last executing test programs: 7m45.30842992s ago: executing program 3 (id=63): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m44.023326755s ago: executing program 3 (id=68): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x2, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0bc6a33cc87d4cc23eb205848aa1febd8dd07bc25978ee5c6f83db659433b6187af151b76870a994fe4440c46b27fc4fae2e4ed9d711e652e6c397ccd89fc7181d168405d21d9f218508d0af65af34d43b95a83cdeb6a2bed82a8b75dcd514403aa7201818b9a0b5fe9c6ef1ce91bb73a66ee7c1a9a66b736f5556eb0d06ddef99bd96b0e9385db94623bbb509536211963e99cf3cacab5e61491086104702d8df708e72b81f4ad4e045b51deece6dc18eab276de", 0x27b}], 0x2}, 0x0) 7m43.508749236s ago: executing program 3 (id=71): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f00000002c0)) mkdirat(0xffffffffffffffff, 0x0, 0x37) syz_open_dev$sg(0x0, 0x6f5e, 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getpgid(0x0) 7m41.570370025s ago: executing program 3 (id=73): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x0, 0x21, 0xf0, {0xf0, 0x31, "38fcbd574bb3dae4b4af8d873253692d4602d5641725e159a3c9d55aa04bd678570e09b15943a49e76a558a5e9ded3f4a826609e910a0effaaf196f4084f3015d5fe8ccc078e8bc034fd2459440f191296446a839590e36b23baae3f2707fc8360ffd1885780a868e0c71143ab3831c9b375e43aab4a8bb5b34844f226b92e08eab0f58b4961216429c8db99a22695ee27a5ba60e65f5c8fd8459c111cb5442c72eab3bbf4b2d9c52dc888c1ee63983cbe6f92758a6e42528e5223b308f04cdb6abc5aac28b5ee24e684364d2def695a4ebd74d049e4afa73ab5245319e0ac44543c1fe7219333181ec908d28c68"}}, &(0x7f0000000b80)={0x0, 0x3, 0x5, @string={0x5, 0x3, "57ba78"}}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) creat(&(0x7f00000003c0)='./file1\x00', 0xc6) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 7m38.073028436s ago: executing program 3 (id=82): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m37.503535317s ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m37.164166644s ago: executing program 32 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x16) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m6.837734525s ago: executing program 4 (id=134): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000003ac0), 0x0) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) 7m5.953916423s ago: executing program 4 (id=136): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 7m5.61761342s ago: executing program 4 (id=138): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x712, &(0x7f0000000640)="$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") mkdir(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000004340)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x2) getdents(r1, 0x0, 0x54) 7m3.894289314s ago: executing program 4 (id=144): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) 7m0.442789104s ago: executing program 4 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMERASE(r4, 0x40084d02, &(0x7f0000000000)={0x7, 0xe}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=0x0}}) 6m59.277113198s ago: executing program 4 (id=150): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) 6m44.153465352s ago: executing program 33 (id=150): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@remote}, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) 6m19.330172853s ago: executing program 2 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x64, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x0, 0x1}}}]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) close(r3) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)="c253aab9412632", 0x7}], 0x1}, 0x8804) 6m17.865081132s ago: executing program 2 (id=205): openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x240, 0x6c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) rename(0x0, 0x0) 6m15.51719337s ago: executing program 2 (id=207): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) 6m14.592544358s ago: executing program 2 (id=209): openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4002, 0x0) 6m13.327070444s ago: executing program 2 (id=211): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000040000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000008000700000000000500020007"], 0x58}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "140086ddffffffff"}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r5, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r5, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4054}, 0x0) read$msr(r3, &(0x7f00000000c0)=""/40, 0x28) 6m12.208955797s ago: executing program 2 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m55.101004251s ago: executing program 34 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m51.908364016s ago: executing program 6 (id=304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0x2, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040c5}, 0x4048090) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m48.120006342s ago: executing program 6 (id=309): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)="ad665e71e4ce9a1dc9d05fdd4eb4a3914bcc71e53e5e00bcb4f2115e5615551a4bbc241802b989efb2f8e5061cd6f71b984223556b928bb5d9dba9a792923c1d8e80518fdd7abf6e42adf6472464d2d0021f501689640dc9107add0c5e2cdd0fa5466b2f72581f3191b689c9afbf4229981fa965e77e15e662c7f4a086d55bbfbc1ce0119004ddfd21f68e328ed742e851eb7c802574", 0x96}, 0x68) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f0000000580)=ANY=[@ANYBLOB='MIC\nIGAIN \'Synth'], 0x3c) close(r2) 4m47.009249334s ago: executing program 6 (id=310): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x100) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000003}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 4m45.957134215s ago: executing program 6 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) pipe2(0x0, 0x880) 4m43.352651908s ago: executing program 6 (id=321): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x11, 0x800, 0x7fffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbb", @ANYRES32=0x41424344], 0x0) socket(0x10, 0x803, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 4m41.523935914s ago: executing program 6 (id=315): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000000)) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 4m26.263678342s ago: executing program 35 (id=315): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000000)) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 2m30.78101969s ago: executing program 1 (id=441): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000007c0)={0x101, 0x55, 0x4, {0x8, @win={{0xfffffce0, 0x7b3, 0x0, 0xfffffff9}, 0x6, 0xd4d, 0x0, 0x7fffffff, 0x0, 0x1}}, 0x30d}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x1, 0x5, 0x0, 'queue0\x00', 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000140)=0xe2, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$loop(0x0, 0x3af2, 0x5000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$peeksig(0x4209, r0, &(0x7f0000000200)={0x8004, 0x0, 0x8}, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}]) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x2, 0x4) shutdown(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x6000000d}) 2m29.036930785s ago: executing program 1 (id=442): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet(0x2, 0x2, 0x0) syz_clone3(&(0x7f0000000200)={0x40020100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) syz_open_dev$radio(0x0, 0x2, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x2, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x400004, 0x3c5e, 0x5, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0x6, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x10000800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x2, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x8001, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffd, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x2200, 0x80, 0xf, 0xd, 0x2950bfaf, 0xdd, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xaca, 0xbf, 0x2, 0x3, 0x4, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x9, 0xce7, 0x1ff, 0x22, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x6, 0x81, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x9, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0x41dc]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) setrlimit(0xc, &(0x7f0000000240)={0x0, 0x3}) socket$inet_mptcp(0x2, 0x1, 0x106) openat$nvme_fabrics(0xffffff9c, 0x0, 0x50d102, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xb, 0xb}, {0x0, 0xfff3}, {0xd, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041010}, 0x10) 2m24.886140079s ago: executing program 1 (id=446): getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000240)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffef2) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000", @ANYRES32=r1], 0x38}, 0x1, 0x300}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fcdbdf1b010000000500040004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2800c894}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xb1, 0xe, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) socket$nl_route(0x10, 0x3, 0x0) 2m23.604488065s ago: executing program 1 (id=448): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x4, 0x4000000) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000023893) capget(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x0, 0x300}}, 0x26}}, 0x0) 2m22.422933769s ago: executing program 1 (id=451): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) sync_file_range(r0, 0x6, 0x0, 0x7) 2m18.111414176s ago: executing program 1 (id=455): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040000900000082a1cfc4337965941538be09000000000000000000007400a391793ba70d0000000500000000000000baffda6e4a4d836c821a46066956ecc604036b3e376c5d891e3307ebce62b60d71"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0x9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m2.658157037s ago: executing program 36 (id=455): syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040000900000082a1cfc4337965941538be09000000000000000000007400a391793ba70d0000000500000000000000baffda6e4a4d836c821a46066956ecc604036b3e376c5d891e3307ebce62b60d71"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r4, &(0x7f0000000880)="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"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0x9) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 10.605284057s ago: executing program 7 (id=752): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r0, 0x321, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 10.43083112s ago: executing program 7 (id=745): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c403000200092100105c0122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x6, "b1"}, @main=@item_4={0x3, 0x0, 0xc, "d0015b10"}]}}, 0x0}, 0x0) 10.173007436s ago: executing program 0 (id=746): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a, 0x0, 0x0, 0x6121}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x108, r8}, 0x0) landlock_restrict_self(r9, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000440)=""/166, 0xa6) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x25, 0x792ef04ec64ed1ff, @tid=r0}, &(0x7f0000000180)) 9.621644006s ago: executing program 8 (id=749): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa, 0xc9}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 8.94520016s ago: executing program 5 (id=750): syz_usb_connect$midi(0x3, 0x48, &(0x7f00000005c0)=ANY=[@ANYBLOB="120101020000000844060e8040000102030109023600010105200409040000010103300f0724010800070009058e2feca61ec004020002"], &(0x7f00000001c0)={0x0, 0x0, 0x11, 0x0}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4001) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1) 8.700181765s ago: executing program 8 (id=751): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a, 0x0, 0x0, 0x6121}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x108, r8}, 0x0) landlock_restrict_self(r9, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000440)=""/166, 0xa6) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x25, 0x792ef04ec64ed1ff, @tid=r0}, &(0x7f0000000180)) 8.611456016s ago: executing program 0 (id=753): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.349201742s ago: executing program 0 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) 7.274187894s ago: executing program 8 (id=755): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a, 0x0, 0x0, 0x6121}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x108, r8}, 0x0) landlock_restrict_self(r9, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000440)=""/166, 0xa6) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x25, 0x792ef04ec64ed1ff, @tid=r0}, &(0x7f0000000180)) 6.96089758s ago: executing program 7 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f00000017c0)={0x1, [{0x1, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x401, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x2, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x28, 0x0}, {0x2, 0x0, 0x52, 0x0}, {0x1, 0x0, 0x991, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x81, 0x0}, {0x2, 0x0, 0x46, 0x0}, {0x2, 0x0, 0xb60, 0x0}]}) 6.669129815s ago: executing program 0 (id=757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xb, &(0x7f0000000440)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f) 5.99321398s ago: executing program 5 (id=758): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) write$binfmt_misc(r0, 0x0, 0x0) 5.717214805s ago: executing program 8 (id=759): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c) sendmsg$inet(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000c40)}, 0x8000) 5.593176697s ago: executing program 7 (id=760): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x2, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) listxattr(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 5.548574138s ago: executing program 5 (id=761): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a, 0x0, 0x0, 0x6121}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x108, r8}, 0x0) landlock_restrict_self(r9, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000440)=""/166, 0xa6) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x25, 0x792ef04ec64ed1ff, @tid=r0}, &(0x7f0000000180)) 5.370662702s ago: executing program 8 (id=762): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x27, 0x366, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.105148617s ago: executing program 7 (id=763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r6], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r8, r7, r8], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) sync_file_range(r0, 0x6, 0x0, 0x7) 4.515867969s ago: executing program 0 (id=764): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a, 0x0, 0x0, 0x6121}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x108, r8}, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$binfmt(0xffffffffffffff9c, r10, 0x41, 0x1ff) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000440)=""/166, 0xa6) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x25, 0x792ef04ec64ed1ff, @tid=r0}, &(0x7f0000000180)) 2.356427053s ago: executing program 5 (id=765): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x400) 2.188410686s ago: executing program 7 (id=766): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x3, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x29, {0x29, 0x1, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.98509437s ago: executing program 8 (id=767): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES64], 0x32600) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x1) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6a, 0x0, 0x0, 0x6121}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f0000000000)={0x108, r8}, 0x0) landlock_restrict_self(r9, 