last executing test programs: 7m8.756515136s ago: executing program 32 (id=342): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m28.043146007s ago: executing program 2 (id=450): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc}) r2 = syz_io_uring_setup(0x1268, &(0x7f0000000000)={0x0, 0xaf31, 0x400, 0x0, 0x36e}, &(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x240000, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobarrier}, {@quota}]}, 0x1, 0x565, &(0x7f0000000340)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) unshare(0x22020600) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x402}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES8=r3], 0x20) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) 6m26.364537777s ago: executing program 2 (id=458): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x12, 0x0, &(0x7f0000000000)="f8ad48cc02cb29dcc8007f5b86dd9f59d351", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m22.882661523s ago: executing program 2 (id=466): r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="5986", 0x2}], 0x1}}], 0x1, 0x8000) 6m22.079155144s ago: executing program 2 (id=470): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0x9, 0x40, {0xc0, 0xff}, 0x42, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc}) r2 = syz_io_uring_setup(0x1268, &(0x7f0000000000)={0x0, 0xaf31, 0x400, 0x0, 0x36e}, &(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x240000, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobarrier}, {@quota}]}, 0x1, 0x565, &(0x7f0000000340)="$eJzs3c9vG1kdAPDvTOIkm3Y3LewBVkALLBRU1W7c3Wq1l10uILRaacWKE4duSNwo1K5L7SybUIns3wASSJzgT+CAxAFpTxy4cUTiAIjlgLRABWqROBjNeOJ4E4ea2rFp/PlI0/nxZub7nt2Z9/zszAtgZl2MiL2IWIiItyJipdieFFO82p2y/R7cv7f+8P699SQ6nTf/luTp2bboHVPqnTc751JEfO0rEd9MjsZt7ezeWqvXa3eL9Uq7cafS2tm9stVY26xt1m5Xq9dXr1996dqL1bGV9ULjZx98eeu1r//yF598/zd7X/xulq2zRVp/OcapW/RSL05mPiJeO4lgUzBXzBemnA8eTxoRH4mIz+TX/0rM5f87AYDTrNNZic5K/zoAcNqleR9YkpYjIk2LRkA54kxEPBvLab3Zal++2dy+vdHtKzsXpfTmVr129fzi776d71xKsvXVPC1Pz9erh9avRcT5iPjB4lP5enm9Wd+YTpMHAGbemf76PyL+uZim5fJQhw74Vg8AeGIsTTsDAMDEqf8BYPao/wFg9gxR/xdf9u+deF4AgMnw+R8AZo/6HwBmj/ofAGbKG6+/nk2dh8Xzrzfe3tm+1Xz7ykatdavc2F4vrzfv3ilvNpub+TN7Go86X73ZvLP6Qmy/U2nXWu1Ka2f3RqO5fbt9I3+u941aaSKlAgD+m/MX3vttEhF7Lz+VT9E3loO6Gk63dIx7AU+WuVEO1kCAJ5rRvmB2DVWF542EX594XoDpGPgw76WBix/2o/8hiN8Zwf+VSx8fqv9/PozxDKeOnn2YXY/X///K2PMBTN5j9///Ybz5ACav00kOj/m/0Evq98YkRyUGAE7SCD/h63xvXI0QYKoeNZj3WL7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFPmbER8K5K0nI8Fnmb/puVyxNMRcS5Kyc2teu1qRDwTFyKitJitr0470wDAiNK/JMX4X5dWnj97OHUh+ddiPo+I7/z4zR++s9Zu313Ntv+9t31xf/iw6sFxI4wrCAAM70/D7JTX39Vi3vdB/sH9e+v70wnm8YgPvtQbfHT94f17+dRNmY9Op9OJWMrbEsv/SGK+OGYpIp6LiLkxxN97NyI+Nqj8Sd43cq4Y+bQ/fhSxn55o/PRD8dM8rTvPXr6PjiEvMGvey+4/rw66/tK4mM8HX/9L+R1qdPn9byli/973sC/+fBFpbkD87Jq/OGyMF3711SMbOyvdtHcjnpsfFD/pxU+Oif/8kPF//4lPff+VY9I6P4m4FIPj98eqtBt3Kq2d3StbjbXN2mbtdrV6ffX61ZeuvVit5H3Ulf2e6qP++vLlZ47LW1b+5WPid9/5M4fKv9A79nNDlv+n/37rG58+WF08HP8Lnx38/j+bzwe//lmd+Pkh468t//zY4buz+BvHlP9R7//lIeO//+fdjSF3BQAmoLWze2utXq/dHWkh+xQ6jvMcWciyONzO+83F0YL+MfKFg5cliSTGXa6sMTbMzqWTelVPfGG+11YcxwnnugvLxSknXJx0TKUYbSHOFQsPJhV0OvcjYHIOLvpp5wQAAAAAAAAAAAAAADjOJP6GadplBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6TwAAAP//z5i+xQ==") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) unshare(0x22020600) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x402}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES8=r3], 0x20) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) 6m19.951271936s ago: executing program 2 (id=478): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x75, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, 0x0) 6m15.898217791s ago: executing program 2 (id=482): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x178, &(0x7f0000000240)="$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") 6m0.656483194s ago: executing program 33 (id=482): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x178, &(0x7f0000000240)="$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") 5m2.679043731s ago: executing program 7 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x4080}, 0x8000) 4m47.988577911s ago: executing program 7 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0xffffff70, &(0x7f0000000080)}, 0xb) 4m45.782192171s ago: executing program 7 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x31, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) lstat(&(0x7f0000002c00)='./file1\x00', &(0x7f0000002c40)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r6, 0x40104d05, &(0x7f0000000900)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x200802, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) 4m44.120911797s ago: executing program 7 (id=693): r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffe, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000f00)={0x2, 0x4e24, @private=0xa010100}, 0x10) 4m43.746229706s ago: executing program 7 (id=696): sendmsg$unix(0xffffffffffffffff, 0x0, 0x1004) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_clone3(&(0x7f0000000680)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 4m42.75574708s ago: executing program 7 (id=698): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000023c0)={0x100000001, 0x9}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 4m27.630937777s ago: executing program 34 (id=698): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f00000023c0)={0x100000001, 0x9}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 3m50.559224266s ago: executing program 4 (id=833): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 3m45.836235718s ago: executing program 4 (id=839): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 3m34.222476474s ago: executing program 4 (id=859): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x1, 0x8f}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x10007ffb, 0x1, 0x10001, 0x1, 0x5, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x80, 0x10}, 'port0\x00', 0x20, 0x50000, 0x7fff, 0x0, 0x5, 0x9, 0x90, 0x0, 0x1, 0xb7}) 3m33.551940675s ago: executing program 4 (id=860): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000800)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0xffffffff00000000, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8000018, 0x1a, 0x104, &(0x7f0000000240)}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x7, 0x0, 0xff, 0x3}, {0x2, 0x88, 0x91, 0x9}]}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0x7a, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0x11, 0xa5, 0x2}, &(0x7f0000000d80)={r4, r5/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r6, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) 3m32.819797892s ago: executing program 4 (id=864): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x40000d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x20006, 0x1}) lstat(0x0, 0x0) 3m29.746653142s ago: executing program 4 (id=869): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, &(0x7f0000000540)) 3m12.10357772s ago: executing program 35 (id=869): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x13, 0x0, &(0x7f0000000540)) 3m10.715535233s ago: executing program 3 (id=911): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000800)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0xffffffff00000000, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8000018, 0x1a, 0x104, &(0x7f0000000240)}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x7, 0x0, 0xff, 0x3}, {0x101, 0x4, 0x3, 0x20000}]}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0x7a, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0x11, 0xa5, 0x2}, &(0x7f0000000d80)={r4, r5/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r6, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) 3m6.950369609s ago: executing program 3 (id=914): lstat(0x0, 0x0) 3m6.199972739s ago: executing program 3 (id=916): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) dup3(r0, r2, 0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90) 3m2.552558049s ago: executing program 3 (id=918): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) unshare(0x28040480) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@nolazytime}, {@user_xattr}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") openat(0xffffffffffffff9c, 0x0, 0x42042, 0x138) pipe(&(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)='k', 0x1}, {0x0}], 0x2) 2m52.747038522s ago: executing program 3 (id=934): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m45.016849299s ago: executing program 3 (id=948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x40000d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x20006, 0x1}) lstat(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m42.683447881s ago: executing program 36 (id=948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x40000d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x20006, 0x1}) lstat(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m52.662625553s ago: executing program 5 (id=1052): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @remote}, 0x1c) 1m51.926957478s ago: executing program 6 (id=1054): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000002480)=ANY=[], 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000008c0)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 1m51.913024878s ago: executing program 5 (id=1055): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000800)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0xffffffff00000000, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8000018, 0x1a, 0x104, &(0x7f0000000240)}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x3, &(0x7f0000000780)=[{0x7, 0x0, 0xff, 0x3}, {0x2, 0x88, 0x91, 0x9}, {0x101, 0x4, 0x3, 0x20000}]}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0x7a, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0x11, 0xa5, 0x2}, &(0x7f0000000d80)={r4, r5/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r6, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) 1m51.113087356s ago: executing program 5 (id=1057): mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000021ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x9, 0x2c, 0x68, 0x0, 0x9, 0x6, 0x0, @remote, @private=0xa010100, {[@rr={0x7, 0x3, 0x4}]}}, {{0x4e23, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x600}}}}}}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) 1m50.590570542s ago: executing program 6 (id=1059): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) fsopen(0x0, 0x202e3ed55dedd48d) 1m50.074487076s ago: executing program 6 (id=1061): getpgrp(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x802, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) mremap(&(0x7f00009e8000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00001eb000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m50.074125119s ago: executing program 5 (id=1062): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000800)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0xffffffff00000000, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8000018, 0x1a, 0x104, &(0x7f0000000240)}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x2, &(0x7f0000000780)=[{0x7, 0x0, 0xff, 0x3}, {0x2, 0x88, 0x91, 0x9}]}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000a80)={{0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0x7a, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0x11, 0xa5, 0x2}, &(0x7f0000000d80)={r4, r5/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r6, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) 1m47.348960212s ago: executing program 6 (id=1066): r0 = syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000080)={[{@map_acorn}, {@cruft}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$eJzs3V1v01gawPHHpYUqK6HV7gqhqsAB9qKVSnASCIq4AK9zkh5I7Mh2UHuFKpqiihRWlJW2vUHcsLvSzofgdj7EXM+XQfMRMvJL6GuSMiVNh/n/IvBJfHzOYyfy0xPFxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMRyq7ZdsKRhvPaKGsytBn4zLU6JUtnWe+v77S0eWAzpV8SK/8nsrFxNX7r6t73VV+L/bsl8+mxeZuPFrOz+6cqfH/51eqq//ZCAz8T2zu6rtW6383bSgYzRtUuD19W1Z0LfNJ26Vib0VaVctu8u10JVMw0dymykm8oNtBP5wYXsnS0pnV/121696jS0WnAXVaFSeXCnaNtl9STf0k4Q+t7dJ/nQXTaNhvHqSZ14dVznQfxBfGoiFWmnqdTGZrdTGrUDcaXCSSoVR1Uq2sVioVAsFsr3K/cf2Pb0kRfsQ+RIjcl/aDFZ3+jMDZzeVJb/pSFGPGnLiqhjH65UJRBfmgPWZxYfZYW7emi/+/N/P8tf3Vs9J0n+v54+uz4o/w+I5ewe27Iju/JK1qQrXenI24lHNN6HJQePeV20eGIk/PRYjDTFSV5R8Svii5KKlKUstjyXZalJKEpqYqQhWsLe++y9biafrkC0OBKJL4EoWRBXFkVJQSpSkZIo0ZKXVfGlLZ7UpSpO0sqGbCbHvTQk5i+VCgOr5Pqfu44Uh7RE/sfpfatTN3BqvX7+H+LimUUDAAAAAADGwUq+fY/H/zNyLSnVTEPbkw4LAAAAAAB8Q71eryfzYsXjfxG5JhbjfwAAAAAAvjdWco2dJSI5uZGWNsRKLpfiSwAAAAAAAL4TyZX/1+NFMgfKDbG+TJfC+B8AAAAAgO/EfwfPsT+bVWldsn76RYJgxvrQWvm7teXELzpb2YTuFw63GNXmrMtZI8miPJ09c/W8lc1+uTcJZtrL541Rc/1bWQBW+pXFXgCXTh6A/F9upnVurqfL9f6atJdczTR03vUbDwviOJenIr0S/ev15r8l2f3/ec3Llmxsdjv5F2+668nB+BC38mErm0DxyDyKQ2J5l8y3kFxzcewezyQXYmT95tJ+7f4b8Ficral086kT9/lIPsotEZneq5s7uP+zcZ+F/KC9z6IonHLPP8rttM7thdvp4pgoiqOiKO6P4quPxQmjKI2KovQVUVhyNAoAmJSNEVnIOpr4f8O5Nsnu0yfI7qf580I+ykJaZ2EuObFOzx1zRrdHndHtU2a3H4/cA2lQjo37/eFQVv0Ub/BpYL9ho2jFh/DCu61/ypXtnd07m1trLzsvO6+LxVLZvmfbPUvS3ZCZZDEkUgDAH9foe+yMrGHdGzGq/suXnxTk5YW8ka6sy1JytUHyi4NjW83t+xnCUjJqjYPN7tNyaNSaS9JkeoeXpSGjuovJVQ79dotD6x6MoTT+NwIAgDN0a0QePkn+Xxox7j6Yy4ePjnP77tYGAADGQwefrVz0HysITOt5oVIpONGyVoHvPlWBqda1Ml6kA3fZ8epatQI/8l2/EReemaoOVdhutfwgUjU/UC0/NCvKEktUuBpGuqlC3XS8yLhhq6GdUCvX9yLHjVTVhK5qtf/RMOGyDpKNw5Z2Tc24TmR8T4V+O3B1XqlQa7WVE0krmqr2IlMzcdFTrcA0nWBVPfMb7aZWVR26gWlFftpgvy/j1fygmTSbn/TBBgDgnNje2X211u123o6xMOl9BAAAB5GlAQAAAAAAAAAAAAAAAAAAAAA4/87i+j8KYy+s/NzrnYMwzknhopyLMH7fhZGnjvdncoICMDa/BgAA//+IFFJh") open_tree(r0, &(0x7f0000000140)='./file0\x00', 0x1) 1m47.297493441s ago: executing program 5 (id=1067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) 1m46.961212968s ago: executing program 1 (id=1068): ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x3) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000800)) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x5, 0x80000001, 0x8, 0x9, 0xca40, 0xc}, &(0x7f0000000100)={0x5, 0x9a, 0xffff, 0x0, 0x10000, 0x0, 0x4, 0xf}, &(0x7f0000000140)={0xffff, 0xffffffff00000000, 0x2e55, 0xce, 