T6403] team0 (unregistering): Port device team_slave_1 removed [ 514.690474][ T6403] team0 (unregistering): Port device team_slave_0 removed [ 515.358047][T10654] loop5: detected capacity change from 0 to 128 [ 516.061185][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'. [ 516.662700][T10668] loop3: detected capacity change from 0 to 1024 [ 519.155449][ T6008] hfsplus: b-tree write err: -5, ino 8 [ 519.769343][T10692] loop7: detected capacity change from 0 to 256 [ 520.531855][T10339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 520.593197][T10339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 520.640010][T10339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 520.827140][T10339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 520.979618][T10711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1384'. [ 521.366753][T10339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.423980][T10339] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.531383][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.538738][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.186031][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.193262][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.718826][T10733] loop7: detected capacity change from 0 to 1024 [ 524.299956][T10339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.542587][ T12] hfsplus: b-tree write err: -5, ino 8 [ 525.041142][T10751] random: crng reseeded on system resumption [ 525.531027][T10339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.832776][T10339] veth0_vlan: entered promiscuous mode [ 525.938149][T10339] veth1_vlan: entered promiscuous mode [ 526.927891][T10339] veth0_macvtap: entered promiscuous mode [ 527.344913][T10788] loop9: detected capacity change from 0 to 1024 [ 527.816374][T10339] veth1_macvtap: entered promiscuous mode [ 528.036306][T10339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.250824][T10339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.366563][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.393354][ T6548] hfsplus: b-tree write err: -5, ino 8 [ 528.417571][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.535382][ T6008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.656194][ T6008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.077893][ T6548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.085780][ T6548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.418256][ T7226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.484910][ T7226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.086179][T10854] loop5: detected capacity change from 0 to 256 [ 532.204625][T10854] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.357561][ T30] audit: type=1800 audit(1770743174.365:40): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1424" name="file1" dev="loop5" ino=1048732 res=0 errno=0 [ 532.436706][T10854] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 532.487369][T10854] FAT-fs (loop5): Filesystem has been set read-only [ 532.605810][T10865] random: crng reseeded on system resumption [ 534.627633][T10896] loop3: detected capacity change from 0 to 1024 [ 535.504958][T10897] 9p: Bad value for 'wfdno' [ 535.927205][ T1302] hfsplus: b-tree write err: -5, ino 8 [ 536.189930][T10918] 9p: Bad value for 'wfdno' [ 538.793242][T10946] 9p: Bad value for 'wfdno' [ 539.229831][T10940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 541.498944][T10985] loop9: detected capacity change from 0 to 1024 [ 542.552764][ T1302] hfsplus: b-tree write err: -5, ino 8 [ 542.831087][T11003] 9p: Bad value for 'wfdno' [ 544.363023][ T5906] kernel write not supported for file bpf-prog (pid: 5906 comm: kworker/1:3) [ 546.023596][T11052] loop7: detected capacity change from 0 to 1024 [ 546.777972][ T1302] hfsplus: b-tree write err: -5, ino 8 [ 546.852427][T11073] loop2: detected capacity change from 0 to 128 [ 546.903662][T11073] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 547.254474][T11084] loop9: detected capacity change from 0 to 2048 [ 547.306599][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 547.376261][T11084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.386895][ T1302] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 548.488203][ T1302] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 348 with error 28 [ 548.557227][ T1302] EXT4-fs (loop9): This should not happen!! Data will be lost [ 548.557227][ T1302] [ 548.607258][ T1302] EXT4-fs (loop9): Total free blocks count 0 [ 548.639108][ T1302] EXT4-fs (loop9): Free/Dirty block details [ 548.645106][ T1302] EXT4-fs (loop9): free_blocks=4096 [ 548.698745][ T1302] EXT4-fs (loop9): dirty_blocks=352 [ 548.729950][ T1302] EXT4-fs (loop9): Block reservation details [ 548.767099][ T1302] EXT4-fs (loop9): i_reserved_data_blocks=22 [ 548.833735][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.197247][T11137] loop9: detected capacity change from 0 to 1024 [ 549.235799][T11137] EXT4-fs: Ignoring removed nobh option [ 549.267448][T11137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 549.389032][T11137] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.583606][T11151] loop7: detected capacity change from 0 to 2048 [ 549.676624][T11151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.689923][T11159] loop2: detected capacity change from 0 to 512 [ 550.337756][T11159] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1527: invalid indirect mapped block 256 (level 2) [ 550.421282][T11159] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 550.427452][T11159] EXT4-fs (loop2): 2 truncates cleaned up [ 550.517930][T11159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.562525][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1530'. [ 550.627343][ T30] audit: type=1800 audit(1770743192.635:41): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1527" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 550.683789][ T6548] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 550.712085][ T6548] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 692 with error 28 [ 550.725036][ T6548] EXT4-fs (loop7): This should not happen!! Data will be lost [ 550.725036][ T6548] [ 550.808984][ T6548] EXT4-fs (loop7): Total free blocks count 0 [ 550.815161][ T6548] EXT4-fs (loop7): Free/Dirty block details [ 550.850254][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.859386][ T6548] EXT4-fs (loop7): free_blocks=4096 [ 550.879810][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.880647][ T6548] EXT4-fs (loop7): dirty_blocks=704 [ 550.926395][ T6548] EXT4-fs (loop7): Block reservation details [ 550.959048][ T6548] EXT4-fs (loop7): i_reserved_data_blocks=44 [ 551.035806][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.283875][T11207] loop5: detected capacity change from 0 to 2048 [ 553.599661][T11224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1548'. [ 554.781819][T11207] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 557.487446][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 557.687362][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 557.707638][T11275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1563'. [ 557.727615][ T9] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 557.760286][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.789827][ T9] usb 8-1: Product: syz [ 557.799940][ T9] usb 8-1: Manufacturer: syz [ 557.817269][ T9] usb 8-1: SerialNumber: syz [ 557.842579][T11278] loop5: detected capacity change from 0 to 2048 [ 557.852438][ T9] usb 8-1: config 0 descriptor?? [ 557.880438][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 557.951521][T11278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.654389][ T9] gspca_sq930x: ucbus_write failed -110 [ 558.680461][T11262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.763940][T11262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.926370][T10833] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 