0x0) syz_create_resource$binfmt(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000440)=""/166, 0xa6) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x25, 0x792ef04ec64ed1ff, @tid=r0}, &(0x7f0000000180)) 1.00385821s ago: executing program 5 (id=768): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c", 0xf}], 0x1}}], 0x1, 0x20008000) close(0x3) 233.447325ms ago: executing program 5 (id=769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)) 0s ago: executing program 0 (id=770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x5, 0x0, [{0xb, 0xffffffff, 0x4, 0xbfffff89, 0x6, 0x6, 0x3}, {0x1, 0x4, 0x0, 0x8, 0x0, 0x1, 0x5}, {0x0, 0x8, 0x0, 0x3ff, 0x7ffffdff, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x1, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0xd, 0x3, 0x7ff, 0x400}]}) kernel console output (not intermixed with test programs): 70][ T2992] bond0 (unregistering): Released all slaves [ 193.815100][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.908329][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.990059][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.997347][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.050898][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.058245][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.134683][ T6687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.145606][ T6687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.524282][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c4b800: rx timeout, send abort [ 194.584011][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.590503][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.030842][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c49c00: rx timeout, send abort [ 195.039364][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c4b800: abort rx timeout. Force session deactivation [ 195.539169][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c49c00: abort rx timeout. Force session deactivation [ 197.245943][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.714829][ T6943] Zero length message leads to an empty skb [ 200.879963][ T6687] veth0_vlan: entered promiscuous mode [ 200.975775][ T6687] veth1_vlan: entered promiscuous mode [ 201.713140][ T6687] veth0_macvtap: entered promiscuous mode [ 201.789715][ T6687] veth1_macvtap: entered promiscuous mode [ 201.955588][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.002969][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.050604][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.100144][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.150125][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.209032][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.265455][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.310657][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.360510][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.406923][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.484723][ T6687] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.524529][ T6687] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.568430][ T6687] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.604228][ T6687] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.552677][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.579138][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.649465][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.668803][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.951735][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 206.958029][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 208.676100][ T6986] syz.1.217 (6986): drop_caches: 2 [ 210.698784][ T7011] hub 8-0:1.0: USB hub found [ 210.713046][ T7011] hub 8-0:1.0: 1 port detected [ 218.905383][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.916769][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.926389][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.008853][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.061786][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.071143][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.066545][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 220.207363][ T7061] loop1: detected capacity change from 0 to 512 [ 221.141798][ T5786] Bluetooth: hci2: command tx timeout [ 221.162723][ T7061] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.230: bad orphan inode 13 [ 221.182627][ T7061] ext4_test_bit(bit=12, block=4) = 1 [ 221.188057][ T7061] is_bad_inode(inode)=0 [ 221.192319][ T7061] NEXT_ORPHAN(inode)=0 [ 221.196421][ T7061] max_ino=32 [ 221.199652][ T7061] i_nlink=1 [ 221.204478][ T7061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.565399][ T6151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.689007][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.733050][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.794622][ T7039] bridge_slave_0: entered allmulticast mode [ 221.813425][ T7039] bridge_slave_0: entered promiscuous mode [ 221.833982][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.876986][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.901989][ T7039] bridge_slave_1: entered allmulticast mode [ 221.918527][ T7039] bridge_slave_1: entered promiscuous mode [ 222.142851][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.583760][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.795751][ T7039] team0: Port device team_slave_0 added [ 222.807257][ T7039] team0: Port device team_slave_1 added [ 222.852131][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.872015][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.965869][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.010511][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.054634][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.132159][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.211946][ T5786] Bluetooth: hci2: command tx timeout [ 223.475956][ T7039] hsr_slave_0: entered promiscuous mode [ 223.501471][ T7085] syz.0.229 (7085): drop_caches: 2 [ 223.516406][ T7039] hsr_slave_1: entered promiscuous mode [ 223.563950][ T7039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.595802][ T7039] Cannot create hsr debugfs directory [ 225.008077][ T7098] input: syz0 as /devices/virtual/input/input5 [ 225.293533][ T5786] Bluetooth: hci2: command tx timeout [ 225.320692][ T7102] syzkaller0: entered promiscuous mode [ 225.331944][ T7102] syzkaller0: entered allmulticast mode [ 225.359600][ T7039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 225.393624][ T7039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 225.426183][ T7039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 225.702195][ T7039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.451316][ T5786] Bluetooth: hci2: command tx timeout [ 231.368376][ T7039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.529791][ T7039] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.645845][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.653091][ T6896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.890029][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.897482][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.169965][ T7039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.212522][ T7039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.272648][ T7132] syz.5.242 (7132): drop_caches: 2 [ 233.132175][ T1074] bond1: (slave ip6gretap1): Releasing active interface [ 233.398427][ T7039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.552268][ T1074] bond2: (slave gretap1): Releasing active interface [ 237.007812][ T7039] veth0_vlan: entered promiscuous mode [ 238.638446][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 238.662571][ T7039] veth1_vlan: entered promiscuous mode [ 239.057807][ T7039] veth0_macvtap: entered promiscuous mode [ 239.111650][ T1074] hsr_slave_0: left promiscuous mode [ 239.118427][ T1074] hsr_slave_1: left promiscuous mode [ 239.137486][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.165103][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.182849][ T1074] bridge_slave_1: left allmulticast mode [ 239.189473][ T1074] bridge_slave_1: left promiscuous mode [ 239.205693][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.238910][ T1074] bridge_slave_0: left allmulticast mode [ 239.251614][ T1074] bridge_slave_0: left promiscuous mode [ 239.262104][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.741668][ T1074] bond2 (unregistering): Released all slaves [ 241.717427][ T1074] bond1 (unregistering): Released all slaves [ 242.377091][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 242.431456][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 242.484105][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.542375][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.963905][ T1074] bond0 (unregistering): Released all slaves [ 243.066211][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.248'. [ 243.076721][ T7215] sch_tbf: peakrate 2 is lower than or equals to rate 50420 ! [ 243.172926][ T7039] veth1_macvtap: entered promiscuous mode [ 243.340681][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.359592][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.370116][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.383121][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.395361][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.410905][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.440378][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.480430][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.502772][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.533848][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.557244][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.568032][ T7039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.598410][ T7039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.628365][ T7039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.846592][ T7227] loop0: detected capacity change from 0 to 256 [ 243.854640][ T7227] exfat: Deprecated parameter 'namecase' [ 243.860569][ T7227] exfat: Deprecated parameter 'namecase' [ 243.866361][ T7227] exfat: Deprecated parameter 'namecase' [ 243.920465][ T7039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.071998][ T7227] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 244.220292][ T7039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.602029][ T7039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.611055][ T7039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.080002][ T6896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.124093][ T6896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.267310][ T6896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.941645][ T6896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.319608][ T7241] loop5: detected capacity change from 0 to 256 [ 246.348517][ T7241] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 246.379343][ T7241] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0f1fc7f3, utbl_chksum : 0xe619d30d) [ 248.466855][ T7261] loop0: detected capacity change from 0 to 512 [ 248.475875][ T7261] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 248.510295][ T7261] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.255: invalid indirect mapped block 256 (level 2) [ 248.584102][ T7261] EXT4-fs (loop0): 2 truncates cleaned up [ 248.848593][ T7261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.530130][ T7271] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.255: bg 0: block 5: invalid block bitmap [ 249.557738][ T7271] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 249.570640][ T7271] EXT4-fs (loop0): This should not happen!! Data will be lost [ 249.570640][ T7271] [ 249.580476][ T7271] EXT4-fs (loop0): Total free blocks count 0 [ 249.586571][ T7271] EXT4-fs (loop0): Free/Dirty block details [ 249.592602][ T7271] EXT4-fs (loop0): free_blocks=0 [ 249.597633][ T7271] EXT4-fs (loop0): dirty_blocks=128 [ 249.603010][ T7271] EXT4-fs (loop0): Block reservation details [ 249.609026][ T7271] EXT4-fs (loop0): i_reserved_data_blocks=128 [ 251.314246][ T7274] loop5: detected capacity change from 0 to 256 [ 251.422373][ T7274] exfat: Deprecated parameter 'utf8' [ 252.601652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 253.004305][ T4112] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 124 with error 28 [ 253.117885][ T7233] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.237500][ T7310] tipc: New replicast peer: 255.255.255.255 [ 254.268175][ T7310] tipc: Enabled bearer , priority 10 [ 254.377003][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 254.402289][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.264'. [ 254.580235][ T7318] Illegal XDP return value 4294967294 on prog (id 16) dev N/A, expect packet loss! [ 255.343036][ T7316] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 255.371180][ T7316] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 255.394381][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'. [ 255.483126][ T5843] tipc: Node number set to 2144788384 [ 257.042423][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.048813][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.144619][ T7330] loop5: detected capacity change from 0 to 1024 [ 257.249850][ T7233] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.035588][ T7356] loop1: detected capacity change from 0 to 2048 [ 262.127497][ T7233] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.690211][ T7359] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.698672][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.433259][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.481025][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.839166][ T7359] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.848207][ T7359] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.858164][ T7359] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.870055][ T7359] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.239349][ T7426] loop0: detected capacity change from 0 to 512 [ 268.961063][ T7426] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 268.973921][ T7426] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 268.984131][ T7426] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.281: Corrupt directory, running e2fsck is recommended [ 269.009294][ T7426] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 269.019851][ T7426] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.281: corrupted in-inode xattr: invalid ea_ino [ 269.046872][ T7426] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.281: couldn't read orphan inode 15 (err -117) [ 269.076598][ T7426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.106325][ T7426] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.444781][ T7466] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 273.460732][ T7464] syzkaller0: entered promiscuous mode [ 273.475067][ T7464] syzkaller0: entered allmulticast mode [ 273.504024][ T7464] tipc: Started in network mode [ 273.508976][ T7464] tipc: Node identity ea1221b73549, cluster identity 4711 [ 274.342342][ T7464] tipc: Enabled bearer , priority 0 [ 274.375662][ T7470] tipc: Resetting bearer [ 274.473667][ T7462] tipc: Resetting bearer [ 274.807683][ T7477] loop1: detected capacity change from 0 to 256 [ 274.815720][ T7477] FAT-fs (loop1): "posix" option is obsolete, not supported now [ 275.010845][ T7484] comedi comedi3: aio_iiro_16: I/O port conflict (0x800100,8) [ 275.070432][ T7462] tipc: Disabling bearer [ 281.115395][ T7527] syzkaller0: entered promiscuous mode [ 281.127182][ T7527] syzkaller0: entered allmulticast mode [ 281.251423][ T7532] syzkaller0: entered promiscuous mode [ 281.290721][ T7532] syzkaller0: entered allmulticast mode [ 286.746381][ T7562] loop0: detected capacity change from 0 to 256 [ 287.051187][ T7562] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 290.591636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 292.261667][ T7594] NILFS (nullb0): couldn't find nilfs on the device [ 294.808319][ T7612] loop0: detected capacity change from 0 to 131072 [ 294.839703][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 295.394241][ T7612] F2FS-fs (loop0): Found nat_bits in checkpoint [ 295.521734][ T7612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 302.798886][ T7627] loop5: detected capacity change from 0 to 128 [ 303.137920][ T28] audit: type=1800 audit(1783519686.601:6): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.319" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 303.642125][ T7436] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.698546][ T7636] loop5: detected capacity change from 0 to 1024 [ 304.708489][ T7436] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.735111][ T7636] EXT4-fs: Ignoring removed bh option [ 304.782813][ T7639] netlink: 14 bytes leftover after parsing attributes in process `syz.1.325'. [ 304.820585][ T7636] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 304.891730][ T7636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.632494][ T7649] virtio-fs: tag not found [ 305.655619][ T7649] "syz.6.315" (7649) uses obsolete ecb(arc4) skcipher [ 306.670619][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.834684][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.846497][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.855630][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.868533][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 310.032152][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 310.042073][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.144426][ T5786] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 312.431742][ T5786] Bluetooth: hci0: command tx timeout [ 313.124346][ T7660] chnl_net:caif_netlink_parms(): no params data found [ 313.383129][ T7684] syzkaller0: entered promiscuous mode [ 313.391608][ T7684] syzkaller0: entered allmulticast mode [ 313.629510][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.672182][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.679568][ T7660] bridge_slave_0: entered allmulticast mode [ 313.736588][ T7660] bridge_slave_0: entered promiscuous mode [ 313.779139][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.814763][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.839013][ T7660] bridge_slave_1: entered allmulticast mode [ 313.862986][ T7660] bridge_slave_1: entered promiscuous mode [ 314.141211][ T7694] loop1: detected capacity change from 0 to 128 [ 314.221182][ T7694] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.306106][ T7694] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.364614][ T7660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.441170][ T7660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.492899][ T5786] Bluetooth: hci0: command tx timeout [ 314.972721][ T7708] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.162616][ T7660] team0: Port device team_slave_0 added [ 315.191945][ T7660] team0: Port device team_slave_1 added [ 315.422988][ T6151] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.719043][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.776986][ T7716] binder: 7711:7716 ioctl c0306201 200000000240 returned -14 [ 315.881608][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.231903][ T7660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.571595][ T5786] Bluetooth: hci0: command tx timeout [ 316.591683][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.599177][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.626839][ T7660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.694672][ T7715] Bluetooth: MGMT ver 1.22 [ 317.110176][ T7660] hsr_slave_0: entered promiscuous mode [ 317.262062][ T7660] hsr_slave_1: entered promiscuous mode [ 317.285649][ T7713] hsr0: entered promiscuous mode [ 317.302004][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 317.480553][ T7734] "syz.5.336" (7734) uses obsolete ecb(arc4) skcipher [ 317.734296][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.741297][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.935986][ T7715] hsr_slave_0: left promiscuous mode [ 317.970026][ T7715] hsr_slave_1: left promiscuous mode [ 318.651662][ T5786] Bluetooth: hci0: command tx timeout [ 320.505416][ T7748] netlink: 132 bytes leftover after parsing attributes in process `syz.5.337'. [ 320.600735][ T7749] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 320.609853][ T7749] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 320.618564][ T7749] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 320.890598][ T7751] mmap: syz.1.339 (7751) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 321.313678][ T7660] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.327621][ T7660] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.347294][ T7660] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.391422][ T7660] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.685634][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.756774][ T7660] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.795687][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.802963][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.284456][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.291724][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.115355][ T7660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.157391][ T7785] Bluetooth: MGMT ver 1.22 [ 325.175999][ T7785] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 325.843256][ T7796] loop5: detected capacity change from 0 to 128 [ 327.580200][ T7660] veth0_vlan: entered promiscuous mode [ 327.677720][ T7660] veth1_vlan: entered promiscuous mode [ 327.879800][ T7660] veth0_macvtap: entered promiscuous mode [ 327.969173][ T7660] veth1_macvtap: entered promiscuous mode [ 328.335179][ T7660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.401258][ T7806] ipt_REJECT: ECHOREPLY no longer supported. [ 328.770955][ T7660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.963371][ T7660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.401589][ T7660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.426874][ T7660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.438345][ T7660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.453565][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.465737][ T7660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.476777][ T7660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.487510][ T7660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.499009][ T7660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.509413][ T7660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.520782][ T7660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.533537][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.545429][ T7660] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.554945][ T7660] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.564224][ T7660] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.632158][ T7660] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.802352][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.813893][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.884482][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.941262][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.111773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 335.416510][ T28] audit: type=1800 audit(1783519718.831:7): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="file0" dev="overlay" ino=437 res=0 errno=0 [ 338.263524][ T7859] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 338.328509][ T8] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 338.613553][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 338.739346][ T8] usb 8-1: config 0 has no interface number 0 [ 338.746394][ T8] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 338.757894][ T8] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 338.769108][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 338.778534][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.800744][ T8] usb 8-1: config 0 descriptor?? [ 338.807449][ T7853] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 338.910570][ T8] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 338.968245][ T7848] syz.1.353 (7848) used greatest stack depth: 17896 bytes left [ 340.881914][ T7369] usb 8-1: USB disconnect, device number 2 [ 344.507674][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.363'. [ 344.968442][ T7906] fuse: Unknown parameter 'góù¼Þ0v—•îÒñXÑhõWÍ KÒ£Ö¼P’T¡' [ 350.776118][ T7961] tty tty4: ldisc open failed (-12), clearing slot 3 [ 350.784074][ T7962] tty tty1: ldisc open failed (-12), clearing slot 0 [ 352.254259][ T7974] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 352.262988][ T7974] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.370'. [ 352.297105][ T7965] netlink: 24 bytes leftover after parsing attributes in process `syz.7.369'. [ 352.938518][ T7974] loop1: detected capacity change from 0 to 4096 [ 354.941210][ T7996] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 354.998202][ T7996] binder: 7991:7996 ioctl 4018620d 0 returned -22 [ 355.115266][ T7995] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 358.049195][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 358.060692][ T8014] netlink: 48 bytes leftover after parsing attributes in process `syz.1.379'. [ 359.391982][ T8030] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 364.521700][ T28] audit: type=1800 audit(1783519747.221:8): pid=8046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.382" name="file0" dev="overlay" ino=290 res=0 errno=0 [ 366.360385][ T8049] fuse: Unknown parameter 'góù¼Þ0v—•îÒñXÑhõWÍ KÒ£Ö¼P’T¡' [ 367.387948][ T8068] loop7: detected capacity change from 0 to 2048 [ 367.389195][ T8068] ext2: Unknown parameter 'appraise' [ 367.481760][ T7233] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.734766][ T8085] futex_wake_op: syz.1.387 tries to shift op by 144; fix this program [ 372.331259][ T2992] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.582399][ T8116] loop7: detected capacity change from 0 to 256 [ 378.041577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 378.380158][ T8111] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 379.536564][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.681657][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.764219][ T8116] FAT-fs (loop7): Directory bread(block 64) failed [ 379.770894][ T8116] FAT-fs (loop7): Directory bread(block 65) failed [ 379.777811][ T8116] FAT-fs (loop7): Directory bread(block 66) failed [ 379.784985][ T8116] FAT-fs (loop7): Directory bread(block 67) failed [ 379.791712][ T8116] FAT-fs (loop7): Directory bread(block 68) failed [ 379.798371][ T8116] FAT-fs (loop7): Directory bread(block 69) failed [ 379.805343][ T8116] FAT-fs (loop7): Directory bread(block 70) failed [ 379.812066][ T8116] FAT-fs (loop7): Directory bread(block 71) failed [ 379.818682][ T8116] FAT-fs (loop7): Directory bread(block 72) failed [ 379.825255][ T8116] FAT-fs (loop7): Directory bread(block 73) failed [ 379.967007][ T2992] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.264523][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.400'. [ 380.689072][ T2992] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.759101][ T8131] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 381.719739][ T8131] binder: 8129:8131 ioctl 4018620d 0 returned -22 [ 382.302092][ T2992] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.708997][ T8153] autofs4:pid:8153:autofs_fill_super: called with bogus options [ 383.736561][ T8153] bio_check_eod: 105 callbacks suppressed [ 383.736613][ T8153] syz.5.402: attempt to access beyond end of device [ 383.736613][ T8153] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 383.756272][ T8153] syz.5.402: attempt to access beyond end of device [ 383.756272][ T8153] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 383.769254][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 383.780383][ T8153] syz.5.402: attempt to access beyond end of device [ 383.780383][ T8153] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 383.793397][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 383.803171][ T8153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 383.810923][ T8153] UDF-fs: Scanning with blocksize 512 failed [ 383.819471][ T8153] syz.5.402: attempt to access beyond end of device [ 383.819471][ T8153] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 383.834876][ T8153] syz.5.402: attempt to access beyond end of device [ 383.834876][ T8153] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 383.847920][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 383.858183][ T8153] syz.5.402: attempt to access beyond end of device [ 383.858183][ T8153] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 383.871303][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 383.882414][ T8153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 383.890123][ T8153] UDF-fs: Scanning with blocksize 1024 failed [ 383.897307][ T8153] syz.5.402: attempt to access beyond end of device [ 383.897307][ T8153] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 383.910661][ T8153] syz.5.402: attempt to access beyond end of device [ 383.910661][ T8153] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 383.923766][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 383.933767][ T8153] syz.5.402: attempt to access beyond end of device [ 383.933767][ T8153] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 383.947134][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 383.956897][ T8153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 383.964770][ T8153] UDF-fs: Scanning with blocksize 2048 failed [ 383.971850][ T8153] syz.5.402: attempt to access beyond end of device [ 383.971850][ T8153] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 383.986010][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 383.996090][ T8153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 384.005834][ T8153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 384.015600][ T8153] UDF-fs: Scanning with blocksize 4096 failed [ 384.021900][ T8153] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 384.081723][ T28] audit: type=1326 audit(1783519767.161:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 384.721651][ T28] audit: type=1326 audit(1783519767.161:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 384.876991][ T28] audit: type=1326 audit(1783519767.161:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 385.008754][ T28] audit: type=1326 audit(1783519767.161:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 386.131081][ T28] audit: type=1326 audit(1783519767.161:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 386.182284][ T8163] loop5: detected capacity change from 0 to 399 [ 386.301656][ T8171] loop5: detected capacity change from 399 to 1919 [ 386.321761][ T28] audit: type=1326 audit(1783519767.161:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 386.371632][ T28] audit: type=1326 audit(1783519767.161:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 386.475075][ T28] audit: type=1326 audit(1783519767.161:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 386.576964][ T28] audit: type=1326 audit(1783519767.171:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 386.735739][ T28] audit: type=1326 audit(1783519767.171:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8149 