0x7776, 0x0, 0x80000000}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000640)={0x1, 0x1, 0x8000018, 0x1a, 0x104, &(0x7f0000000240)}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000680)=0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000700)=0x2, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) io_uring_enter(r1, 0x4e85, 0xf2d1, 0x4, &(0x7f0000000880)={[0x100]}, 0x8) pselect6(0x40, &(0x7f00000008c0)={0x39a, 0x4, 0x80, 0x4, 0x8, 0xfffffffffffffffd, 0x1, 0x955}, &(0x7f0000000900)={0x4, 0xfffffffffffffffb, 0xd410, 0x1ff, 0x4, 0x5, 0x3, 0x8000000000000000}, &(0x7f0000000940)={0x100, 0xfffffffffffffff7, 0x49, 0x81, 0xfffffffffffffffc, 0x1, 0x7ff, 0x7}, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x7]}, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x3, &(0x7f0000000780)=[{0x7, 0x0, 0xff, 0x3}, {0x2, 0x88, 0x91, 0x9}, {0x101, 0x4, 0x3, 0x20000}]}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000a40)={'vcan0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000ac0)) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x7fffffff]}, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000b40)={0x0, @multicast2, 0x4e24, 0x0, 'ovf\x00', 0x8, 0x4, 0x10}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000d40)={0x0, 0x0}) select(0x40, &(0x7f0000000c80)={0x16, 0x3, 0x2c, 0xffff, 0xffffffff, 0xfffffffffffffffb, 0xdb5, 0x8}, &(0x7f0000000cc0)={0x8, 0xffffffffffffffff, 0x9, 0x7a, 0x80, 0x1, 0xfff, 0x5}, &(0x7f0000000d00)={0x8, 0xe024, 0x9a89, 0x2, 0x97, 0x11, 0xa5, 0x2}, &(0x7f0000000d80)={r4, r5/1000+10000}) futex(&(0x7f0000000dc0), 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, &(0x7f0000000e40)=0x1, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000e80)=""/185, &(0x7f0000000f40)=0xb9) io_setup(0x7fffffff, &(0x7f0000000f80)=0x0) io_getevents(r6, 0x3, 0x1, &(0x7f0000000fc0)=[{}], 0x0) 1m45.728770315s ago: executing program 5 (id=1070): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000002480)=ANY=[], 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000008c0)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 1m42.66935994s ago: executing program 6 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebdf5000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1m42.076777602s ago: executing program 1 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) unshare(0x2c020400) getuid() openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x801) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110c23004a) socket$key(0xf, 0x3, 0x2) 1m39.150217012s ago: executing program 1 (id=1076): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) 1m36.008692768s ago: executing program 1 (id=1079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x22) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x5) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = gettid() kcmp(0x0, r1, 0x3470e0e352c04f1a, r0, r0) r2 = timerfd_create(0x8, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m35.99249462s ago: executing program 6 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) socket(0x840000000002, 0x3, 0xff) r4 = io_uring_setup(0x4ae5, &(0x7f0000000480)={0x0, 0x17dd, 0x10000, 0x3, 0x173}) syz_io_uring_setup(0x315a, &(0x7f0000000200)={0x0, 0xcfca, 0x0, 0x0, 0x1000001, 0x0, r4}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) 1m34.629827843s ago: executing program 1 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents(r4, &(0x7f0000000ec0)=""/4096, 0x1000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_REQUEST={0x8}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfffffff8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4004044) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000067c537c46509080045010014000000000029907800000000ffffffff"], 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 1m32.473694768s ago: executing program 1 (id=1083): r0 = syz_open_dev$evdev(0x0, 0x200, 0x80800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noquota}]}, 0x1, 0x797, &(0x7f0000000800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) syz_open_procfs(r2, 0x0) syz_usb_disconnect(r0) 1m30.350098486s ago: executing program 37 (id=1070): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000002480)=ANY=[], 0x1, 0xc32, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000008c0)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x8000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000023f3201"], 0x138) 1m20.808959961s ago: executing program 38 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x80000000003) socket(0x840000000002, 0x3, 0xff) r4 = io_uring_setup(0x4ae5, &(0x7f0000000480)={0x0, 0x17dd, 0x10000, 0x3, 0x173}) syz_io_uring_setup(0x315a, &(0x7f0000000200)={0x0, 0xcfca, 0x0, 0x0, 0x1000001, 0x0, r4}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) 1m16.966759219s ago: executing program 39 (id=1083): r0 = syz_open_dev$evdev(0x0, 0x200, 0x80800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noquota}]}, 0x1, 0x797, &(0x7f0000000800)="$eJzs3M1rXFUbAPDn3mSafuR9J4IL3VShhRZKJ0mzaVfGjbgpFApua0huQshNpmQmNYmFpu4EoTYbFUF079KtUOof4E4KCu4F0RoX6mZkJpMP02Q6tpNMG38/uHPPuR/nOc+ZmcO9MHcC+M96tf6SRPRHxJWIKDa3pxFxpFE6GrGyftzaw5vj9SWJWu3qL0n9tFirFTfbSprrE9E4JV6KiPuFiHPvPRq3srQ8M5bn2XyzPlidvT5YWVo+Pz07NpVNZXPDI5eGLo6MXBwa6Viup9+6dOzut2+srn73VfXOyd7zSYw28o5mbh0LtM36mBRidMf2uf0I1kVJG8f0HkA/AABorX6d39O8NitEMXpaXaW5gAMAAIDnUq2v1q4/2z4SAAAAeMYk0e0eAAAAAPtr43cAG8/2HvRP/H9+PSIGtuJvPYfb23iGOOJoFCLi+Fryj8cPkvXT4Kms3I6Ie6O7fP7aeaK5taGt4rHOtEin3avPP6O7zT+F5hFHG68755/ejf9OeEp7z3/p5vzXs8f8d6XNGF9/9nJhz/i3K4vvn9wtfrIZP9kj/tttxr+z+sHdvfbVvog4E7vH3x6rxf9DDE5O57t9tTa7e/+vsw/2zj/i+CPxk6QRNdk9/5Vmn663mf+7a7/NrLSIf/ZU6/d/PX7ftrN6Gp+JD5v9SCPibnNdr6/uiHFq9vtvHo2crGzEn9hj/Hd//99s7o34vM38f/yyb7HNQwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAhjYj+SNLSZjlNS6WIExHxYhxP83Klem6yvDA3Ud8XMRCFdHI6z4YiorheT+r14UZ5q35hWz1J8mwkIl744dh60Ok8K42X84luJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCmExHRH0laiog0In4vpmmp1O1eAQAAAB030O0OAAAAAPvO/T8AAAAcfk96/590uB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAoXbl8uX6Ult7eHO8Xp+4sbQwU75xfiKrzJRmF8ZL4+X566Wpcnkqz0rj5dnHtZdGxPClWFgcrGaV6mBlafnabHlhrnptenZsKruWFQ4kKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6t/saSpKWISBvlNC2VIv4XEQNRSCan82woIv4fEQ+Khb56fbjbnQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDjKkvLM2N5ns0/34Xa4Uqn7UIkER1ssKc5jB1q8JNmc62OSVYiuj6YabOj85Un/15EZIX2h+7WY4al24VXDnYaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGVFZWp4Zy/NsvtLtngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBd6U9JRNSXM8XT/Tv3Hkn+KDbWEfHOp1c/WhyrVueH69t/3dxe/bi5/cK2E28dZA4AAABw6L3WamfPjvrGffrGfTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC7KkvLM2N5ns3vYyFudztLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSfwdAAD//xBcrZo=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgid(0x0) syz_open_procfs(r2, 0x0) syz_usb_disconnect(r0) 17.894110485s ago: executing program 9 (id=1183): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000bc0)="40c2d8", 0x3) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x16, 0x633, 0x70bd27, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x5, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x8, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 15.814463723s ago: executing program 0 (id=1189): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 13.243550766s ago: executing program 9 (id=1191): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$eJzs3c9v02gawPHH3ZaWrMSudlcIVS28lF2pSCU4CRRFnLzOm/SFxI5sB9oTqmiKKlIW0V1p2xsXdlfa+SO4zn2uo7nPdf4NNHMazS0j20mb0vyglDbt6PuJ4HXsx+/7OI3yyG38WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFhuybZzllSN11hVg7mlwK8N2d7t7/ahZsi4Ilb8T2Zm5Fq66tpfDjZfjf9bkLn02ZzMxM2M7P3+6h8f/nlyorv/kITOxM7u3sv1Vqv5ZtyJjElFeyb0Tc2paGVCXxUvi8hKOVRlU9XhWhjpmnID7UR+oBbd2ypXLBaUzq75Da9Scqq6u/LBnbxtL6tH2bp2gtD37j7Khu6KqVaNV0li4s1xzIP4jfjYRCrSTk2pza1WszAqyTgo9ylB+VFBeTufz+Xy+dzy/eL9B7Y9eWSFfcAS27blSMT437QYry/8CQ58volO/ZeqGPGkIaui+j5cKUkgvtQGbO/o1v+/3dVDx+2t/90qf+1g86wk9f96+uz6oPo/IJchj6m4o2Pv9fHjUrePHdmVPXkp69KSljTlzcn7vlCPimjxxEgovhipiZOsUZ01SoqyLMtiyzNZkbKEoqQsRqqiJZQ1CSUSnbyjXAlEiyOR+BKIkkVx5bYoyUl7uigFUaIlK2viS0M8qUhJnKSXTdlKXvfCkBz3g3JDgp5233n5IUHHqv+J3l2+p/6D+o/zpN2t/x/73TiyAQAAAAAAp8FKfvsen/9PybzIlCVlU9X2uNMCAAAAAABfUPKX/7m4Sb4ZNy8W5/8AAAAAAPzWWMk1dpaIZORGutS9XKrzS4D2H8adIwAAAAAAOJnk7//X4yYTL90Q6+PzfwAAAAAAcNH9d9Ac+9+JtDvTAk5b3/4oQTBlva2v/tXaduJ1znZngsAj8wRG5VnrSqeTpFme7Dxz9ZzVmf1yfxLMD51mc9Rc/9YXSED+LzfTmJsbabvR3ZKOkimbqs66fvVhThznykSkV6N/vdr6tySH/z+vdsX6aXOr1cw+/0drI8nlbdzL2+3OK3VkHsUhufxT5tOY+f5HPJVciNEZN2NJPK7de/wT6e4TxxjznSykMQuZtM0cPv6ZeMxcdtDRp1lMi8iJjvyd3Epjbi3eSps+WeRHZNHM977+n/VafEIWhWFZTG+1moUTZgEA47I5vAqlDtfdz/iUO5vq/k4W05jF2eSDdXK2zye6Paqu2H3q+sz+8JMjs/j6yD2QBtXYeNyv9sfNJeO+j3d4P7CqhtW8JTOvf263t1/L1Z3dvTtb2+svmi+ar/L5wrJ9z7bv52UqOYxOQ+0BAPQx+h47IyOseyPOqv+0/5WCrDwX+aXd3pCl5GqD5BsHfXvN9HwNYWnEWWum5w4vSyPO6g5i88eILZzBTwIAgLOzMKIOD67/VvcuftbSiPPuw7W85+z4khw5O+6t5QAA4HTo4IOVif5jBYGpP8sVizknWtEq8N3HKjClilbGi3TgrjheRat64Ee+61fjhSempEMVNup1P4hU2Q9U3Q/NanLnd9W59Xuoa44XGTesV7UTauX6XuS4kSqZ0FX1xt+rJlzRQbJzWNeuKRvXiYzvqdBvBK7OKhVq3RNoStqLTNnEi56qB6bmBGvqiV9t1LQq6dANTD3y0w67Yxmv7Ae1pNvsuF9sAADOiZ3dvZfrrVbzzSkujPsYAQDAYVRpAAAAAAAAAAAAAAAAAAAAAADOv7O4/u/iLUyfRs9P5TRSvSwiw2N+yIj0rmm3P3WIifPwszi00J10ekjMN+ck1Yu+0O/T4sh81AAusF8DAAD//150VEs=") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0/file1\x00', 0x4, 0x0, 0x0, 0x0, 0x0) 13.226630302s ago: executing program 0 (id=1192): socket$nl_generic(0x10, 0x3, 0x10) r0 = msgget(0x2, 0x79) msgctl$IPC_RMID(r0, 0x0) fsopen(0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r6, 0x0, 0xf, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x80, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0xfffffffd, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 11.161422526s ago: executing program 0 (id=1193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x1, 0x2, 0x2, "90"}, @global=@item_4={0x3, 0x1, 0x0, '\a\x00'}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x3, "92e54379"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 11.026097304s ago: executing program 9 (id=1194): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r0, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x40000101) 6.922023289s ago: executing program 9 (id=1199): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000100)='./file0\x00', 0x4441, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC], 0x0, 0x31d, &(0x7f00000007c0)="$eJzs3U1oY1UUwPGTtJ2+VtsEUcEB9ehsVCRMshZmwtCKGBjRiYwOCG/si4Y+k5IXoinSRBiYjQs3fq1VEBkoiAtBGMaFC5GWoXt33XVhXSlqvfL63ms+mqQfpq3S/2/RHO495757300f7Q20G8988NafxpiCXZW4xCR+UZoxv8EngaY8+fby3YdfeuXV57O53MyLqrPZK+mMqk4/evvau7cev1O95+Vvpr8bl5XkaxubmfWVB1ce2vj7yptFT4uelspVtfV6uVy1r7uOzn3kzadUX3Ad23O0WPKcSkd/wS0vLNTVLs3dO7lQcTxP7VJd5526VstardTVfsMuljSVSunUpGAAS+RW7dOsH8Z7JuS/+t0Y2az+ZMx4U8Idt455ljhBGr629v/9/smXpkTkx62OhwP+19oe6paIe7OWr+WD16A/W5CiuOLIeUnIX+K/R8xny8H++1/fySzn1p764XtVTcqS2wjrG7X8SGd9WhKSHAuv2qqfjclMWgOd9WMy2V6fkYTcH9RE77/t+udyM5nt4u76M/LEubb6lCRk7XUpiyurtx/7bf3yzY+j+qW06qXLue36uET1EzIX3SRLvvz1RHYHAAAAAAAAAIDDSemOnuf3KT/hxqKqTiVlKfoU0e8PovB8Pdb++UD3+fz5nuf7o3J29OTWDQAAAADAaeLVb4RRfXHedl2n4h0q8H+V9wNrQM4D00FO1GKMafyriw4K/Al1dY33W6klRzaN+uLn7+2VMyFRyyOzgwc8d2FkNVxEs9U1NpQd3BWcNcYMZ8A/rra3JPypXjzoOGLtd4Gj3fveZ8Dw9GlQjiUiIzvfKXsMOCEHvC2/DGWbYuH8+uc8e+3nr9tbtkyPcc7suj/93Bn+UwgAAADAcWj90H9BGoVva42rT3+4z1KTOOK5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWhziT46tftKrS/3gvi+ilrttXT0vHNvk30gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/hH8CAAD//3imw7E=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) 6.811581184s ago: executing program 8 (id=1200): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000000000/0x3000)=nil, 0x4000) timer_create(0x0, 0x0, 0x0) 4.919833248s ago: executing program 9 (id=1201): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.518209185s ago: executing program 0 (id=1202): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="6a6a00000f"]) 4.251029989s ago: executing program 0 (id=1203): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a0028000600000060000000003011402001"], 0x64) 3.899102695s ago: executing program 8 (id=1204): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_DEFAULT_PHY}}, 0x7) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x240083, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x2a4, &(0x7f00000005c0)="$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") 3.624935186s ago: executing program 8 (id=1205): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, &(0x7f0000000540)) 2.542305438s ago: executing program 8 (id=1206): syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001ff, 0x20482) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4adaf6b3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) 736.25554ms ago: executing program 8 (id=1207): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r8, &(0x7f0000000500)}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x4}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000200025a729bd7000fddbdf250a0000cdff000001020001000800060000000000080018004e234e230500150002"], 0x3c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) kernel console output (not intermixed with test programs): sr_slave_1: left promiscuous mode [ 309.255549][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.313198][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.514093][ T5339] usb 5-1: Using ep0 maxpacket: 16 [ 309.523285][ T5339] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 309.539491][ T5339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.542136][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.672857][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.742613][ T5339] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.755706][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.769871][ T5339] usb 5-1: config 0 descriptor?? [ 309.779810][ T5339] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 309.797415][ T5915] veth1_vlan: left promiscuous mode [ 309.821103][ T5915] veth0_vlan: left promiscuous mode [ 310.459384][ T5915] team0 (unregistering): Port device team_slave_1 removed [ 310.502080][ T5915] team0 (unregistering): Port device team_slave_0 removed [ 310.837074][ T7889] loop6: detected capacity change from 0 to 8 [ 310.961892][ T7889] warning: `syz.6.559' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 311.165315][ T5757] usb 5-1: USB disconnect, device number 7 [ 311.204661][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 311.367130][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.564'. [ 311.380768][ T7895] 9p: Bad value for 'rfdno' [ 311.472979][ T7896] syzkaller0: entered promiscuous mode [ 311.522733][ T7896] syzkaller0: entered allmulticast mode [ 311.628159][ T7891] tipc: Enabled bearer , priority 0 [ 311.757712][ T7891] tipc: Resetting bearer [ 311.808299][ T7890] tipc: Resetting bearer [ 311.893956][ T7890] tipc: Disabling bearer [ 314.768700][ T7669] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 314.905910][ T7669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.971271][ T7669] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 315.021642][ T7669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.069959][ T7669] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 315.088589][ T7942] input: syz0 as /devices/virtual/input/input7 [ 315.137933][ T7669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.176549][ T7669] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.233487][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 315.239679][ T7669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.416247][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 315.443329][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 315.470581][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.490869][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.530668][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 315.573294][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.611576][ T24] usb 6-1: config 0 descriptor?? [ 315.618379][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.710881][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.763183][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.770401][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.848098][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.855333][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.055006][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 316.087878][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 316.142962][ T24] usb 6-1: USB disconnect, device number 16 [ 316.259685][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 316.443672][ T5761] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 316.557975][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.568257][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.605945][ T5857] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 316.635154][ T5761] usb 7-1: New USB device found, idVendor=17ef, idProduct=7231, bcdDevice=de.06 [ 316.653507][ T5761] usb 7-1: too many configurations: 112, using maximum allowed: 8 [ 316.674660][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 316.693205][ T5761] usb 7-1: config 8 has no interface number 0 [ 316.715356][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 316.751996][ T5761] usb 7-1: config 8 has no interface number 0 [ 316.774375][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 316.801326][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 316.812698][ T5857] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 316.842496][ T5761] usb 7-1: config 8 has no interface number 0 [ 316.865462][ T5857] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 316.902538][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 316.912660][ T5857] usb 4-1: config 66 has 1 interface, different from the descriptor's value: 3 [ 316.928821][ T5761] usb 7-1: config 8 has no interface number 0 [ 316.950322][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 316.964412][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.985062][ T5761] usb 7-1: config 8 has no interface number 0 [ 316.991217][ T5857] usb 4-1: Product: syz [ 316.997766][ T5857] usb 4-1: Manufacturer: syz [ 317.002563][ T5857] usb 4-1: SerialNumber: syz [ 317.008954][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 317.026321][ T5761] usb 7-1: config 8 has no interface number 0 [ 317.056189][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 317.078188][ T5761] usb 7-1: config 8 has no interface number 0 [ 317.094936][ T5761] usb 7-1: config 8 has an invalid interface number: 128 but max is 0 [ 317.114382][ T5761] usb 7-1: config 8 has no interface number 0 [ 317.129336][ T5761] usb 7-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 317.149149][ T5761] usb 7-1: Product: syz [ 317.159567][ T5761] usb 7-1: Manufacturer: syz [ 317.258519][ T5857] usb 4-1: Fast Track Pro config OK [ 317.295365][ T5857] usb 4-1: cannot find UAC_HEADER [ 317.385475][ T7993] netlink: 40 bytes leftover after parsing attributes in process `syz.5.584'. [ 317.445979][ T29] usb 7-1: USB disconnect, device number 3 [ 317.628479][ T5857] snd-usb-audio 4-1:66.0: probe with driver snd-usb-audio failed with error -22 [ 317.695418][ T5857] usb 4-1: USB disconnect, device number 11 [ 317.823197][ T7999] syzkaller0: entered promiscuous mode [ 317.826854][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:66.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.852044][ T7999] syzkaller0: entered allmulticast mode [ 317.897697][ T7999] tipc: Started in network mode [ 317.918217][ T8005] loop4: detected capacity change from 0 to 128 [ 317.934666][ T7999] tipc: Node identity 121299ac1a38, cluster identity 4711 [ 317.945355][ T7999] tipc: Enabled bearer , priority 0 [ 317.981700][ T8005] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.051439][ T7999] tipc: Resetting bearer [ 318.067059][ T8005] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 318.150335][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.177412][ T8015] loop0: detected capacity change from 0 to 512 [ 318.185190][ T7998] tipc: Resetting bearer [ 318.204520][ T8015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.290810][ T5614] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.315175][ T8015] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 318.345168][ T7998] tipc: Disabling bearer [ 318.418382][ T8015] EXT4-fs (loop0): 1 truncate cleaned up [ 318.584910][ T8021] input: syz1 as /devices/virtual/input/input8 [ 318.631219][ T8015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.911019][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 319.187115][ T5857] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 319.221569][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.580624][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 320.764977][ T7669] veth0_vlan: entered promiscuous mode [ 320.872736][ T7669] veth1_vlan: entered promiscuous mode [ 321.249329][ T7669] veth0_macvtap: entered promiscuous mode [ 321.330798][ T7669] veth1_macvtap: entered promiscuous mode [ 321.475411][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.558197][ T5857] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 322.319833][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.568444][ T76] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.667613][ T5857] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 322.753832][ T5904] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.801721][ T5904] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.238832][ T5904] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.580673][ T5857] usb 6-1: can't read configurations, error -71 [ 329.534697][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.613546][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.772341][ T6053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.814640][ T6053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.509757][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.7.510'. [ 331.047793][ T8114] loop4: detected capacity change from 0 to 8 [ 331.212748][ T8116] loop7: detected capacity change from 0 to 1024 [ 333.126240][ T8114] SQUASHFS error: Failed to read block 0x8f: -5 [ 333.214283][ T31] audit: type=1800 audit(1786777006.730:25): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.615" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 336.174700][ T8138] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 336.259565][ T8144] tipc: Enabled bearer , priority 0 [ 336.303002][ T8144] tipc: Resetting bearer [ 336.439080][ T8141] tipc: Disabling bearer [ 336.780997][ T31] audit: type=1326 audit(1786777010.290:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1ed9e0d9 code=0x7ffc0000 [ 336.914394][ T31] audit: type=1326 audit(1786777010.290:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1ed9e0d9 code=0x7ffc0000 [ 337.093504][ T5857] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 337.242269][ T31] audit: type=1326 audit(1786777010.310:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1ed9e0d9 code=0x7ffc0000 [ 337.266656][ T5857] usb 1-1: Using ep0 maxpacket: 8 [ 337.268025][ T31] audit: type=1326 audit(1786777010.310:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1ed9e0d9 code=0x7ffc0000 [ 337.346780][ T31] audit: type=1326 audit(1786777010.310:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc1ed5e90e code=0x7ffc0000 [ 337.349397][ T5857] usb 1-1: unable to get BOS descriptor or descriptor too short [ 337.435317][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.629'. [ 337.484579][ T5857] usb 1-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40 [ 337.496583][ T8170] netlink: 20 bytes leftover after parsing attributes in process `syz.5.629'. [ 337.502239][ T31] audit: type=1326 audit(1786777010.310:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc1ed9dd6b code=0x7ffc0000 [ 337.537780][ T8173] loop7: detected capacity change from 0 to 256 [ 337.562915][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.574573][ T8173] exfat: Deprecated parameter 'utf8' [ 337.605118][ T5857] usb 1-1: Product: syz [ 337.610031][ T8173] exfat: Deprecated parameter 'utf8' [ 337.633285][ T5857] usb 1-1: Manufacturer: syz [ 337.650004][ T31] audit: type=1326 audit(1786777010.320:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc1ed9dd6b code=0x7ffc0000 [ 337.682387][ T5857] usb 1-1: SerialNumber: syz [ 337.758707][ T8173] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 337.836212][ T31] audit: type=1326 audit(1786777010.320:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc1ed9dd6b code=0x7ffc0000 [ 337.929248][ T8173] netlink: 'syz.7.630': attribute type 1 has an invalid length. [ 337.964981][ T31] audit: type=1326 audit(1786777010.320:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc1ed9dd6b code=0x7ffc0000 [ 337.972652][ T8173] netlink: 'syz.7.630': attribute type 1 has an invalid length. [ 338.016878][ T5857] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 338.304202][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 338.304228][ T31] audit: type=1326 audit(1786777011.820:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc1ed5e90e code=0x7ffc0000 [ 338.525606][ T31] audit: type=1326 audit(1786777011.920:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdc1ed5e90e code=0x7ffc0000 [ 338.788142][ T31] audit: type=1326 audit(1786777012.020:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.0.610" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdc1ed9e0d9 code=0x7ffc0000 [ 338.992066][ T5608] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 339.442238][ T5857] usb 1-1: can't set first interface for hiFace device. [ 339.449298][ T5857] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 339.472506][ T5857] usb 1-1: USB disconnect, device number 4 [ 339.553864][ T8199] loop0: detected capacity change from 0 to 256 [ 339.631545][ T8199] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 339.837758][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.033803][ T5616] Bluetooth: hci5: command 0x0405 tx timeout [ 341.056945][ T8221] loop0: detected capacity change from 0 to 512 [ 341.087456][ T8221] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.281158][ T8225] loop4: detected capacity change from 0 to 164 [ 342.320721][ T8232] loop6: detected capacity change from 0 to 2048 [ 342.348732][ T8237] loop4: detected capacity change from 0 to 512 [ 342.417247][ T8237] EXT4-fs: Ignoring removed bh option [ 342.454313][ T8232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.501633][ T8237] EXT4-fs error (device loop4): ext4_iget_extra_inode:5179: inode #15: comm syz.4.648: corrupted in-inode xattr: e_value size too large [ 344.012626][ T5608] Bluetooth: hci5: command 0x0405 tx timeout [ 344.049474][ T8237] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 344.053416][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 344.070019][ C1] EXT4-fs (loop4): initial error at time 1786777017: ext4_iget_extra_inode:5179: inode 15 [ 344.079998][ C1] EXT4-fs (loop4): last error at time 1786777017: ext4_iget_extra_inode:5179: inode 15 [ 344.092761][ T8237] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.648: couldn't read orphan inode 15 (err -117) [ 344.397709][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 344.994651][ T8237] loop4: lost filesystem error report for type 5 error -117 [ 345.053331][ T8237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.296440][ T8258] xt_CT: No such helper "pptp" [ 346.567462][ T5614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.031447][ T8273] mmap: syz.6.658 (8273): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 354.816017][ T8339] loop4: detected capacity change from 0 to 128 [ 354.915310][ T8339] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.015201][ T8339] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.281623][ T5614] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.940525][ T8373] loop0: detected capacity change from 0 to 8 [ 364.464628][ T8386] binder: 8384:8386 unknown command 0 [ 364.470355][ T8386] binder: 8384:8386 ioctl c0306201 200000000180 returned -22 [ 365.610683][ T5616] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 