558.972273][T10833] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 244 with error 28 [ 558.997436][T10833] EXT4-fs (loop5): This should not happen!! Data will be lost [ 558.997436][T10833] [ 559.017153][T10833] EXT4-fs (loop5): Total free blocks count 0 [ 559.037102][T10833] EXT4-fs (loop5): Free/Dirty block details [ 559.043649][T10833] EXT4-fs (loop5): free_blocks=4096 [ 559.049690][T10833] EXT4-fs (loop5): dirty_blocks=256 [ 559.056728][T10833] EXT4-fs (loop5): Block reservation details [ 559.074280][T10833] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 559.136594][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.540179][T11315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.550449][ T9] gspca_sq930x: Unknown sensor [ 559.555501][ T9] sq930x 8-1:0.0: probe with driver sq930x failed with error -22 [ 559.577630][T11315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.699485][ T5906] usb 8-1: USB disconnect, device number 12 [ 560.820102][T11346] loop9: detected capacity change from 0 to 2048 [ 560.909975][T11346] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.789011][T11358] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 562.991514][ T1302] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 563.060835][ T1302] EXT4-fs (loop9): This should not happen!! Data will be lost [ 563.060835][ T1302] [ 563.095960][ T1302] EXT4-fs (loop9): Total free blocks count 0 [ 563.139707][ T1302] EXT4-fs (loop9): Free/Dirty block details [ 563.175363][ T1302] EXT4-fs (loop9): free_blocks=4096 [ 563.207128][ T1302] EXT4-fs (loop9): dirty_blocks=512 [ 563.229471][ T1302] EXT4-fs (loop9): Block reservation details [ 563.235506][ T1302] EXT4-fs (loop9): i_reserved_data_blocks=32 [ 563.284042][T11383] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1592'. [ 563.373005][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.630894][T11391] loop2: detected capacity change from 0 to 512 [ 563.648734][T11391] EXT4-fs: Ignoring removed nobh option [ 565.024734][T11391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.177250][T11391] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 565.228068][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 565.304012][T11391] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 3: comm syz.2.1595: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 565.368748][T11409] loop5: detected capacity change from 0 to 1024 [ 565.451575][T11409] EXT4-fs: Ignoring removed nobh option [ 565.487401][T11409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.579091][T11409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.822312][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.845863][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.672634][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.679135][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.748615][T11442] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1609'. [ 569.838795][T11466] loop9: detected capacity change from 0 to 1024 [ 569.846338][T11466] EXT4-fs: Ignoring removed nobh option [ 569.912499][T11466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.999672][T11466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.073758][T11477] loop3: detected capacity change from 0 to 128 [ 570.190355][T11477] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 570.309099][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.494197][ T6008] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 570.677245][T11494] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1624'. [ 571.047178][ T5940] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 571.061927][T11500] loop7: detected capacity change from 0 to 2048 [ 571.172822][T11500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.207482][ T5940] usb 10-1: device descriptor read/64, error -71 [ 572.489248][ T5940] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 572.827899][T11405] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 573.007177][ T5940] usb 10-1: device descriptor read/64, error -71 [ 573.141056][ T5940] usb usb10-port1: attempt power cycle [ 573.240724][ T1302] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 573.298550][ T1302] EXT4-fs (loop7): This should not happen!! Data will be lost [ 573.298550][ T1302] [ 573.333017][ T1302] EXT4-fs (loop7): Total free blocks count 0 [ 573.348315][ T1302] EXT4-fs (loop7): Free/Dirty block details [ 573.363475][ T1302] EXT4-fs (loop7): free_blocks=4096 [ 573.408265][ T1302] EXT4-fs (loop7): dirty_blocks=512 [ 573.413512][ T1302] EXT4-fs (loop7): Block reservation details [ 573.435489][ T1302] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 573.527150][ T5940] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 573.534725][T11524] 9p: Bad value for 'rfdno' [ 573.565170][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.591145][ T5940] usb 10-1: device descriptor read/8, error -71 [ 573.908616][T11530] loop3: detected capacity change from 0 to 1024 [ 573.958857][T11530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.989838][T11537] loop9: detected capacity change from 0 to 1024 [ 574.013983][T11530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.041137][T11530] EXT4-fs: Ignoring removed i_version option [ 574.059948][T11537] EXT4-fs: Ignoring removed nobh option [ 574.095998][T11530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 574.138378][T11537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.193984][T11530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.284908][T11537] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.501579][ T7949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.662614][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.177111][ T5940] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 575.248066][T11572] 9p: Bad value for 'rfdno' [ 575.331303][ T5940] usb 10-1: Using ep0 maxpacket: 8 [ 575.375285][ T5940] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 575.425825][ T5940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.480083][ T5940] usb 10-1: Product: syz [ 575.484510][ T5940] usb 10-1: Manufacturer: syz [ 575.530897][ T5940] usb 10-1: SerialNumber: syz [ 575.551516][ T5940] usb 10-1: config 0 descriptor?? [ 575.592258][ T5940] gspca_main: sq930x-2.14.0 probing 2770:930c [ 576.193292][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.231292][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.596578][T11617] 9p: Bad value for 'rfdno' [ 576.692800][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.712210][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.773866][ T5940] gspca_sq930x: ucbus_write failed -71 [ 576.868559][T11624] loop5: detected capacity change from 0 to 1024 [ 576.940116][T11624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.016045][ T5940] gspca_sq930x: Sensor ov9630 not yet treated [ 577.089667][ T5940] sq930x 10-1:0.0: probe with driver sq930x failed with error -22 [ 577.166308][ T5940] usb 10-1: USB disconnect, device number 10 [ 577.663216][T11653] loop7: detected capacity change from 0 to 512 [ 577.670553][T11651] loop2: detected capacity change from 0 to 1024 [ 577.778650][T11651] EXT4-fs: Ignoring removed mblk_io_submit option [ 577.861886][T11651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 577.893148][T11653] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1669: invalid indirect mapped block 256 (level 2) [ 577.968315][T11651] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 578.069601][T11653] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 578.070460][T11653] EXT4-fs (loop7): 2 truncates cleaned up [ 578.140344][T11651] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.1668: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 578.229513][T11653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.272621][T11651] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 578.273019][T11651] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1668: couldn't read orphan