last executing test programs: 15m27.615507119s ago: executing program 1 (id=33): ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x24, 0x36, {0x36, 0x7, "ad6667e44bb2cd263ca19db35b64ef7517ef18a5c7f872b2a6ba743febfd81b6a5ceb58e9c8690a139a795dbb34c976e696cd965"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15m25.386741529s ago: executing program 1 (id=48): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffe", 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 15m25.046042139s ago: executing program 1 (id=53): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000009, 0x11, r0, 0x100000000) 15m24.487163282s ago: executing program 1 (id=58): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r2) 15m23.49017088s ago: executing program 1 (id=64): ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000240)={0xcbbb, 0x0, '\x00', 0x0, 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x4, 0x0, [{0x9a7, 0x0, 0x100}, {0x37d, 0x0, 0x3}, {0x3f6, 0x0, 0x6}, {0x4b564d01, 0x0, 0x200}]}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x6, 0xf3b6, 0x0, 0x8000001000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x140640}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m22.872118486s ago: executing program 1 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x40004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5b, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x8000}, 0xc905) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) shutdown(r0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000580)=0x1, 0x4) 15m22.268141872s ago: executing program 32 (id=68): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open(0x0, 0x143142, 0x43) sendfile(r1, r1, 0x0, 0x1000000201005) open(0x0, 0xa0300, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04010d1c04"], 0x7) 15m22.255483932s ago: executing program 33 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x40004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5b, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x8000}, 0xc905) sendmsg$inet6(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)="b1", 0x1}], 0x1}, 0x10) shutdown(r0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000580)=0x1, 0x4) 13m29.511733323s ago: executing program 4 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$inet_icmp_raw(0x2, 0x3, 0x1) 13m29.336221113s ago: executing program 4 (id=495): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x2204094, &(0x7f0000003280)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") openat$incfs(0xffffffffffffff9c, 0x0, 0x3a642, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x0, 0x2, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x3ffff, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 13m28.594437356s ago: executing program 4 (id=500): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x41b, 0x20430482, 0xfffd, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x3ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x124) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5601f}], 0x1) close(r0) 13m28.248112197s ago: executing program 5 (id=501): socket$inet_icmp_raw(0x2, 0x3, 0x1) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000170a0102000000ddff00000000000008090001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x90) r4 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r4, r4, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) io_submit(0x0, 0x2, &(0x7f0000000140)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x8, 0x0, r4, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x4, r5, 0x0, 0x0, 0x2, 0x0, 0x1}]) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) 13m27.703809138s ago: executing program 4 (id=503): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000000100)='./bus\x00', 0x44) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) chdir(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 13m26.535979016s ago: executing program 4 (id=508): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fe6000/0x12000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f7}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m26.200277205s ago: executing program 5 (id=511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500), 0x0, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) 13m26.064373694s ago: executing program 4 (id=512): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e82258569d962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007a8e58e404bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac39543043fc623c58bdced533123b870554cd9b1868e7999132d3c1650b2b97afab309f42a410d24a213d2cd0", 0x386}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x3926, 0x0, 0x4, 0x0, 0x3e) 13m25.577349422s ago: executing program 34 (id=512): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000900)="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", 0x386}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000300)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x3926, 0x0, 0x4, 0x0, 0x3e) 13m25.571360632s ago: executing program 5 (id=514): userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) 13m25.428394401s ago: executing program 5 (id=516): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_setup(0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu1Mv2jnEu7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe11qknbrx/oeDn0289d03/ySj3/82kcSJeCV74fLz2C5DMVT/P0lWZw2Mb3dhBenK/k5qtVotT0u6i60TG5f//noi4skYjK548MsbjE9fLbRywI6qJY33bqCMEvEPJZX3A/Jr+5XXwZVCeiVAJ9w72RgAWB3/3Y2xweirjw3svp/E8mGdJCK2NjLXbE9E3Lk9cePs7YkbsUPjcEBri9cj4qlW8Z/U478afVGtx3+lKf7TfsHp7DlNf22L5a8cKhb/0DmN+O9bM/6jTfy/kz5fa8Twu1ssv/pg873+pvjv3+opAQAAAAAAQGndOhkRL7T6/L+yNP8nWsz/GYiIE9tQ/tCK/dWf/1fubkMxQAv3Tka83HL+byWf/VvtWraEtRo9ydnzM9NHIuJ/EXEoenal+6NrlHH4831ft8sbyub/5Y+0/DvZXMCsHne7dzUfMzU5P/kQpwxk7l2PeLrl/N9kqf1PWrT/6TvD7AbL2PfczdPt8taPf2Cn1L6NONiy/X9w14pk7ftzjNT7AyN5r2C1Zz7+4od25W81/t1iAh5e2v7vXjv+q8ny+/XMbb6MowvdtXZ5W+3/9yZv1O8q1JulfTQ5P39lNKI3OdWVpjalj22+zvA4yuMhj5c0/g89u/b4X6v+f39ELK742clfzWuKc0/8O/B7u/ro/0Nx0vif2lT7v/mNsZvVH9uVv7H2/1i9rT+UpRj/g4av8jDtbU5vEY7drbI6XV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBxUImJPJJXhpe1KZXg4YiAi/h+7KzOX5+afP3v5g0tTaV79+/8r+Tf9Djb2k/z7/6vL9sdW7B+NiL0R8WVXf31/+MzlmamiTx4AAAAAAAAAAAAAAAAAAAAeEQNt1v+n/ugqunbAjusuugJAYVrE/y9F1APoPO0/lJf4h/IS/1Be4h/KS/xDea0d/2+Pd6wiQMdp/6G8xD8AAAAAADxW9h649WsSEYsv9dcfqd4sr6fQmgE7rVJ0BYDCuMUPlJepP1BervGBZJ38vrYHrXfkWmbPPMTBAAAAAAAAAAAAAFA6B/db/w9lZf0/lJf1/1Be+fr/AwXXA+g81/hArLOSv+X6/3WPAgAAAAAAAAAAAAC209zC1QuTMzPTV2y8+WhUo5MbtVrtWvpX8KjUZ/s3kmyGekcKzafCd/5Mezdygvlav4395OLekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGb/BQAA//8wviV5") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) 13m24.824832366s ago: executing program 5 (id=519): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) 13m23.274943966s ago: executing program 5 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13m22.705598419s ago: executing program 35 (id=523): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m38.223755462s ago: executing program 6 (id=1305): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r4, 0x40204706, &(0x7f0000000040)={0x8, 0x5, 0xb1, 0x3f, 0x1a, "3eccd25569e20900"}) 6m33.882407425s ago: executing program 6 (id=1309): mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, 0x0, 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r4) 6m23.332103959s ago: executing program 6 (id=1323): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 6m21.586290451s ago: executing program 6 (id=1325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0xed08f22113700cb4, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x3f, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(0x0, 0xe, 0x0, 0x0) 6m19.726374799s ago: executing program 6 (id=1329): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r5, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) 6m17.531897517s ago: executing program 6 (id=1332): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x40000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40855}, 0x20004000) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) writev(r0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 6m1.463296303s ago: executing program 36 (id=1332): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x40000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40855}, 0x20004000) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) writev(r0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4m16.215178361s ago: executing program 7 (id=1470): r0 = syz_open_dev$vim2m(0x0, 0xff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="c14f7bdb3d904c4230838a2e0c6b812f55924c6b6909", 0x16, 0x44, &(0x7f0000000080)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) stat(0x0, 0x0) r3 = msgget$private(0x0, 0x101) msgsnd(r3, 0x0, 0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x5800) write$rfkill(r1, 0x0, 0x0) syz_open_dev$video(0x0, 0x7ff, 0x0) 4m14.409540596s ago: executing program 7 (id=1473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) getgroups(0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="aebc7d4aa1ceeb24a179d98717000056d0d5275b447ff247a3ce6c0330a71790a6588df89ef60940e61c7a8045959b679a007a789c44531d57c32f0c37d875434d965148eefe62b764b9ba29b9132d1e3b2b8b1f9de391c03197e26562199c7666a09399b9d14e835c211f133220863e7ec141c63cdb47c21f929dd15e04000f70848ed48495c13e45ab19069a45917069697f7d01c3a3f30e1c035ca9e84afd2793e986eb33f9d8ac9865ff8f273a2538384b5c9d2732e43d5b0ee181df", 0xbe, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r3, r2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000000), 0x1001) 4m12.560603194s ago: executing program 7 (id=1476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0x1ff, 0x0) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/164, 0xa4}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0xc) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x2000, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000480)='nfs\x00', 0x800, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc770xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@private0}}, 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 3m41.131518904s ago: executing program 37 (id=1489): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@private0}}, 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 3m10.311755949s ago: executing program 3 (id=1539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sched_setscheduler(0x0, 0xf7a3a501da2a069f, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setuid(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) 3m8.0504707s ago: executing program 3 (id=1541): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup(r5) listen(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) dup3(r5, r4, 0x0) 3m2.462974306s ago: executing program 3 (id=1545): mount$fuse(0x0, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mount(0x0, 0x0, 0x0, 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r4) 2m59.930356173s ago: executing program 3 (id=1546): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x7}, 0xa) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m51.075379258s ago: executing program 3 (id=1556): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xb, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYBLOB, @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@deltclass={0xfffffffffffffe1b, 0x29, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xd, 0xfff2}, {0xe, 0x5}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_cake, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x4c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x6, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004015) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c000780080006400000684f6fb57e6cd6ddf154169cf50d3355000021"], 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m44.053319968s ago: executing program 3 (id=1563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x7, 0x20080) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f00000003c0)={{0x3, 0x3, 0x1, 0x80000001, '\x00', 0x7f}, 0x0, [0x10, 0x7, 0x5, 0xffffffffffff14ac, 0x9, 0x10000, 0x68ae, 0x68c0, 0x3ff, 0x3ff, 0x2, 0xffffffffffff8f3c, 0x4, 0x1, 0x8, 0x7, 0xfffffffffffffffa, 0x4, 0x5f, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x480, 0x8, 0xfffffffffffffc00, 0x5, 0xfffffffffffffe00, 0x4, 0x9, 0x7fffffffffffffff, 0x2, 0x2, 0x88, 0x81, 0x5, 0x10000, 0xffff, 0x2, 0x3, 0xe2, 0x4, 0xe2, 0x3, 0xba, 0xde47, 0x68, 0x5, 0x8, 0xe, 0x9, 0x5c, 0x5, 0x1, 0x7, 0xe, 0x0, 0x81, 0x80000001, 0x5, 0x7fffffffffffffff, 0x10001, 0xfffffffffffffffc, 0x40, 0xa7b, 0x3, 0x2, 0x3e, 0x7, 0x5, 0xf, 0x8, 0x2, 0x3, 0x2, 0x1, 0x3, 0xca, 0x5, 0x3, 0x1ff, 0x7, 0xff, 0x6, 0xffffffffffffbb53, 0x10, 0x6, 0x2, 0x80000001, 0x6, 0x2, 0x10, 0x6, 0x5, 0x7, 0x991, 0x1, 0x8000, 0x4, 0xc053, 0x0, 0x9, 0x5, 0x9, 0x8b, 0x2, 0x8, 0x4, 0x2, 0x7, 0x0, 0x2, 0x7ff, 0x7, 0x2, 0x2, 0x64, 0x101, 0x1, 0x1ff, 0x100000000, 0x7, 0xae, 0x4000000000, 0x5, 0x9]}) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f00000001c0)={0xa, 0xff}) 2m28.508727533s ago: executing program 38 (id=1563): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x7, 0x20080) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f00000003c0)={{0x3, 0x3, 0x1, 0x80000001, '\x00', 0x7f}, 0x0, [0x10, 0x7, 0x5, 0xffffffffffff14ac, 0x9, 0x10000, 0x68ae, 0x68c0, 0x3ff, 0x3ff, 0x2, 0xffffffffffff8f3c, 0x4, 0x1, 0x8, 0x7, 0xfffffffffffffffa, 0x4, 0x5f, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x480, 0x8, 0xfffffffffffffc00, 0x5, 0xfffffffffffffe00, 0x4, 0x9, 0x7fffffffffffffff, 0x2, 0x2, 0x88, 0x81, 0x5, 0x10000, 0xffff, 0x2, 0x3, 0xe2, 0x4, 0xe2, 0x3, 0xba, 0xde47, 0x68, 0x5, 0x8, 0xe, 0x9, 0x5c, 0x5, 0x1, 0x7, 0xe, 0x0, 0x81, 0x80000001, 0x5, 0x7fffffffffffffff, 0x10001, 0xfffffffffffffffc, 0x40, 0xa7b, 0x3, 0x2, 0x3e, 0x7, 0x5, 0xf, 0x8, 0x2, 0x3, 0x2, 0x1, 0x3, 0xca, 0x5, 0x3, 0x1ff, 0x7, 0xff, 0x6, 0xffffffffffffbb53, 0x10, 0x6, 0x2, 0x80000001, 0x6, 0x2, 0x10, 0x6, 0x5, 0x7, 0x991, 0x1, 0x8000, 0x4, 0xc053, 0x0, 0x9, 0x5, 0x9, 0x8b, 0x2, 0x8, 0x4, 0x2, 0x7, 0x0, 0x2, 0x7ff, 0x7, 0x2, 0x2, 0x64, 0x101, 0x1, 0x1ff, 0x100000000, 0x7, 0xae, 0x4000000000, 0x5, 0x9]}) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f00000001c0)={0xa, 0xff}) 26.28957017s ago: executing program 9 (id=1708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004881, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0xfffe}], 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xc6, 0x4) fchdir(0xffffffffffffffff) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x4048015, 0x0, 0x0) 22.787867233s ago: executing program 8 (id=1712): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x1000, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 20.704078554s ago: executing program 9 (id=1714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4800, 0x0, 0x2, 0x6}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x40, 0x4) connect$inet6(r3, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') lseek(r4, 0x36, 0x1) ioctl$VT_RESIZE(r4, 0x5609, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 18.256097017s ago: executing program 0 (id=1719): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d0500000300"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x105001, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 16.755311325s ago: executing program 8 (id=1721): mkdirat(0xffffffffffffff9c, 0x0, 0x141) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) gettid() listen(r4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, 0x0, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) 16.754346855s ago: executing program 0 (id=1722): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0xb, 0x0, 0x0, 0x0, 0x23456}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x1, 0x7ffffff, 0x0, 0x6}) close(r1) 13.865776213s ago: executing program 8 (id=1723): syz_open_procfs(0x0, &(0x7f00000001c0)='net/packet\x00') socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x8, 0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 13.862845793s ago: executing program 9 (id=1724): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_submit(0x0, 0x0, 0x0) shutdown(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x88100) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000240)={{0x8, 0x3, 0x29e4, 0x1ff, 'syz1\x00', 0x4}, 0x5, 0x20, 0x25, 0x0, 0x0, 0x95a, 'syz1\x00', 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 13.825230055s ago: executing program 0 (id=1725): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) 13.714329662s ago: executing program 2 (id=1726): socket$nl_generic(0x10, 0x3, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1800) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 10.218928826s ago: executing program 2 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a02000000ff00180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1c}, 0x94) read$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0xc000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ftruncate(r1, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4040000) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::.:\x00', 0x0) socket(0x80000000000000a, 0x2, 0x0) 10.218012395s ago: executing program 0 (id=1735): openat$ttyS3(0xffffffffffffff9c, 0x0, 0xb0b02, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) fsmount(0xffffffffffffffff, 