260 [ 366.316342][ T5758] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 366.533556][ T5758] usb 4-1: Using ep0 maxpacket: 16 [ 366.565358][ T5758] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.612253][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.653623][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.703793][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.753738][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.811732][ T5758] usb 4-1: config 0 descriptor?? [ 366.877949][ T8408] loop6: detected capacity change from 0 to 256 [ 366.935588][ T8408] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.281988][ T5758] usbhid 4-1:0.0: can't add hid device: -71 [ 367.310424][ T5758] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 367.371621][ T5758] usb 4-1: USB disconnect, device number 12 [ 367.722173][ T31] audit: type=1800 audit(1786777041.230:74): pid=8408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.699" name="file1" dev="loop6" ino=1048645 res=0 errno=0 [ 367.871294][ T8422] loop0: detected capacity change from 0 to 512 [ 368.403523][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 368.575530][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 368.637191][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.674804][ T9] usb 4-1: Product: syz [ 368.695387][ T9] usb 4-1: Manufacturer: syz [ 368.707581][ T9] usb 4-1: SerialNumber: syz [ 368.761922][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 368.791724][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 368.792821][ T8436] loop4: detected capacity change from 0 to 128 [ 369.774345][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 369.841852][ T9] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 370.204836][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 370.300985][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.352481][ T24] usb 1-1: config 0 has no interfaces? [ 370.393790][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.960614][ T24] usb 1-1: config 0 descriptor?? [ 371.878672][ T24] usb 1-1: USB disconnect, device number 5 [ 372.153529][ T5758] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 373.395748][ T8475] TCP: TCP_TX_DELAY enabled [ 374.093457][ T5758] usb 6-1: Using ep0 maxpacket: 16 [ 374.111295][ T5758] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.123264][ T5758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.207622][ T5758] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.254230][ T5758] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.313541][ T5758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.369282][ T5758] usb 6-1: config 0 descriptor?? [ 374.394882][ T8479] loop6: detected capacity change from 0 to 512 [ 374.456325][ T8483] loop3: detected capacity change from 0 to 512 [ 374.499352][ T8483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 374.587918][ T8483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.407897][ T8483] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.434746][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 375.457755][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 375.520485][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 375.529158][ T5758] usbhid 6-1:0.0: can't add hid device: -32 [ 375.536004][ T5758] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 375.907440][ T5758] usb 6-1: USB disconnect, device number 19 [ 376.717613][ T5605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.152895][ T8507] loop6: detected capacity change from 0 to 256 [ 377.217122][ T8507] exfat: Deprecated parameter 'utf8' [ 377.254289][ T8507] exfat: Deprecated parameter 'namecase' [ 377.830716][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.5.733'. [ 378.965191][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.974166][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.023581][ T8507] exfat: Deprecated parameter 'utf8' [ 379.035282][ T8510] loop0: detected capacity change from 0 to 2048 [ 380.917448][ T8510] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.940642][ T8507] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 381.823161][ T8526] loop0: detected capacity change from 0 to 512 [ 382.297430][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.317436][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.325560][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.338644][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.350022][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.369615][ T8532] loop6: detected capacity change from 0 to 512 [ 382.469080][ T8532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 382.636966][ T8532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.658859][ T8544] loop0: detected capacity change from 0 to 1024 [ 382.676815][ T8544] hfsplus: failed to load extents file [ 382.685418][ T8535] loop4: detected capacity change from 0 to 2048 [ 382.735132][ T8532] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 382.758473][ T8535] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 382.834206][ T8535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.233923][ T5761] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 383.441726][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 383.478379][ T7007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.497872][ T5761] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 383.585829][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.629775][ T5761] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.681876][ T5761] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 383.733571][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.789546][ T5761] usb 1-1: config 0 descriptor?? [ 385.857088][ T5608] Bluetooth: hci2: command tx timeout [ 386.706012][ T5844] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 386.969800][ T5761] usbhid 1-1:0.0: can't add hid device: -71 [ 387.039662][ T5761] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 387.196226][ T5761] usb 1-1: USB disconnect, device number 6 [ 387.923897][ T5608] Bluetooth: hci2: command tx timeout [ 388.561106][ T48] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.852744][ T8595] loop5: detected capacity change from 0 to 512 [ 389.087297][ T8599] loop4: detected capacity change from 0 to 8 [ 389.122363][ T8599] unable to read inode lookup table [ 390.700106][ T5608] Bluetooth: hci2: command tx timeout [ 390.732857][ T8601] loop6: detected capacity change from 0 to 512 [ 392.665747][ T8601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 392.714153][ T8601] EXT4-fs warning (device loop6): ext4_multi_mount_protect:392: Unable to create kmmpd thread for loop6. [ 392.723795][ T5608] Bluetooth: hci2: command tx timeout [ 392.762162][ T48] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.763551][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 392.984947][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 393.014623][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 393.042660][ T48] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.056044][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.110217][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.155969][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.226047][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.795901][ T9] usb 4-1: config 0 descriptor?? [ 394.969224][ T9] usb 4-1: can't set config #0, error -71 [ 395.010642][ T9] usb 4-1: USB disconnect, device number 14 [ 395.020574][ T48] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.027754][ T48] bridge_slave_1: left allmulticast mode [ 396.050458][ T48] bridge_slave_1: left promiscuous mode [ 396.070272][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.099813][ T48] bridge_slave_0: left allmulticast mode [ 396.111167][ T48] bridge_slave_0: left promiscuous mode [ 396.131775][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.640239][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.670146][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.699757][ T48] bond0 (unregistering): Released all slaves [ 396.745915][ T8633] loop5: detected capacity change from 0 to 2048 [ 396.784922][ T8633] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 396.878980][ T8633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.002999][ T31] audit: type=1800 audit(1786777070.510:75): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.772" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 397.158951][ T8636] loop4: detected capacity change from 0 to 2048 [ 397.745308][ T8636] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.945190][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.009306][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.043244][ T8529] bridge_slave_0: entered allmulticast mode [ 399.092777][ T8529] bridge_slave_0: entered promiscuous mode [ 402.692054][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.751376][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.798883][ T8529] bridge_slave_1: entered allmulticast mode [ 402.852291][ T8529] bridge_slave_1: entered promiscuous mode [ 403.322580][ T48] hsr_slave_0: left promiscuous mode [ 403.333712][ T5844] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 403.385294][ T48] hsr_slave_1: left promiscuous mode [ 403.404253][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.435863][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.490833][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.523946][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 403.524505][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.553530][ T5844] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 403.606185][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.648970][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.679787][ T48] veth1_macvtap: left promiscuous mode [ 403.684620][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.733743][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.736177][ T48] veth0_macvtap: left promiscuous mode [ 403.790669][ T5844] usb 5-1: config 0 descriptor?? [ 403.791802][ T48] veth1_vlan: left promiscuous mode [ 403.854621][ T48] veth0_vlan: left promiscuous mode [ 404.467459][ T5844] usbhid 5-1:0.0: can't add hid device: -71 [ 404.494026][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 404.537166][ T5844] usb 5-1: USB disconnect, device number 9 [ 404.674328][ T48] team0 (unregistering): Port device team_slave_1 removed [ 404.701369][ T48] team0 (unregistering): Port device team_slave_0 removed [ 405.220233][ T8695] loop3: detected capacity change from 0 to 4096 [ 405.241348][ T8695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 405.272251][ T8529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.298573][ T8695] EXT4-fs (loop3): Test dummy encryption mode enabled [ 405.306565][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 405.308477][ T8695] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 405.454359][ T8695] EXT4-fs (loop3): group descriptors corrupted! [ 405.544821][ T8529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.642494][ T8700] loop4: detected capacity change from 0 to 2048 [ 406.476355][ T8529] team0: Port device team_slave_0 added [ 406.526662][ T8529] team0: Port device team_slave_1 added [ 406.687274][ T8700] loop4: p3 < > p4 < > [ 406.731360][ T8700] loop4: partition table partially beyond EOD, truncated [ 406.772057][ T8700] loop4: p3 start 4284289 is beyond EOD, truncated [ 406.958988][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.974398][ T8718] loop5: detected capacity change from 0 to 128 [ 407.023259][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.138937][ T8717] loop3: detected capacity change from 0 to 512 [ 407.279485][ T8529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.418032][ T8529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.521970][ T8529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.824304][ T8529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.007308][ T6320] udevd[6320]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 411.820144][ T8731] syzkaller0: entered promiscuous mode [ 411.842435][ T8731] syzkaller0: entered allmulticast mode [ 411.976270][ T8529] hsr_slave_0: entered promiscuous mode [ 411.997899][ T8529] hsr_slave_1: entered promiscuous mode [ 412.013614][ T5758] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 412.024284][ T8529] debugfs: 'hsr0' already exists in 'hsr' [ 412.042849][ T8529] Cannot create hsr debugfs directory [ 412.184043][ T5758] usb 7-1: Using ep0 maxpacket: 16 [ 412.206769][ T5758] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.232179][ T5758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.259430][ T5758] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.279757][ T5758] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.336957][ T5758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.385687][ T5758] usb 7-1: config 0 descriptor?? [ 413.165838][ T5758] usbhid 7-1:0.0: can't add hid device: -71 [ 413.202436][ T5758] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 413.228802][ T8763] loop0: detected capacity change from 0 to 1024 [ 413.247957][ T5758] usb 7-1: USB disconnect, device number 4 [ 413.286569][ T8763] hfsplus: failed to load extents file [ 413.757988][ T8774] x_tables: duplicate underflow at hook 1 [ 413.850558][ T8771] loop3: detected capacity change from 0 to 512 [ 413.960522][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 414.464705][ T8529] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 414.525979][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.574704][ T8529] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 414.640873][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.672983][ T8792] syzkaller0: entered promiscuous mode [ 414.704133][ T8792] syzkaller0: entered allmulticast mode [ 414.746617][ T8798] loop3: detected capacity change from 0 to 8 [ 414.758216][ T8529] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 414.802605][ T8798] unable to read inode lookup table [ 