inode 11 (err -117) [ 578.373985][T11651] loop2: lost filesystem error report for type 5 error -117 [ 578.376106][T11651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.591404][T11651] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1668: Invalid block bitmap block 0 in block_group 0 [ 578.627762][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.662729][T11651] Quota error (device loop2): write_blk: dquota write failed [ 578.750869][T11651] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 578.790675][T11651] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.1668: Failed to acquire dquot type 0 [ 578.859053][T11666] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.1668: iget: bad extra_isize 65535 (inode size 256) [ 578.936156][T11669] 9p: Bad value for 'rfdno' [ 579.077532][ T1302] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm kworker/u8:5: Invalid inode table block 8589934593 in block_group 0 [ 579.164040][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.472222][T11698] loop7: detected capacity change from 0 to 4096 [ 581.579394][T11698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.652535][T11710] loop2: detected capacity change from 0 to 512 [ 581.676467][ T30] audit: type=1800 audit(1770743223.685:42): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1682" name="file0" dev="loop7" ino=13 res=0 errno=0 [ 581.700353][T11713] netlink: 'syz.9.1688': attribute type 10 has an invalid length. [ 581.795845][T11710] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1685: invalid indirect mapped block 256 (level 2) [ 581.841626][ T30] audit: type=1800 audit(1770743223.855:43): pid=11624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1661" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 581.851348][T11713] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 581.907586][T11710] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 581.908397][T11710] EXT4-fs (loop2): 2 truncates cleaned up [ 581.913465][ T30] audit: type=1800 audit(1770743223.855:44): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1661" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 582.005284][T11710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.031150][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.079507][T11722] 9p: Bad value for 'rfdno' [ 582.233101][T11718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 582.286935][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.322915][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.325520][T11713] bond_slave_0: entered promiscuous mode [ 582.338034][T11713] bond_slave_1: entered promiscuous mode [ 582.343761][T11713] syz_tun: entered promiscuous mode [ 582.431826][T11713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.534508][T11713] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 583.841943][T11713] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 583.949676][T11713] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 584.753971][T11763] loop9: detected capacity change from 0 to 512 [ 584.838429][T11763] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1706: invalid indirect mapped block 256 (level 2) [ 584.919836][T11763] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 584.920712][T11763] EXT4-fs (loop9): 2 truncates cleaned up [ 585.021001][T11763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.199991][T11767] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 587.016153][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.543862][T11804] loop7: detected capacity change from 0 to 1024 [ 587.587957][T11804] EXT4-fs: Ignoring removed nobh option [ 587.593589][T11804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.722899][T11804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.651955][T11823] loop5: detected capacity change from 0 to 512 [ 591.111178][T11823] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1726: invalid indirect mapped block 256 (level 2) [ 591.227261][T11823] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 591.248321][T11823] EXT4-fs (loop5): 2 truncates cleaned up [ 591.265527][T11823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.327307][ T30] audit: type=1800 audit(1770743233.335:45): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1726" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 591.379964][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.533409][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.030614][T11851] loop2: detected capacity change from 0 to 512 [ 592.049931][T11851] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 592.062977][T11847] loop5: detected capacity change from 0 to 8192 [ 592.119091][T11851] EXT4-fs (loop2): 1 truncate cleaned up [ 592.234883][T11851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.439198][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.299010][T11886] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1745'. [ 596.503099][T11893] binfmt_misc: register: failed to install interpreter file ./file0 [ 599.430859][T11938] loop5: detected capacity change from 0 to 2048 [ 599.606724][T11946] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1764'. [ 599.612939][T11938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.529337][ T59] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 600.610553][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 600.683610][ T59] EXT4-fs (loop5): This should not happen!! Data will be lost [ 600.683610][ T59] [ 602.389627][ T59] EXT4-fs (loop5): Total free blocks count 0 [ 602.447404][ T59] EXT4-fs (loop5): Free/Dirty block details [ 602.453376][ T59] EXT4-fs (loop5): free_blocks=4096 [ 602.535076][ T59] EXT4-fs (loop5): dirty_blocks=512 [ 602.547209][ T59] EXT4-fs (loop5): Block reservation details [ 602.553252][ T59] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 602.701172][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.750727][T11978] loop7: detected capacity change from 0 to 128 [ 602.789662][T11978] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 602.911242][T11978] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.170118][ T6304] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 605.821596][T11988] Bluetooth: hci0: command 0x0406 tx timeout [ 605.890276][T11995] loop7: detected capacity change from 0 to 512 [ 605.924776][T11995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.937599][T11995] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.136941][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.779296][T12024] loop3: detected capacity change from 0 to 128 [ 606.908318][T12024] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 606.986610][T12024] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.460142][ T7949] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.015673][T12038] loop7: detected capacity change from 0 to 512 [ 609.881498][T12038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.894119][T12038] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.071732][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.173193][T12047] loop5: detected capacity change from 0 to 2048 [ 610.263628][T12047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.215174][T12072] veth0_to_team: entered promiscuous mode [ 611.221337][T12072] veth0_to_team: entered allmulticast mode [ 611.430607][T10834] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 611.534213][T10834] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 574 with error 28 [ 611.593107][T10834] EXT4-fs (loop5): This should not happen!! Data will be lost [ 611.593107][T10834] [ 611.635921][T10834] EXT4-fs (loop5): Total free blocks count 0 [ 611.666192][T10834] EXT4-fs (loop5): Free/Dirty block details [ 611.672805][T10834] EXT4-fs (loop5): free_blocks=4096 [ 611.692632][T10834] EXT4-fs (loop5): dirty_blocks=576 [ 611.713067][T10834] EXT4-fs (loop5): Block reservation details [ 611.733485][T10834] EXT4-fs (loop5): i_reserved_data_blocks=36 [ 