0x0, 0x70) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) sendmmsg$alg(r0, &(0x7f0000001b80), 0x0, 0x40800) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x80, 0x30b, &(0x7f0000000300)="$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") 10.083904923s ago: executing program 9 (id=1728): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb) fsopen(0x0, 0x0) syz_io_uring_setup(0x109, 0x0, &(0x7f00000003c0), &(0x7f0000000200)) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x38) write$sndseq(r6, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x80, @time, {}, {}, @raw32}], 0x38) 10.082207153s ago: executing program 8 (id=1729): capset(&(0x7f0000000040)={0x20080522}, 0x0) epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xf7ffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, r1, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r1, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060010) memfd_create(&(0x7f0000000980)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\x93\x02z@\xed\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) 8.866000124s ago: executing program 0 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5}, 0x20}}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @mcast1={0xff, 0x5}, 0x1}, 0x1c) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000cc0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x1, 0x40, 0x0, 0x0, 0xfe, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp_prespec={0x44, 0x1c, 0xb5, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@local, 0x598}, {@broadcast, 0x7}]}]}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xc}}}}}}}, 0x0) 8.845878655s ago: executing program 2 (id=1731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r3, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x183, &(0x7f0000000500)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) shutdown(r3, 0x1) 7.668365494s ago: executing program 0 (id=1732): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000080)=0x4) syz_open_dev$evdev(&(0x7f0000000000), 0xffd, 0x109000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="310328bd7000000000000800000008000300", @ANYRES32=r2], 0x24}}, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r4, @ANYBLOB="000000000031010024001280110001006272696467655f736c617665000000000c00058005001900030000008dd82d7cb98fb711dca96bfcadab003e7fb7"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x4ffe6, 0x0) 5.867044278s ago: executing program 2 (id=1733): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_io_uring_setup(0x34b7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000004100), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$FUSE(r4, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000100)) 5.795413653s ago: executing program 9 (id=1734): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_PTRACER(0x59616d61, r2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000018c0)=0x8, &(0x7f0000001900)=0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@minixdf}, {@noblock_validity}, {@nolazytime}, {@nolazytime}, {@oldalloc}, {@nodelalloc}, {@nolazytime}, {@resuid={'resuid', 0x3d, 0xee00}}, {@data_err_abort}]}, 0x7, 0x4e4, &(0x7f0000001940)="$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") syz_io_uring_complete(0x0) 5.49525093s ago: executing program 8 (id=1736): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) write$char_usb(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa3d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000040), &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x844) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) getpid() r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 3.584539471s ago: executing program 9 (id=1737): r0 = getpgrp(0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee00, 0x0, 0x100) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x10001, 0x0, 0x47425247}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) 2.123711977s ago: executing program 8 (id=1738): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_submit(0x0, 0x0, 0x0) shutdown(r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x88100) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000240)={{0x8, 0x3, 0x29e4, 0x1ff, 'syz1\x00', 0x4}, 0x5, 0x20, 0x25, 0x0, 0x0, 0x95a, 'syz1\x00', 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 2.105193687s ago: executing program 2 (id=1739): r0 = io_uring_setup(0x3a4d, &(0x7f0000000100)={0x0, 0x2118, 0x800}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xf, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x10000000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x308, 0x128, 0x206, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'caif0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'geneve0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) r5 = socket(0x1d, 0x2, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x6a, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) 0s ago: executing program 2 (id=1740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x1000, 0x200000000000000, 0x3}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @local, @private2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0xe, 0xc18, 0x5932}}}}}}, 0x0) kernel console output (not intermixed with test programs): : New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.747568][ T5850] usb 8-1: Product: syz [ 258.751902][ T5850] usb 8-1: Manufacturer: syz [ 258.756834][ T5850] usb 8-1: SerialNumber: syz [ 258.768772][ T5850] usb 8-1: config 0 descriptor?? [ 259.588043][ T5850] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 261.013179][ T5850] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 261.054947][ T5850] usb 8-1: USB disconnect, device number 3 [ 262.662970][ T8822] loop3: detected capacity change from 0 to 512 [ 262.799497][ T8822] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.625: bg 0: block 248: padding at end of block bitmap is not set [ 262.820761][ T8825] ubi: mtd0 is already attached to ubi31 [ 262.833854][ T8822] Quota error (device loop3): write_blk: dquota write failed [ 262.842124][ T8822] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 262.852255][ T8822] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.625: Failed to acquire dquot type 1 [ 262.884535][ T8822] EXT4-fs (loop3): 1 truncate cleaned up [ 262.899608][ T8822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.912338][ T8822] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.791391][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.995167][ T8829] kvm: pic: non byte write [ 270.892865][ T8930] binder_alloc: 8925: binder_alloc_buf, no vma [ 271.163852][ T8940] syzkaller0: entered promiscuous mode [ 271.180436][ T8940] syzkaller0: entered allmulticast mode [ 271.368911][ T23] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 271.611414][ T23] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 271.630641][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.654468][ T23] usb 8-1: Product: syz [ 271.667446][ T23] usb 8-1: Manufacturer: syz [ 271.684544][ T23] usb 8-1: SerialNumber: syz [ 271.694317][ T8957] syzkaller0: entered promiscuous mode [ 271.701282][ T23] usb 8-1: config 0 descriptor?? [ 271.707924][ T8957] syzkaller0: entered allmulticast mode [ 271.768490][ T8960] loop6: detected capacity change from 0 to 1024 [ 271.793539][ T8960] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 271.875987][ T8960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.968816][ T23] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 272.211110][ T8960] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4047: comm syz.6.655: Allocating blocks 497-513 which overlap fs metadata [ 272.290151][ T8960] EXT4-fs (loop6): pa ffff8880768f23a0: logic 256, phys. 385, len 8 [ 272.299015][ T8960] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 272.705923][ T8983] loop0: detected capacity change from 0 to 8 [ 273.130887][ T8983] SQUASHFS error: Failed to read block 0x4de: -5 [ 273.144827][ T8983] SQUASHFS error: Failed to read block 0x4de: -5 [ 273.311689][ T27] audit: type=1800 audit(1769752146.505:226): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.660" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 273.598154][ T23] usb 8-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 273.785154][ T23] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 273.793985][ T23] usb 8-1: media controller created [ 273.803161][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.845400][ T23] dvb_usb_rtl28xxu 8-1:0.0: unknown tuner MT2266 [ 273.909307][ T23] usb 8-1: USB disconnect, device number 4 [ 274.181391][ T8179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.657571][ T2177] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 274.928171][ T2177] usb 1-1: Using ep0 maxpacket: 32 [ 275.004329][ T2177] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 275.130203][ T2177] usb 1-1: config 0 has no interface number 0 [ 275.207812][ T2177] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 275.277597][ T2177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.306852][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'. [ 275.317727][ T2177] usb 1-1: Product: syz [ 275.321955][ T2177] usb 1-1: Manufacturer: syz [ 275.326872][ T2177] usb 1-1: SerialNumber: syz [ 275.366801][ T9002] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 275.381474][ T2177] usb 1-1: config 0 descriptor?? [ 275.409368][ T2177] smsc95xx v2.0.0 [ 275.413354][ T9002] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 275.859735][ T2177] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 275.897566][ T2177] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 276.274815][ T9034] ubi: mtd0 is already attached to ubi31 [ 277.290656][ T9045] loop7: detected capacity change from 0 to 128 [ 277.311367][ T9045] FAT-fs (loop7): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 277.818729][ T2177] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 277.831489][ T2177] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 277.842559][ T2177] usb 1-1: USB disconnect, device number 5 [ 279.220310][ T2177] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 279.755404][ T2177] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.344856][ T9078] loop6: detected capacity change from 0 to 32768 [ 280.397059][ T2177] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.406713][ T9078] (syz.6.679,9078,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 280.420724][ T9078] (syz.6.679,9078,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 280.477524][ T2177] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.523688][ T9078] JBD2: Ignoring recovery information on journal [ 280.534574][ T2177] usb 8-1: config 0 descriptor?? [ 280.551526][ T2177] pwc: Askey VC010 type 2 USB webcam detected. [ 280.598767][ T9078] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 281.078088][ T2177] pwc: recv_control_msg error -32 req 02 val 2b00 [ 281.096409][ T2177] pwc: recv_control_msg error -32 req 02 val 2700 [ 281.106271][ T2177] pwc: recv_control_msg error -32 req 02 val 2c00 [ 281.915067][ T9091] ubi: mtd0 is already attached to ubi31 [ 281.927916][ T2177] pwc: recv_control_msg error -32 req 04 val 1000 [ 281.947876][ T2177] pwc: recv_control_msg error -32 req 04 val 1300 [ 282.009815][ T2177] pwc: recv_control_msg error -32 req 04 val 1400 [ 282.048334][ T2177] pwc: recv_control_msg error -32 req 02 val 2000 [ 282.060766][ T8179] ocfs2: Unmounting device (7,6) on (node local) [ 282.071833][ T2177] pwc: recv_control_msg error -32 req 02 val 2100 [ 282.098563][ T2177] pwc: recv_control_msg error -32 req 04 val 1500 [ 282.328793][ T2177] pwc: recv_control_msg error -71 req 02 val 2400 [ 282.350924][ T2177] pwc: recv_control_msg error -71 req 02 val 2600 [ 282.406520][ T2177] pwc: recv_control_msg error -71 req 02 val 2900 [ 282.422885][ T2177] pwc: recv_control_msg error -71 req 02 val 2800 [ 282.460856][ T2177] pwc: recv_control_msg error -71 req 04 val 1100 [ 282.499330][ T2177] pwc: recv_control_msg error -71 req 04 val 1200 [ 282.550443][ T2177] pwc: Registered as video103. [ 282.593433][ T2177] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9 [ 282.662298][ T2177] usb 8-1: USB disconnect, device number 5 [ 282.837682][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 283.027608][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 283.051038][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.070916][ T8] usb 4-1: config 0 has no interface number 0 [ 283.092553][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.128100][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.140932][ T9129] loop6: detected capacity change from 0 to 2048 [ 283.154641][ T8] usb 4-1: Product: syz [ 283.181587][ T8] usb 4-1: Manufacturer: syz [ 283.186540][ T8] usb 4-1: SerialNumber: syz [ 283.211609][ T8] usb 4-1: config 0 descriptor?? [ 283.223151][ T9129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.253544][ T8] smsc95xx v2.0.0 [ 283.423311][ T9129] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #12: comm syz.6.690: corrupted inode contents [ 283.461370][ T9129] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #12: comm syz.6.690: corrupted inode contents [ 283.483122][ T9129] EXT4-fs error (device loop6): ext4_try_add_inline_entry:1336: inode #12: comm syz.6.690: mark_inode_dirty error [ 283.501451][ T9141] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1422: inode #12: block 5: comm syz.6.690: path /30/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=0, rec_len=0, size=128 fake=0 [ 283.562934][ T9141] EXT4-fs error (device loop6): ext4_do_update_inode:5248: inode #12: comm syz.6.690: corrupted inode contents [ 283.582758][ T9141] EXT4-fs error (device loop6): ext4_dirty_inode:6124: inode #12: comm syz.6.690: mark_inode_dirty error [ 283.680035][ T8179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.853313][ T9144] @0Ù: renamed from syz_tun (while UP) [ 284.286597][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 284.298559][ T9146] loop7: detected capacity change from 0 to 32768 [ 284.351657][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 284.371072][ T9146] (syz.7.692,9146,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.385576][ T9146] (syz.7.692,9146,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 284.473702][ T9146] JBD2: Ignoring recovery information on journal [ 284.529668][ T9146] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 284.910401][ T8223] ocfs2: Unmounting device (7,7) on (node local) [ 285.610459][ T9171] ubi: mtd0 is already attached to ubi31 [ 286.086617][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 286.123843][ T8] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 286.174009][ T8] usb 4-1: USB disconnect, device number 8 [ 289.815154][ T9216] loop0: detected capacity change from 0 to 1024 [ 290.089725][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.7.704'. [ 290.133876][ T9216] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.568197][ T9216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.681852][ T9229] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 290.723595][ T9229] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 291.609623][ T9216] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4047: comm syz.0.702: Allocating blocks 497-513 which overlap fs metadata [ 291.644027][ T9216] EXT4-fs (loop0): pa ffff88805a875bc8: logic 256, phys. 385, len 8 [ 291.652474][ T9216] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 291.731921][ T9242] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 292.023793][ T9251] ubi: mtd0 is already attached to ubi31 [ 292.346728][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.356271][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 292.557920][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 292.567249][ T9] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 292.575673][ T9] usb 8-1: config 0 has no interface number 0 [ 292.669249][ T9] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 292.715150][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.759364][ T9] usb 8-1: Product: syz [ 292.772356][ T9] usb 8-1: Manufacturer: syz [ 292.792474][ T9] usb 8-1: SerialNumber: syz [ 292.827923][ T9] usb 8-1: config 0 descriptor?? [ 292.859201][ T9] smsc95xx v2.0.0 [ 293.295114][ T9] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 293.327346][ T9] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 293.812337][ T9284] loop6: detected capacity change from 0 to 8 [ 294.123948][ T9284] SQUASHFS error: Failed to read block 0x4de: -5 [ 294.131714][ T9284] SQUASHFS error: Failed to read block 0x4de: -5 [ 294.144943][ T27] audit: type=1800 audit(1769752167.495:227): pid=9284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.711" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 294.605801][ T9281] ubi: mtd0 is already attached to ubi31 [ 296.052042][ T9] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 296.085631][ T9] smsc95xx: probe of 8-1:0.67 failed with error -71 [ 296.109023][ T9] usb 8-1: USB disconnect, device number 6 [ 298.197889][ T9340] binder: 9339:9340 unknown command 0 [ 298.203331][ T9340] binder: 9339:9340 ioctl c0306201 200000000080 returned -22 [ 298.765575][ T9357] ubi: mtd0 is already attached to ubi31 [ 298.799899][ T27] audit: type=1326 audit(1769752172.155:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9355 comm="syz.3.727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75a879aeb9 code=0x0 [ 299.385537][ T9371] @0Ù: entered allmulticast mode [ 299.444375][ T9371] dvmrp6: entered allmulticast mode [ 299.570969][ T9371] pimreg: entered allmulticast mode [ 299.613636][ T9370] pimreg: left allmulticast mode [ 299.860374][ T9377] syzkaller0: entered promiscuous mode [ 299.897809][ T9377] syzkaller0: entered allmulticast mode [ 300.493860][ T9392] syzkaller0: entered promiscuous mode [ 300.501116][ T9392] syzkaller0: entered allmulticast mode [ 301.280980][ T9413] syzkaller0: entered promiscuous mode [ 301.416134][ T9413] syzkaller0: entered allmulticast mode [ 302.689254][ T9444] ubi: mtd0 is already attached to ubi31 [ 302.833240][ T9446] loop3: detected capacity change from 0 to 8 [ 302.843242][ T9446] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 302.944155][ T9446] cramfs: Error -3 while decompressing! [ 302.950535][ T9446] cramfs: ffffffff973f3368(26)->ffff888056a2a000(4096) [ 302.957813][ T9446] cramfs: Error 2 while decompressing! [ 302.963350][ T9446] cramfs: ffffffff973f3382(26)->ffff888056a2b000(4096) [ 302.970512][ T9446] cramfs: Error -3 while decompressing! [ 302.976380][ T9446] cramfs: ffffffff973f339c(16)->ffff888056724000(4096) [ 302.983967][ T9446] cramfs: Error -3 while decompressing! [ 302.989683][ T9446] cramfs: ffffffff973f3368(26)->ffff888056a2a000(4096) [ 303.138886][ T27] audit: type=1800 audit(1769752176.345:229): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.745" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 303.762144][ T5762] udevd[5762]: incorrect cramfs checksum on /dev/loop3 [ 303.819769][ T5762] udevd[5762]: incorrect cramfs checksum on /dev/loop3 [ 304.705187][ T5803] IPVS: starting estimator thread 0... [ 304.781088][ T27] audit: type=1800 audit(1769752178.125:230): pid=9458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.748" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 304.827498][ T9461] IPVS: using max 32 ests per chain, 76800 per kthread [ 307.862781][ T9499] 9pnet: p9_errstr2errno: server reported unknown error 3aK [ 311.118537][ T9518] loop7: detected capacity change from 0 to 128 [ 311.174918][ T9518] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.205912][ T9518] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.405282][ T8223] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.004967][ T9516] batadv_slave_0: entered promiscuous mode [ 312.255206][ T9528] binder: 9527:9528 ioctl c0306201 200000000680 returned -14 [ 314.327011][ T9569] loop6: detected capacity change from 0 to 40427 [ 314.348200][ T9569] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 314.356749][ T9569] F2FS-fs (loop6): Image doesn't support compression [ 314.363615][ T9569] F2FS-fs (loop6): Image doesn't support compression [ 314.373205][ T9569] F2FS-fs (loop6): invalid crc value [ 314.394488][ T9569] F2FS-fs (loop6): Found nat_bits in checkpoint [ 314.427958][ T9569] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 314.648607][ T9574] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x99c/0x1a00 [ 314.670778][ T9574] syz.6.772: attempt to access beyond end of device [ 314.670778][ T9574] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 314.688264][ T27] audit: type=1800 audit(1769752187.955:231): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.772" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 314.806641][ T9574] syz.6.772: attempt to access beyond end of device [ 314.806641][ T9574] loop6: rw=2049, sector=77960, nr_sectors = 800 limit=40427 [ 315.115908][ T8179] syz-executor: attempt to access beyond end of device [ 315.115908][ T8179] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.217238][ T8179] F2FS-fs (loop6): Remounting filesystem read-only [ 315.344159][ T9581] loop0: detected capacity change from 0 to 2048 [ 315.432561][ T9581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.500212][ T9581] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.537402][ T5830] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 315.737461][ T5830] usb 4-1: Using ep0 maxpacket: 16 [ 315.784522][ T5830] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.788314][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.805183][ T5830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.805300][ T5830] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 315.821576][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.858414][ T5830] usb 4-1: config 0 descriptor?? [ 317.524886][ T5830] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 317.617989][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.624513][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.645526][ T5830] usb 4-1: USB disconnect, device number 9 [ 317.786960][ T9606] fido_id[9606]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 317.832140][ T9605] syzkaller0: entered promiscuous mode [ 317.879645][ T9605] syzkaller0: entered allmulticast mode [ 318.995274][ T9629] loop6: detected capacity change from 0 to 32768 [ 319.060464][ T9629] (syz.6.775,9629,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.074676][ T9629] (syz.6.775,9629,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 319.144274][ T9629] JBD2: Ignoring recovery information on journal [ 319.412255][ T9629] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 320.394534][ T8179] ocfs2: Unmounting device (7,6) on (node local) [ 322.607841][ T9657] binder: BINDER_SET_CONTEXT_MGR already set [ 322.635747][ T9658] x_tables: duplicate underflow at hook 2 [ 322.647344][ T5772] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 322.677630][ T9657] binder: 9654:9657 ioctl 4018620d 200000000100 returned -16 [ 322.686512][ T9659] binder: BINDER_SET_CONTEXT_MGR already set [ 322.692778][ T9659] binder: 9654:9659 ioctl 4018620d 2000000002c0 returned -16 [ 323.711099][ T9671] tipc: New replicast peer: 0.0.0.0 [ 323.733180][ T9671] tipc: Enabled bearer , priority 10 [ 324.565917][ T9683] loop7: detected capacity change from 0 to 32768 [ 324.593355][ T9683] (syz.7.795,9683,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 324.607507][ T9683] (syz.7.795,9683,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 324.648678][ T9683] JBD2: Ignoring recovery information on journal [ 324.707565][ T9683] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 324.832174][ T5803] tipc: Node number set to 474860675 [ 325.167221][ T8223] ocfs2: Unmounting device (7,7) on (node local) [ 325.943687][ T9714] bridge_slave_0: left allmulticast mode [ 325.967626][ T9714] bridge_slave_0: left promiscuous mode [ 326.002859][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.065101][ T9714] bridge_slave_1: left allmulticast mode [ 326.107632][ T9714] bridge_slave_1: left promiscuous mode [ 326.122290][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.202094][ T9714] bond0: (slave bond_slave_0): Releasing backup interface [ 326.234045][ T9714] bond0: (slave bond_slave_1): Releasing backup interface [ 326.292882][ T9714] team0: Port device team_slave_0 removed [ 326.330749][ T9714] team0: Port device team_slave_1 removed [ 326.357629][ T9714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.426616][ T9714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.476288][ T9714] bond0: (slave wlan1): Releasing backup interface [ 329.494091][ T9781] loop6: detected capacity change from 0 to 128 [ 329.510593][ T9781] EXT4-fs (loop6): Test dummy encryption mode enabled [ 330.220623][ T9781] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 330.234891][ T9781] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 330.328066][ T9781] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 331.127287][ C0] sched: RT throttling activated [ 331.151558][ T9790] loop0: detected capacity change from 0 to 1024 [ 331.267863][ T9790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.377647][ T9790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.580233][ T27] audit: type=1800 audit(1769752204.935:232): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.812" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 331.649416][ T9790] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.812: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 331.741524][ T9790] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz.0.812: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 331.929377][ T5771] EXT4-fs (loop0): discard request in group:0 block:4 count:16 failed with -1 [ 331.983264][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.054366][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.100421][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.163346][ T8179] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.176658][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.188543][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.200447][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.213646][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.228012][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.257972][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.317366][ T5771] EXT4-fs warning (device loop0): empty_inline_dir:1856: bad inline directory (dir #12) - no `..' [ 332.671312][ T9815] pic_ioport_write: 57 callbacks suppressed [ 332.671331][ T9815] kvm: pic: single mode not supported [ 332.677616][ T9815] pic_ioport_write: 56 callbacks suppressed [ 332.677631][ T9815] kvm: pic: level sensitive irq not supported [ 332.687510][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 332.698325][ T9815] kvm: pic: single mode not supported [ 332.718640][ T5771] @0Ù (unregistering): left allmulticast mode [ 332.729195][ T9815] kvm: pic: single mode not supported [ 332.730748][ T9815] kvm: pic: level sensitive irq not supported [ 332.744701][ T9815] kvm: pic: single mode not supported [ 332.751836][ T9815] kvm: pic: single mode not supported [ 332.758230][ T5771] bond0: (slave c@0Ù): Releasing backup interface [ 332.761694][ T9815] kvm: pic: level sensitive irq not supported [ 332.773114][ T9815] kvm: pic: single mode not supported [ 332.779775][ T9815] kvm: pic: level sensitive irq not supported [ 332.806101][ T9815] kvm: pic: level sensitive irq not supported [ 332.820604][ T9815] kvm: pic: single mode not supported [ 332.826806][ T9815] kvm: pic: level sensitive irq not supported [ 332.853187][ T9815] kvm: pic: single mode not supported [ 332.863608][ T9815] kvm: pic: single mode not supported [ 332.888002][ T5771] Trying to write to read-only block-device loop0 [ 332.899705][ T9815] kvm: pic: level sensitive irq not supported [ 332.900690][ T9815] kvm: pic: single mode not supported [ 332.906861][ T9815] kvm: pic: level sensitive irq not supported [ 332.933337][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.944519][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 332.954912][ T9815] kvm: pic: level sensitive irq not supported [ 332.955094][ T9815] kvm: pic: level sensitive irq not supported [ 332.978601][ T9] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 333.010129][ T9] usb 7-1: config 0 has no interface number 0 [ 333.016678][ T9] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 333.043078][ T9] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 333.067444][ T9] usb 7-1: config 0 interface 41 has no altsetting 0 [ 333.080315][ T9] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 333.098670][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.130318][ T9] usb 7-1: Product: syz [ 333.134640][ T9] usb 7-1: Manufacturer: syz [ 333.174870][ T9] usb 7-1: SerialNumber: syz [ 333.207673][ T9] usb 7-1: config 0 descriptor?? [ 333.215888][ T9812] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 333.227892][ T9812] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 333.472903][ T9812] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 333.499525][ T9812] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 333.560286][ T9834] syzkaller0: entered promiscuous mode [ 333.565847][ T9834] syzkaller0: entered allmulticast mode [ 333.942349][ T9836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.954746][ T9836] batadv_slave_0: entered promiscuous mode [ 334.032963][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.058351][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.067803][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.078520][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.086600][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.101262][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.140991][ T9] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 334.485953][ T9841] chnl_net:caif_netlink_parms(): no params data found [ 335.093062][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.7.822'. [ 335.444295][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.493672][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.585081][ T9841] bridge_slave_0: entered allmulticast mode [ 335.700149][ T9] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 335.708899][ T9841] bridge_slave_0: entered promiscuous mode [ 335.759123][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.767760][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.779433][ T9841] bridge_slave_1: entered allmulticast mode [ 335.798790][ T9841] bridge_slave_1: entered promiscuous mode [ 335.801330][ T9] CoreChips: probe of 7-1:0.41 failed with error -71 [ 336.059853][ T9] usb 7-1: USB disconnect, device number 2 [ 336.073735][ T9841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.132511][ T9841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.161789][ T51] Bluetooth: hci1: command tx timeout [ 336.256258][ T9861] loop3: detected capacity change from 0 to 4096 [ 336.315339][ T9841] team0: Port device team_slave_0 added [ 336.332882][ T9862] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 336.348197][ T9841] team0: Port device team_slave_1 added [ 336.483098][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.504992][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.541455][ T9841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.592109][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.601044][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.656212][ T9841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.730716][ T9841] hsr_slave_0: entered promiscuous mode [ 336.773271][ T9841] hsr_slave_1: entered promiscuous mode [ 336.791597][ T9841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.807972][ T9841] Cannot create hsr debugfs directory [ 338.357738][ T5774] Bluetooth: hci1: command tx timeout [ 338.363308][ T5770] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 338.717425][ T42] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 339.070067][ T9884] loop6: detected capacity change from 0 to 1024 [ 339.692740][ T9881] VFS: Lookup of 'file0' in hfsplus loop6 would have caused loop [ 339.830468][ T42] usb 8-1: config 0 has an invalid interface number: 113 but max is 0 [ 339.848076][ T42] usb 8-1: config 0 has no interface number 0 [ 339.854254][ T42] usb 8-1: config 0 interface 113 has no altsetting 0 [ 339.877414][ T42] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=65.db [ 339.915857][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.988920][ T42] usb 8-1: config 0 descriptor?? [ 340.159210][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 340.399146][ T51] Bluetooth: hci1: command tx timeout [ 340.965064][ T9841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.985528][ T9841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.004639][ T9841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.008968][ T42] usb 8-1: string descriptor 0 read error: -71 [ 341.025467][ T42] asix: probe of 8-1:0.113 failed with error -22 [ 341.036869][ T9841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.065986][ T42] usb 8-1: USB disconnect, device number 7 [ 341.177658][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.203116][ T9841] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.215216][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.222421][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.240234][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.247524][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.344999][ T9841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.866295][ T9911] loop6: detected capacity change from 0 to 8 [ 341.876007][ T9911] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 341.935451][ T9911] cramfs: Error -3 while decompressing! [ 341.941359][ T9911] cramfs: ffffffff973f7368(26)->ffff888057523000(4096) [ 341.948567][ T9911] cramfs: Error 2 while decompressing! [ 341.954285][ T9911] cramfs: ffffffff973f7382(26)->ffff888053da3000(4096) [ 341.961766][ T9911] cramfs: Error -3 while decompressing! [ 341.967496][ T9911] cramfs: ffffffff973f739c(16)->ffff888073956000(4096) [ 341.974505][ T9911] cramfs: Error -3 while decompressing! [ 341.980371][ T9911] cramfs: ffffffff973f7368(26)->ffff888057523000(4096) [ 342.032367][ T27] audit: type=1800 audit(1769752215.345:233): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.836" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 342.164009][ T9841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.435541][ T5762] udevd[5762]: incorrect cramfs checksum on /dev/loop6 [ 342.487062][ T51] Bluetooth: hci1: command tx timeout [ 342.888043][ T9841] veth0_vlan: entered promiscuous mode [ 342.920593][ T9841] veth1_vlan: entered promiscuous mode [ 343.516159][ T9841] veth0_macvtap: entered promiscuous mode [ 343.820569][ T9841] veth1_macvtap: entered promiscuous mode [ 344.126931][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.141294][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.152413][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.178564][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.206747][ T9841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.238666][ T9841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.275010][ T9841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.294690][ T9841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.453103][ T9927] ip6gre1: entered promiscuous mode [ 344.478583][ T9927] ip6gre1: entered allmulticast mode [ 344.741546][ T2915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.789669][ T2915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.062714][ T7652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.122769][ T7652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.464230][ T9962] netlink: 96 bytes leftover after parsing attributes in process `syz.0.851'. [ 347.087500][ T9964] Zero length message leads to an empty skb [ 352.713666][ T9997] loop3: detected capacity change from 0 to 2048 [ 354.472614][ T9997] Alternate GPT is invalid, using primary GPT. [ 354.497656][ T9997] loop3: p1 p2 p3 [ 354.504371][ T9997] loop3: partition table partially beyond EOD, truncated [ 354.668917][ T9997] loop3: p1 could not be added: -ENOMEM [ 354.936563][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 354.998339][ T6504] udevd[6504]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 355.546707][T10020] loop6: detected capacity change from 0 to 32768 [ 355.611562][T10020] (syz.6.866,10020,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 355.627683][T10020] (syz.6.866,10020,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 355.675916][T10020] JBD2: Ignoring recovery information on journal [ 355.730662][T10020] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 356.094313][ T8179] ocfs2: Unmounting device (7,6) on (node local) [ 356.487582][ T2177] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 356.667686][ T2177] usb 7-1: Using ep0 maxpacket: 32 [ 356.679005][ T2177] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.694157][ T2177] usb 7-1: config 0 has no interface number 0 [ 356.704508][ T2177] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.715664][ T2177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.729943][ T2177] usb 7-1: Product: syz [ 356.735732][ T2177] usb 7-1: Manufacturer: syz [ 356.771254][ T2177] usb 7-1: SerialNumber: syz [ 356.779704][ T2177] usb 7-1: config 0 descriptor?? [ 356.789576][ T2177] smsc95xx v2.0.0 [ 357.354875][ T2177] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 357.477487][ T2177] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 358.195409][T10049] loop3: detected capacity change from 0 to 512 [ 358.205843][T10049] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 358.231994][T10049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.333926][T10049] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 358.399039][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.497836][T10054] loop3: detected capacity change from 0 to 16 [ 358.539259][T10054] erofs: Unknown parameter 'erofs' [ 358.587788][ T6504] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 359.090851][T10067] tipc: Started in network mode [ 359.096003][T10067] tipc: Node identity ead4b3a01ea2, cluster identity 4711 [ 359.104093][T10067] tipc: Enabled bearer , priority 0 [ 359.118648][T10067] syzkaller0: entered promiscuous mode [ 359.124979][T10067] syzkaller0: entered allmulticast mode [ 359.157046][T10067] tipc: Resetting bearer [ 359.173655][T10066] tipc: Resetting bearer [ 359.226131][T10066] tipc: Disabling bearer [ 359.525046][T10075] loop3: detected capacity change from 0 to 256 [ 359.553987][ T2177] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 359.575566][ T2177] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 359.676928][ T2177] usb 7-1: USB disconnect, device number 3 [ 360.994679][T10075] exFAT-fs (loop3): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 361.061177][T10075] exFAT-fs (loop3): Filesystem has been set read-only [ 361.157998][T10075] exFAT-fs (loop3): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 364.357632][ T5850] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 364.569624][ T5850] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 364.587409][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.614663][ T5850] usb 8-1: config 0 descriptor?? [ 364.643093][ T5850] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 367.243464][ T5850] usb 8-1: USB disconnect, device number 8 [ 367.467802][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 367.710082][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.722641][ T27] audit: type=1326 audit(1769752241.045:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10177 comm="syz.3.908" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75a879aeb9 code=0x0 [ 367.797949][ T23] usb 7-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 367.862854][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.999595][ T23] usb 7-1: config 0 descriptor?? [ 368.686360][ T23] usbhid 7-1:0.0: can't add hid device: -71 [ 368.695501][ T23] usbhid: probe of 7-1:0.0 failed with error -71 [ 368.730024][ T23] usb 7-1: USB disconnect, device number 4 [ 368.766285][T10189] binder: BINDER_SET_CONTEXT_MGR already set [ 368.777126][T10189] binder: 10188:10189 ioctl 4018620d 200000000100 returned -16 [ 368.812603][T10189] binder: BINDER_SET_CONTEXT_MGR already set [ 368.828131][T10189] binder: 10188:10189 ioctl 4018620d 200000000200 returned -16 [ 369.122939][T10193] kvm: pic: non byte write [ 371.917559][ T51] Bluetooth: hci1: command tx timeout [ 379.089406][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.100738][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.247813][ T5830] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 379.470139][ T5830] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 379.540798][ T5830] usb 4-1: config 0 has no interface number 0 [ 379.587864][ T5830] usb 4-1: config 0 interface 113 has no altsetting 0 [ 379.604547][ T5830] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=65.db [ 379.637369][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.688991][ T5830] usb 4-1: config 0 descriptor?? [ 380.370772][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 380.757643][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 380.768115][ T23] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 380.775616][ T23] usb 7-1: config 0 has no interface number 0 [ 380.791412][ T23] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 380.860903][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.881422][ T23] usb 7-1: Product: syz [ 380.885379][ T23] usb 7-1: Manufacturer: syz [ 380.900313][ T23] usb 7-1: SerialNumber: syz [ 380.938827][ T23] usb 7-1: config 0 descriptor?? [ 382.546240][ T5830] usb 4-1: string descriptor 0 read error: -71 [ 382.745175][ T5830] asix: probe of 4-1:0.113 failed with error -22 [ 382.757868][ T23] smsc95xx v2.0.0 [ 382.797553][ T5830] usb 4-1: USB disconnect, device number 10 [ 382.953632][T10287] sctp: [Deprecated]: syz.3.941 (pid 10287) Use of int in max_burst socket option. [ 382.953632][T10287] Use struct sctp_assoc_value instead [ 382.986923][ T23] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 382.997392][ T23] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 384.518858][ T23] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 384.570906][ T23] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 384.622302][ T23] usb 7-1: USB disconnect, device number 5 [ 385.775105][T10309] kvm: emulating exchange as write [ 386.881790][T10287] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 386.889121][T10287] @0Y: entered promiscuous mode [ 386.896213][T10287] bond0: (slave c@0Y): Enslaving as an active interface with an up link [ 386.909342][T10288] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 386.922582][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.933770][T10288] team0: Port device bond0 added [ 388.719964][T10326] netlink: 'syz.6.951': attribute type 10 has an invalid length. [ 388.987556][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 389.051504][T10326] bond0: (slave c@0Y): Enslaving as an active interface with an up link [ 389.193698][T10330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.292242][T10331] @0Y: entered promiscuous mode [ 390.792212][T10331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 390.852332][T10331] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 392.428821][T10347] loop6: detected capacity change from 0 to 1024 [ 393.045190][T10347] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 393.188924][T10347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.510712][ T8179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.450463][T10379] bridge0: port 3(vxlan1) entered blocking state [ 396.764863][T10379] bridge0: port 3(vxlan1) entered disabled state [ 396.827624][T10379] vxlan1: entered allmulticast mode [ 396.840338][T10379] vxlan1: entered promiscuous mode [ 396.856363][T10383] netlink: 'syz.7.961': attribute type 11 has an invalid length. [ 396.863750][T10383] netlink: 36 bytes leftover after parsing attributes in process `syz.7.961'. [ 397.767198][ T49] dvmrp6 (unregistering): left allmulticast mode [ 400.602677][T10409] netlink: 'syz.6.973': attribute type 1 has an invalid length. [ 400.771839][T10412] loop7: detected capacity change from 0 to 8 [ 400.781932][T10412] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 400.857175][T10412] cramfs: Error -3 while decompressing! [ 400.862613][T10412] cramfs: ffffffff973f3368(26)->ffff8880567b2000(4096) [ 400.869567][T10412] cramfs: Error 2 while decompressing! [ 400.874691][T10412] cramfs: ffffffff973f3382(26)->ffff8880567b3000(4096) [ 400.881509][T10412] cramfs: Error -3 while decompressing! [ 400.886771][T10412] cramfs: ffffffff973f339c(16)->ffff8880567b4000(4096) [ 400.893416][T10412] cramfs: Error -3 while decompressing! [ 400.898725][T10412] cramfs: ffffffff973f3368(26)->ffff8880567b2000(4096) [ 400.912060][ T27] audit: type=1800 audit(1769752274.265:235): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.972" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 401.266445][T10263] udevd[10263]: incorrect cramfs checksum on /dev/loop7 [ 402.066723][ T49] hsr_slave_0: left promiscuous mode [ 402.103626][ T49] hsr_slave_1: left promiscuous mode [ 402.125691][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.188719][T10423] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.982'. [ 402.781780][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.872949][ T49] bridge_slave_1: left allmulticast mode [ 402.920957][ T49] bridge_slave_1: left promiscuous mode [ 402.974529][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.019286][ T49] bridge_slave_0: left allmulticast mode [ 403.047306][ T49] bridge_slave_0: left promiscuous mode [ 403.079044][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.822756][ T49] bond1 (unregistering): Released all slaves [ 404.007774][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.384354][ T49] team0 (unregistering): Port device team_slave_1 removed [ 405.484938][ T49] team0 (unregistering): Port device team_slave_0 removed [ 405.595940][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.659749][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.133827][ T49] team0 (unregistering): Port device bond0 removed [ 406.186156][ T49] bond0 (unregistering): Released all slaves [ 407.242088][T10449] loop6: detected capacity change from 0 to 32768 [ 407.267774][T10449] (syz.6.979,10449,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 407.287824][T10449] (syz.6.979,10449,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 407.325084][T10449] JBD2: Ignoring recovery information on journal [ 407.392247][T10449] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 407.618710][T10429] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.626017][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.998714][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.038909][T10429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.401192][T10429] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.410059][T10429] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.418660][T10429] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.426746][T10429] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.599669][T10448] netlink: 56 bytes leftover after parsing attributes in process `syz.6.979'. [ 408.908872][ T8179] ocfs2: Unmounting device (7,6) on (node local) [ 415.202849][T10487] bridge1: entered promiscuous mode [ 415.207737][T10487] bridge1: entered allmulticast mode [ 415.645640][T10486] syzkaller0: entered promiscuous mode [ 415.657383][T10486] syzkaller0: entered allmulticast mode [ 418.339642][T10504] veth0_vlan: left promiscuous mode [ 418.346616][T10504] vlan0: entered promiscuous mode [ 418.354553][T10504] veth0_vlan: entered promiscuous mode [ 420.072580][T10518] netlink: 'syz.3.998': attribute type 11 has an invalid length. [ 420.080279][T10518] netlink: 36 bytes leftover after parsing attributes in process `syz.3.998'. [ 422.750043][T10524] loop3: detected capacity change from 0 to 256 [ 422.764685][T10524] exfat: Deprecated parameter 'utf8' [ 422.849977][T10524] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 423.189485][T10531] tipc: Enabling of bearer rejected, failed to enable media [ 426.737574][T10550] netlink: 'syz.6.1002': attribute type 1 has an invalid length. [ 426.933099][T10550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.964105][T10552] bond2: (slave ip6gretap1): making interface the new active one [ 427.023246][T10552] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 427.784652][T10550] veth5: entered promiscuous mode [ 427.795031][T10550] bond2: (slave veth5): Enslaving as an active interface with a down link [ 427.861826][T10550] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 432.004584][T10588] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1015'. [ 432.350449][T10601] loop3: detected capacity change from 0 to 256 [ 432.443432][T10601] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 436.752283][T10633] syzkaller0: entered promiscuous mode [ 436.797466][T10633] syzkaller0: entered allmulticast mode [ 436.805624][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1025'. [ 437.480376][T10642] loop3: detected capacity change from 0 to 32768 [ 437.511726][T10642] (syz.3.1026,10642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 437.539694][T10642] (syz.3.1026,10642,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 437.583976][T10642] JBD2: Ignoring recovery information on journal [ 437.631474][T10642] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 437.914752][T10633] tipc: Enabled bearer , priority 0 [ 437.947095][T10641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 437.968316][T10631] tipc: Resetting bearer [ 438.062771][T10631] tipc: Disabling bearer [ 438.301016][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 438.394108][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1028'. [ 440.461525][T10654] netlink: 'syz.0.1027': attribute type 3 has an invalid length. [ 440.483297][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.489301][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.740352][T10667] overlayfs: failed to clone upperpath [ 443.211541][T10677] tipc: Enabled bearer , priority 0 [ 443.218947][T10677] syzkaller0: entered promiscuous mode [ 443.297520][T10677] syzkaller0: entered allmulticast mode [ 444.915568][T10683] tipc: Resetting bearer [ 444.942900][ T5872] tipc: Node number set to 4101419936 [ 444.963532][T10675] tipc: Resetting bearer [ 446.103110][T10675] tipc: Disabling bearer [ 447.683633][T10701] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.696608][T10701] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.737796][T10701] batadv_slave_0: left promiscuous mode [ 448.689907][T10703] tipc: Enabled bearer , priority 0 [ 448.709455][T10703] syzkaller0: entered promiscuous mode [ 448.714779][T10703] syzkaller0: entered allmulticast mode [ 448.852305][T10703] tipc: Resetting bearer [ 450.124634][T10702] tipc: Resetting bearer [ 451.133988][T10702] tipc: Disabling bearer [ 451.476578][T10715] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 451.525472][T10715] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 453.382455][T10718] Set syz1 is full, maxelem 65536 reached [ 453.788953][T10725] Falling back ldisc for ttyS3. [ 456.890682][T10754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1056'. [ 458.987356][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 459.573271][T10773] tipc: Enabled bearer , priority 0 [ 459.613889][T10773] syzkaller0: entered promiscuous mode [ 459.631013][T10773] syzkaller0: entered allmulticast mode [ 459.643056][T10775] netlink: 'syz.7.1062': attribute