414.816589][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.862669][ T8529] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 415.889399][ T8529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.083695][ T5844] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 416.305952][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 416.334244][ T5844] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 416.380372][ T5844] usb 6-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 416.417142][ T5844] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 416.451433][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.539818][ T8825] loop0: detected capacity change from 0 to 512 [ 418.054909][ T9] usb 6-1: USB disconnect, device number 20 [ 418.503654][ T8529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.536360][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 418.544926][ T8854] loop0: detected capacity change from 0 to 2048 [ 418.607063][ T8854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.649791][ T8529] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.743428][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.750672][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.829167][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.836490][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.505074][ T8863] loop5: detected capacity change from 0 to 2048 [ 419.607944][ T8863] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 419.765263][ T8863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.471930][ T31] audit: type=1800 audit(1786777094.980:76): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.832" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 423.936487][ T8892] loop3: detected capacity change from 0 to 512 [ 424.065411][ T8900] loop0: detected capacity change from 0 to 2048 [ 424.149353][ T8900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.992572][ T8908] loop0: detected capacity change from 0 to 4096 [ 425.048191][ T8908] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 425.102724][ T8908] EXT4-fs (loop0): Test dummy encryption mode enabled [ 425.111580][ T8911] syzkaller0: entered promiscuous mode [ 425.172016][ T8908] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 425.195432][ T8911] syzkaller0: entered allmulticast mode [ 425.247875][ T8908] System zones: 0-5 [ 425.312110][ T8908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.339947][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 425.356642][ T8529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.550199][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.251949][ T8930] loop5: detected capacity change from 0 to 128 [ 426.284705][ T8930] vfat: Unknown parameter '184467440737095516150x000000000000000000000000000000000000' [ 428.635806][ T8941] loop0: detected capacity change from 0 to 2048 [ 428.742179][ T8941] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 428.790996][ T8529] veth0_vlan: entered promiscuous mode [ 428.842880][ T8529] veth1_vlan: entered promiscuous mode [ 429.183283][ T8529] veth0_macvtap: entered promiscuous mode [ 429.781287][ T8529] veth1_macvtap: entered promiscuous mode [ 431.305842][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.348174][ T8529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.406227][ T48] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.431902][ T8956] loop0: detected capacity change from 0 to 512 [ 431.468162][ T48] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.514426][ T8960] binder: 8959:8960 unknown command 0 [ 431.537987][ T8960] binder: 8959:8960 ioctl c0306201 2000000003c0 returned -22 [ 431.705013][ T5915] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.773878][ T5908] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.899734][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.936526][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.078443][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.111723][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.197937][ T5761] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 432.279144][ T8964] loop3: detected capacity change from 0 to 2048 [ 432.338438][ T8964] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 432.365831][ T5761] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 432.416721][ T5761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 432.444652][ T8964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.458378][ T5761] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 432.522882][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.550325][ T5761] usb 1-1: Product: syz [ 434.303490][ T5761] usb 1-1: Manufacturer: syz [ 434.317433][ T5761] usb 1-1: SerialNumber: syz [ 434.344985][ T5761] usb 1-1: config 0 descriptor?? [ 434.435190][ T8962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.523758][ T8962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.566898][ T31] audit: type=1800 audit(1786777108.080:77): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.856" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 434.844368][ T8962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 434.870858][ T8962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 435.098331][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.166404][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.361329][ T8979] netlink: 168 bytes leftover after parsing attributes in process `syz.5.848'. [ 435.427400][ T5761] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 435.681970][ T5761] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 435.783915][ T5761] usb 1-1: USB disconnect, device number 7 [ 436.057129][ T8985] loop6: detected capacity change from 0 to 2048 [ 436.102870][ T8985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.723836][ T8994] loop0: detected capacity change from 0 to 2048 [ 436.789354][ T8994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 436.828822][ T31] audit: type=1800 audit(1786777110.330:78): pid=8988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.854" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 436.993839][ T5758] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 437.183690][ T5758] usb 6-1: Using ep0 maxpacket: 32 [ 437.211634][ T5758] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 437.753748][ T5758] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 437.783607][ T5758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.826686][ T5758] usb 6-1: Product: syz [ 439.488822][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.498445][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.528132][ T5758] usb 6-1: Manufacturer: syz [ 439.554218][ T5758] usb 6-1: SerialNumber: syz [ 439.567912][ T5758] usb 6-1: config 0 descriptor?? [ 439.574507][ T8996] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 439.592029][ T5758] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 439.694758][ T9001] loop3: detected capacity change from 0 to 512 [ 439.918380][ T5758] usb 6-1: USB disconnect, device number 21 [ 442.035117][ T6321] udevd[6321]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.321289][ T9025] loop0: detected capacity change from 0 to 2048 [ 442.353341][ T9025] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 442.382032][ T9024] syzkaller0: entered promiscuous mode [ 442.413535][ T9025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.439856][ T9024] syzkaller0: entered allmulticast mode [ 442.539738][ T31] audit: type=1800 audit(1786777116.050:79): pid=9025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.871" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 442.890938][ T9039] loop6: detected capacity change from 0 to 1024 [ 443.003642][ T9039] hfsplus: failed to load extents file [ 443.569191][ T9054] loop6: detected capacity change from 0 to 1024 [ 443.616666][ T9054] hfsplus: failed to load extents file [ 443.723657][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 443.923505][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 443.973570][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 444.046702][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.100223][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 444.162521][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.219229][ T24] usb 4-1: config 0 descriptor?? [ 444.989806][ T9075] 9p: Bad value for 'wfdno' [ 447.382607][ T9078] loop8: detected capacity change from 0 to 512 [ 447.414635][ T9080] loop5: detected capacity change from 0 to 512 [ 447.478898][ T9080] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 447.543733][ T9078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.665715][ T9078] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.698530][ T9080] EXT4-fs (loop5): 1 truncate cleaned up [ 447.724509][ T9084] loop0: detected capacity change from 0 to 2048 [ 447.758225][ T9080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.769950][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 447.798299][ T9084] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 447.811612][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 447.868898][ T24] usb 4-1: USB disconnect, device number 15 [ 447.911326][ T9084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.964690][ T9092] syzkaller0: entered promiscuous mode [ 447.981588][ T8529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.982133][ T9092] syzkaller0: entered allmulticast mode [ 448.040968][ T31] audit: type=1800 audit(1786777121.550:80): pid=9084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.889" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 448.270370][ T5612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.171334][ T9121] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 452.813343][ T5608] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 453.213523][ T5844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 453.258115][ T9138] loop0: detected capacity change from 0 to 128 [ 453.423531][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 453.456079][ T5844] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.511981][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.564881][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.737741][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.8.898'. [ 455.027950][ T9145] loop8: detected capacity change from 0 to 4096 [ 456.840400][ T9145] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 456.844074][ T9145] EXT4-fs: failed to create workqueue [ 456.858953][ T9145] EXT4-fs (loop8): mount failed [ 457.003499][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.104841][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.237376][ T5844] usb 4-1: config 0 descriptor?? [ 457.433951][ T5844] usb 4-1: can't set config #0, error -71 [ 458.566102][ T5844] usb 4-1: USB disconnect, device number 16 [ 461.955447][ T5616] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 461.982188][ T5616] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 461.995127][ T5616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 462.010043][ T5616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 462.020521][ T5616] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 464.787353][ T5616] Bluetooth: hci6: command tx timeout [ 465.567327][ T9194] 9p: Bad value for 'wfdno' [ 466.875899][ T5616] Bluetooth: hci6: command tx timeout [ 467.386646][ T5908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.080161][ T5908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.043631][ T5616] Bluetooth: hci6: command tx timeout [ 469.714056][ T5908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.387410][ T5908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.780694][ T9165] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.821702][ T9165] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.871147][ T9165] bridge_slave_0: entered allmulticast mode [ 470.914898][ T9165] bridge_slave_0: entered promiscuous mode [ 470.959935][ T9165] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.994037][ T9165] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.045336][ T9165] bridge_slave_1: entered allmulticast mode [ 471.067389][ T9165] bridge_slave_1: entered promiscuous mode [ 471.275300][ T5616] Bluetooth: hci6: command tx timeout [ 471.327399][ T9165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.156972][ T9259] loop6: detected capacity change from 0 to 1024 [ 475.162473][ T9165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.990095][ T9270] loop3: detected capacity change from 0 to 128 [ 476.065558][ T9270] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.152947][ T9270] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.633080][ T9165] team0: Port device team_slave_0 added [ 476.641797][ T9165] team0: Port device team_slave_1 added [ 476.655784][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 476.704668][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 0 [ 476.786375][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 1024 [ 476.924436][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 8192 [ 477.031192][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 11264 [ 477.123861][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.140739][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.157938][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.182950][ T5605] EXT4-fs error (device loop3): ext4_empty_dir:3085: inode #11: comm syz-executor: Directory block failed checksum [ 477.238159][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.278472][ T9165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.286248][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 0 [ 477.353876][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 1024 [ 477.358647][ T9165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.403722][ T9165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.445283][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 8192 [ 477.464627][ T9165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.518485][ T5605] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /166/file1/lost+found: directory fails checksum at offset 11264 [ 477.576932][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.644522][ T5605] EXT4-fs error (device loop3): ext4_empty_dir:3085: inode #11: comm syz-executor: Directory block failed checksum [ 477.685938][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.738129][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.768032][ T5908] bridge_slave_1: left allmulticast mode [ 477.775326][ T5908] bridge_slave_1: left promiscuous mode [ 477.792357][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.796790][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.841391][ T5908] bridge_slave_0: left allmulticast mode [ 477.862594][ T5908] bridge_slave_0: left promiscuous mode [ 477.862692][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 477.883208][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.948603][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 478.024520][ T5605] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 478.133646][ T5844] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 478.303572][ T5844] usb 9-1: Using ep0 maxpacket: 16 [ 478.339543][ T5844] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.441137][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.501475][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.531260][ T9286] loop6: detected capacity change from 0 to 128 [ 478.580873][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.643306][ T9286] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.665985][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.676569][ T9286] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.796469][ T5844] usb 9-1: config 0 descriptor?? [ 479.153666][ T7007] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.181370][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.264999][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.345231][ T5908] bond0 (unregistering): Released all slaves [ 479.504897][ T5844] usbhid 9-1:0.0: can't add hid device: -71 [ 479.555664][ T5844] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 479.656744][ T5844] usb 9-1: USB disconnect, device number 2 [ 479.875384][ T9165] hsr_slave_0: entered promiscuous mode [ 479.914998][ T9165] hsr_slave_1: entered promiscuous mode [ 481.774570][ T9165] debugfs: 'hsr0' already exists in 'hsr' [ 481.793570][ T9165] Cannot create hsr debugfs directory [ 484.229692][ T5605] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.833500][ T5761] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 486.073637][ T5761] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.124925][ T5761] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.149265][ T5761] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.205704][ T5908] hsr_slave_0: left promiscuous mode [ 486.212404][ T5761] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.246177][ T5761] usb 9-1: SerialNumber: syz [ 486.251206][ T5908] hsr_slave_1: left promiscuous mode [ 486.276131][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.333837][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.366279][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.392287][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.501377][ T5908] veth1_macvtap: left promiscuous mode [ 486.531432][ T5761] usb 9-1: 0:2 : does not exist [ 486.541586][ T5908] veth0_macvtap: left promiscuous mode [ 486.576368][ T5908] veth1_vlan: left promiscuous mode [ 486.593761][ T5761] usb 9-1: unit 17 not found! [ 486.608701][ T5908] veth0_vlan: left promiscuous mode [ 486.812648][ T5761] usb 9-1: USB disconnect, device number 3 [ 487.065476][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.367198][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.382830][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.391518][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.402697][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.411932][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.842096][ T9351] loop8: detected capacity change from 0 to 1756 [ 487.949368][ T9351] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 487.984030][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 488.015768][ T9351] UDF-fs: Scanning with blocksize 512 failed [ 488.055678][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 488.078206][ T9353] 9p: Bad value for 'trans' [ 488.210773][ T9351] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 488.266670][ T9351] UDF-fs: Scanning with blocksize 1024 failed [ 488.367582][ T9355] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 488.370238][ T9351] UDF-fs: warning (device loop8): udf_fill_super: No partition found (2) [ 488.605351][ T9357] loop0: detected capacity change from 0 to 512 [ 488.633147][ T9357] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 488.699613][ T9357] EXT4-fs (loop0): 1 truncate cleaned up [ 488.751762][ T9357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.911824][ T9357] EXT4-fs (loop0): Online defrag not supported for non-extent files [ 489.018170][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 489.182491][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.037227][ T5616] Bluetooth: hci0: command tx timeout [ 492.193485][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 492.248894][ T5908] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.375090][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 492.401128][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 492.432754][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.476032][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.523304][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 492.533871][ T9165] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 492.571955][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.580732][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.647425][ T24] usb 7-1: config 0 descriptor?? [ 492.731343][ T5908] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.806255][ T9165] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 492.887785][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 492.904620][ T9165] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 492.960900][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.005557][ T9165] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 493.045719][ T9165] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.117564][ T5616] Bluetooth: hci0: command tx timeout [ 493.284149][ T5908] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.302320][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 493.330502][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 493.388166][ T24] usb 7-1: USB disconnect, device number 5 [ 493.394805][ T9397] loop0: detected capacity change from 0 to 256 [ 493.524984][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 495.254125][ T5616] Bluetooth: hci0: command tx timeout [ 495.263220][ T5908] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.215082][ T9417] syzkaller0: entered promiscuous mode [ 496.233527][ T9417] syzkaller0: entered allmulticast mode [ 496.293515][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 496.383358][ T5908] bridge_slave_1: left allmulticast mode [ 496.401298][ T5908] bridge_slave_1: left promiscuous mode [ 496.420983][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.449970][ T5908] bridge_slave_0: left allmulticast mode [ 496.466154][ T5908] bridge_slave_0: left promiscuous mode [ 496.475097][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 496.495729][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.503974][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 496.543338][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.561829][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.603674][ T24] usb 7-1: config 0 descriptor?? [ 496.903680][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.934224][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.977910][ T5616] Bluetooth: hci1: Malformed LE Event: 0x0d [ 498.342640][ T5608] Bluetooth: hci0: command tx timeout [ 498.386400][ T10] usb 7-1: USB disconnect, device number 6 [ 498.735785][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.769244][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.800513][ T5908] bond0 (unregistering): Released all slaves [ 498.947162][ T9165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.635393][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 500.656563][ T5908] tipc: Left network mode [ 500.747718][ T9346] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.755098][ T9346] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.762294][ T9346] bridge_slave_0: entered allmulticast mode [ 500.776882][ T9346] bridge_slave_0: entered promiscuous mode [ 500.789046][ T9346] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.796356][ T9346] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.803640][ T9346] bridge_slave_1: entered allmulticast mode [ 500.812055][ T9346] bridge_slave_1: entered promiscuous mode [ 500.879049][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.883834][ T9346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.890027][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.903776][ T9346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.099575][ T9453] loop6: detected capacity change from 0 to 1024 [ 501.253860][ T9165] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.405397][ T9346] team0: Port device team_slave_0 added [ 501.515062][ T9346] team0: Port device team_slave_1 added [ 501.693694][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.700932][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.851384][ T5908] hsr_slave_0: left promiscuous mode [ 501.872254][ T5908] hsr_slave_1: left promiscuous mode [ 501.907210][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.940527][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.969580][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.992914][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.074365][ T5908] veth1_macvtap: left promiscuous mode [ 502.103360][ T5908] veth0_macvtap: left promiscuous mode [ 502.136728][ T5908] veth1_vlan: left promiscuous mode [ 502.173514][ T5908] veth0_vlan: left promiscuous mode [ 503.175322][ T9481] loop8: detected capacity change from 0 to 128 [ 504.641595][ T9481] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 504.697014][ T9488] loop6: detected capacity change from 0 to 256 [ 504.715905][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 504.724764][ T9488] FAT-fs (loop6): bogus sectors per cluster 0 [ 504.748798][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 504.756179][ T9481] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.766544][ T9488] FAT-fs (loop6): Can't find a valid FAT filesystem [ 505.203258][ T5616] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 505.226763][ T9481] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 505.252867][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.260421][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.288910][ T9346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.307562][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.314777][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.363921][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 505.405756][ T9346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.422189][ T9346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.469273][ T9346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.711533][ T8529] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.875837][ T9508] loop6: detected capacity change from 0 to 512 [ 505.893328][ T9346] hsr_slave_0: entered promiscuous mode [ 505.931110][ T9346] hsr_slave_1: entered promiscuous mode [ 505.958073][ T9508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.002761][ T9346] debugfs: 'hsr0' already exists in 'hsr' [ 506.035402][ T9346] Cannot create hsr debugfs directory [ 506.096465][ T9508] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.717752][ T7007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.520125][ T9545] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 507.827688][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17 [ 507.893206][ T9560] fuse: Bad value for 'fd' [ 508.093487][ T5757] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 508.323591][ T5757] usb 1-1: Using ep0 maxpacket: 16 [ 508.359040][ T5757] usb 1-1: unable to get BOS descriptor or descriptor too short [ 508.408581][ T5757] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 508.482846][ T5757] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.559546][ T5757] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 508.588894][ T9554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 508.637669][ T9554] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 508.699553][ T5757] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.781627][ T5757] usb 1-1: Product: syz [ 508.830853][ T5757] usb 1-1: Manufacturer: syz [ 508.883295][ T5757] usb 1-1: SerialNumber: syz [ 509.114489][ T9554] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 509.151358][ T9554] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 509.211833][ T5757] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 509.255067][ T9554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 509.282830][ T5757] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 509.305392][ T9554] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 509.378819][ T9554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.427431][ T9554] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 509.611619][ T5757] usb 1-1: 2:1 : can't get Cluster Descriptor [ 509.620585][ T9554] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 511.459020][ T9554] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 511.662079][ T9554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.710018][ T9554] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 511.859429][ T5757] usb 1-1: USB disconnect, device number 8 [ 