611.901236][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.775150][T12106] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1814'. [ 613.927204][T12106] hsr_slave_0: left promiscuous mode [ 614.000544][T12106] hsr_slave_1: left promiscuous mode [ 617.828690][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.836972][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.845031][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.853176][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.861135][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.869123][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.877102][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.885157][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.893140][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 617.901165][T12150] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 618.385674][ T5915] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 618.425594][ T5915] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 618.670354][T12172] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 618.742308][T12170] fido_id[12170]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 618.889491][T12175] syzkaller0: entered promiscuous mode [ 618.894999][T12175] syzkaller0: entered allmulticast mode [ 620.432662][T12196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1845'. [ 620.476369][T12196] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1845'. [ 621.529754][T12211] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1844'. [ 623.750166][T12231] loop2: detected capacity change from 0 to 512 [ 623.768330][T12231] EXT4-fs: Ignoring removed nobh option [ 623.921142][T12231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.997268][T12231] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.408910][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.772257][T12240] could not allocate digest TFM handle sha256-neon [ 627.077885][T12275] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 627.143633][T12273] loop2: detected capacity change from 0 to 512 [ 627.690422][T12273] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1873: invalid indirect mapped block 256 (level 2) [ 627.719614][T12273] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 627.720320][T12273] EXT4-fs (loop2): 2 truncates cleaned up [ 627.978956][T12273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.059141][T12286] loop9: detected capacity change from 0 to 512 [ 628.100777][T12286] EXT4-fs: Ignoring removed nobh option [ 628.208821][ T30] audit: type=1800 audit(1770743270.225:46): pid=12273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1873" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 628.455939][T12261] kthread_run failed with err -4 [ 628.469287][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.662216][T12286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.736107][T12295] 9p: Bad value for 'wfdno' [ 628.737425][T12286] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 628.833681][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.859438][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.760035][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.325412][T12326] loop9: detected capacity change from 0 to 512 [ 632.958533][T12340] program syz.2.1885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.322539][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1894'. [ 633.362657][T12326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.492667][T12326] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.229343][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.028575][T12368] loop7: detected capacity change from 0 to 512 [ 636.050863][T12368] EXT4-fs: Ignoring removed nobh option [ 636.136645][T12368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.164477][T12368] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 636.254170][T12376] program syz.3.1909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.363270][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.631024][T12398] loop7: detected capacity change from 0 to 512 [ 641.757729][T12398] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1916: invalid indirect mapped block 256 (level 2) [ 641.890198][T12398] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 641.890831][T12398] EXT4-fs (loop7): 2 truncates cleaned up [ 641.974260][T12398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.067403][ T30] audit: type=1800 audit(1770743284.065:47): pid=12398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1916" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 642.237314][ T6304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.398825][T12413] program syz.2.1922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.770315][ T5940] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 646.779086][ T5940] usb 10-1: Using ep0 maxpacket: 16 [ 646.794535][ T5940] usb 10-1: config 0 has no interfaces? [ 646.806283][ T5940] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 647.397178][ T5940] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.405307][ T5940] usb 10-1: Product: syz [ 647.465582][ T5940] usb 10-1: Manufacturer: syz [ 647.481746][ T5940] usb 10-1: SerialNumber: syz [ 647.519648][ T5940] usb 10-1: config 0 descriptor?? [ 647.586355][ T5940] usb 10-1: can't set config #0, error -71 [ 647.651307][ T5940] usb 10-1: USB disconnect, device number 11 [ 647.723130][ T6013] udevd[6013]: setting mode of /dev/bus/usb/010/011 to 020664 failed: No such file or directory [ 647.765641][T12454] program syz.9.1936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.787342][ T6013] udevd[6013]: setting owner of /dev/bus/usb/010/011 to uid=0, gid=0 failed: No such file or directory [ 648.209127][T12458] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 648.375650][T12458] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 652.768499][T11988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.778980][T11988] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.792014][T11988] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.800250][T11988] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.815903][T11988] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 654.923095][ T5844] Bluetooth: hci5: command tx timeout [ 655.519495][T10834] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.600265][T12476] chnl_net:caif_netlink_parms(): no params data found [ 655.823271][T10834] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.009953][T10834] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.644236][T10834] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.004412][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1958'. [ 657.637763][ T5844] Bluetooth: hci5: command tx timeout [ 658.096873][T12476] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.124263][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.147381][T12476] bridge_slave_0: entered allmulticast mode [ 658.162152][T12476] bridge_slave_0: entered promiscuous mode [ 658.244723][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.263960][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.284743][T12476] bridge_slave_1: entered allmulticast mode [ 658.299924][T12476] bridge_slave_1: entered promiscuous mode [ 658.914802][T12476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.032711][T12476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.038268][T12576] fuse: Bad value for 'fd' [ 659.717151][ T5844] Bluetooth: hci5: command tx timeout [ 659.840696][T12581] 9p: Bad value for 'wfdno' [ 659.866741][T10834] bridge_slave_1: left allmulticast mode [ 659.899592][T10834] bridge_slave_1: left promiscuous mode [ 659.927544][T10834] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.267583][T10834] bridge_slave_0: left allmulticast mode [ 660.294179][T10834] bridge_slave_0: left promiscuous mode [ 660.307513][T10834] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.797179][ T5844] Bluetooth: hci5: command tx timeout [ 663.553306][T10834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.577966][T10834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.595818][T10834] bond0 (unregistering): Released all slaves [ 663.949358][T10834] tipc: Left network mode [ 665.851629][T12476] team0: Port device team_slave_0 added [ 665.880620][T12476] team0: Port device team_slave_1 added [ 666.134003][T12476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.196747][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.308684][T12632] 9p: Bad value for 'wfdno' [ 666.309832][T12476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.420224][T12476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.432864][T12641] loop9: detected capacity change from 0 to 512 [ 667.458083][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.515103][T12641] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1986: invalid indirect mapped block 256 (level 2) [ 667.546807][T12476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.566217][T12641] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 667.567439][T12641] EXT4-fs (loop9): 2 truncates cleaned up [ 667.631899][T12641] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.716401][ T30] audit: type=1800 audit(1770743309.725:48): pid=12641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1986" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 667.922979][T12476] hsr_slave_0: entered promiscuous mode [ 667.964727][T12476] hsr_slave_1: entered promiscuous mode [ 667.973388][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.994908][T12476] debugfs: 'hsr0' already exists in 'hsr' [ 668.044960][T12476] Cannot create hsr debugfs directory [ 669.756524][T12686] loop9: detected capacity change from 0 to 2048 [ 669.821967][T12686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 669.896337][T10834] hsr_slave_0: left promiscuous mode [ 670.002937][T10834] hsr_slave_1: left promiscuous mode [ 670.029403][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.066158][T10834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.174446][T10834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.208550][T10834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.458379][T10834] veth1_macvtap: left promiscuous mode [ 670.494663][T10834] veth0_macvtap: left promiscuous mode [ 670.527360][T10834] veth1_vlan: left promiscuous mode [ 670.532737][T10834] veth0_vlan: left promiscuous mode [ 670.897324][T12644] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 672.805445][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 294 with error 28 [ 672.842819][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 672.842819][ T12] [ 672.872489][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 672.878690][ T12] EXT4-fs (loop9): Free/Dirty block details [ 672.890849][ T12] EXT4-fs (loop9): free_blocks=4096 [ 672.916502][ T12] EXT4-fs (loop9): dirty_blocks=304 [ 672.924419][ T12] EXT4-fs (loop9): Block reservation details [ 672.931857][ T12] EXT4-fs (loop9): i_reserved_data_blocks=19 [ 672.976756][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.553454][T10834] team0 (unregistering): Port device team_slave_1 removed [ 673.606579][T10834] team0 (unregistering): Port device team_slave_0 removed [ 675.650063][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2009'. [ 679.631772][T12790] warning: `syz.9.2014' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 680.978389][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2024'. [ 681.110175][T12476] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 681.311963][T12476] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 681.785383][T12476] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 681.830680][T12476] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 681.901405][T12821] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2028'. [ 681.938347][T12824] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2028'. [ 682.327748][ T790] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 682.335672][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.439705][T12476] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.491444][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.498749][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.521066][ T790] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 682.539412][ T790] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 682.572926][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.580182][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.604675][ T790] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 682.645446][ T790] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 682.727139][ T790] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 682.801176][ T790] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 682.810969][ T790] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 682.837663][ T790] usb 6-1: Product: syz [ 682.862353][ T790] usb 6-1: Manufacturer: syz [ 682.869225][T12476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.961083][ T790] cdc_wdm 6-1:1.0: skipping garbage [ 682.987212][ T790] cdc_wdm 6-1:1.0: skipping garbage [ 683.017540][ T790] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 683.023492][ T790] cdc_wdm 6-1:1.0: Unknown control protocol [ 684.231122][ T10] usb 6-1: USB disconnect, device number 11 [ 685.353746][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.510293][T12882] loop5: detected capacity change from 0 to 4096 [ 685.599896][T12882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.737690][ T30] audit: type=1800 audit(1770743327.755:49): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2042" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 688.380627][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.826007][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 688.980833][T12914] loop5: detected capacity change from 0 to 1024 [ 689.018678][T12914] EXT4-fs: Ignoring removed mblk_io_submit option [ 689.075136][T12914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 689.117518][T12914] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 689.207714][T12914] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.2049: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 690.157802][T12914] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 690.172040][T12914] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2049: couldn't read orphan inode 11 (err -117) [ 690.436037][T12476] veth0_vlan: entered promiscuous mode [ 690.443676][T12914] loop5: lost filesystem error report for type 5 error -117 [ 690.449935][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.597293][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.606870][T12914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.694205][T12476] veth1_vlan: entered promiscuous mode [ 690.838109][T12914] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2049: Invalid block bitmap block 0 in block_group 0 [ 690.917694][T12476] veth0_macvtap: entered promiscuous mode [ 690.917914][T12914] Quota error (device loop5): write_blk: dquota write failed [ 690.990689][T12476] veth1_macvtap: entered promiscuous mode [ 691.008517][T12914] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 691.103805][T12476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.112334][T12914] EXT4-fs error (device loop5): ext4_acquire_dquot:6991: comm syz.5.2049: Failed to acquire dquot type 0 [ 691.173471][T12476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.190979][T12930] EXT4-fs error (device loop5): ext4_lookup:1785: inode #15: comm syz.5.2049: iget: bad extra_isize 65535 (inode size 256) [ 691.250021][ T1337] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.299426][ T1337] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.392959][ T1337] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.417515][ T1337] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.495330][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.681225][T12939] 9pnet_virtio: no channels available for device syz [ 691.872721][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.914987][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.057130][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.088173][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.343296][T12960] loop7: detected capacity change from 0 to 1024 [ 692.463676][T12954] loop9: detected capacity change from 0 to 4096 [ 692.523033][T12965] loop4: detected capacity change from 0 to 512 [ 692.561091][T12965] EXT4-fs: Ignoring removed nobh option [ 692.564143][T12954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.615895][T12969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2061'. [ 692.681579][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2061'. [ 692.694399][T12969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2061'. [ 692.714921][T12969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2061'. [ 692.734469][ T30] audit: type=1800 audit(1770743334.745:50): pid=12954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2060" name="file0" dev="loop9" ino=13 res=0 errno=0 [ 692.780605][T12965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.797341][T12965] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 693.456009][ T7843] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.633839][T12989] loop5: detected capacity change from 0 to 7 [ 694.676199][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.698805][T12989] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 694.736815][T12989] loop5: partition table partially beyond EOD, truncated [ 694.779046][T12989] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 695.001561][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 695.093165][T12998] loop2: detected capacity change from 0 to 1024 [ 695.138582][T12998] EXT4-fs: Ignoring removed mblk_io_submit option [ 695.216865][T12998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 695.269234][T12998] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 695.345670][T12998] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2067: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 695.388875][T12998] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 695.425265][T12998] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2067: couldn't read orphan inode 11 (err -117) [ 695.558024][T12998] loop2: lost filesystem error report for type 5 error -117 [ 695.560140][T12998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.779415][T12998] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2067: Invalid block bitmap block 0 in block_group 0 [ 695.948135][T12998] Quota error (device loop2): write_blk: dquota write failed [ 696.033873][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.060232][T12998] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 696.150237][T12998] EXT4-fs error (device loop2): ext4_acquire_dquot:6991: comm syz.2.2067: Failed to acquire dquot type 0 [ 696.241307][T13021] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.2067: iget: bad extra_isize 65535 (inode size 256) [ 696.801591][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.028763][ T1337] hfsplus: b-tree write err: -5, ino 8 [ 700.204237][T13062] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 700.732895][T13078] loop4: detected capacity change from 0 to 1024 [ 700.769702][T13078] EXT4-fs: Ignoring removed mblk_io_submit option [ 700.838014][T13078] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 701.146840][T13078] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 701.436922][T13078] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.2090: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 701.712401][T13078] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 701.721082][T13078] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2090: couldn't read orphan inode 11 (err -117) [ 701.966526][T13078] loop4: lost filesystem error report for type 5 error -117 [ 701.969114][T13078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.157603][T13078] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2090: Invalid block bitmap block 0 in block_group 0 [ 702.218612][T13078] Quota error (device loop4): write_blk: dquota write failed [ 702.247757][T13078] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 703.977512][T13078] EXT4-fs error (device loop4): ext4_acquire_dquot:6991: comm syz.4.2090: Failed to acquire dquot type 0 [ 703.997598][T13093] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.2090: iget: bad extra_isize 65535 (inode size 256) [ 704.106142][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.305266][T13118] 9p: Bad value for 'wfdno' [ 706.390789][T13144] loop2: detected capacity change from 0 to 1024 [ 706.397975][T13143] program syz.7.2112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 706.421592][T13145] loop4: detected capacity change from 0 to 1024 [ 706.432364][T13144] EXT4-fs: Ignoring removed nobh option [ 708.130357][T13144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 708.184724][T13145] EXT4-fs: Ignoring removed mblk_io_submit option [ 708.231380][T13145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 708.272148][T13144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.322917][T13145] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 708.425731][T13145] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.2111: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 708.497461][T13145] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 708.577772][T13145] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2111: couldn't read orphan inode 11 (err -117) [ 708.641586][T13145] loop4: lost filesystem error report for type 5 error -117 [ 708.643662][T13145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.772705][T10339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.817738][T13145] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2111: Invalid block bitmap block 0 in block_group 0 [ 708.876656][T13145] Quota error (device loop4): write_blk: dquota write failed [ 708.936522][T13145] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 709.021884][T13145] EXT4-fs error (device loop4): ext4_acquire_dquot:6991: comm syz.4.2111: Failed to acquire dquot type 0 [ 709.350152][ T13] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm kworker/u8:1: Invalid inode table block 8589934593 in block_group 0 [ 709.368785][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.462804][T13180] loop2: detected capacity change from 0 to 1024 [ 709.682606][T13186] loop4: detected capacity change from 0 to 512 [ 710.315713][ T59] hfsplus: b-tree write err: -5, ino 8 [ 710.373634][T13186] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2119: invalid indirect mapped block 256 (level 2) [ 710.705083][T13186] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 710.748233][T13186] EXT4-fs (loop4): 2 truncates cleaned up [ 710.909449][T13186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.049053][ T30] audit: type=1800 audit(1770743353.035:51): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2119" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 712.387822][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.522688][T13247] loop7: detected capacity change from 0 to 1024 [ 716.301083][ T59] hfsplus: b-tree write err: -5, ino 8 [ 719.660128][T13298] netlink: 'syz.2.2152': attribute type 3 has an invalid length. [ 719.687207][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2152'. [ 719.956205][T13306] loop4: detected capacity change from 0 to 1024 [ 720.008042][T13306] EXT4-fs: Ignoring removed nobh option [ 720.220385][T13312] loop7: detected capacity change from 0 to 1024 [ 720.339118][T13306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 720.423698][T13306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.146845][ T59] hfsplus: b-tree write err: -5, ino 8 [ 722.113752][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.425117][T13396] loop9: detected capacity change from 0 to 1024 [ 726.171510][ T59] hfsplus: b-tree write err: -5, ino 8 [ 727.221846][ C1] [ 727.221864][ C1] ======================================================== [ 727.221876][ C1] WARNING: possible irq lock inversion dependency detected [ 727.221888][ C1] syzkaller #0 Not tainted [ 727.221900][ C1] -------------------------------------------------------- [ 727.221911][ C1] ksoftirqd/1/23 just changed the state of lock: [ 727.221926][ C1] ffff888028d71230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 727.222001][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 727.222013][ C1] (tasklist_lock){.