type 4 has an invalid length. [ 459.676528][T10768] bond0: entered allmulticast mode [ 459.681392][T10768] bond_slave_0: entered allmulticast mode [ 459.686592][T10768] bond_slave_1: entered allmulticast mode [ 460.072654][T10773] tipc: Resetting bearer [ 460.403104][T10771] tipc: Resetting bearer [ 460.741979][T10771] tipc: Disabling bearer [ 461.412934][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1065'. [ 461.767837][T10788] loop6: detected capacity change from 0 to 32768 [ 461.786931][T10788] (syz.6.1065,10788,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.800508][T10788] (syz.6.1065,10788,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 461.898663][T10788] JBD2: Ignoring recovery information on journal [ 461.958024][T10788] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 463.552711][ T8179] ocfs2: Unmounting device (7,6) on (node local) [ 464.714830][T10820] loop7: detected capacity change from 0 to 256 [ 464.721956][T10820] exfat: Deprecated parameter 'namecase' [ 464.866950][T10820] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 465.723938][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 466.077404][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 467.884396][T10846] loop7: detected capacity change from 0 to 40427 [ 467.943100][T10846] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff [ 467.951074][T10846] F2FS-fs (loop7): Image doesn't support compression [ 467.957373][T10846] F2FS-fs (loop7): Image doesn't support compression [ 467.965151][T10846] F2FS-fs (loop7): invalid crc value [ 467.980390][T10846] F2FS-fs (loop7): Found nat_bits in checkpoint [ 468.019749][T10846] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 468.132050][ T27] audit: type=1800 audit(1769752341.485:236): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1078" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 468.188540][T10851] F2FS-fs (loop7): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x99c/0x1a00 [ 468.204199][T10851] syz.7.1078: attempt to access beyond end of device [ 468.204199][T10851] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 468.283486][T10851] syz.7.1078: attempt to access beyond end of device [ 468.283486][T10851] loop7: rw=2049, sector=77960, nr_sectors = 800 limit=40427 [ 468.704423][ T8223] syz-executor: attempt to access beyond end of device [ 468.704423][ T8223] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 468.717915][ T8223] F2FS-fs (loop7): Remounting filesystem read-only [ 469.129134][T10856] @0Y: renamed from syz_tun [ 470.129529][T10863] netlink: 'syz.3.1076': attribute type 39 has an invalid length. [ 470.303517][T10863] bond0: (slave c@0Y): Releasing backup interface [ 471.946004][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1084'. [ 476.009485][T10910] syzkaller0: entered promiscuous mode [ 476.019716][T10910] syzkaller0: entered allmulticast mode [ 478.292779][ T51] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 481.608588][T10932] vlan0: left promiscuous mode [ 481.613026][T10932] veth0_vlan: left promiscuous mode [ 481.644866][T10932] veth3: left promiscuous mode [ 481.651750][T10932] ip6gre1: left promiscuous mode [ 481.671527][T10932] veth5: left promiscuous mode [ 485.324959][T10952] vivid-007: ================= START STATUS ================= [ 485.341193][T10952] vivid-007: Generate PTS: true [ 485.347920][T10952] vivid-007: Generate SCR: true [ 485.353412][T10952] tpg source WxH: 640x360 (Y'CbCr) [ 485.358524][T10952] tpg field: 1 [ 485.361896][T10952] tpg crop: 640x360@0x0 [ 485.365949][T10952] tpg compose: 640x360@0x0 [ 485.370419][T10952] tpg colorspace: 8 [ 485.374284][T10952] tpg transfer function: 0/0 [ 485.378832][T10952] tpg Y'CbCr encoding: 0/0 [ 485.383069][T10952] tpg quantization: 0/0 [ 485.387143][T10952] tpg RGB range: 0/2 [ 485.391511][T10952] vivid-007: ================== END STATUS ================== [ 488.618347][T10977] syzkaller0: entered promiscuous mode [ 488.670695][T10977] syzkaller0: entered allmulticast mode [ 489.917050][T10989] loop6: detected capacity change from 0 to 1024 [ 489.931848][T10989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 489.967383][T10989] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 490.025554][T10989] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 490.041555][T10989] System zones: 0-1, 3-36 [ 490.264217][T10989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.360534][T10998] trusted_key: encrypted_key: master key parameter 'Y|{E' is invalid [ 491.942980][ T8179] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.988824][T11004] netlink: 'syz.7.1117': attribute type 1 has an invalid length. [ 492.423313][T11004] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 494.732943][T11004] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 494.802133][T11004] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 495.121488][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1117'. [ 502.326838][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.332781][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.477514][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 505.623658][ T5772] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 508.154360][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1136'. [ 508.162695][T11111] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1136'. [ 511.187925][ T5772] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 511.199295][ T5772] Bluetooth: hci3: Injecting HCI hardware error event [ 511.208876][ T51] Bluetooth: hci3: hardware error 0x00 [ 513.281683][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 515.380485][T11166] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 517.062940][T11166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.106192][T11168] vlan2: entered allmulticast mode [ 517.157277][T11168] veth0_to_bond: entered allmulticast mode [ 517.164677][T11168] bond1: (slave vlan2): Opening slave failed [ 519.743605][T11184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1149'. [ 521.853103][T11197] loop7: detected capacity change from 0 to 32768 [ 521.907669][T11197] (syz.7.1163,11197,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 521.936372][T11197] (syz.7.1163,11197,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 522.095931][T11201] netlink: 'syz.6.1164': attribute type 1 has an invalid length. [ 522.136781][T11197] JBD2: Ignoring recovery information on journal [ 522.217776][T11197] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 522.319202][T11201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.347985][T11204] bond3: (slave gretap1): making interface the new active one [ 522.358034][T11204] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 522.721375][ T8223] ocfs2: Unmounting device (7,7) on (node local) [ 523.102238][T11216] syzkaller0: entered promiscuous mode [ 523.133663][T11216] syzkaller0: entered allmulticast mode [ 524.280059][T11219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.267798][T11236] loop7: detected capacity change from 0 to 256 [ 526.400630][T11236] FAT-fs (loop7): Directory bread(block 64) failed [ 526.442017][T11236] FAT-fs (loop7): Directory bread(block 65) failed [ 526.517439][T11236] FAT-fs (loop7): Directory bread(block 66) failed [ 526.523412][T11236] FAT-fs (loop7): Directory bread(block 67) failed [ 526.537436][T11236] FAT-fs (loop7): Directory bread(block 68) failed [ 526.543544][T11236] FAT-fs (loop7): Directory bread(block 69) failed [ 527.397521][T11236] FAT-fs (loop7): Directory bread(block 70) failed [ 527.417426][T11236] FAT-fs (loop7): Directory bread(block 71) failed [ 527.478002][T11236] FAT-fs (loop7): Directory bread(block 72) failed [ 527.483974][T11236] FAT-fs (loop7): Directory bread(block 73) failed [ 531.826407][T11277] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 534.602063][T11298] xt_connbytes: Forcing CT accounting to be enabled [ 534.608879][T11298] Cannot find set identified by id 0 to match [ 535.513750][T11303] tipc: Enabled bearer , priority 0 [ 535.691048][T11303] syzkaller0: entered promiscuous mode [ 535.696086][T11303] syzkaller0: entered allmulticast mode [ 535.779682][T11303] tipc: Resetting bearer [ 536.375345][T11302] tipc: Resetting bearer [ 536.428601][T11302] tipc: Disabling bearer [ 537.573881][T11313] loop7: detected capacity change from 0 to 512 [ 537.630568][T11313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.846239][T11316] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 264: padding at end of block bitmap is not set [ 538.797541][ T8223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.241109][T11358] loop7: detected capacity change from 0 to 256 [ 542.253128][T11358] exfat: Deprecated parameter 'namecase' [ 542.290647][T11358] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 546.763973][T11385] loop6: detected capacity change from 0 to 32768 [ 546.843156][T11385] (syz.6.1207,11385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.858805][T11385] (syz.6.1207,11385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 546.919283][T11385] JBD2: Ignoring recovery information on journal [ 546.982545][T11385] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 547.491632][ T8179] ocfs2: Unmounting device (7,6) on (node local) [ 547.765998][T11391] tipc: Started in network mode [ 547.789975][T11391] tipc: Node identity 1afdd63709d7, cluster identity 4711 [ 547.820726][T11391] tipc: Enabled bearer , priority 0 [ 547.840414][T11392] syzkaller0: entered promiscuous mode [ 547.845491][T11392] syzkaller0: entered allmulticast mode [ 548.109882][T11393] tipc: Resetting bearer [ 548.175561][T11390] tipc: Resetting bearer [ 548.277877][T11390] tipc: Disabling bearer [ 552.791861][T11420] tipc: Enabled bearer , priority 0 [ 552.812178][T11420] syzkaller0: entered promiscuous mode [ 552.832052][T11420] syzkaller0: entered allmulticast mode [ 552.966395][T11420] tipc: Resetting bearer [ 554.053522][T11419] tipc: Resetting bearer [ 554.268189][T11419] tipc: Disabling bearer [ 564.470956][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.476711][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.839462][T11481] binder_alloc: 11480: binder_alloc_buf, no vma [ 570.085115][T11512] 9pnet_fd: Insufficient options for proto=fd [ 571.650730][T10456] IPVS: starting estimator thread 0... [ 573.403761][T11524] IPVS: using max 20 ests per chain, 48000 per kthread [ 573.808673][T11535] tipc: Enabling of bearer rejected, failed to enable media [ 573.920923][T11538] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1246'. [ 576.616621][T11559] loop6: detected capacity change from 0 to 32768 [ 576.636366][T11559] (syz.6.1250,11559,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 576.656778][T11559] (syz.6.1250,11559,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 576.734129][T11559] JBD2: Ignoring recovery information on journal [ 576.748423][T11562] syzkaller0: entered promiscuous mode [ 576.792629][T11562] syzkaller0: entered allmulticast mode [ 576.813781][T11559] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 576.835603][T11566] 0: reclassify loop, rule prio 0, protocol 800 [ 577.194342][ T8179] ocfs2: Unmounting device (7,6) on (node local) [ 578.418970][T11573] tipc: Enabling of bearer rejected, failed to enable media [ 581.059277][ T27] audit: type=1107 audit(1769752454.405:237): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 588.957488][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 592.976199][T11655] loop7: detected capacity change from 0 to 128 [ 593.012715][T11655] FAT-fs (loop7): Unrecognized mount option "@" or missing value [ 594.848905][T11666] syzkaller0: entered promiscuous mode [ 594.853932][T11666] syzkaller0: entered allmulticast mode [ 596.991362][T11672] loop3: detected capacity change from 0 to 1024 [ 597.048699][T11672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 597.187365][T11672] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 597.932653][T11672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 597.981033][T11672] System zones: 0-1, 3-36 [ 598.023442][T11672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.015839][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.855047][T11716] loop3: detected capacity change from 0 to 32768 [ 606.888596][T11716] (syz.3.1289,11716,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 606.902068][T11716] (syz.3.1289,11716,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 606.966043][T11716] JBD2: Ignoring recovery information on journal [ 607.000863][T11716] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 607.511147][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 609.038346][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 609.389769][T11726] loop7: detected capacity change from 0 to 1024 [ 609.428482][T11726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 609.448299][T11726] EXT4-fs: Ignoring removed bh option [ 609.478224][T11726] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 609.628639][T11644] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 610.680009][T11736] loop3: detected capacity change from 0 to 128 [ 610.961538][T11736] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 611.058011][T11736] hpfs: filesystem error: improperly stopped [ 611.065370][T11736] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 611.126524][T11736] hpfs: You really don't want any checks? You are crazy... [ 611.171471][T11736] hpfs: hpfs_map_sector(): read error [ 611.206978][T11736] hpfs: code page support is disabled [ 611.317031][T11736] hpfs: hpfs_map_4sectors(): unaligned read [ 611.400960][T11736] hpfs: hpfs_map_4sectors(): unaligned read [ 611.406470][T11736] hpfs: filesystem error: unable to find root dir [ 612.152484][T11749] hpfs: hpfs_map_4sectors(): unaligned read [ 612.159142][T11749] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 617.871595][T11773] team0: Port device bond0 removed [ 620.089693][T11787] input: syz1 as /devices/virtual/input/input10 [ 625.158385][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.167441][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.973563][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'. [ 631.981761][T11848] tty tty26: ldisc open failed (-12), clearing slot 25 [ 632.426145][T11844] loop7: detected capacity change from 0 to 8192 [ 632.621133][T11844] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 632.633642][T11844] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 632.645125][T11844] REISERFS (device loop7): using ordered data mode [ 632.651385][T11844] reiserfs: using flush barriers [ 632.938550][T11844] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 632.960008][T11844] REISERFS (device loop7): checking transaction log (loop7) [ 633.090646][T11844] REISERFS (device loop7): Using r5 hash to sort names [ 633.100675][T11844] REISERFS (device loop7): using 3.5.x disk format [ 633.119735][T11844] REISERFS warning (device loop7): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 633.133328][T11844] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 635.905696][T11865] Cannot find del_set index 0 as target [ 641.960356][T11896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 642.047518][T11901] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 642.057078][T11901] bond2: (slave macvlan2): making interface the new active one [ 642.088171][T11901] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 645.425861][ T8] IPVS: starting estimator thread 0... [ 645.537600][T11917] IPVS: using max 15 ests per chain, 36000 per kthread [ 645.763588][T11919] syzkaller0: entered promiscuous mode [ 645.769107][T11919] syzkaller0: entered allmulticast mode [ 645.781499][T11919] 0: reclassify loop, rule prio 0, protocol 700 [ 649.156810][T11942] tun0: tun_chr_ioctl cmd 1074025675 [ 649.162496][T11942] tun0: persist enabled [ 649.228001][ T5772] Bluetooth: hci1: unexpected event for opcode 0x200c [ 649.983162][T11942] tun0: tun_chr_ioctl cmd 1074025675 [ 649.989678][T11942] tun0: persist disabled [ 651.284276][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1345'. [ 651.292820][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1345'. [ 652.406144][T11966] __vm_enough_memory: pid: 11966, comm: syz.7.1347, not enough memory for the allocation [ 652.687671][ T8] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 653.422578][T11967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1348'. [ 654.902747][ T8] usb 8-1: config 0 has an invalid interface number: 190 but max is 0 [ 654.927775][ T8] usb 8-1: config 0 has no interface number 0 [ 654.940512][ T8] usb 8-1: config 0 interface 190 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 654.951099][ T8] usb 8-1: New USB device found, idVendor=5df2, idProduct=8c36, bcdDevice=b8.d2 [ 654.960072][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.025718][ T8] usb 8-1: config 0 descriptor?? [ 655.113192][ T8] usb 8-1: can't set config #0, error -71 [ 655.121188][ T8] usb 8-1: USB disconnect, device number 9 [ 655.244659][ T5772] Bluetooth: hci0: unexpected event 0x08 length: 11 > 4 [ 657.871399][T11976] Bluetooth: hci0: command 0x0406 tx timeout [ 658.049157][T11925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.364990][T12004] Bluetooth: MGMT ver 1.22 [ 659.895903][T11985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 659.907938][T11985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 