511.982595][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.133577][ T9346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 512.218431][ T9346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.269130][ T9346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 512.311326][ T9346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.329874][ T9346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 512.376267][ T9346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.412206][ T9346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 512.479057][ T9346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.528346][ T9165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.844531][ T5268] 8021q: adding VLAN 0 to HW filter on device eth18 [ 516.041440][ T9346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.142326][ T9346] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.194966][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.202181][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.277060][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.284303][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.468168][ T9346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.876209][ T9165] veth0_vlan: entered promiscuous mode [ 516.964322][ T9165] veth1_vlan: entered promiscuous mode [ 517.111002][ T9165] veth0_macvtap: entered promiscuous mode [ 517.158492][ T9165] veth1_macvtap: entered promiscuous mode [ 517.356872][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.427821][ T9165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.505790][ T5915] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.544436][ T9649] loop6: detected capacity change from 0 to 16 [ 517.597955][ T9649] erofs (device loop6): mounted with root inode @ nid 36. [ 517.598118][ T5912] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.684731][ T6050] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.684807][ T9649] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 517.792941][ T9653] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 517.817074][ T5908] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.834931][ T9649] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 517.880552][ T9649] erofs (device loop6): invalid h_shared_count 83 @ nid 46 [ 520.062169][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.080478][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.089048][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.100007][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.107796][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.211135][ T5268] 8021q: adding VLAN 0 to HW filter on device eth19 [ 520.296716][ T9678] loop8: detected capacity change from 0 to 8 [ 520.352111][ T9678] SQUASHFS error: lzo decompression failed, data probably corrupt [ 520.394863][ T9678] SQUASHFS error: Failed to read block 0x144: -5 [ 520.432524][ T9678] SQUASHFS error: Unable to read metadata cache entry [142] [ 520.481714][ T9678] SQUASHFS error: Unable to read inode 0x11f [ 520.516165][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.153798][ T5616] Bluetooth: hci5: command tx timeout [ 523.179402][ T9346] veth0_vlan: entered promiscuous mode [ 523.282357][ T9346] veth1_vlan: entered promiscuous mode [ 523.798627][ T5908] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.115792][ T9346] veth0_macvtap: entered promiscuous mode [ 524.235215][ T5616] Bluetooth: hci5: command tx timeout [ 524.339737][ T5908] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.539085][ T9346] veth1_macvtap: entered promiscuous mode [ 524.615397][ T9715] loop0: detected capacity change from 0 to 512 [ 524.701153][ T5908] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.712579][ T9715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.803033][ T9715] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 525.091595][ T5908] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.129301][ T5268] 8021q: adding VLAN 0 to HW filter on device eth20 [ 525.163195][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.201629][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.278142][ T9346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.703530][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.227968][ T5616] Bluetooth: hci5: command tx timeout [ 527.475339][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.877545][ T5915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.179184][ T5908] bridge_slave_1: left allmulticast mode [ 528.207081][ T5908] bridge_slave_1: left promiscuous mode [ 528.231238][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.082813][ T5616] Bluetooth: hci5: command tx timeout [ 530.131672][ T5908] bridge_slave_0: left allmulticast mode [ 530.162475][ T5908] bridge_slave_0: left promiscuous mode [ 530.213759][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.000304][ T5908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.092847][ T5908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.142047][ T5908] bond0 (unregistering): Released all slaves [ 532.213595][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.392536][ T9773] syzkaller0: entered promiscuous mode [ 532.414495][ T9773] syzkaller0: entered allmulticast mode [ 532.524995][ T5908] hsr_slave_0: left promiscuous mode [ 532.548311][ T5908] hsr_slave_1: left promiscuous mode [ 532.571941][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.603480][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.629538][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.657091][ T5908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.747703][ T5908] veth1_macvtap: left promiscuous mode [ 532.767581][ T31] audit: type=1326 audit(1786777206.280:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 532.793168][ T5908] veth0_macvtap: left promiscuous mode [ 532.826789][ T5908] veth1_vlan: left promiscuous mode [ 532.838285][ T5908] veth0_vlan: left promiscuous mode [ 532.868621][ T31] audit: type=1326 audit(1786777206.350:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 532.975719][ T31] audit: type=1326 audit(1786777206.370:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.089010][ T31] audit: type=1326 audit(1786777206.370:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.197929][ T31] audit: type=1326 audit(1786777206.370:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.313743][ T31] audit: type=1326 audit(1786777206.370:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.431703][ T31] audit: type=1326 audit(1786777206.370:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.518684][ T31] audit: type=1326 audit(1786777206.370:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.643731][ T31] audit: type=1326 audit(1786777206.380:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.711556][ T31] audit: type=1326 audit(1786777206.380:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.1035" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57679e0d9 code=0x7ffc0000 [ 533.979399][ T5908] team0 (unregistering): Port device team_slave_1 removed [ 534.051383][ T5908] team0 (unregistering): Port device team_slave_0 removed [ 534.499249][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.532213][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.691949][ T9845] loop8: detected capacity change from 0 to 8 [ 535.761240][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.789231][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.827522][ T9670] bridge_slave_0: entered allmulticast mode [ 535.858570][ T9670] bridge_slave_0: entered promiscuous mode [ 535.886808][ T5904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.901621][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.919359][ T5904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.929851][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.952911][ T9670] bridge_slave_1: entered allmulticast mode [ 535.988140][ T9670] bridge_slave_1: entered promiscuous mode [ 536.174163][ T9857] loop0: detected capacity change from 0 to 128 [ 536.243718][ T9857] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 536.287735][ T9670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.340344][ T9857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 536.395381][ T9862] loop6: detected capacity change from 0 to 1024 [ 536.402640][ T9670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.449510][ T9862] EXT4-fs: Ignoring removed bh option [ 536.570826][ T9862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 536.584210][ T9862] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.773712][ T9868] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 536.927840][ T9670] team0: Port device team_slave_0 added [ 537.165717][ T9670] team0: Port device team_slave_1 added [ 537.191394][ T9877] loop8: detected capacity change from 0 to 1024 [ 537.422649][ T9877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 537.463100][ T7007] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 537.485978][ T9877] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 537.570686][ T9877] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 537.591428][ T9877] EXT4-fs (loop8): orphan cleanup on readonly fs [ 537.660963][ T9877] EXT4-fs error (device loop8): ext4_free_blocks:6717: comm syz.8.1051: Freeing blocks not in datazone - block = 0, count = 4096 [ 537.758866][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.771242][ T9877] loop8: lost filesystem error report for type 5 error -117 [ 537.773483][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 537.787294][ C0] EXT4-fs (loop8): initial error at time 1786777211: ext4_free_blocks:6717 [ 537.795979][ C0] EXT4-fs (loop8): last error at time 1786777211: ext4_free_blocks:6717 [ 537.822580][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.825267][ T9887] loop6: detected capacity change from 0 to 2048 [ 537.855860][ T9877] EXT4-fs (loop8): 1 orphan inode deleted [ 537.902322][ T9877] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.948204][ T9670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.031070][ T9670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.064695][ T9877] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.1051: iget: bad i_size value: 1970324836974602 [ 538.075571][ T9887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 538.077664][ T9670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.196076][ T9670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.857291][ T8529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.948078][ T9670] hsr_slave_0: entered promiscuous mode [ 538.988379][ T9898] loop1: detected capacity change from 0 to 4096 [ 538.997678][ T9670] hsr_slave_1: entered promiscuous mode [ 539.016638][ T9670] debugfs: 'hsr0' already exists in 'hsr' [ 539.043211][ T9670] Cannot create hsr debugfs directory [ 539.149789][ T9898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.893561][ T31] kauditd_printk_skb: 111 callbacks suppressed [ 541.893589][ T31] audit: type=1800 audit(1786777215.380:202): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1056" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 541.947334][ T9929] loop8: detected capacity change from 0 to 1024 [ 542.011007][ T9929] hfsplus: failed to load extents file [ 543.542573][ T9346] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.105445][ T9942] loop6: detected capacity change from 0 to 164 [ 549.007147][ T9670] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 549.074963][ T9670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.955764][ T9670] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 550.072531][ T9670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.121248][ T9670] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 550.450881][ T9670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.483303][ T9670] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 550.547365][ T9971] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[8529] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[9971] [ 551.400688][ T9670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.448521][ T9670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.545855][ T9670] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.622819][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.630022][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.837669][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.844871][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.746066][ T9997] loop0: detected capacity change from 0 to 512 [ 554.854792][ T9997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.889958][ T9997] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 556.949650][ T31] audit: type=1800 audit(1786777230.460:203): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1081" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 557.770655][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.916613][ T9670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.185066][T10041] loop8: detected capacity change from 0 to 512 [ 559.211699][T10041] EXT4-fs: Ignoring removed bh option [ 559.313322][T10041] EXT4-fs error (device loop8): ext4_iget_extra_inode:5179: inode #15: comm syz.8.1087: corrupted in-inode xattr: e_value size too large [ 559.434610][T10041] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 559.437263][T10041] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1087: couldn't read orphan inode 15 (err -117) [ 559.446754][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 559.446787][ C1] EXT4-fs (loop8): initial error at time 1786777232: ext4_iget_extra_inode:5179: inode 15 [ 559.446843][ C1] EXT4-fs (loop8): last error at time 1786777232: ext4_iget_extra_inode:5179: inode 15 [ 559.618964][T10041] loop8: lost filesystem error report for type 5 error -117 [ 559.655980][T10041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.887766][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 559.905758][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 559.918554][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 