+.+}-{3:3} [ 727.222044][ C1] [ 727.222044][ C1] [ 727.222044][ C1] and interrupts could create inverse lock ordering between them. [ 727.222044][ C1] [ 727.222056][ C1] [ 727.222056][ C1] other info that might help us debug this: [ 727.222065][ C1] Chain exists of: [ 727.222065][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 727.222065][ C1] [ 727.222123][ C1] Possible interrupt unsafe locking scenario: [ 727.222123][ C1] [ 727.222133][ C1] CPU0 CPU1 [ 727.222142][ C1] ---- ---- [ 727.222150][ C1] lock(tasklist_lock); [ 727.222170][ C1] local_irq_disable(); [ 727.222180][ C1] lock(&dev->event_lock#2); [ 727.222208][ C1] lock(&client->buffer_lock); [ 727.222230][ C1] [ 727.222237][ C1] lock(&dev->event_lock#2); [ 727.222265][ C1] [ 727.222265][ C1] *** DEADLOCK *** [ 727.222265][ C1] [ 727.222273][ C1] 1 lock held by ksoftirqd/1/23: [ 727.222287][ C1] #0: ffffffff8e558220 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210 [ 727.222362][ C1] [ 727.222362][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 727.222384][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 727.222422][ C1] HARDIRQ-ON-R at: [ 727.222439][ C1] lock_acquire+0x106/0x330 [ 727.222476][ C1] _raw_read_lock+0x36/0x50 [ 727.222512][ C1] __do_wait+0xde/0x740 [ 727.222546][ C1] do_wait+0x1e7/0x4f0 [ 727.222578][ C1] kernel_wait+0xd6/0x1c0 [ 727.222612][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 727.222659][ C1] process_scheduled_works+0xaec/0x17a0 [ 727.222698][ C1] worker_thread+0xda6/0x1360 [ 727.222721][ C1] kthread+0x388/0x470 [ 727.222750][ C1] ret_from_fork+0x51b/0xa40 [ 727.222774][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.222810][ C1] SOFTIRQ-ON-R at: [ 727.222825][ C1] lock_acquire+0x106/0x330 [ 727.222861][ C1] _raw_read_lock+0x36/0x50 [ 727.222895][ C1] __do_wait+0xde/0x740 [ 727.222928][ C1] do_wait+0x1e7/0x4f0 [ 727.222960][ C1] kernel_wait+0xd6/0x1c0 [ 727.222994][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 727.223038][ C1] process_scheduled_works+0xaec/0x17a0 [ 727.223076][ C1] worker_thread+0xda6/0x1360 [ 727.223103][ C1] kthread+0x388/0x470 [ 727.223131][ C1] ret_from_fork+0x51b/0xa40 [ 727.223153][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.223188][ C1] INITIAL USE at: [ 727.223205][ C1] lock_acquire+0x106/0x330 [ 727.223240][ C1] _raw_write_lock_irq+0x3d/0x50 [ 727.223276][ C1] copy_process+0x247a/0x3cf0 [ 727.223301][ C1] kernel_clone+0x248/0x870 [ 727.223328][ C1] user_mode_thread+0x110/0x180 [ 727.223356][ C1] rest_init+0x23/0x300 [ 727.223384][ C1] start_kernel+0x380/0x3d0 [ 727.223420][ C1] x86_64_start_reservations+0x24/0x30 [ 727.223450][ C1] x86_64_start_kernel+0x143/0x1c0 [ 727.223478][ C1] common_startup_64+0x13e/0x147 [ 727.223510][ C1] INITIAL READ USE at: [ 727.223526][ C1] lock_acquire+0x106/0x330 [ 727.223562][ C1] _raw_read_lock+0x36/0x50 [ 727.223596][ C1] __do_wait+0xde/0x740 [ 727.223628][ C1] do_wait+0x1e7/0x4f0 [ 727.223679][ C1] kernel_wait+0xd6/0x1c0 [ 727.223713][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 727.223751][ C1] process_scheduled_works+0xaec/0x17a0 [ 727.223790][ C1] worker_thread+0xda6/0x1360 [ 727.223813][ C1] kthread+0x388/0x470 [ 727.223841][ C1] ret_from_fork+0x51b/0xa40 [ 727.223864][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.223899][ C1] } [ 727.223907][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 727.223942][ C1] ... acquired at: [ 727.223951][ C1] _raw_read_lock+0x36/0x50 [ 727.223983][ C1] send_sigurg+0x12b/0x420 [ 727.224018][ C1] sk_send_sigurg+0x6c/0x2e0 [ 727.224053][ C1] queue_oob+0x42c/0x4f0 [ 727.224090][ C1] unix_stream_sendmsg+0xcb1/0xe80 [ 727.224124][ C1] ____sys_sendmsg+0xa68/0xad0 [ 727.224152][ C1] ___sys_sendmsg+0x2a5/0x360 [ 727.224179][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 727.224210][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 727.224239][ C1] do_syscall_64+0xe2/0xf80 [ 727.224260][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.224288][ C1] [ 727.224294][ C1] -> (&f_owner->lock){....}-{3:3} { [ 727.224333][ C1] INITIAL USE at: [ 727.224349][ C1] lock_acquire+0x106/0x330 [ 727.224386][ C1] _raw_write_lock_irq+0x3d/0x50 [ 727.224427][ C1] __f_setown+0x67/0x370 [ 727.224460][ C1] fcntl_dirnotify+0x3f9/0x6a0 [ 727.224498][ C1] do_fcntl+0x77e/0x1a20 [ 727.224534][ C1] __se_sys_fcntl+0xc8/0x150 [ 727.224568][ C1] do_syscall_64+0xe2/0xf80 [ 727.224589][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.224615][ C1] INITIAL READ USE at: [ 727.224632][ C1] lock_acquire+0x106/0x330 [ 727.224677][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 727.224712][ C1] send_sigurg+0x55/0x420 [ 727.224747][ C1] sk_send_sigurg+0x6c/0x2e0 [ 727.224782][ C1] queue_oob+0x42c/0x4f0 [ 727.224819][ C1] unix_stream_sendmsg+0xcb1/0xe80 [ 727.224855][ C1] ____sys_sendmsg+0xa68/0xad0 [ 727.224884][ C1] ___sys_sendmsg+0x2a5/0x360 [ 727.224913][ C1] __sys_sendmmsg+0x27c/0x4e0 [ 727.224942][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 727.224972][ C1] do_syscall_64+0xe2/0xf80 [ 727.224994][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.225019][ C1] } [ 727.225027][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 727.225064][ C1] ... acquired at: [ 727.225073][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 727.225108][ C1] send_sigio+0x38/0x370 [ 727.225141][ C1] kill_fasync+0x24d/0x4d0 [ 727.225175][ C1] lease_break_callback+0x26/0x30 [ 727.225205][ C1] __break_lease+0x81c/0x1d90 [ 727.225228][ C1] try_break_deleg+0xfc/0x180 [ 727.225250][ C1] notify_change+0xb5a/0xf40 [ 727.225272][ C1] chown_common+0x466/0x6b0 [ 727.225296][ C1] ksys_fchown+0xe9/0x160 [ 727.225321][ C1] __x64_sys_fchown+0x7a/0x90 [ 727.225347][ C1] do_syscall_64+0xe2/0xf80 [ 727.225368][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.225391][ C1] [ 727.225397][ C1] -> (&new->fa_lock){....}-{3:3} { [ 727.225436][ C1] INITIAL USE at: [ 727.225452][ C1] lock_acquire+0x106/0x330 [ 727.225490][ C1] _raw_write_lock_irq+0x3d/0x50 [ 727.225525][ C1] fasync_remove_entry+0xf1/0x1c0 [ 727.225561][ C1] sock_fasync+0x85/0xf0 [ 727.225594][ C1] __fput+0x8a5/0xa70 [ 727.225622][ C1] task_work_run+0x1d9/0x270 [ 727.225663][ C1] get_signal+0x11eb/0x1330 [ 727.225700][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 727.225737][ C1] exit_to_user_mode_loop+0x86/0x480 [ 727.225770][ C1] do_syscall_64+0x2b7/0xf80 [ 727.225792][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.225817][ C1] INITIAL READ USE at: [ 727.225834][ C1] lock_acquire+0x106/0x330 [ 727.225869][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 727.225904][ C1] kill_fasync+0x199/0x4d0 [ 727.225940][ C1] sock_wake_async+0x137/0x160 [ 727.225978][ C1] sock_def_readable+0x3c1/0x530 [ 727.226013][ C1] netlink_dump+0x95f/0xe80 [ 727.226050][ C1] __netlink_dump_start+0x5cb/0x7e0 [ 727.226086][ C1] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 727.226111][ C1] netlink_rcv_skb+0x232/0x4b0 [ 727.226147][ C1] netlink_unicast+0x80f/0x9b0 [ 727.226180][ C1] netlink_sendmsg+0x813/0xb40 [ 727.226203][ C1] ____sys_sendmsg+0xa68/0xad0 [ 727.226231][ C1] ___sys_sendmsg+0x2a5/0x360 [ 727.226260][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 727.226293][ C1] do_syscall_64+0xe2/0xf80 [ 