comm="syz.5.402" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ffd9de59 code=0x7ffc0000 [ 386.815602][ T8177] use of bytesused == 0 is deprecated and will be removed in the future, [ 386.824865][ T8177] use the actual size instead. [ 387.062311][ T8177] loop7: detected capacity change from 0 to 4096 [ 389.615916][ T8177] ntfs3: loop7: Failed to read $AttrDef (-4). [ 390.849102][ T8189] loop1: detected capacity change from 0 to 32768 [ 390.995404][ T8189] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 391.050936][ T8189] XFS (loop1): Ending clean mount [ 391.064044][ T8189] XFS (loop1): Quotacheck needed: Please wait. [ 391.174556][ T8189] XFS (loop1): Quotacheck: Done. [ 391.307840][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 391.307920][ T28] audit: type=1804 audit(1783519774.721:45): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.407" name="/newroot/95/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=1 errno=0 [ 392.779795][ T8217] loop5: detected capacity change from 0 to 64 [ 392.837015][ T6151] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 395.624942][ T8238] loop1: detected capacity change from 0 to 1024 [ 395.961530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 397.534799][ T8238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.608568][ T6151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.842632][ T7369] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 399.077274][ T7369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 399.106512][ T8267] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 399.109527][ T7369] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 399.125875][ T8267] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 399.175324][ T7369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 399.195974][ T7369] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 399.231061][ T7369] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 399.396129][ T7369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.404404][ T7369] usb 6-1: Product: syz [ 399.516252][ T8273] ipt_REJECT: ECHOREPLY no longer supported. [ 400.130177][ T7369] usb 6-1: Manufacturer: syz [ 400.138495][ T7369] usb 6-1: SerialNumber: syz [ 400.167725][ T7369] usb 6-1: config 0 descriptor?? [ 400.213908][ T7369] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 400.411122][ T7369] scsi host1: usb-storage 6-1:0.0 [ 400.437360][ T7369] usb 6-1: USB disconnect, device number 2 [ 400.552154][ T8275] netlink: 'syz.1.427': attribute type 49 has an invalid length. [ 402.131222][ T8294] loop5: detected capacity change from 0 to 16 [ 403.283434][ T8294] erofs: (device loop5): mounted with root inode @ nid 36. [ 403.388225][ T8296] loop7: detected capacity change from 0 to 256 [ 403.400709][ T8275] veth0_to_bond: entered promiscuous mode [ 403.440719][ T8275] veth0_to_bond: entered allmulticast mode [ 403.447248][ T8296] FAT-fs (loop7): Unrecognized mount option "nnonumtail=1" or missing value [ 403.602861][ T2992] hsr_slave_0: left promiscuous mode [ 403.613670][ T8296] loop7: detected capacity change from 0 to 1024 [ 403.630138][ T8296] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 403.651490][ T2992] hsr_slave_1: left promiscuous mode [ 403.685729][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.991811][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.514901][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.553105][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.604276][ T2992] bridge_slave_1: left allmulticast mode [ 404.634122][ T2992] bridge_slave_1: left promiscuous mode [ 404.665134][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.495358][ T2992] bridge_slave_0: left allmulticast mode [ 405.519584][ T2992] bridge_slave_0: left promiscuous mode [ 405.529916][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.603874][ T2992] veth1_macvtap: left promiscuous mode [ 405.626535][ T2992] veth0_macvtap: left promiscuous mode [ 405.737663][ T2992] veth1_vlan: left promiscuous mode [ 405.743154][ T2992] veth0_vlan: left promiscuous mode [ 409.281125][ T8331] loop0: detected capacity change from 0 to 256 [ 409.288635][ T8331] exfat: Deprecated parameter 'namecase' [ 409.294503][ T8331] exfat: Deprecated parameter 'namecase' [ 409.300216][ T8331] exfat: Deprecated parameter 'namecase' [ 409.662993][ T8331] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 410.616323][ T8340] futex_wake_op: syz.0.428 tries to shift op by 144; fix this program [ 411.554920][ T2992] team0 (unregistering): Port device team_slave_1 removed [ 411.613649][ T2992] team0 (unregistering): Port device team_slave_0 removed [ 411.673650][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.731426][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.173842][ T2992] bond0 (unregistering): Released all slaves [ 415.700544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 419.081679][ T8382] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 419.574509][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.438'. [ 423.317840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 425.534342][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.443'. [ 427.480240][ T8453] binder: 8450:8453 ioctl c0306201 0 returned -14 [ 428.106549][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'. [ 429.588116][ T8494] loop7: detected capacity change from 0 to 128 [ 429.719610][ T8496] 9pnet_fd: Insufficient options for proto=fd [ 431.966779][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.975842][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.163824][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 432.604808][ T8506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.927401][ T8514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.229842][ T8514] batadv_slave_1: entered promiscuous mode [ 434.178558][ T5786] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 434.188546][ T5786] CPU: 0 PID: 5786 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 434.196136][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 434.206227][ T5786] Workqueue: hci1 hci_rx_work [ 434.211123][ T5786] Call Trace: [ 434.214470][ T5786] [ 434.217509][ T5786] dump_stack_lvl+0x18c/0x250 [ 434.222385][ T5786] ? show_regs_print_info+0x20/0x20 [ 434.227709][ T5786] ? load_image+0x420/0x420 [ 434.232307][ T5786] sysfs_create_dir_ns+0x26e/0x2a0 [ 434.237521][ T5786] ? __lock_acquire+0x7d80/0x7d80 [ 434.242665][ T5786] ? sysfs_warn_dup+0xa0/0xa0 [ 434.247400][ T5786] ? do_raw_spin_unlock+0x121/0x230 [ 434.252664][ T5786] kobject_add_internal+0x617/0xc90 [ 434.258054][ T5786] kobject_add+0x164/0x240 [ 434.262609][ T5786] ? kobject_init+0x1d0/0x1d0 [ 434.267343][ T5786] ? get_device_parent+0x366/0x390 [ 434.272637][ T5786] device_add+0x3fa/0xc40 [ 434.277284][ T5786] hci_conn_add_sysfs+0xd5/0x1e0 [ 434.282353][ T5786] le_conn_complete_evt+0xe9f/0x1480 [ 434.287731][ T5786] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 434.294018][ T5786] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 434.299763][ T5786] ? mutex_unlock+0x10/0x10 [ 434.304308][ T5786] ? skb_pull_data+0xf0/0x1f0 [ 434.309082][ T5786] hci_le_conn_complete_evt+0x187/0x440 [ 434.314689][ T5786] ? hci_remote_host_features_evt+0x150/0x150 [ 434.320823][ T5786] hci_event_packet+0x7b4/0x1280 [ 434.325816][ T5786] ? __lock_acquire+0x7d80/0x7d80 [ 434.331060][ T5786] ? lock_chain_count+0x20/0x20 [ 434.335953][ T5786] ? bis_list+0x290/0x290 [ 434.340326][ T5786] ? lockdep_hardirqs_on+0x98/0x150 [ 434.345576][ T5786] ? hci_send_to_monitor+0xd7/0x4f0 [ 434.350816][ T5786] hci_rx_work+0x43a/0xd60 [ 434.355295][ T5786] ? process_scheduled_works+0x975/0x1600 [ 434.361092][ T5786] process_scheduled_works+0xa60/0x1600 [ 434.366716][ T5786] ? worker_attach_to_pool+0x370/0x370 [ 434.372225][ T5786] ? assign_work+0x3cc/0x5d0 [ 434.376865][ T5786] worker_thread+0xa5e/0xfe0 [ 434.381531][ T5786] kthread+0x2fa/0x390 [ 434.385640][ T5786] ? pr_cont_work+0x550/0x550 [ 434.390367][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 434.395024][ T5786] ret_from_fork+0x48/0x80 [ 434.399500][ T5786] ? kthread_blkcg+0xd0/0xd0 [ 434.404128][ T5786] ret_from_fork_asm+0x11/0x20 [ 434.408957][ T5786] [ 434.412075][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.429073][ T5786] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 434.443228][ T5786] Bluetooth: hci1: failed to register connection device [ 435.879308][ T8530] (null): rxe_set_mtu: Set mtu to 1024 [ 437.410898][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.7.457'. [ 437.858319][ T8539] loop5: detected capacity change from 0 to 7 [ 437.876932][ T8547] netlink: 'syz.0.458': attribute type 1 has an invalid length. [ 437.920989][ T8539] Dev loop5: unable to read RDB block 7 [ 438.239821][ T8539] loop5: AHDI p2 [ 438.243598][ T8539] loop5: partition table partially beyond EOD, truncated [ 438.289934][ T8547] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.307365][ T8550] netlink: 68 bytes leftover after parsing attributes in process `syz.0.458'. [ 439.234314][ T8558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.380024][ T8558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.413934][ T8530] infiniband syz1: set active [ 439.439876][ T8558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.454125][ T8530] infiniband syz1: added bond0 [ 439.462105][ T8530] syz1: rxe_create_cq: returned err = -12 [ 439.484232][ T8558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.649183][ T8530] infiniband syz1: Couldn't create ib_mad CQ [ 439.664111][ T8530] infiniband syz1: Couldn't open port 1 [ 439.904234][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.910998][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.039730][ T8558] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 440.114462][ T7369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 440.429199][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.461'. [ 441.565736][ T8530] RDS/IB: syz1: added [ 441.676352][ T8530] smc: adding ib device syz1 with port count 1 [ 441.679580][ T7369] usb 1-1: device descriptor read/all, error -71 [ 441.719486][ T8530] smc: ib device syz1 port 1 has pnetid [ 442.511370][ T8585] loop0: detected capacity change from 0 to 32768 [ 442.562107][ T8585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.464 (8585) [ 442.617830][ T8585] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 442.628376][ T8585] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 442.637225][ T8585] BTRFS info (device loop0): setting nodatasum [ 442.643585][ T8585] BTRFS info (device loop0): force zlib compression, level 3 [ 442.651050][ T8585] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 442.660395][ T8585] BTRFS info (device loop0): use lzo compression, level 0 [ 442.667883][ T8585] BTRFS info (device loop0): turning on flush-on-commit [ 442.674854][ T8585] BTRFS info (device loop0): enabling auto defrag [ 442.681786][ T8585] BTRFS info (device loop0): max_inline at 4096 [ 442.688124][ T8585] BTRFS info (device loop0): using free space tree [ 443.722262][ T8585] BTRFS info (device loop0): enabling ssd optimizations [ 445.152553][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 445.164909][ T8587] program syz.0.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.601119][ T8621] geneve2: entered promiscuous mode [ 445.652813][ T8621] geneve2: entered allmulticast mode [ 446.758977][ T8631] trusted_key: syz.7.470 sent an empty control message without MSG_MORE. [ 448.923514][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 448.967947][ T8634] loop5: detected capacity change from 0 to 512 [ 449.004704][ T8634] EXT4-fs: inline encryption not supported [ 449.209162][ T8634] EXT4-fs: Ignoring removed orlov option [ 449.238110][ T8634] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.079500][ T8634] EXT4-fs error (device loop5): ext4_iget_extra_inode:4739: inode #15: comm syz.5.471: corrupted in-inode xattr: e_value size too large [ 450.184611][ T8634] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.471: couldn't read orphan inode 15 (err -117) [ 450.347298][ T8634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.098943][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.776617][ T8659] netlink: 'syz.5.475': attribute type 1 has an invalid length. [ 453.645404][ T1080] Bluetooth: (null): Too short H5 packet [ 453.652783][ T1080] Bluetooth: (null): Invalid header checksum [ 453.688684][ T1080] Bluetooth: (null): Invalid header checksum [ 453.731771][ T1080] Bluetooth: (null): Invalid header checksum [ 453.793394][ T1080] Bluetooth: (null): Invalid header checksum [ 454.014840][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.033284][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.042691][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.085478][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.131341][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 454.139119][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.245823][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.453587][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.709259][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.883763][ T7370] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 456.030074][ T8667] loop0: detected capacity change from 0 to 32768 [ 456.037455][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.146669][ T7370] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 456.158311][ T7370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.171373][ T5084] Bluetooth: hci2: command tx timeout [ 456.178986][ T7370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.189443][ T7370] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 456.211825][ T7370] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 456.221038][ T7370] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 456.222285][ T8667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.469 (8667) [ 456.229349][ T7370] usb 6-1: Manufacturer: syz [ 456.232411][ T7370] usb 6-1: config 0 descriptor?? [ 457.057316][ T8667] BTRFS error (device loop0): open_ctree failed: -4 [ 457.217287][ T5084] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 458.249794][ T5084] Bluetooth: hci2: command tx timeout [ 458.798871][ T7370] usbhid 6-1:0.0: can't add hid device: -71 [ 458.829490][ T8668] chnl_net:caif_netlink_parms(): no params data found [ 458.845970][ T7370] usbhid: probe of 6-1:0.0 failed with error -71 [ 458.921133][ T7370] usb 6-1: USB disconnect, device number 3 [ 461.627869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 461.688543][ T5084] Bluetooth: hci2: command tx timeout [ 462.161034][ T8668] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.229085][ T8668] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.236432][ T8668] bridge_slave_0: entered allmulticast mode [ 462.937803][ T8668] bridge_slave_0: entered promiscuous mode [ 462.958914][ T8668] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.966218][ T8668] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.974777][ T8668] bridge_slave_1: entered allmulticast mode [ 462.982686][ T8668] bridge_slave_1: entered promiscuous mode [ 463.039798][ T8668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.069088][ T8668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.473554][ T8668] team0: Port device team_slave_0 added [ 463.504374][ T8668] team0: Port device team_slave_1 added [ 463.743756][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.766718][ T5084] Bluetooth: hci2: command tx timeout [ 463.774775][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.852569][ T8668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.855029][ T8738] loop7: detected capacity change from 0 to 32768 [ 463.909811][ T8668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.935612][ T8668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.022665][ T8668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.048841][ T8738] Only 4K block size supported! [ 464.064673][ T8738] Mount JFS Failure: -22 [ 464.563441][ T8761] loop7: detected capacity change from 0 to 2048 [ 464.634381][ T8761] EXT4-fs (loop7): #clusters per group too big: 16390 [ 464.671593][ T8765] loop5: detected capacity change from 0 to 128 [ 464.766424][ T8765] qnx6: wrong signature (magic) in superblock #1. [ 465.034658][ T8770] loop5: detected capacity change from 0 to 512 [ 465.105293][ T8770] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 465.150778][ T8770] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 465.167428][ T8770] EXT4-fs (loop5): orphan cleanup on readonly fs [ 465.173844][ T8770] EXT4-fs error (device loop5): ext4_quota_enable:7140: comm syz.5.493: Bad quota inum: 16777219, type: 0 [ 465.223333][ T8668] hsr_slave_0: entered promiscuous mode [ 465.418735][ T8770] EXT4-fs (loop5): Remounting filesystem read-only [ 465.425385][ T8770] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-117, ino=16777219). Please run e2fsck to fix. [ 465.441970][ T8668] hsr_slave_1: entered promiscuous mode [ 465.455767][ T8668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.464875][ T8668] Cannot create hsr debugfs directory [ 466.775918][ T8770] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 467.398231][ T8770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.774090][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.864742][ T8790] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 468.871655][ T8790] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.900897][ T8790] vhci_hcd vhci_hcd.0: Device attached [ 469.224664][ T5783] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 469.778075][ T8793] vhci_hcd: connection reset by peer [ 469.810717][ T8103] vhci_hcd: stop threads [ 469.837233][ T8103] vhci_hcd: release socket [ 469.854304][ T8103] vhci_hcd: disconnect device [ 469.976577][ T8802] loop7: detected capacity change from 0 to 4096 [ 470.522809][ T8668] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 470.649208][ T8806] loop0: detected capacity change from 0 to 4096 [ 470.656602][ T8668] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 470.741462][ T8668] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 470.786917][ T8668] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 470.814411][ T5084] Bluetooth: Unknown LE signaling command 0x09 [ 470.822720][ T5084] Bluetooth: Wrong link type (-22) [ 470.972104][ T8806] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 471.900835][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.942982][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.970657][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.002673][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.018489][ T64] bridge_slave_1: left allmulticast mode [ 472.029488][ T64] bridge_slave_1: left promiscuous mode [ 472.045012][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.084458][ T64] bridge_slave_0: left allmulticast mode [ 472.092528][ T64] bridge_slave_0: left promiscuous mode [ 472.112076][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.188368][ T8830] loop7: detected capacity change from 0 to 16 [ 472.223173][ T64] veth1_macvtap: left promiscuous mode [ 472.230382][ T8830] erofs: (device loop7): z_erofs_parse_cfgs: unidentified algorithms 20, please upgrade kernel [ 472.255426][ T64] veth0_macvtap: left promiscuous mode [ 472.261176][ T64] veth1_vlan: left promiscuous mode [ 472.272208][ T64] veth0_vlan: left promiscuous mode [ 472.567654][ T64] infiniband syz1: set down [ 473.746622][ T8837] loop7: detected capacity change from 0 to 32768 [ 474.330403][ T8837] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 474.555008][ T8837] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 474.630641][ T8837] XFS (loop7): Ending clean mount [ 474.819416][ T5783] vhci_hcd: vhci_device speed not set [ 474.883134][ T7660] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 475.183444][ T8840] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 475.190124][ T8840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 475.198025][ T8840] vhci_hcd vhci_hcd.0: Device attached [ 475.271598][ T8854] vhci_hcd: connection closed [ 475.280299][ T8857] loop7: detected capacity change from 0 to 128 [ 475.301073][ T11] vhci_hcd: stop threads [ 475.332297][ T64] team0 (unregistering): Port device team_slave_1 removed [ 475.340110][ T11] vhci_hcd: release socket [ 475.534817][ T7369] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 475.549991][ T11] vhci_hcd: disconnect device [ 476.409353][ T64] team0 (unregistering): Port device team_slave_0 removed [ 477.731251][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.847636][ T8864] vivid-004: disconnect [ 478.739594][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.825491][ T8861] vivid-004: reconnect [ 478.863902][ T5084] Bluetooth: hci1: failed to read key size for handle 201 [ 478.871514][ T5084] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 478.917648][ T8871] loop0: detected capacity change from 0 to 512 [ 478.974194][ T8871] EXT4-fs: Invalid want_extra_isize 5078 [ 479.204703][ T8873] loop0: detected capacity change from 0 to 1024 [ 479.289054][ T8873] hfsplus: invalid extent max_key_len 0 [ 479.309402][ T8873] hfsplus: failed to load extents file [ 479.688821][ T64] bond0 (unregistering): Released all slaves [ 479.689951][ T2992] smc: removing ib device syz1 [ 479.952647][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 479.964290][ T27] infiniband syz1: ib_query_port failed (-19) [ 480.264128][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 480.352900][ T8] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 480.432341][ T8] usb 1-1: config 0 has no interface number 0 [ 480.439216][ T8] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 480.652217][ T7369] vhci_hcd: vhci_device speed not set [ 481.085492][ T8887] loop7: detected capacity change from 0 to 16 [ 481.118496][ T8668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.185740][ T8887] erofs: (device loop7): mounted with root inode @ nid 36. [ 481.270710][ T8887] erofs: (device loop7): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 481.292634][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.319305][ T8] usb 1-1: config 0 descriptor?? [ 481.375449][ T8668] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.430785][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.438252][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.456119][ T8] viperboard 1-1:0.143: version 0.00 found at bus 001 address 007 [ 481.518086][ T8894] loop5: detected capacity change from 0 to 512 [ 481.557399][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.564695][ T8335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.578981][ T8894] EXT4-fs: old and new quota format mixing [ 481.589767][ T8] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 481.624982][ T8] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 481.868789][ T8] usb 1-1: USB disconnect, device number 7 [ 481.879845][ T8668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.537932][ T8915] loop5: detected capacity change from 0 to 4096 [ 483.715849][ T8919] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 483.813073][ T8915] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 484.016010][ T8915] Remounting filesystem read-only [ 484.231872][ T6687] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 484.265935][ T6687] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 484.347120][ T8920] loop0: detected capacity change from 0 to 4096 [ 484.424743][ T8924] loop5: detected capacity change from 0 to 4096 [ 484.439024][ T8668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.471754][ T8924] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 484.535887][ T8924] ntfs3: loop5: Inode r=19 is not in use! [ 484.553447][ T8924] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 484.743914][ T8920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.555402][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.628013][ T8668] veth0_vlan: entered promiscuous mode [ 486.634680][ T8956] loop5: detected capacity change from 0 to 256 [ 486.663807][ T8668] veth1_vlan: entered promiscuous mode [ 486.752689][ T8668] veth0_macvtap: entered promiscuous mode [ 486.807345][ T8956] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012a20, chksum : 0xf9fb3df0, utbl_chksum : 0xe619d30d) [ 486.854351][ T8668] veth1_macvtap: entered promiscuous mode [ 486.938089][ T28] audit: type=1800 audit(1784044158.883:46): pid=8956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.529" name="file2" dev="loop5" ino=1048636 res=0 errno=0 [ 486.949494][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.970173][ T7660] cgroup: fork rejected by pids controller in /syz7 [ 487.011180][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.022095][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.032696][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.075747][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.113087][ T8668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.135202][ T8668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.314889][ T8668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.424380][ T8668] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.731181][ T8668] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.797720][ T8668] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.897762][ T8668] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.963366][ T8971] loop0: detected capacity change from 0 to 4096 [ 488.274715][ T8975] loop5: detected capacity change from 0 to 256 [ 488.473145][ T8971] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 488.587196][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.683015][ T8971] ntfs3: loop0: Failed to load $Extend (-22). [ 488.831934][ T8971] ntfs3: loop0: Failed to initialize $Extend. [ 488.850574][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.937061][ T5084] Bluetooth: hci4: Malformed LE Event: 0x1d [ 489.084137][ T8986] loop5: detected capacity change from 0 to 736 [ 489.095632][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.199436][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.250890][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.395546][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.705292][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.743378][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.860641][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.886832][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.901197][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.921068][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.936146][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 489.944925][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.054087][ T8994] loop5: detected capacity change from 0 to 8192 [ 490.192554][ T9001] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 490.232851][ T9000] loop0: detected capacity change from 0 to 256 [ 492.009314][ T5786] Bluetooth: hci0: command tx timeout [ 494.092480][ T5786] Bluetooth: hci0: command tx timeout [ 494.243145][ T5786] Bluetooth: hci4: unexpected event for opcode 0x200d [ 494.288332][ T8995] chnl_net:caif_netlink_parms(): no params data found [ 494.316195][ T9034] loop0: detected capacity change from 0 to 128 [ 494.382570][ T8164] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.385276][ T9036] loop5: detected capacity change from 0 to 1024 [ 494.486782][ T9036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 494.501963][ T9036] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.527870][ T9036] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.549: corrupted xattr block 128: bad e_name length [ 494.730989][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 494.748389][ T9041] loop0: detected capacity change from 0 to 4096 [ 494.759161][ T9041] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 494.967224][ T9041] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 495.017498][ T8995] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.031437][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.039053][ T8995] bridge_slave_0: entered allmulticast mode [ 495.047676][ T8995] bridge_slave_0: entered promiscuous mode [ 495.057805][ T8995] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.065469][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.073515][ T8995] bridge_slave_1: entered allmulticast mode [ 495.094966][ T8995] bridge_slave_1: entered promiscuous mode [ 495.163160][ T9041] ntfs3: loop0: Failed to load $Secure (-22). [ 495.179402][ T8995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.208938][ T9041] ntfs3: loop0: Failed to initialize $Secure (-22). [ 495.262719][ T8995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.349579][ T8995] team0: Port device team_slave_0 added [ 496.330078][ T5786] Bluetooth: hci0: command tx timeout [ 496.449442][ T8995] team0: Port device team_slave_1 added [ 496.685805][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.698213][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.704073][ T9060] loop5: detected capacity change from 0 to 7 [ 496.745321][ T9060] Dev loop5: unable to read RDB block 7 [ 496.753326][ T8995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.761226][ T9060] loop5: AHDI p2 [ 496.778294][ T9060] loop5: partition table partially beyond EOD, truncated [ 496.893064][ T9060] netlink: 68 bytes leftover after parsing attributes in process `syz.5.555'. [ 496.902286][ T11] hsr_slave_0: left promiscuous mode [ 496.916497][ T11] hsr_slave_1: left promiscuous mode [ 496.917652][ T9064] loop0: detected capacity change from 0 to 64 [ 496.928645][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.946247][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.956346][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.996744][ T11] bridge_slave_1: left allmulticast mode [ 497.014612][ T11] bridge_slave_1: left promiscuous mode [ 497.023999][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.083064][ T11] bridge_slave_0: left allmulticast mode [ 497.100922][ T11] bridge_slave_0: left promiscuous mode [ 497.106807][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.174134][ T11] veth1_macvtap: left promiscuous mode [ 497.179774][ T11] veth0_macvtap: left promiscuous mode [ 497.195864][ T11] veth1_vlan: left promiscuous mode [ 497.206723][ T11] veth0_vlan: left promiscuous mode [ 497.260391][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 497.582817][ T27] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 497.592365][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.601155][ T27] usb 6-1: Product: syz [ 497.605587][ T27] usb 6-1: Manufacturer: syz [ 497.610547][ T27] usb 6-1: SerialNumber: syz [ 497.621559][ T9076] syz.0.560 uses obsolete (PF_INET,SOCK_PACKET) [ 497.628768][ T27] usb 6-1: config 0 descriptor?? [ 497.643486][ T27] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 004 [ 498.271795][ T27] (null): failure reading functionality [ 498.332873][ T5786] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 498.340632][ T27] i2c i2c-1: connected i2c-tiny-usb device [ 498.345837][ T5786] Bluetooth: hci4: Injecting HCI hardware error event [ 498.363590][ T5786] Bluetooth: hci4: hardware error 0x00 [ 498.401760][ T5084] Bluetooth: hci0: command tx timeout [ 498.631748][ T9080] loop8: detected capacity change from 0 to 64 [ 499.980829][ T9082] loop8: detected capacity change from 0 to 32768 [ 500.057724][ T9082] [ 500.057724][ T9082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 