659.927709][T11985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 659.941024][T11985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 659.957365][T11985] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 659.964684][T11985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 662.815570][T11985] Bluetooth: hci4: command tx timeout [ 664.883705][T12002] chnl_net:caif_netlink_parms(): no params data found [ 664.890556][T11985] Bluetooth: hci4: command tx timeout [ 665.068739][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.075492][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.082855][T12002] bridge_slave_0: entered allmulticast mode [ 665.090425][T12002] bridge_slave_0: entered promiscuous mode [ 665.102133][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.109103][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.116918][T12002] bridge_slave_1: entered allmulticast mode [ 665.124470][T12002] bridge_slave_1: entered promiscuous mode [ 665.265816][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.336787][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.488282][T12002] team0: Port device team_slave_0 added [ 665.529572][T12002] team0: Port device team_slave_1 added [ 665.662564][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.697241][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.795900][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.830025][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.836641][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.943742][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.114373][ T8179] bond0: (slave c@0Y): Releasing backup interface [ 666.203940][ T7637] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 666.511287][ T7652] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.673747][T12036] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 666.681230][T12036] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1359'. [ 666.983134][T11985] Bluetooth: hci4: command tx timeout [ 667.512874][ T7637] bond1: (slave macvlan2): link status definitely down, disabling slave [ 667.624373][T12002] hsr_slave_0: entered promiscuous mode [ 667.655507][T12002] hsr_slave_1: entered promiscuous mode [ 667.665666][T12002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.674467][T12002] Cannot create hsr debugfs directory [ 667.950265][ T7652] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.169435][ T7652] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.782115][T11985] Bluetooth: hci4: command tx timeout [ 670.386963][ T7652] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.312238][T12002] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 671.388841][T12002] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 671.421715][ T7652] tipc: Left network mode [ 671.438713][T12002] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 671.479406][T12002] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 673.590471][T12073] loop3: detected capacity change from 0 to 128 [ 674.306418][ T7652] bond2: (slave ip6gretap1): Releasing active interface [ 674.314215][ T7652] bond2: (slave ip6gretap1): the permanent HWaddr of slave - ee:26:ab:e1:54:f9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 675.231883][T12091] syzkaller0: entered promiscuous mode [ 675.241123][ T27] audit: type=1326 audit(1769752555.582:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12096 comm="syz.0.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x0 [ 675.252420][T12091] syzkaller0: entered allmulticast mode [ 675.403420][T12002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.633582][T12107] netlink: 'syz.7.1370': attribute type 21 has an invalid length. [ 675.641353][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1370'. [ 675.941608][T12002] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.530184][T11600] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.536708][T11600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.546720][T11600] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.553501][T11600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.295947][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.301940][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.151021][ T7652] bond3: (slave gretap1): Releasing active interface [ 692.061466][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.257260][ T7652] hsr_slave_0: left promiscuous mode [ 692.504317][ T7652] hsr_slave_1: left promiscuous mode [ 693.022260][ T7652] batman_adv: batadv0: Interface deactivated: veth3 [ 693.099727][ T7652] batman_adv: batadv0: Removing interface: veth3 [ 693.520076][ T7652] veth1_macvtap: left promiscuous mode [ 693.545698][ T7652] veth0_macvtap: left promiscuous mode [ 693.557672][ T7652] veth1_vlan: left promiscuous mode [ 693.993731][T12176] hub 8-0:1.0: USB hub found [ 694.008084][T12176] hub 8-0:1.0: 1 port detected [ 695.710085][ T7652] bond3 (unregistering): Released all slaves [ 695.988366][ T7652] bond2 (unregistering): (slave veth5): Releasing active interface [ 696.614296][ T7652] bond2 (unregistering): Released all slaves [ 696.725788][ T7652] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 697.757769][ T7652] bond1 (unregistering): Released all slaves [ 699.611451][ T7652] bond0 (unregistering): Released all slaves [ 699.838106][T12212] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 701.542504][T12243] loop3: detected capacity change from 0 to 8 [ 701.592215][T12002] veth0_vlan: entered promiscuous mode [ 701.658735][T12243] squashfs: Unknown parameter '00000000000000000000kO!2SH9REiW!l\Vw yw' [ 701.731189][T12002] veth1_vlan: entered promiscuous mode [ 702.207511][T12246] loop7: detected capacity change from 0 to 2048 [ 702.615247][T12247] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 703.143417][T12002] veth0_macvtap: entered promiscuous mode [ 703.241305][T12002] veth1_macvtap: entered promiscuous mode [ 703.449015][T12002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.492614][ T7652] IPVS: stop unused estimator thread 0... [ 703.519054][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.550634][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.593787][T12002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.661416][T12002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.685692][T12002] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.703823][T12002] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.717287][T12002] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.217787][ T7658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.284529][ T7658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.000269][ T7625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.051670][ T7625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.439110][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 728.491424][T12433] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 735.512280][T12479] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1437'. [ 735.838468][T12479] loop3: detected capacity change from 0 to 32768 [ 735.869291][T12479] (syz.3.1437,12479,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 735.883634][T12479] (syz.3.1437,12479,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 735.922553][T12479] JBD2: Ignoring recovery information on journal [ 735.993820][T12479] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 737.995091][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 741.296766][T12509] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1439'. [ 741.327788][T12509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.585952][T12531] input: syz1 as /devices/virtual/input/input12 [ 747.683590][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.697252][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.869619][T12586] syzkaller0: entered promiscuous mode [ 751.869644][T12586] syzkaller0: entered allmulticast mode [ 757.897609][T12622] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 759.181409][T12649] syzkaller0: entered promiscuous mode [ 759.186456][T12649] syzkaller0: entered allmulticast mode [ 759.307738][T12649] TC_ACT_REPEAT abuse ? [ 769.320891][T12737] dlm: no local IP address has been set [ 769.328287][T12737] dlm: cannot start dlm midcomms -107 [ 769.364128][T12737] loop8: detected capacity change from 0 to 16 [ 769.983407][T12732] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 770.238344][T12737] erofs: (device loop8): mounted with root inode @ nid 36. [ 776.090624][ T5772] Bluetooth: hci0: unexpected event for opcode 0x0411 [ 777.142337][T12776] loop7: detected capacity change from 0 to 256 [ 777.156915][T12776] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 778.002977][T12797] loop3: detected capacity change from 0 to 32768 [ 778.073490][T12797] (syz.3.1485,12797,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 778.109023][T12797] (syz.3.1485,12797,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 778.146191][T12797] JBD2: Ignoring recovery information on journal [ 778.274902][T12797] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 778.762152][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 780.330137][ T27] audit: type=1326 audit(1769752659.752:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.7.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683339aeb9 code=0x7ffc0000 [ 780.471510][ T27] audit: type=1326 audit(1769752659.752:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.7.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683339aeb9 code=0x7ffc0000 [ 780.675927][T12814] loop3: detected capacity change from 0 to 40427 [ 780.772101][T12814] F2FS-fs (loop3): invalid crc value [ 780.786741][T12814] F2FS-fs (loop3): Found nat_bits in checkpoint [ 780.834685][ T27] audit: type=1326 audit(1769752659.782:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.7.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f683339aeb9 code=0x7ffc0000 [ 780.936631][T12814] F2FS-fs (loop3): Start checkpoint disabled! [ 781.005440][T12814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 781.027515][ T27] audit: type=1326 audit(1769752659.782:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.7.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683339aeb9 code=0x7ffc0000 [ 781.157203][ T27] audit: type=1326 audit(1769752659.782:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.7.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683339aeb9 code=0x7ffc0000 [ 781.395936][T12822] syz.3.1487: attempt to access beyond end of device [ 781.395936][T12822] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 781.418039][T12822] syz.3.1487: attempt to access beyond end of device [ 781.418039][T12822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 781.434046][T12822] syz.3.1487: attempt to access beyond end of device [ 781.434046][T12822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 781.448337][T12822] syz.3.1487: attempt to access beyond end of device [ 781.448337][T12822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 781.464507][T12822] syz.3.1487: attempt to access beyond end of device [ 781.464507][T12822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 781.481000][T12822] syz.3.1487: attempt to access beyond end of device [ 781.481000][T12822] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 781.494342][T12822] syz.3.1487: attempt to access beyond end of device [ 781.494342][T12822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 781.508813][T12822] syz.3.1487: attempt to access beyond end of device [ 781.508813][T12822] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 781.523426][T12822] syz.3.1487: attempt to access beyond end of device [ 781.523426][T12822] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 781.537869][T12822] syz.3.1487: attempt to access beyond end of device [ 781.537869][T12822] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 782.427319][ T27] audit: type=1326 audit(1769752659.822:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.7.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f683339aeb9 code=0x7ffc0000 [ 782.526950][ T27] audit: type=1800 audit(1769752661.672:245): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1487" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 785.393360][ T7652] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 785.440069][ T7652] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 785.446586][ T7652] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 786.582195][ T5772] Bluetooth: hci4: command 0x0406 tx timeout [ 788.461431][T12861] loop8: detected capacity change from 0 to 2048 [ 788.528362][T12861] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 788.559687][T12864] binder: BINDER_SET_CONTEXT_MGR already set [ 788.563094][T12861] NILFS (loop8): mounting unchecked fs [ 788.565207][T12864] binder: 12863:12864 ioctl 4018620d 200000000100 returned -16 [ 789.128794][T12866] binder: BINDER_SET_CONTEXT_MGR already set [ 789.136039][T12866] binder: 12863:12866 ioctl 4018620d 2000000002c0 returned -16 [ 790.151407][T12413] udevd[12413]: incorrect nilfs2 checksum on /dev/loop8 [ 790.180237][T12861] NILFS (loop8): recovery complete [ 790.200950][T12868] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 795.474436][T12903] syzkaller0: entered promiscuous mode [ 795.608216][T12903] syzkaller0: entered allmulticast mode [ 801.383533][T12943] @0Y: renamed from syz_tun (while UP) [ 801.409371][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 801.811824][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 801.819407][T12945] loop8: detected capacity change from 0 to 32768 [ 801.837561][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 801.846951][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 801.857279][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 801.863870][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 801.989156][T12945] (syz.8.1510,12945,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 802.003280][T12945] (syz.8.1510,12945,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 802.083602][T12945] JBD2: Ignoring recovery information on journal [ 802.145885][T12945] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 802.677868][T12002] ocfs2: Unmounting device (7,8) on (node local) [ 803.920305][T11985] Bluetooth: hci3: command tx timeout [ 804.020648][ T7665] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.648539][ T7665] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.125884][T11985] Bluetooth: hci3: command tx timeout [ 806.221948][ T7665] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.311119][ T7665] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.344770][T12939] chnl_net:caif_netlink_parms(): no params data found [ 806.418453][T10454] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 806.691174][T10454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.716870][T10454] usb 4-1: config 0 has no interfaces? [ 806.728344][T10454] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 806.730044][T12939] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.743253][T10454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.837221][T12990] "syz.0.1517" (12990) uses obsolete ecb(arc4) skcipher [ 806.871670][T10454] usb 4-1: config 0 descriptor?? [ 807.972407][T10454] usb 4-1: USB disconnect, device number 11 [ 808.058109][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.105859][T12939] bridge_slave_0: entered allmulticast mode [ 808.136167][T12939] bridge_slave_0: entered promiscuous mode [ 808.168246][T12939] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.174829][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.217350][T11985] Bluetooth: hci3: command tx timeout [ 808.229920][T12939] bridge_slave_1: entered allmulticast mode [ 808.247236][T12939] bridge_slave_1: entered promiscuous mode [ 808.728871][T12998] nbd8: detected capacity change from 0 to 63 [ 808.955860][ T6624] block nbd8: Send control failed (result -32) [ 808.962348][ T6624] block nbd8: Request send failed, requeueing [ 808.973715][T11985] block nbd8: Receive control failed (result -32) [ 808.981004][ T6624] block nbd8: Dead connection, failed to find a fallback [ 808.992177][ T6624] block nbd8: shutting down sockets [ 809.007164][ T6624] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 809.018032][ T6624] Buffer I/O error on dev nbd8, logical block 0, async page read [ 809.021359][ T7665] tipc: Left network mode [ 809.029398][ T6136] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 809.047402][ T6136] Buffer I/O error on dev nbd8, logical block 1, async page read [ 809.054637][ T6136] Buffer I/O error on dev nbd8, logical block 2, async page read [ 809.062148][ T6136] Buffer I/O error on dev nbd8, logical block 3, async page read [ 809.069339][T12939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.072119][ T6136] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 809.085880][ T6136] Buffer I/O error on dev nbd8, logical block 0, async page read [ 809.093148][ T6136] I/O error, dev nbd8, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 809.101727][ T6136] Buffer I/O error on dev nbd8, logical block 1, async page read [ 809.139356][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.145315][T12999] I/O error, dev nbd8, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 