727.226315][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.226340][ C1] } [ 727.226348][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 727.226384][ C1] ... acquired at: [ 727.226393][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 727.226428][ C1] kill_fasync+0x199/0x4d0 [ 727.226463][ C1] evdev_pass_values+0x627/0xbd0 [ 727.226495][ C1] evdev_events+0x1e6/0x340 [ 727.226524][ C1] input_pass_values+0x288/0x890 [ 727.226554][ C1] input_event_dispose+0x330/0x6b0 [ 727.226577][ C1] input_inject_event+0x1dd/0x340 [ 727.226600][ C1] evdev_write+0x325/0x4c0 [ 727.226631][ C1] vfs_write+0x29a/0xb90 [ 727.226669][ C1] ksys_write+0x150/0x270 [ 727.226703][ C1] do_syscall_64+0xe2/0xf80 [ 727.226723][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.226750][ C1] [ 727.226756][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 727.226795][ C1] INITIAL USE at: [ 727.226811][ C1] lock_acquire+0x106/0x330 [ 727.226846][ C1] _raw_spin_lock+0x2e/0x40 [ 727.226878][ C1] evdev_pass_values+0xb9/0xbd0 [ 727.226910][ C1] evdev_events+0x1e6/0x340 [ 727.226940][ C1] input_pass_values+0x288/0x890 [ 727.226972][ C1] input_event_dispose+0x330/0x6b0 [ 727.226996][ C1] input_inject_event+0x1dd/0x340 [ 727.227019][ C1] evdev_write+0x325/0x4c0 [ 727.227049][ C1] vfs_write+0x29a/0xb90 [ 727.227081][ C1] ksys_write+0x150/0x270 [ 727.227115][ C1] do_syscall_64+0xe2/0xf80 [ 727.227137][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.227161][ C1] } [ 727.227169][ C1] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 727.227212][ C1] ... acquired at: [ 727.227221][ C1] _raw_spin_lock+0x2e/0x40 [ 727.227252][ C1] evdev_pass_values+0xb9/0xbd0 [ 727.227283][ C1] evdev_events+0x1e6/0x340 [ 727.227312][ C1] input_pass_values+0x288/0x890 [ 727.227340][ C1] input_event_dispose+0x330/0x6b0 [ 727.227362][ C1] input_inject_event+0x1dd/0x340 [ 727.227384][ C1] evdev_write+0x325/0x4c0 [ 727.227413][ C1] vfs_write+0x29a/0xb90 [ 727.227450][ C1] ksys_write+0x150/0x270 [ 727.227483][ C1] do_syscall_64+0xe2/0xf80 [ 727.227503][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.227526][ C1] [ 727.227532][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 727.227581][ C1] IN-SOFTIRQ-W at: [ 727.227596][ C1] lock_acquire+0x106/0x330 [ 727.227632][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 727.227674][ C1] input_inject_event+0xa5/0x340 [ 727.227697][ C1] led_trigger_event+0x138/0x210 [ 727.227730][ C1] kbd_bh+0x1f3/0x300 [ 727.227761][ C1] tasklet_action_common+0x2da/0x4b0 [ 727.227789][ C1] handle_softirqs+0x22a/0x7c0 [ 727.227812][ C1] run_ksoftirqd+0x36/0x60 [ 727.227839][ C1] smpboot_thread_fn+0x541/0xa50 [ 727.227864][ C1] kthread+0x388/0x470 [ 727.227893][ C1] ret_from_fork+0x51b/0xa40 [ 727.227917][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.227948][ C1] INITIAL USE at: [ 727.227963][ C1] lock_acquire+0x106/0x330 [ 727.227994][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 727.228023][ C1] input_inject_event+0xa5/0x340 [ 727.228045][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 727.228073][ C1] led_trigger_set+0x535/0x960 [ 727.228100][ C1] led_trigger_set_default+0x260/0x2a0 [ 727.228128][ C1] led_classdev_register_ext+0x787/0x9c0 [ 727.228154][ C1] input_leds_connect+0x517/0x790 [ 727.228178][ C1] input_register_device+0xd00/0x1160 [ 727.228204][ C1] atkbd_connect+0x731/0xa50 [ 727.228234][ C1] serio_driver_probe+0x82/0xd0 [ 727.228260][ C1] really_probe+0x267/0xaf0 [ 727.228280][ C1] __driver_probe_device+0x18c/0x320 [ 727.228313][ C1] driver_probe_device+0x4f/0x240 [ 727.228332][ C1] __driver_attach+0x349/0x640 [ 727.228364][ C1] bus_for_each_dev+0x23b/0x2c0 [ 727.228390][ C1] serio_handle_event+0x232/0x10d0 [ 727.228418][ C1] process_scheduled_works+0xaec/0x17a0 [ 727.228452][ C1] worker_thread+0xda6/0x1360 [ 727.228472][ C1] kthread+0x388/0x470 [ 727.228496][ C1] ret_from_fork+0x51b/0xa40 [ 727.228516][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.228547][ C1] } [ 727.228554][ C1] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 727.228592][ C1] ... acquired at: [ 727.228600][ C1] mark_lock+0x115/0x190 [ 727.228617][ C1] __lock_acquire+0x689/0x2cf0 [ 727.228653][ C1] lock_acquire+0x106/0x330 [ 727.228684][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 727.228713][ C1] input_inject_event+0xa5/0x340 [ 727.228733][ C1] led_trigger_event+0x138/0x210 [ 727.228759][ C1] kbd_bh+0x1f3/0x300 [ 727.228784][ C1] tasklet_action_common+0x2da/0x4b0 [ 727.228808][ C1] handle_softirqs+0x22a/0x7c0 [ 727.228828][ C1] run_ksoftirqd+0x36/0x60 [ 727.228851][ C1] smpboot_thread_fn+0x541/0xa50 [ 727.228873][ C1] kthread+0x388/0x470 [ 727.228896][ C1] ret_from_fork+0x51b/0xa40 [ 727.228915][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.228945][ C1] [ 727.228950][ C1] [ 727.228950][ C1] stack backtrace: [ 727.228963][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 727.228987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 727.229001][ C1] Call Trace: [ 727.229009][ C1] [ 727.229019][ C1] dump_stack_lvl+0xe8/0x150 [ 727.229048][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 727.229073][ C1] mark_lock_irq+0x3d2/0x420 [ 727.229102][ C1] mark_lock+0x115/0x190 [ 727.229126][ C1] __lock_acquire+0x689/0x2cf0 [ 727.229163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 727.229189][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 727.229227][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 727.229252][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 727.229286][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 727.229315][ C1] ? input_inject_event+0xa5/0x340 [ 727.229335][ C1] lock_acquire+0x106/0x330 [ 727.229367][ C1] ? input_inject_event+0xa5/0x340 [ 727.229392][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 727.229422][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 727.229452][ C1] ? input_inject_event+0xa5/0x340 [ 727.229474][ C1] input_inject_event+0xa5/0x340 [ 727.229496][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 727.229521][ C1] ? led_trigger_event+0x4b/0x210 [ 727.229551][ C1] led_trigger_event+0x138/0x210 [ 727.229580][ C1] kbd_bh+0x1f3/0x300 [ 727.229609][ C1] tasklet_action_common+0x2da/0x4b0 [ 727.229635][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 727.229668][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 727.229690][ C1] handle_softirqs+0x22a/0x7c0 [ 727.229712][ C1] ? run_ksoftirqd+0x36/0x60 [ 727.229740][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 727.229762][ C1] run_ksoftirqd+0x36/0x60 [ 727.229785][ C1] smpboot_thread_fn+0x541/0xa50 [ 727.229809][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 727.229836][ C1] kthread+0x388/0x470 [ 727.229862][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 727.229884][ C1] ? __pfx_kthread+0x10/0x10 [ 727.229910][ C1] ret_from_fork+0x51b/0xa40 [ 727.229932][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 727.229952][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 727.229977][ C1] ? __switch_to+0xc82/0x1410 [ 727.230010][ C1] ? __pfx_kthread+0x10/0x10 [ 727.230037][ C1] ret_from_fork_asm+0x1a/0x30 [ 727.230077][ C1] [ 727.241294][T13428] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 727.241327][T13428] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 727.272233][T13428] vhci_hcd vhci_hcd.0: Device attached [ 727.623941][ T9] usb 44-1: SetAddress Request (2) to port 0 [ 727.624006][ T9] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 727.884235][T13448] loop9: detected capacity change from 0 to 1024 [ 728.454729][T13429] vhci_hcd: connection reset by peer [ 728.475201][ T6008] vhci_hcd vhci_hcd.5: stop threads [ 730.397978][ T6008] vhci_hcd vhci_hcd.5: release socket [ 730.420573][ T13] hfsplus: b-tree write err: -5, ino 8 [ 730.485324][ T6008] vhci_hcd vhci_hcd.5: disconnect device [ 732.667171][ T9] usb 44-1: device descriptor read/8, error -110 [ 733.058254][ T9] usb usb44-port1: attempt power cycle [ 733.619257][ T9] usb usb44-port1: unable to enumerate USB device