500.057724][ T9082] [ 500.148475][ T9082] ialloc: diAlloc returned -5! [ 500.301487][ T8668] [ 500.301487][ T8668] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 500.301487][ T8668] [ 500.357899][ T8668] [ 500.357899][ T8668] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 500.357899][ T8668] [ 500.480673][ T5786] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 500.506229][ T11] team0 (unregistering): Port device team_slave_1 removed [ 500.726043][ T11] team0 (unregistering): Port device team_slave_0 removed [ 500.908737][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.185487][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.291718][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.298210][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.107654][ T11] bond0 (unregistering): Released all slaves [ 502.286770][ T8995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.294849][ T8995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.326058][ T8995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.337432][ T9061] netlink: 'syz.5.555': attribute type 1 has an invalid length. [ 502.377367][ T9061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.393701][ T9060] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 502.461234][ T27] usb 6-1: USB disconnect, device number 4 [ 502.517112][ T8995] hsr_slave_0: entered promiscuous mode [ 502.573119][ T9095] loop5: detected capacity change from 0 to 256 [ 502.594116][ T8995] hsr_slave_1: entered promiscuous mode [ 502.637343][ T9095] FAT-fs (loop5): Directory bread(block 64) failed [ 502.656368][ T9097] loop8: detected capacity change from 0 to 512 [ 502.668805][ T9095] FAT-fs (loop5): Directory bread(block 65) failed [ 502.688125][ T9095] FAT-fs (loop5): Directory bread(block 66) failed [ 502.734151][ T9095] FAT-fs (loop5): Directory bread(block 67) failed [ 502.757047][ T9095] FAT-fs (loop5): Directory bread(block 68) failed [ 502.780787][ T9095] FAT-fs (loop5): Directory bread(block 69) failed [ 502.783095][ T9097] EXT4-fs error (device loop8): ext4_orphan_get:1430: comm syz.8.570: bad orphan inode 11862016 [ 502.819568][ T9095] FAT-fs (loop5): Directory bread(block 70) failed [ 502.846667][ T9102] loop0: detected capacity change from 0 to 128 [ 502.850234][ T9095] FAT-fs (loop5): Directory bread(block 71) failed [ 502.878172][ T9097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 502.880195][ T9095] FAT-fs (loop5): Directory bread(block 72) failed [ 502.928986][ T9095] FAT-fs (loop5): Directory bread(block 73) failed [ 502.957086][ T9097] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.024324][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 504.437559][ T9112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 504.768005][ T8995] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 504.781795][ T8995] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 504.849070][ T8995] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 505.012962][ T8995] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 505.965935][ T9130] netlink: 'syz.8.581': attribute type 10 has an invalid length. [ 506.156868][ T8995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.195328][ T9133] loop5: detected capacity change from 0 to 128 [ 506.245989][ T8995] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.252836][ T9134] loop8: detected capacity change from 0 to 512 [ 506.413665][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.420938][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.463050][ T9134] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 507.105365][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.112669][ T8103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.175117][ T9139] loop0: detected capacity change from 0 to 128 [ 507.550983][ T9134] EXT4-fs error (device loop8): ext4_quota_enable:7144: inode #3: comm syz.8.586: iget: checksum invalid [ 507.770403][ T9134] EXT4-fs error (device loop8): ext4_quota_enable:7147: comm syz.8.586: Bad quota inode: 3, type: 0 [ 507.828547][ T9134] EXT4-fs warning (device loop8): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 508.532540][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.661507][ T9151] loop5: detected capacity change from 0 to 64 [ 508.958408][ T8995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.069599][ T9161] comedi comedi1: dac02: I/O port conflict (0x4,8) [ 509.533489][ T9171] loop8: detected capacity change from 0 to 256 [ 510.085416][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.601'. [ 510.105292][ T9190] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 510.263525][ T8995] veth0_vlan: entered promiscuous mode [ 510.293393][ T8995] veth1_vlan: entered promiscuous mode [ 510.382530][ T8995] veth0_macvtap: entered promiscuous mode [ 510.421531][ T8995] veth1_macvtap: entered promiscuous mode [ 510.486575][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.498538][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.515164][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.527757][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.547711][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.588015][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.620717][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.650434][ T8995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.663926][ T8995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.702295][ T8995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.743383][ T8995] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.776100][ T8995] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.800931][ T8995] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.809723][ T8995] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.971183][ T9208] loop5: detected capacity change from 0 to 256 [ 511.028188][ T9193] loop8: detected capacity change from 0 to 32768 [ 511.076515][ T9193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.602 (9193) [ 511.129652][ T7228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.153754][ T7228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.166327][ T9193] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 511.200725][ T9193] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 511.232507][ T9193] BTRFS info (device loop8): metadata ratio 2 [ 511.238984][ T9193] BTRFS info (device loop8): force zlib compression, level 3 [ 511.252363][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.269940][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.277446][ T9193] BTRFS info (device loop8): enabling auto defrag [ 511.303215][ T9193] BTRFS info (device loop8): max_inline at 0 [ 511.334709][ T9193] BTRFS info (device loop8): using free space tree [ 511.444018][ T9222] loop7: detected capacity change from 0 to 64 [ 511.576767][ T9193] BTRFS info (device loop8): auto enabling async discard [ 511.623250][ T9222] Bad inode number on dev loop7: 150994946 is out of range [ 511.803968][ T8668] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 512.166096][ T9247] Cannot find set identified by id 0 to match [ 512.189029][ T9246] misc userio: The device must be registered before sending interrupts [ 512.416733][ T5786] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 512.569080][ T9256] loop8: detected capacity change from 0 to 512 [ 512.668055][ T9256] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.621: attempt to clear invalid blocks 2 len 1 [ 512.793196][ T9256] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 512.943923][ T9256] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.621: invalid indirect mapped block 1819239214 (level 0) [ 512.976953][ T9256] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.621: invalid indirect mapped block 1819239214 (level 1) [ 513.092637][ T9256] EXT4-fs (loop8): 1 truncate cleaned up [ 513.114593][ T9256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.173737][ T9256] capability: warning: `syz.8.621' uses 32-bit capabilities (legacy support in use) [ 513.186291][ T9271] loop0: detected capacity change from 0 to 512 [ 513.324610][ T9271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.379223][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.418800][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.962347][ T9302] loop8: detected capacity change from 0 to 128 [ 513.966389][ T9300] loop0: detected capacity change from 0 to 512 [ 515.173726][ T9300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.199510][ T9300] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.368325][ T9300] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 3391 (only 1 groups) [ 516.538606][ T9318] loop7: detected capacity change from 0 to 16 [ 516.545420][ T9317] loop8: detected capacity change from 0 to 512 [ 516.572888][ T9317] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 516.594057][ T9317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 516.598629][ T9318] erofs: (device loop7): mounted with root inode @ nid 36. [ 516.658858][ T9317] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.737218][ T9318] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 516.756764][ T9317] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.815551][ T9309] loop5: detected capacity change from 0 to 32768 [ 516.845063][ T9309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.633 (9309) [ 516.871509][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.969376][ T9309] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 517.013865][ T9309] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 517.032638][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.041845][ T9309] BTRFS info (device loop5): setting nodatasum [ 517.048192][ T9309] BTRFS info (device loop5): force zlib compression, level 3 [ 517.094265][ T9309] BTRFS info (device loop5): turning on flush-on-commit [ 517.135082][ T9309] BTRFS info (device loop5): max_inline at 4096 [ 517.193799][ T9309] BTRFS info (device loop5): using free space tree [ 517.617062][ T9309] BTRFS error (device loop5): open_ctree failed: -4 [ 518.132813][ T9326] loop7: detected capacity change from 0 to 32768 [ 518.199994][ T968] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 518.251001][ T5843] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 518.340274][ T9326] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.420292][ T968] usb 6-1: Using ep0 maxpacket: 16 [ 518.449973][ T5843] usb 9-1: Using ep0 maxpacket: 8 [ 518.457680][ T5843] usb 9-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 518.471370][ T5843] usb 9-1: config 0 interface 0 has no altsetting 0 [ 518.478078][ T5843] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 518.487225][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.492922][ T968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 518.498914][ T5843] usb 9-1: config 0 descriptor?? [ 518.556456][ T968] usb 6-1: config 251 has an invalid interface number: 33 but max is 0 [ 518.585729][ T9326] XFS (loop7): Ending clean mount [ 518.598147][ T968] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 518.615242][ T968] usb 6-1: config 251 has no interface number 0 [ 518.625604][ T968] usb 6-1: config 251 interface 33 has no altsetting 0 [ 518.643639][ T9326] XFS (loop7): Quotacheck needed: Please wait. [ 518.667202][ T968] usb 6-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90 [ 518.686850][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.700190][ T968] usb 6-1: Product: syz [ 518.738556][ T968] usb 6-1: Manufacturer: syz [ 518.745965][ T968] usb 6-1: SerialNumber: syz [ 518.760943][ T9326] XFS (loop7): Quotacheck: Done. [ 518.936845][ T5843] lenovo 0003:17EF:60A4.0001: unknown main item tag 0x4 [ 518.949440][ T8995] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.954318][ T5843] lenovo 0003:17EF:60A4.0001: unknown main item tag 0xd [ 518.987256][ T968] qmi_wwan: probe of 6-1:251.33 failed with error -22 [ 519.013300][ T9350] loop0: detected capacity change from 0 to 32768 [ 519.028489][ T968] usb 6-1: USB disconnect, device number 5 [ 519.068853][ T5843] lenovo 0003:17EF:60A4.0001: hidraw0: USB HID v0.7f Device [HID 17ef:60a4] on usb-dummy_hcd.8-1/input0 [ 519.138380][ T5843] usb 9-1: USB disconnect, device number 2 [ 519.309470][ T9350] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 519.355555][ T9377] fido_id[9377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 519.544317][ T9391] loop7: detected capacity change from 0 to 128 [ 519.618752][ T9350] XFS (loop0): Ending clean mount [ 521.583894][ T9399] loop8: detected capacity change from 0 to 128 [ 522.407170][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 524.803388][ T9429] loop8: detected capacity change from 0 to 164 [ 524.931335][ T9429] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 525.205680][ T9414] loop5: detected capacity change from 0 to 32768 [ 525.285966][ T9415] loop7: detected capacity change from 0 to 32768 [ 525.402381][ T9415] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 525.519300][ T9445] can0: slcan on ttyS3. [ 525.651765][ T9415] XFS (loop7): Ending clean mount [ 525.854772][ T8995] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 526.070813][ T9440] can0 (unregistered): slcan off ttyS3. [ 526.123869][ T9456] loop5: detected capacity change from 0 to 1024 [ 526.456433][ T9435] loop8: detected capacity change from 0 to 32768 [ 526.876320][ T9468] loop7: detected capacity change from 0 to 128 [ 526.964216][ T9435] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 528.917734][ T9435] XFS (loop8): AIL initialisation failed: error -12 [ 529.160334][ T9435] XFS (loop8): log mount failed [ 529.706143][ T9472] loop0: detected capacity change from 0 to 4096 [ 531.441172][ T9491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 531.603249][ T9495] loop8: detected capacity change from 0 to 1024 [ 531.631101][ T9495] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.658539][ T9495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 531.752504][ T9495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 531.835072][ T9495] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.067222][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 532.811500][ T9514] loop5: detected capacity change from 0 to 512 [ 532.903490][ T9514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.155580][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.461871][ T9518] loop0: detected capacity change from 0 to 4096 [ 533.639817][ T9510] loop8: detected capacity change from 0 to 32768 [ 534.547217][ T9546] loop7: detected capacity change from 0 to 128 [ 534.561036][ T9510] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 534.611071][ T9546] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 534.692346][ T9553] loop5: detected capacity change from 0 to 512 [ 534.706275][ T9546] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 534.725556][ T9510] XFS (loop8): Ending clean mount [ 534.731175][ T9553] EXT4-fs: Ignoring removed orlov option [ 534.735237][ T9510] XFS (loop8): Quotacheck needed: Please wait. [ 534.770218][ T9553] EXT4-fs: Ignoring removed bh option [ 534.781821][ T9546] ext2 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.813215][ T9518] ntfs3: loop0: failed to convert "0080" to cp860 [ 534.872255][ T9518] ntfs3: loop0: failed to convert name for inode 1e. [ 534.879240][ T9553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.888856][ T9510] XFS (loop8): Quotacheck: Done. [ 534.932505][ T9546] EXT4-fs warning (device loop7): verify_group_input:169: Last group not full [ 534.952783][ T9553] EXT4-fs (loop5): orphan cleanup on readonly fs [ 535.080232][ T9553] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.668: bg 0: block 248: padding at end of block bitmap is not set [ 535.180389][ T9553] Quota error (device loop5): write_blk: dquota write failed [ 535.189502][ T9553] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 535.192802][ T8995] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.219687][ T8668] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 535.240687][ T9553] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.668: Failed to acquire dquot type 1 [ 535.276825][ T9553] EXT4-fs (loop5): 1 truncate cleaned up [ 535.315777][ T9553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 535.510281][ T9553] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 535.517484][ T9565] loop7: detected capacity change from 0 to 128 [ 535.569428][ T9553] EXT4-fs error (device loop5): __ext4_remount:6756: comm syz.5.668: Abort forced by user [ 535.587102][ T9553] EXT4-fs (loop5): Remounting filesystem read-only [ 535.613346][ T9553] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 535.629441][ T9553] ext4 filesystem being remounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 535.658838][ T9553] EXT4-fs: Ignoring removed orlov option [ 535.685786][ T9553] EXT4-fs: Ignoring removed bh option [ 535.702538][ T9553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 535.736956][ T9563] loop0: detected capacity change from 0 to 4096 [ 535.745327][ T9553] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 535.802286][ T9563] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 535.849321][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.903161][ T9571] loop7: detected capacity change from 0 to 4096 [ 535.975137][ T9571] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512). [ 535.976765][ T9563] ntfs3: loop0: Failed to load $Extend (-2). [ 536.016113][ T9563] ntfs3: loop0: Failed to initialize $Extend. [ 536.783988][ T9582] loop7: detected capacity change from 0 to 4096 [ 536.914167][ T9587] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.977798][ T9589] loop8: detected capacity change from 0 to 64 [ 537.501864][ T9596] tipc: Started in network mode [ 537.507317][ T9596] tipc: Node identity 2d57840000000000002e, cluster identity 4711 [ 538.120112][ T5843] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 538.372071][ T5843] usb 6-1: Using ep0 maxpacket: 8 [ 538.519430][ T5843] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 538.678322][ T5843] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 538.764415][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.831030][ T5843] usb 6-1: Product: syz [ 538.835284][ T5843] usb 6-1: Manufacturer: syz [ 538.900095][ T5843] usb 6-1: SerialNumber: syz [ 538.938021][ T5843] usb 6-1: config 0 descriptor?? [ 538.967014][ T5843] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 539.008088][ T5843] usb 6-1: setting power ON [ 539.041535][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 539.095401][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 539.139530][ T5843] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 539.165574][ T9619] set_capacity_and_notify: 2 callbacks suppressed [ 539.165623][ T9619] loop8: detected capacity change from 0 to 4096 [ 539.178939][ T5843] usb 6-1: media controller created [ 539.228986][ T9601] dvb-usb: bulk message failed: -22 (3/0) [ 539.273740][ T9601] dvb-usb: bulk message failed: -22 (3/0) [ 539.301799][ T9625] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 539.305972][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 539.431096][ T5843] usb 6-1: selecting invalid altsetting 6 [ 539.437639][ T5843] usb 6-1: digital interface selection failed (-22) [ 539.453413][ T9619] NILFS (loop8): bad btree node (ino=7, blocknr=3335): level = 31, flags = 0xf4, nchildren = 0 [ 539.471417][ T5843] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 539.491166][ T9619] NILFS (loop8): error -5 preparing GC: cannot read source blocks [ 539.524537][ T5843] usb 6-1: setting power OFF [ 539.550057][ T5843] dvb-usb: bulk message failed: -22 (2/0) [ 539.556346][ T5843] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 539.580791][ T9623] loop0: detected capacity change from 0 to 4096 [ 539.594092][ T5843] (NULL device *): no alternate interface [ 539.655315][ T9623] EXT4-fs: inline encryption not supported [ 539.717925][ T5843] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 539.770268][ T5843] usb 6-1: USB disconnect, device number 6 [ 539.876047][ T9633] loop8: detected capacity change from 0 to 16 [ 539.897024][ T9623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 539.946758][ T9633] erofs: (device loop8): mounted with root inode @ nid 36. [ 540.036632][ T9633] bio_check_eod: 2 callbacks suppressed [ 540.036652][ T9633] syz.8.687: attempt to access beyond end of device [ 540.036652][ T9633] loop8: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 540.051242][ T9623] EXT4-fs (loop0): Test dummy encryption mode enabled [ 540.157396][ T9633] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 540.211343][ T28] audit: type=1800 audit(1784044212.221:47): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.687" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 540.287771][ T9623] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 540.300238][ T9623] System zones: 0-5 [ 540.400787][ T9623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.542180][ T9622] loop7: detected capacity change from 0 to 32768 [ 540.561006][ T9655] loop8: detected capacity change from 0 to 64 [ 540.607338][ T9622] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 540.630030][ T7369] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 540.817421][ T9622] XFS (loop7): Ending clean mount [ 540.862788][ T7369] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 540.895183][ T7369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.997602][ T7369] usb 6-1: config 0 descriptor?? [ 541.037212][ T7369] cp210x 6-1:0.0: cp210x converter detected [ 541.078082][ T8995] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 541.102640][ T9673] netlink: 'syz.8.690': attribute type 2 has an invalid length. [ 541.110904][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.111681][ T9673] netlink: 14 bytes leftover after parsing attributes in process `syz.8.690'. [ 541.523386][ T9676] loop0: detected capacity change from 0 to 1024 [ 541.574818][ T9676] EXT4-fs: Ignoring removed bh option [ 541.587845][ T7369] usb 6-1: cp210x converter now attached to ttyUSB0 [ 541.691157][ T9676] EXT4-fs: Ignoring removed bh option [ 541.709142][ T9676] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 541.789285][ T7369] usb 6-1: USB disconnect, device number 7 [ 541.878346][ T7369] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 541.942921][ T9685] loop7: detected capacity change from 0 to 128 [ 542.840288][ T7369] cp210x 6-1:0.0: device disconnected [ 543.586256][ T9695] loop5: detected capacity change from 0 to 1024 [ 543.594307][ T9676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.716214][ T9695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 543.774287][ T9695] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 543.867005][ T9693] loop8: detected capacity change from 0 to 32768 [ 543.895349][ T9695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 543.946961][ T9693] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.703 (9693) [ 543.965800][ T9695] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.984697][ T9693] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 543.999509][ T9693] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 544.020062][ T9693] BTRFS info (device loop8): using free space tree [ 544.175305][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.257077][ T9693] BTRFS info (device loop8): enabling ssd optimizations [ 544.307301][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 544.320030][ T9693] BTRFS info (device loop8): auto enabling async discard [ 544.491971][ T9727] loop7: detected capacity change from 0 to 512 [ 544.602221][ T9731] loop5: detected capacity change from 0 to 128 [ 544.630017][ T9727] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 544.646530][ T9727] UDF-fs: Scanning with blocksize 512 failed [ 544.813762][ T9727] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 544.821481][ T9727] UDF-fs: Scanning with blocksize 1024 failed [ 544.828411][ T9727] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 544.836308][ T9727] UDF-fs: Scanning with blocksize 2048 failed [ 544.843872][ T9727] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 545.084638][ T9727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.681376][ T8668] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 546.210227][ T9745] tipc: Started in network mode [ 546.215191][ T9745] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 546.245021][ T9745] tipc: Enabling of bearer rejected, failed to enable media [ 546.496699][ T9751] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 547.945054][ T9760] loop7: detected capacity change from 0 to 4096 [ 548.001836][ T9760] NILFS (loop7): invalid segment: Checksum error in segment payload [ 548.024995][ T9760] NILFS (loop7): trying rollback from an earlier position [ 548.126907][ T9760] NILFS (loop7): recovery complete [ 548.190437][ T9767] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 548.208119][ T9746] loop5: detected capacity change from 0 to 32768 [ 548.316036][ T9746] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 548.468257][ T9775] loop0: detected capacity change from 0 to 1024 [ 548.482890][ T9775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.559478][ T9775] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 548.588073][ T9746] XFS (loop5): Ending clean mount [ 548.619634][ T9746] XFS (loop5): Quotacheck needed: Please wait. [ 548.743819][ T9746] XFS (loop5): Quotacheck: Done. [ 548.788582][ T9775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 548.800958][ T9775] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.857987][ T9790] loop7: detected capacity change from 0 to 128 [ 549.165557][ T6687] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 549.896110][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 550.348095][ T9799] loop5: detected capacity change from 0 to 128 [ 551.692537][ T9806] loop8: detected capacity change from 0 to 4096 [ 551.799676][ T9806] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 551.821241][ T9806] ntfs3: loop8: Failed to initialize $Extend/$ObjId. [ 551.927980][ T9813] loop5: detected capacity change from 0 to 2048 [ 552.025656][ T9813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.072037][ T7228] ntfs3: loop8: ino=3, ntfs3_write_inode failed, -22. [ 552.090100][ T9813] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.101960][ T8668] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 552.108540][ T8668] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 552.116925][ T8668] ntfs3: loop8: ino=3, ntfs_set_state failed, -22. [ 552.123767][ T7228] ntfs3: loop8: ino=3, ntfs3_write_inode failed, -22. [ 552.240705][ T9821] loop8: detected capacity change from 0 to 64 [ 552.364812][ T6687] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.585979][ T9829] loop8: detected capacity change from 0 to 65 [ 552.606208][ T9801] loop7: detected capacity change from 0 to 32768 [ 552.627029][ T9829] BFS-fs: bfs_fill_super(): NOTE: filesystem loop8 was created with 512 inodes, the real maximum is 511, mounting anyway [ 552.653585][ T9801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.713 (9801) [ 552.730115][ T9801] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 552.769051][ T9801] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 552.781002][ T9801] BTRFS info (device loop7): force clearing of disk cache [ 552.806500][ T9818] loop0: detected capacity change from 0 to 4096 [ 552.813803][ T9801] BTRFS info (device loop7): metadata ratio 0 [ 552.833934][ T9801] BTRFS info (device loop7): enabling disk space caching [ 552.854242][ T9801] BTRFS info (device loop7): disk space caching is enabled [ 552.876440][ T5822] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 552.954883][ T9839] loop8: detected capacity change from 0 to 512 [ 552.978924][ T9839] EXT4-fs: Ignoring removed bh option [ 553.044540][ T9839] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 553.084752][ T9801] BTRFS info (device loop7): enabling ssd optimizations [ 553.101166][ T5822] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 553.125864][ T9801] BTRFS info (device loop7): auto enabling async discard [ 553.141515][ T5822] usb 6-1: config 0 has no interface number 0 [ 553.180280][ T5822] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.192247][ T9839] EXT4-fs error (device loop8): ext4_iget_extra_inode:4739: inode #15: comm syz.8.720: corrupted in-inode xattr: e_value size too large [ 553.209594][ T9801] BTRFS info (device loop7): rebuilding free space tree [ 553.252545][ T5822] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.277803][ T9801] BTRFS info (device loop7): disabling free space tree [ 553.289927][ T5822] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 553.299440][ T9839] EXT4-fs error (device loop8): ext4_orphan_get:1409: comm syz.8.720: couldn't read orphan inode 15 (err -117) [ 553.302753][ T9818] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 553.328259][ T9801] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 553.344037][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.359466][ T9839] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.384461][ T9801] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 553.396605][ T5822] usb 6-1: config 0 descriptor?? [ 553.516425][ T9818] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 553.606082][ T8995] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.837984][ T8668] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.871955][ T5822] logitech-djreceiver 0003:046D:C534.0002: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.5-1/input8 [ 553.975550][ T8164] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop7 scanned by udevd (8164) [ 554.170483][ T7369] usb 6-1: USB disconnect, device number 8 [ 554.179168][ T9818] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 555.001606][ T5822] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 555.039579][ T9862] fido_id[9862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 555.269977][ T5822] usb 9-1: Using ep0 maxpacket: 16 [ 555.281614][ T5822] usb 9-1: config 0 interface 0 has no altsetting 0 [ 555.298900][ T5822] usb 9-1: New USB device found, idVendor=0eef, idProduct=480d, bcdDevice= 0.00 [ 555.314818][ T7228] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 555.331895][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.344055][ T5777] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 555.376280][ T5822] usb 9-1: config 0 descriptor?? [ 555.429948][ T5777] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 555.473505][ T9874] loop5: detected capacity change from 0 to 128 [ 555.518185][ T5777] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 555.555454][ T8335] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 555.900114][ T5843] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 556.129993][ T5843] usb 8-1: Using ep0 maxpacket: 32 [ 556.158196][ T5822] hid-generic 0003:0EEF:480D.0003: unknown main item tag 0x3 [ 556.284397][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.321135][ T5822] hid-generic 0003:0EEF:480D.0003: ignoring exceeding usage max [ 556.372644][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.433840][ T5843] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 556.467325][ T5822] hid-generic 0003:0EEF:480D.0003: hidraw0: USB HID v0.81 Device [HID 0eef:480d] on usb-dummy_hcd.8-1/input0 [ 556.521474][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.581319][ T5843] usb 8-1: config 0 descriptor?? [ 556.615354][ T5822] usb 9-1: USB disconnect, device number 3 [ 556.661118][ T5843] hub 8-1:0.0: USB hub found [ 556.809773][ T9884] fido_id[9884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 556.872605][ T5843] hub 8-1:0.0: 1 port detected [ 556.883373][ T9889] loop5: detected capacity change from 0 to 64 [ 557.105154][ T5843] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 557.120167][ T5843] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 557.185463][ T5843] usbhid 8-1:0.0: can't add hid device: -71 [ 557.191714][ T5843] usbhid: probe of 8-1:0.0 failed with error -71 [ 557.231430][ T5843] usb 8-1: USB disconnect, device number 3 [ 557.490123][ T5822] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 557.620017][ T27] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 557.627987][ T968] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 557.689072][ T5822] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 557.712422][ T5822] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.743150][ T5822] usb 9-1: config 2 interface 0 has no altsetting 0 [ 557.750124][ T9914] loop7: detected capacity change from 0 to 128 [ 557.778637][ T5822] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 557.950727][ T968] usb 6-1: Using ep0 maxpacket: 32 [ 557.951458][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.969097][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 558.151718][ T968] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 558.184856][ T27] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.214813][ T968] usb 6-1: config 0 has no interface number 0 [ 558.302973][ T968] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 558.328342][ T27] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.418684][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.455018][ T27] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 558.530966][ T968] usb 6-1: Product: syz [ 558.564591][ T968] usb 6-1: Manufacturer: syz [ 558.654434][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 558.663414][ T968] usb 6-1: SerialNumber: syz [ 558.669675][ T27] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 558.705651][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.957287][ T968] usb 6-1: config 0 descriptor?? [ 558.975496][ T27] usb 1-1: config 0 descriptor?? [ 558.987819][ T5822] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 558.999985][ T5822] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 559.007413][ T5822] elo 0003:04E7:0009.0004: item fetching failed at offset 4/5 [ 559.016423][ T5822] elo 0003:04E7:0009.0004: parse failed [ 559.022365][ T5822] elo: probe of 0003:04E7:0009.0004 failed with error -22 [ 559.027507][ T968] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 559.114438][ T968] usb 6-1: selecting invalid altsetting 1 [ 559.153796][ T968] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 559.196258][ T5783] usb 9-1: USB disconnect, device number 4 [ 559.233194][ T968] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 559.272969][ T968] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 559.283118][ T968] usb 6-1: media controller created [ 559.355678][ T968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.449544][ T968] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 559.471302][ T968] zl10353_read_register: readreg error (reg=127, ret==-71) [ 559.494218][ T968] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 559.550453][ T27] hid-alps 0003:044E:120C.0005: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.0-1/input0 [ 559.644607][ T968] usb 6-1: USB disconnect, device number 9 [ 559.750188][ T9940] loop7: detected capacity change from 0 to 128 [ 559.817405][ T5822] usb 1-1: USB disconnect, device number 8 [ 560.884530][ T9952] loop5: detected capacity change from 0 to 64 [ 561.146440][ T5843] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 561.384762][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 561.411874][ T5843] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 561.431357][ T5843] usb 9-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 561.458769][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.522040][ T5843] usb 9-1: config 0 descriptor?? [ 561.590156][ T9971] loop7: detected capacity change from 0 to 2048 [ 561.708259][ T9974] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 561.795203][ T9978] loop0: detected capacity change from 0 to 256 [ 561.869797][ T9978] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 562.029652][ T5843] betop 0003:20BC:5500.0006: unknown main item tag 0x7 [ 562.043217][ T5843] betop 0003:20BC:5500.0006: unknown main item tag 0x0 [ 562.076415][ T5843] betop 0003:20BC:5500.0006: unknown main item tag 0x1 [ 562.088392][ T5843] betop 0003:20BC:5500.0006: unknown main item tag 0xd [ 562.100719][ T5843] betop 0003:20BC:5500.0006: hidraw0: USB HID v0.77 Device [HID 20bc:5500] on usb-dummy_hcd.8-1/input0 [ 562.140029][ T5843] betop 0003:20BC:5500.0006: no inputs found [ 562.182492][ T28] audit: type=1800 audit(1784044234.191:48): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.742" name="file2" dev="loop0" ino=1048683 res=0 errno=0 [ 562.247989][ T9990] loop5: detected capacity change from 0 to 512 [ 562.270415][ T9990] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 562.300487][ T9990] UDF-fs: Scanning with blocksize 512 failed [ 562.337158][ T968] usb 9-1: USB disconnect, device number 5 [ 562.356877][ T9990] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 562.385590][ T9990] UDF-fs: Scanning with blocksize 1024 failed [ 562.432803][ T9990] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 562.460070][ T9990] UDF-fs: Scanning with blocksize 2048 failed [ 562.482227][ T9990] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 562.522381][ T9990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.726243][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.732889][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.745023][ T7370] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 562.849089][T10003] loop0: detected capacity change from 0 to 128 [ 562.973602][ T7370] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 563.139894][ T7370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.209375][ T7370] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.382365][ T7370] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 564.171614][ T7370] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 564.189921][ T7370] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.199115][T10019] loop8: detected capacity change from 0 to 128 [ 564.221439][ T7370] usb 8-1: config 0 descriptor?? [ 564.230687][ T5823] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 564.809959][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 564.832659][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 564.884528][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.982759][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 30, changing to 8 [ 565.134092][ T5823] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 42732, setting to 1024 [ 565.185488][ T5823] usb 6-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 565.235395][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.249425][ T5823] usb 6-1: Product: syz [ 565.270777][ T5823] usb 6-1: Manufacturer: syz [ 565.281535][ T5823] usb 6-1: SerialNumber: syz [ 565.316885][T10016] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 565.503972][ T7370] holtek_kbd 0003:04D9:A055.0007: collection stack underflow [ 565.520339][ T7370] holtek_kbd 0003:04D9:A055.0007: item 0 4 0 12 parsing failed [ 565.528881][ T7370] holtek_kbd: probe of 0003:04D9:A055.0007 failed with error -22 [ 565.542067][ T7370] usb 8-1: USB disconnect, device number 4 [ 565.680507][ T5823] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 565.748316][T10036] loop8: detected capacity change from 0 to 128 [ 565.786882][ T5823] usb 6-1: USB disconnect, device number 10 [ 566.698355][ T8166] udevd[8166]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.304981][T10055] loop7: detected capacity change from 0 to 1024 [ 567.375184][T10059] loop5: detected capacity change from 0 to 128 [ 567.612313][T10062] loop8: detected capacity change from 0 to 256 [ 568.375945][T10062] FAT-fs (loop8): Directory bread(block 64) failed [ 568.441791][T10062] FAT-fs (loop8): Directory bread(block 65) failed [ 569.005430][T10062] FAT-fs (loop8): Directory bread(block 66) failed [ 569.109758][T10062] FAT-fs (loop8): Directory bread(block 67) failed [ 569.290945][T10062] FAT-fs (loop8): Directory bread(block 68) failed [ 569.692611][T10062] FAT-fs (loop8): Directory bread(block 69) failed [ 569.699279][T10062] FAT-fs (loop8): Directory bread(block 70) failed [ 570.463040][T10062] FAT-fs (loop8): Directory bread(block 71) failed [ 570.494525][T10062] FAT-fs (loop8): Directory bread(block 72) failed [ 570.529633][T10062] FAT-fs (loop8): Directory bread(block 73) failed [ 570.724585][T10074] loop0: detected capacity change from 0 to 128 [ 570.826878][T10078] loop4: detected capacity change from 0 to 7 [ 571.062973][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 571.073862][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.083382][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 571.275563][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 571.361249][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.370549][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 571.383910][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.393209][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 571.416758][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.426171][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 571.457179][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.466437][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 572.069984][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 572.088392][ T27] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.242780][ T27] usb 8-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 572.309272][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.468129][T10088] loop8: detected capacity change from 0 to 128 [ 572.470161][ T27] usb 8-1: config 0 descriptor?? [ 573.348395][ T27] kye 0003:0458:5010.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 573.442938][ T27] kye 0003:0458:5010.0008: unknown main item tag 0x7 [ 573.537040][ T27] kye 0003:0458:5010.0008: unknown main item tag 0x0 [ 573.663417][ T27] kye 0003:0458:5010.0008: unknown main item tag 0x1 [ 573.753328][ T27] kye 0003:0458:5010.0008: unknown main item tag 0xd [ 573.877535][ T27] kye 0003:0458:5010.0008: hidraw0: USB HID v0.77 Device [HID 0458:5010] on usb-dummy_hcd.7-1/input0 [ 573.959655][ T2914] ------------[ cut here ]------------ [ 573.965911][ T2914] WARNING: CPU: 1 PID: 2914 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 573.975720][ T2914] Modules linked in: [ 573.979658][ T2914] CPU: 1 PID: 2914 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 573.987534][ T2914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.998158][ T2914] Workqueue: iou_exit io_ring_exit_work [ 574.003936][ T2914] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 574.009782][ T2914] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 574.030024][ T2914] RSP: 0018:ffffc9000ba37a40 EFLAGS: 00010293 [ 574.036167][ T2914] RAX: ffffffff8a833c89 RBX: ffff888022a12000 RCX: ffff88802bf58000 [ 574.044859][ T2914] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 574.053297][ T2914] RBP: ffffc9000ba37bb0 R08: ffffc9000ba379c7 R09: 1ffff92001746f38 [ 574.061669][ T2914] R10: dffffc0000000000 R11: fffff52001746f39 R12: dffffc0000000000 [ 574.069698][ T2914] R13: 0000000100006a62 R14: 0000000100006a63 R15: ffff888022a12510 [ 574.078510][ T2914] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 574.087958][ T2914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.095262][ T2914] CR2: 00007fc5ca3887b8 CR3: 000000004ada7000 CR4: 00000000003506e0 [ 574.104205][ T2914] Call Trace: [ 574.107980][ T2914] [ 574.111447][ T2914] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 574.117430][ T2914] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.123088][ T2914] ? process_scheduled_works+0x975/0x1600 [ 574.129216][ T2914] ? process_scheduled_works+0x975/0x1600 [ 574.135490][ T2914] process_scheduled_works+0xa60/0x1600 [ 574.141588][ T2914] ? worker_attach_to_pool+0x370/0x370 [ 574.147203][ T2914] ? assign_work+0x3cc/0x5d0 [ 574.152287][ T2914] worker_thread+0xa5e/0xfe0 [ 574.157300][ T2914] ? _raw_spin_unlock+0x40/0x40 [ 574.162930][ T2914] ? __kthread_parkme+0x71/0x1c0 [ 574.167943][ T2914] kthread+0x2fa/0x390 [ 574.172457][ T2914] ? pr_cont_work+0x550/0x550 [ 574.177586][ T2914] ? kthread_blkcg+0xd0/0xd0 [ 574.182600][ T2914] ret_from_fork+0x48/0x80 [ 574.187075][ T2914] ? kthread_blkcg+0xd0/0xd0 [ 574.192091][ T2914] ret_from_fork_asm+0x11/0x20 [ 574.197033][ T2914] [ 574.200530][ T2914] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 574.207861][ T2914] CPU: 1 PID: 2914 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 574.215442][ T2914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.225537][ T2914] Workqueue: iou_exit io_ring_exit_work [ 574.231206][ T2914] Call Trace: [ 574.234498][ T2914] [ 574.237472][ T2914] dump_stack_lvl+0x18c/0x250 [ 574.242178][ T2914] ? show_regs_print_info+0x20/0x20 [ 574.247407][ T2914] ? load_image+0x420/0x420 [ 574.252026][ T2914] panic+0x2ca/0x720 [ 574.255946][ T2914] ? bpf_jit_dump+0xd0/0xd0 [ 574.260472][ T2914] ? ret_from_fork_asm+0x11/0x20 [ 574.265526][ T2914] __warn+0x2e0/0x470 [ 574.269608][ T2914] ? io_ring_exit_work+0x3b9/0x830 [ 574.274754][ T2914] ? io_ring_exit_work+0x3b9/0x830 [ 574.279887][ T2914] report_bug+0x2be/0x4f0 [ 574.284266][ T2914] ? io_ring_exit_work+0x3b9/0x830 [ 574.289501][ T2914] ? io_ring_exit_work+0x3b9/0x830 [ 574.294717][ T2914] ? io_ring_exit_work+0x3bb/0x830 [ 574.299847][ T2914] handle_bug+0xcf/0x120 [ 574.304112][ T2914] exc_invalid_op+0x1a/0x50 [ 574.308628][ T2914] asm_exc_invalid_op+0x1a/0x20 [ 574.313590][ T2914] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 574.319326][ T2914] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 ff 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 f1 a8 03 f7 e9 b1 fd ff ff e8 e7 a8 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 574.338943][ T2914] RSP: 0018:ffffc9000ba37a40 EFLAGS: 00010293 [ 574.345029][ T2914] RAX: ffffffff8a833c89 RBX: ffff888022a12000 RCX: ffff88802bf58000 [ 574.353022][ T2914] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 574.361266][ T2914] RBP: ffffc9000ba37bb0 R08: ffffc9000ba379c7 R09: 1ffff92001746f38 [ 574.369253][ T2914] R10: dffffc0000000000 R11: fffff52001746f39 R12: dffffc0000000000 [ 574.377237][ T2914] R13: 0000000100006a62 R14: 0000000100006a63 R15: ffff888022a12510 [ 574.385226][ T2914] ? io_ring_exit_work+0x3b9/0x830 [ 574.390372][ T2914] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 574.396293][ T2914] ? _raw_spin_unlock_irq+0x23/0x50 [ 574.401511][ T2914] ? process_scheduled_works+0x975/0x1600 [ 574.407245][ T2914] ? process_scheduled_works+0x975/0x1600 [ 574.413074][ T2914] process_scheduled_works+0xa60/0x1600 [ 574.418671][ T2914] ? worker_attach_to_pool+0x370/0x370 [ 574.424148][ T2914] ? assign_work+0x3cc/0x5d0 [ 574.428757][ T2914] worker_thread+0xa5e/0xfe0 [ 574.433374][ T2914] ? _raw_spin_unlock+0x40/0x40 [ 574.438410][ T2914] ? __kthread_parkme+0x71/0x1c0 [ 574.443363][ T2914] kthread+0x2fa/0x390 [ 574.447444][ T2914] ? pr_cont_work+0x550/0x550 [ 574.452135][ T2914] ? kthread_blkcg+0xd0/0xd0 [ 574.456736][ T2914] ret_from_fork+0x48/0x80 [ 574.461169][ T2914] ? kthread_blkcg+0xd0/0xd0 [ 574.465856][ T2914] ret_from_fork_asm+0x11/0x20 [ 574.470647][ T2914] [ 574.473979][ T2914] Kernel Offset: disabled [ 574.478398][ T2914] Rebooting in 86400 seconds..