809.153617][T12999] Buffer I/O error on dev nbd8, logical block 2, async page read [ 809.161038][T12999] Buffer I/O error on dev nbd8, logical block 3, async page read [ 809.168791][T12999] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 809.177528][T12999] Buffer I/O error on dev nbd8, logical block 0, async page read [ 809.184543][T12999] Buffer I/O error on dev nbd8, logical block 1, async page read [ 809.193149][T12999] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 809.197763][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.201814][T12999] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 809.215803][T12999] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 809.227607][T12999] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 809.229370][T12939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.236299][T12373] ldm_validate_partition_table(): Disk read failed. [ 809.253139][T12373] Dev nbd8: unable to read RDB block 0 [ 809.260483][T12373] nbd8: unable to read partition table [ 810.202134][T12373] ldm_validate_partition_table(): Disk read failed. [ 810.233126][T12373] Dev nbd8: unable to read RDB block 0 [ 810.238775][T11985] Bluetooth: hci3: command tx timeout [ 810.256107][T12373] nbd8: unable to read partition table [ 811.578326][T12939] team0: Port device team_slave_0 added [ 811.603083][T12939] team0: Port device team_slave_1 added [ 811.895082][T12939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.903759][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.944749][T12939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.286046][T12939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.307186][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.332483][T12939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.126855][T12939] hsr_slave_0: entered promiscuous mode [ 816.714524][T12939] hsr_slave_1: entered promiscuous mode [ 817.637987][ T7665] hsr_slave_0: left promiscuous mode [ 817.645691][ T7665] hsr_slave_1: left promiscuous mode [ 817.659570][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.667149][ T7665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.674487][ T7665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.778257][ T7665] bridge_slave_1: left allmulticast mode [ 817.783521][ T7665] bridge_slave_1: left promiscuous mode [ 817.807761][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.826836][ T7665] bridge_slave_0: left allmulticast mode [ 817.844905][ T7665] bridge_slave_0: left promiscuous mode [ 817.857842][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.927986][ T7665] veth1_macvtap: left promiscuous mode [ 817.933171][ T7665] veth0_macvtap: left promiscuous mode [ 817.947338][ T7665] veth1_vlan: left promiscuous mode [ 817.952331][ T7665] veth0_vlan: left promiscuous mode [ 820.518084][ T7665] bond1 (unregistering): Released all slaves [ 822.622012][T13081] nbd3: detected capacity change from 0 to 63 [ 822.807299][T11985] Bluetooth: hci3: command tx timeout [ 823.210569][ T5772] block nbd3: Receive control failed (result -104) [ 824.457868][ T7665] team0 (unregistering): Port device team_slave_1 removed [ 824.538111][ T7665] team0 (unregistering): Port device team_slave_0 removed [ 824.618884][ T7665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.686121][ T7665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.159989][ T7665] bond0 (unregistering): Released all slaves [ 825.309618][T13077] bridge_slave_0: left allmulticast mode [ 825.314907][T13077] bridge_slave_0: left promiscuous mode [ 825.320886][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.350685][T13077] bridge_slave_1: left allmulticast mode [ 825.355857][T13077] bridge_slave_1: left promiscuous mode [ 825.361412][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.373112][T13077] bond0: (slave bond_slave_0): Releasing backup interface [ 825.383110][T13077] bond_slave_0: left allmulticast mode [ 825.392262][T13077] bond0: (slave bond_slave_1): Releasing backup interface [ 825.401529][T13077] bond_slave_1: left allmulticast mode [ 825.413483][T13077] team0: Port device team_slave_0 removed [ 825.420638][T13077] team0: Port device team_slave_1 removed [ 825.426012][T13077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.433240][T13077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.440429][T13077] vxlan1: left allmulticast mode [ 825.444901][T13077] vxlan1: left promiscuous mode [ 825.449800][T13077] bridge0: port 3(vxlan1) entered disabled state [ 825.462554][T13077] bond2: (slave macvlan2): Releasing backup interface [ 826.259875][T12939] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 826.476601][T12939] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 826.524724][T12939] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 826.601702][T12939] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 827.723574][ T7665] IPVS: stop unused estimator thread 0... [ 828.937207][T12939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.058560][T13129] loop3: detected capacity change from 0 to 128 [ 829.076297][T13129] FAT-fs (loop3): Unrecognized mount option "@" or missing value [ 829.175881][T12939] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.333831][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.340378][ T7652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.933394][T12939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 831.372074][T12939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.475003][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.481602][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.375238][T13151] overlayfs: bad index found (index=index/00fb21000191a83284a5d448e2bd4ba12ca05f461fc5b8d20afd00000000000000, ftype=2000, origin ftype=a000). [ 835.315648][T12939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.609283][T12939] veth0_vlan: entered promiscuous mode [ 837.644683][T12939] veth1_vlan: entered promiscuous mode [ 837.749801][T12939] veth0_macvtap: entered promiscuous mode [ 837.771144][T12939] veth1_macvtap: entered promiscuous mode [ 837.805645][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.839613][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.869261][T12939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.910946][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.947250][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.969227][T12939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.992235][T12939] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.018748][T12939] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.026658][T12939] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.057109][T12939] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.257567][ T7652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.264688][ T7652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.367517][ T7652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.374797][ T7652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.967905][T10456] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 848.195395][T10456] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.232114][T10456] usb 10-1: config 0 has no interfaces? [ 848.259551][T10456] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 848.296320][T10456] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.376072][T10456] usb 10-1: config 0 descriptor?? [ 850.735454][ T5850] usb 10-1: USB disconnect, device number 2 [ 853.537619][ T6136] block nbd3: Possible stuck request ffff888021fb0000: control (read@0,1024B). Runtime 30 seconds [ 853.550548][ T6136] block nbd3: Possible stuck request ffff888021fb0200: control (read@1024,1024B). Runtime 30 seconds [ 853.560841][ T6136] block nbd3: Possible stuck request ffff888021fb0400: control (read@2048,1024B). Runtime 30 seconds [ 853.571130][ T6136] block nbd3: Possible stuck request ffff888021fb0600: control (read@3072,1024B). Runtime 30 seconds [ 858.470756][T13326] bridge_slave_0: left allmulticast mode [ 858.493433][T13326] bridge_slave_0: left promiscuous mode [ 858.519558][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.704794][T13326] bridge_slave_1: left allmulticast mode [ 858.733762][T13326] bridge_slave_1: left promiscuous mode [ 858.765790][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.885951][T13326] bond0: (slave bond_slave_0): Releasing backup interface [ 858.979361][T13326] bond0: (slave bond_slave_1): Releasing backup interface [ 859.051069][ T27] audit: type=1326 audit(1769752739.402:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13342 comm="syz.0.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x0 [ 859.091286][T13326] team0: Port device team_slave_0 removed [ 859.118212][T13326] team0: Port device team_slave_1 removed [ 859.128656][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.135489][T13326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.155743][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.163593][T13326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.929978][T13371] syzkaller0: entered promiscuous mode [ 863.935281][T13371] syzkaller0: entered allmulticast mode [ 869.349687][T13416] xt_ecn: cannot match TCP bits for non-tcp packets [ 870.824733][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.831630][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.061754][T13431] Bluetooth: MGMT ver 1.22 [ 873.583973][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.597399][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.606357][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.617195][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.635556][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 873.647595][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.917211][T11985] Bluetooth: hci0: command tx timeout [ 876.543388][T13466] loop9: detected capacity change from 0 to 8 [ 876.683340][T13466] SQUASHFS error: lzo decompression failed, data probably corrupt [ 876.691291][T13466] SQUASHFS error: Failed to read block 0x82: -5 [ 876.697261][T13466] SQUASHFS error: Unable to read metadata cache entry [80] [ 876.703906][T13466] SQUASHFS error: Unable to read inode 0x11f [ 877.406697][T13445] chnl_net:caif_netlink_parms(): no params data found [ 878.467163][T11985] Bluetooth: hci0: command tx timeout [ 878.538334][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.609105][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.629554][T13445] bridge_slave_0: entered allmulticast mode [ 878.636673][T13445] bridge_slave_0: entered promiscuous mode [ 878.675367][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.695460][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.768390][T13445] bridge_slave_1: entered allmulticast mode [ 878.794562][T13445] bridge_slave_1: entered promiscuous mode [ 880.557622][T11985] Bluetooth: hci0: command tx timeout [ 880.662313][T13445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.720751][T13445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.815339][T13445] team0: Port device team_slave_0 added [ 880.833942][T13445] team0: Port device team_slave_1 added [ 880.872168][T13445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.878899][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.904275][T13445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.931780][T13445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.942042][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.975272][T13445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.063297][T13445] hsr_slave_0: entered promiscuous mode [ 881.075842][T13445] hsr_slave_1: entered promiscuous mode [ 881.082385][T13445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.096948][T13445] Cannot create hsr debugfs directory [ 881.998944][T13514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 882.014807][T13516] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 882.028155][T13516] bond1: (slave macvlan2): making interface the new active one [ 882.036163][T13516] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 882.074037][T13513] bridge_slave_0: left allmulticast mode [ 882.104648][T13513] bridge_slave_0: left promiscuous mode [ 882.111711][T13513] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.131503][T13513] bridge_slave_1: left allmulticast mode [ 882.136698][T13513] bridge_slave_1: left promiscuous mode [ 882.147879][T13513] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.166376][T13513] bond0: (slave bond_slave_0): Releasing backup interface [ 882.193125][T13513] bond0: (slave bond_slave_1): Releasing backup interface [ 882.271991][T13513] team0: Port device team_slave_0 removed [ 882.298668][T13513] team0: Port device team_slave_1 removed [ 882.309011][T13513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.326424][T13513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.341955][T13513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.354471][T13513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.414123][T13520] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 882.596785][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1597'. [ 882.637277][T11985] Bluetooth: hci0: command tx timeout [ 882.849738][T13531] loop8: detected capacity change from 0 to 512 [ 882.884632][T13531] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 883.799256][ T7633] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 884.761376][T11710] block nbd3: Possible stuck request ffff888021fb0000: control (read@0,1024B). Runtime 60 seconds [ 884.772962][T11710] block nbd3: Possible stuck request ffff888021fb0200: control (read@1024,1024B). Runtime 60 seconds [ 884.783153][T11710] block nbd3: Possible stuck request ffff888021fb0400: control (read@2048,1024B). Runtime 60 seconds [ 884.793361][T11710] block nbd3: Possible stuck request ffff888021fb0600: control (read@3072,1024B). Runtime 60 seconds [ 889.351250][T13445] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 889.801138][T13445] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 889.850974][T13445] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 889.870816][T13565] xt_l2tp: wrong L2TP version: 0 [ 889.900268][T13445] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 890.103616][T13575] loop8: detected capacity change from 0 to 1024 [ 890.157821][T13575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 891.204940][T13445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.850645][T13445] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.888733][T13604] binder: BINDER_SET_CONTEXT_MGR already set [ 894.894204][T13604] binder: 13595:13604 ioctl 4018620d 200000000040 returned -16 [ 896.274657][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.281256][ T7658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.339663][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.346391][ T7658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.646439][T13445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.762405][T13445] veth0_vlan: entered promiscuous mode [ 898.824177][T13445] veth1_vlan: entered promiscuous mode [ 898.925555][T13445] veth0_macvtap: entered promiscuous mode [ 898.960825][T13445] veth1_macvtap: entered promiscuous mode [ 899.042515][T13445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.102692][T13445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.143414][T13445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.176559][T13445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.199233][T13445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.237207][T13445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.140888][ T5139] udevd[5139]: worker [13060] /devices/virtual/block/nbd3 is taking a long time [ 900.479790][ T7643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.508295][ T7643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.176293][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.233243][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.742353][T13653] loop8: detected capacity change from 0 to 8 [ 903.996608][T13661] loop8: detected capacity change from 0 to 256 [ 905.288538][T13663] xt_l2tp: wrong L2TP version: 0 [ 915.977560][T11710] block nbd3: Possible stuck request ffff888021fb0000: control (read@0,1024B). Runtime 90 seconds [ 915.987322][T11710] block nbd3: Possible stuck request ffff888021fb0200: control (read@1024,1024B). Runtime 90 seconds [ 915.998370][T11710] block nbd3: Possible stuck request ffff888021fb0400: control (read@2048,1024B). Runtime 90 seconds [ 916.009682][T11710] block nbd3: Possible stuck request ffff888021fb0600: control (read@3072,1024B). Runtime 90 seconds [ 917.782770][T13756] batman_adv: batadv0: Adding interface: dummy0 [ 917.847966][T13756] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.004395][T13756] batman_adv: batadv0: Interface activated: dummy0 [ 918.079857][T13759] batadv0: mtu less than device minimum [ 918.087493][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.099913][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.110466][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.121264][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.131927][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.142417][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.153253][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.163758][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.174464][T13759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 918.847675][T13777] bond1: option mode: unable to set because the bond device has slaves [ 921.062125][T13777] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 922.453914][T13796] loop8: detected capacity change from 0 to 8 [ 923.750154][T13796] SQUASHFS error: lzo decompression failed, data probably corrupt [ 923.757339][T13796] SQUASHFS error: Failed to read block 0x82: -5 [ 923.763073][T13796] SQUASHFS error: Unable to read metadata cache entry [80] [ 923.769680][T13796] SQUASHFS error: Unable to read inode 0x11f [ 923.901168][T13337] blk_print_req_error: 87 callbacks suppressed [ 923.901186][T13337] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 929.687992][ T5772] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 929.698861][ T5772] Bluetooth: hci4: Injecting HCI hardware error event [ 929.721950][ T5772] Bluetooth: hci4: hardware error 0x00 [ 930.082576][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 932.738045][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.743991][ T51] Bluetooth: hci0: command tx timeout [ 932.754925][ T5772] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 932.760959][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.881874][ T5850] libceph: connect (1)[c::]:6789 error -101 [ 935.956182][ T5850] libceph: mon0 (1)[c::]:6789 connect error [ 935.964995][T13871] ceph: No mds server is up or the cluster is laggy [ 943.687544][T13923] netlink: 'syz.8.1660': attribute type 33 has an invalid length. [ 943.694725][T13923] netlink: 51 bytes leftover after parsing attributes in process `syz.8.1660'. [ 946.131318][T13744] block nbd3: Possible stuck request ffff888021fb0000: control (read@0,1024B). Runtime 120 seconds [ 946.141861][T13744] block nbd3: Possible stuck request ffff888021fb0200: control (read@1024,1024B). Runtime 120 seconds [ 946.151979][T13744] block nbd3: Possible stuck request ffff888021fb0400: control (read@2048,1024B). Runtime 120 seconds [ 946.162093][T13744] block nbd3: Possible stuck request ffff888021fb0600: control (read@3072,1024B). Runtime 120 seconds [ 954.117262][ T27] audit: type=1326 audit(1769752834.402:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.472932][ T27] audit: type=1326 audit(1769752834.402:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.564575][ T27] audit: type=1326 audit(1769752834.412:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.597688][ T27] audit: type=1326 audit(1769752834.412:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.647250][ T27] audit: type=1326 audit(1769752834.412:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.696264][T13996] loop8: detected capacity change from 0 to 1024 [ 955.701116][ T27] audit: type=1326 audit(1769752834.412:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.740705][ T27] audit: type=1326 audit(1769752834.412:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.786625][ T27] audit: type=1326 audit(1769752834.412:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 955.826151][T13337] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 955.867319][ T27] audit: type=1326 audit(1769752834.412:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 956.698616][T14008] loop2: detected capacity change from 0 to 512 [ 957.154587][T14009] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1673'. [ 957.163471][T14008] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 957.364845][ T27] audit: type=1326 audit(1769752834.412:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 958.463420][ T7660] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 976.778039][T13744] block nbd3: Possible stuck request ffff888021fb0000: control (read@0,1024B). Runtime 150 seconds [ 976.790441][T13744] block nbd3: Possible stuck request ffff888021fb0200: control (read@1024,1024B). Runtime 150 seconds [ 976.801115][T13744] block nbd3: Possible stuck request ffff888021fb0400: control (read@2048,1024B). Runtime 150 seconds [ 976.811562][T13744] block nbd3: Possible stuck request ffff888021fb0600: control (read@3072,1024B). Runtime 150 seconds [ 981.202152][T14147] loop2: detected capacity change from 0 to 128 [ 988.667236][T14219] netlink: 'syz.2.1703': attribute type 33 has an invalid length. [ 988.674431][T14219] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1703'. [ 993.445673][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.451630][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.270033][T14276] loop2: detected capacity change from 0 to 128 [ 999.286388][T14276] zonefs (loop2) ERROR: Not a zoned block device [ 1000.063344][T14282] loop2: detected capacity change from 0 to 128 [ 1000.108507][T14282] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1001.467212][T14300] overlayfs: failed to clone upperpath [ 1006.220362][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 1006.220401][ T27] audit: type=1326 audit(1769752886.548:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1006.246410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1006.914593][ T27] audit: type=1326 audit(1769752886.548:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1007.557133][ T27] audit: type=1326 audit(1769752886.548:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1007.577637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1007.805688][ T27] audit: type=1326 audit(1769752886.548:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1007.991705][ T27] audit: type=1326 audit(1769752886.548:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1008.012138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.096247][ T5772] Bluetooth: hci0: command 0x0405 tx timeout [ 1008.198831][ T27] audit: type=1326 audit(1769752886.548:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1008.348610][ T27] audit: type=1326 audit(1769752886.548:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1008.452047][T13744] block nbd3: Possible stuck request ffff888021fb0000: control (read@0,1024B). Runtime 180 seconds [ 1008.464352][T13744] block nbd3: Possible stuck request ffff888021fb0200: control (read@1024,1024B). Runtime 180 seconds [ 1008.487755][T13744] block nbd3: Possible stuck request ffff888021fb0400: control (read@2048,1024B). Runtime 180 seconds [ 1008.510053][T13744] block nbd3: Possible stuck request ffff888021fb0600: control (read@3072,1024B). Runtime 180 seconds [ 1008.544058][ T27] audit: type=1326 audit(1769752886.548:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1008.690021][ T27] audit: type=1326 audit(1769752886.548:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1008.710460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1008.790322][ T5139] udevd[5139]: worker [13060] /devices/virtual/block/nbd3 timeout; kill it [ 1008.871125][ T5139] udevd[5139]: seq 17536 '/devices/virtual/block/nbd3' killed [ 1008.924402][ T27] audit: type=1326 audit(1769752886.548:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14329 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61d9aeb9 code=0x7ffc0000 [ 1008.945572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1010.748831][T12549] libceph: connect (1)[c::]:6789 error -101 [ 1011.693542][T12549] libceph: mon0 (1)[c::]:6789 connect error [ 1011.982520][T14359] ceph: No mds server is up or the cluster is laggy [ 1012.098541][T14374] loop2: detected capacity change from 0 to 8 [ 1012.925381][T12549] libceph: connect (1)[c::]:6789 error -101 [ 1013.217115][T12549] libceph: mon0 (1)[c::]:6789 connect error [ 1013.746375][T12549] libceph: connect (1)[c::]:6789 error -101 [ 1013.772371][T12549] libceph: mon0 (1)[c::]:6789 connect error [ 1014.504600][T14385] loop9: detected capacity change from 0 to 512 [ 1014.518651][T14385] EXT4-fs: Ignoring removed oldalloc option [ 1015.307295][T14385] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 1015.688743][T13288] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1018.163636][T14406] ip6t_srh: unknown srh invflags 7F00 [ 1021.058500][ T28] INFO: task syz.3.1563:13329 blocked for more than 144 seconds. [ 1021.087259][ T28] Not tainted syzkaller #0 [ 1021.091967][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1021.170590][ T28] task:syz.3.1563 state:D stack:26280 pid:13329 ppid:5775 flags:0x00004004 [ 1021.227165][ T28] Call Trace: [ 1021.248226][ T28] [ 1021.302557][ T28] __schedule+0x1553/0x45a0 [ 1021.387290][ T28] ? asan.module_dtor+0x20/0x20 [ 1021.391922][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1021.417280][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1021.443013][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1021.467944][ T28] schedule+0xbd/0x170 [ 1022.177539][ T28] schedule_preempt_disabled+0x13/0x20 [ 1022.627126][ T28] __mutex_lock+0x6a9/0xcc0 [ 1022.669523][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1022.673924][ T28] ? blkdev_get_by_dev+0x121/0x600 [ 1022.724452][ T28] ? mutex_lock_nested+0x20/0x20 [ 1022.769530][ T28] ? iput+0x343/0x920 [ 1022.773311][ T28] ? ilookup+0x1c4/0x200 [ 1022.822831][ T28] ? disk_block_events+0xa7/0x120 [ 1022.843686][ T28] ? blkdev_get_by_dev+0xf7/0x600 [ 1022.858603][ T28] blkdev_get_by_dev+0x121/0x600 [ 1022.863383][ T28] blkdev_open+0x152/0x360 [ 1022.874847][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 1022.887209][ T28] do_dentry_open+0x8c6/0x1500 [ 1022.891615][ T28] path_openat+0x27f1/0x3230 [ 1022.896011][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1022.912109][ T28] ? lock_chain_count+0x20/0x20 [ 1022.916583][ T28] ? do_filp_open+0x430/0x430 [ 1022.942254][ T28] ? asan.module_dtor+0x20/0x20 [ 1022.946822][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1022.967491][ T28] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1022.972689][ T28] do_filp_open+0x1f5/0x430 [ 1022.987041][ T28] ? vfs_tmpfile+0x490/0x490 [ 1022.991444][ T28] ? preempt_schedule_common+0x82/0xc0 [ 1022.996620][ T28] ? _raw_spin_unlock+0x3a/0x40 [ 1023.027134][ T28] ? alloc_fd+0x58f/0x630 [ 1023.031318][ T28] do_sys_openat2+0x134/0x1d0 [ 1023.036084][ T28] ? do_sys_open+0xe0/0xe0 [ 1023.057423][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1023.063087][ T28] ? lock_chain_count+0x20/0x20 [ 1023.073965][ T28] ? lock_chain_count+0x20/0x20 [ 1023.087183][ T28] __x64_sys_openat+0x139/0x160 [ 1023.091855][ T28] do_syscall_64+0x55/0xa0 [ 1023.096298][ T28] ? clear_bhb_loop+0x40/0x90 [ 1023.114391][ T28] ? clear_bhb_loop+0x40/0x90 [ 1023.128410][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.133970][ T28] RIP: 0033:0x7f75a875b78e [ 1023.147437][ T28] RSP: 002b:00007f75a95c3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1023.155362][ T28] RAX: ffffffffffffffda RBX: 00007f75a95c46c0 RCX: 00007f75a875b78e [ 1023.184568][ T28] RDX: 0000000000000000 RSI: 00007f75a95c3c00 RDI: ffffffffffffff9c [ 1023.204583][ T28] RBP: 00007f75a95c3c00 R08: 0000000000000000 R09: 0000000000000000 [ 1023.213822][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1023.221973][ T28] R13: 00007f75a8a16218 R14: 00007f75a8a16180 R15: 00007ffc34a206f8 [ 1023.230372][ T28] [ 1023.233409][ T28] [ 1023.233409][ T28] Showing all locks held in the system: [ 1023.249506][ T28] 1 lock held by khungtaskd/28: [ 1023.275262][ T28] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1023.291429][ T28] 2 locks held by getty/5529: [ 1023.295867][ T28] #0: ffff88803165a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1023.306035][ T28] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1023.316069][ T28] 2 locks held by syz-executor/12939: [ 1023.321858][ T28] 1 lock held by udevd/13060: [ 1023.326306][ T28] #0: ffff888021e714c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1023.343806][ T28] 1 lock held by syz.3.1563/13329: [ 1023.348991][ T28] #0: ffff888021e714c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1023.363440][ T28] 3 locks held by sed/14427: [ 1023.371121][ T28] [ 1023.373541][ T28] ============================================= [ 1023.373541][ T28] [ 1023.383182][ T28] NMI backtrace for cpu 0 [ 1023.387383][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1023.394455][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.404253][ T28] Call Trace: [ 1023.407305][ T28] [ 1023.409961][ T28] dump_stack_lvl+0x18c/0x250 [ 1023.414282][ T28] ? show_regs_print_info+0x20/0x20 [ 1023.419153][ T28] ? load_image+0x400/0x400 [ 1023.423404][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1023.427883][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1023.433757][ T28] ? _printk+0xde/0x130 [ 1023.437673][ T28] ? load_image+0x400/0x400 [ 1023.441839][ T28] ? load_image+0x400/0x400 [ 1023.445949][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1023.451699][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1023.457279][ T28] watchdog+0xf3d/0xf80 [ 1023.461236][ T28] ? watchdog+0x1e1/0xf80 [ 1023.465255][ T28] kthread+0x2fa/0x390 [ 1023.469096][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1023.473830][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1023.478035][ T28] ret_from_fork+0x48/0x80 [ 1023.482154][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1023.486584][ T28] ret_from_fork_asm+0x11/0x20 [ 1023.491119][ T28] [ 1023.494874][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1023.499874][ C1] NMI backtrace for cpu 1 [ 1023.499889][ C1] CPU: 1 PID: 5830 Comm: kworker/1:5 Not tainted syzkaller #0 [ 1023.499904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.499914][ C1] Workqueue: events __sched_core_put [ 1023.499941][ C1] RIP: 0010:__text_poke+0xa4c/0xb40 [ 1023.499961][ C1] Code: ba 96 56 00 c6 05 fb ff 44 0d 01 48 89 da 4c 31 f2 48 c7 c7 a0 6f c5 8a 4c 89 f6 4c 89 f9 e8 fb 5a 20 00 0f 0b e9 cc fa ff ff <48> c7 c1 40 42 0b 90 80 e1 07 80 c1 03 38 c1 0f 8c 78 f6 ff ff 48 [ 1023.499974][ C1] RSP: 0018:ffffc900049778a0 EFLAGS: 00000202 [ 1023.499986][ C1] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffff88802b250000 [ 1023.499996][ C1] RDX: 0000000000000000 RSI: 0000000000000d10 RDI: 0000000000001000 [ 1023.500006][ C1] RBP: ffffc900049779f0 R08: 0000000000000001 R09: 0000000000000006 [ 1023.500016][ C1] R10: dffffc0000000000 R11: fffff5200092ef52 R12: ffffffff815c7d0f [ 1023.500027][ C1] R13: dffffc0000000000 R14: 1ffff9200092ef24 R15: 0000000000000d0f [ 1023.500037][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1023.500057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1023.500068][ C1] CR2: 0000561bb36ab0c8 CR3: 0000000066cb1000 CR4: 00000000003506e0 [ 1023.500084][ C1] Call Trace: [ 1023.500090][ C1] [ 1023.500098][ C1] ? preempt_schedule_common+0x82/0xc0 [ 1023.500119][ C1] ? text_poke_sync+0x30/0x30 [ 1023.500133][ C1] ? preempt_schedule+0xc0/0xd0 [ 1023.500151][ C1] ? __text_poke+0xb40/0xb40 [ 1023.500165][ C1] ? smp_call_function_many+0x40/0x40 [ 1023.500181][ C1] ? text_poke+0xc0/0xc0 [ 1023.500195][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1023.500211][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1023.500237][ C1] text_poke_bp_batch+0x4fd/0x990 [ 1023.500256][ C1] ? raw_spin_rq_lock_nested+0x1f/0x140 [ 1023.500276][ C1] ? text_poke_loc_init+0x880/0x880 [ 1023.500291][ C1] ? text_poke_queue+0x18c/0x190 [ 1023.500309][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 1023.500331][ C1] ? __jump_label_update+0x36c/0x390 [ 1023.500352][ C1] text_poke_finish+0x30/0x50 [ 1023.500367][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1023.500388][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1023.500408][ C1] static_key_disable+0x1a/0x20 [ 1023.500424][ C1] __sched_core_put+0xef/0x120 [ 1023.500444][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1023.500462][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1023.500492][ C1] ? assign_work+0x430/0x430 [ 1023.500511][ C1] ? assign_work+0x3d0/0x430 [ 1023.500530][ C1] worker_thread+0xa55/0xfc0 [ 1023.500559][ C1] kthread+0x2fa/0x390 [ 1023.500572][ C1] ? pr_cont_work+0x560/0x560 [ 1023.500589][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1023.500602][ C1] ret_from_fork+0x48/0x80 [ 1023.500618][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1023.500632][ C1] ret_from_fork_asm+0x11/0x20 [ 1023.500656][ C1] [ 1023.550284][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1023.550302][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1023.550321][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1023.550331][ T28] Call Trace: [ 1023.550343][ T28] [ 1023.550350][ T28] dump_stack_lvl+0x18c/0x250 [ 1023.550384][ T28] ? show_regs_print_info+0x20/0x20 [ 1023.550407][ T28] ? load_image+0x400/0x400 [ 1023.550439][ T28] panic+0x2dc/0x730 [ 1023.550457][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1023.550483][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1023.550500][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 1023.550523][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1023.550554][ T28] watchdog+0xf7c/0xf80 [ 1023.550576][ T28] ? watchdog+0x1e1/0xf80 [ 1023.550603][ T28] kthread+0x2fa/0x390 [ 1023.550620][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1023.550641][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1023.550658][ T28] ret_from_fork+0x48/0x80 [ 1023.550677][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1023.550694][ T28] ret_from_fork_asm+0x11/0x20 [ 1023.550728][ T28] [ 1023.556019][ T28] Kernel Offset: disabled [ 1023.875984][ T28] Rebooting in 86400 seconds..