559.929547][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 559.940538][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 560.258636][ T8529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.317660][T10068] xt_nat: multiple ranges no longer supported [ 562.074443][ T5608] Bluetooth: hci6: command tx timeout [ 562.298918][ T9670] veth0_vlan: entered promiscuous mode [ 562.316429][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.326952][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.417621][ T9670] veth1_vlan: entered promiscuous mode [ 562.672321][ T9670] veth0_macvtap: entered promiscuous mode [ 562.682474][T10079] loop0: detected capacity change from 0 to 1024 [ 562.749526][ T9670] veth1_macvtap: entered promiscuous mode [ 562.765500][T10079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.890519][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.985126][ T5758] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 563.034322][ T9670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.193948][ T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.196987][ T5758] usb 9-1: Using ep0 maxpacket: 32 [ 563.240863][ T5758] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 563.275758][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.290179][ T5758] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 563.334734][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.338758][ T5758] usb 9-1: config 0 has no interface number 0 [ 563.399468][ T5758] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 563.452100][ T5758] usb 9-1: config 0 interface 85 has no altsetting 0 [ 563.481958][ T5758] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.528193][ T5758] usb 9-1: Product: syz [ 563.544468][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.562868][ T5758] usb 9-1: Manufacturer: syz [ 563.582038][ T5758] usb 9-1: SerialNumber: syz [ 563.684655][ T5758] usb 9-1: config 0 descriptor?? [ 564.153901][ T5608] Bluetooth: hci6: command tx timeout [ 564.373859][ T5758] appletouch 9-1:0.85: Geyser mode initialized. [ 566.233479][ T5608] Bluetooth: hci6: command tx timeout [ 566.256143][ T5758] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input9 [ 566.548678][ T5758] usb 9-1: USB disconnect, device number 4 [ 566.548678][ C0] appletouch 9-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 566.755787][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.833177][T10104] loop8: detected capacity change from 0 to 512 [ 568.323544][ T5608] Bluetooth: hci6: command tx timeout [ 568.401125][ T5758] appletouch 9-1:0.85: input: appletouch disconnected [ 568.612822][T10104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.835900][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.906018][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.249208][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 569.258333][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.269959][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 569.283185][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 569.299982][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.310366][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 569.424210][ T8529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.506699][T10120] loop1: detected capacity change from 0 to 2048 [ 569.531549][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.595648][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.660208][T10120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.790606][T10120] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.101382][T10129] futex_wake_op: syz.8.1099 tries to shift op by -1; fix this program [ 571.530967][ T5608] Bluetooth: hci3: command tx timeout [ 572.367944][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.155595][ T9346] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.159993][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.215856][T10143] loop9: detected capacity change from 0 to 128 [ 573.593951][ T5608] Bluetooth: hci3: command tx timeout [ 573.614001][T10154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 573.628765][T10154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 573.636973][T10154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 573.656743][T10154] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 573.685725][T10154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 574.359147][ T5758] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 574.489678][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 574.544129][ T5758] usb 10-1: Using ep0 maxpacket: 32 [ 574.561839][ T5758] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 574.581301][ T5758] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 574.581341][ T5758] usb 10-1: config 0 has no interface number 0 [ 574.581396][ T5758] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 574.597921][ T5758] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.597962][ T5758] usb 10-1: Product: syz [ 574.597989][ T5758] usb 10-1: Manufacturer: syz [ 574.598017][ T5758] usb 10-1: SerialNumber: syz [ 574.607021][ T5758] usb 10-1: config 0 descriptor?? [ 574.607984][T10161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 574.720148][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 574.720213][ T10] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 574.731326][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.731365][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 574.742799][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.832194][T10161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 574.991329][ T10] usb 9-1: Product: syz [ 575.023005][ T10] usb 9-1: Manufacturer: syz [ 575.033164][ T10] usb 9-1: SerialNumber: syz [ 575.081742][ T5758] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 575.081810][ T10] usb 9-1: selecting invalid altsetting 1 [ 575.149338][ T10] usb 9-1: unit 6 not found! [ 575.151190][ T5758] asix 10-1:0.188: probe with driver asix failed with error -61 [ 575.277659][ T10] usb 9-1: 2:0: cannot get min/max values for control 1 (id 2) [ 575.581247][ T10] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 575.638792][ T10] usb 9-1: USB disconnect, device number 5 [ 575.675257][T10154] Bluetooth: hci3: command tx timeout [ 575.753649][T10154] Bluetooth: hci7: command tx timeout [ 575.855118][ T9893] udevd[9893]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.894015][ T13] bridge_slave_1: left allmulticast mode [ 575.932486][ T13] bridge_slave_1: left promiscuous mode [ 575.963956][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.111413][ T13] bridge_slave_0: left allmulticast mode [ 576.146163][ T13] bridge_slave_0: left promiscuous mode [ 576.192951][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.763579][T10154] Bluetooth: hci3: command tx timeout [ 577.835317][T10154] Bluetooth: hci7: command tx timeout [ 577.913478][ T5857] usb 10-1: USB disconnect, device number 2 [ 579.496604][T10197] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1109'. [ 580.266087][T10154] Bluetooth: hci7: command tx timeout [ 580.310152][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.415756][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.478271][ T13] bond0 (unregistering): Released all slaves [ 580.536990][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.569273][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.612229][T10048] bridge_slave_0: entered allmulticast mode [ 580.662327][T10048] bridge_slave_0: entered promiscuous mode [ 581.022808][ T13] tipc: Left network mode [ 581.033285][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.073839][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.097169][T10048] bridge_slave_1: entered allmulticast mode [ 581.136154][T10048] bridge_slave_1: entered promiscuous mode [ 581.481163][T10048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.878393][T10048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.643965][T10217] 9p: Bad value for 'wfdno' [ 583.189259][T10154] Bluetooth: hci7: command tx timeout [ 584.033050][T10213] loop9: detected capacity change from 0 to 8192 [ 584.087066][T10213] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 584.174953][T10221] loop8: detected capacity change from 0 to 128 [ 584.270358][T10221] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 584.335858][T10221] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 584.491668][ T13] hsr_slave_0: left promiscuous mode [ 584.555886][ T13] hsr_slave_1: left promiscuous mode [ 584.573898][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.609073][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.626229][ T8529] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 584.650012][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.695078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.781669][ T13] veth1_macvtap: left promiscuous mode [ 584.806239][ T13] veth0_macvtap: left promiscuous mode [ 584.831817][ T13] veth1_vlan: left promiscuous mode [ 584.851568][ T13] veth0_vlan: left promiscuous mode [ 585.056514][T10233] loop8: detected capacity change from 0 to 16 [ 585.152263][T10233] erofs (device loop8): invalid ishare xattr prefix id 0 [ 586.289218][T10253] loop0: detected capacity change from 0 to 2048 [ 586.359914][T10253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.033694][T10225] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 588.805778][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.831058][ T13] team0 (unregistering): Port device team_slave_1 removed [ 588.910177][ T13] team0 (unregistering): Port device team_slave_0 removed [ 589.371106][T10048] team0: Port device team_slave_0 added [ 589.534599][T10048] team0: Port device team_slave_1 added [ 589.693586][T10048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.716842][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.829358][T10048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.995733][T10048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.002722][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.029629][T10048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.144505][T10288] loop8: detected capacity change from 0 to 8 [ 590.443917][T10294] loop8: detected capacity change from 0 to 512 [ 590.456207][T10294] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 590.490102][T10294] EXT4-fs (loop8): 1 truncate cleaned up [ 590.524956][T10294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.719594][T10048] hsr_slave_0: entered promiscuous mode [ 590.741396][T10048] hsr_slave_1: entered promiscuous mode [ 591.084418][ T8529] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.139050][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.317298][T10339] loop8: detected capacity change from 0 to 2048 [ 597.366665][T10339] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 597.414917][T10339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 597.460860][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.484159][ T31] audit: type=1800 audit(1786777271.000:204): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1136" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 597.889936][T10342] overlayfs: missing 'lowerdir' [ 598.214876][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1132'. [ 598.253636][T10345] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1132'. [ 598.850422][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.749847][T10151] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.354074][T10358] 9p: Bad value for 'wfdno' [ 601.920543][T10151] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.935169][T10151] bridge_slave_0: entered allmulticast mode [ 601.945684][T10151] bridge_slave_0: entered promiscuous mode [ 602.115204][T10151] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.133570][T10151] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.674473][T10151] bridge_slave_1: entered allmulticast mode [ 602.694867][T10151] bridge_slave_1: entered promiscuous mode [ 602.703536][T10119] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.749316][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.795381][T10119] bridge_slave_0: entered allmulticast mode [ 602.818967][T10119] bridge_slave_0: entered promiscuous mode [ 603.010135][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.150054][T10370] Bluetooth: MGMT ver 1.23 [ 603.167562][T10370] futex_wake_op: syz.0.1135 tries to shift op by 144; fix this program [ 604.004431][T10374] loop9: detected capacity change from 0 to 512 [ 604.157405][T10119] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.203306][T10374] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.224413][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.281014][T10119] bridge_slave_1: entered allmulticast mode [ 604.335294][T10119] bridge_slave_1: entered promiscuous mode [ 605.227099][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.276977][T10119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.333299][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.402804][ T9670] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.411111][T10394] loop9: detected capacity change from 0 to 2048 [ 607.430822][T10394] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 607.446825][T10394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.616736][T10119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.907556][T10399] loop0: detected capacity change from 0 to 128 [ 607.991730][T10399] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 608.008286][T10399] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 608.107104][ T5613] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.189284][T10151] team0: Port device team_slave_0 added [ 608.230264][T10119] team0: Port device team_slave_0 added [ 608.242420][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 608.424544][T10151] team0: Port device team_slave_1 added [ 608.432847][T10404] loop0: detected capacity change from 0 to 1024 [ 608.471495][T10119] team0: Port device team_slave_1 added [ 608.534304][T10404] hfsplus: failed to load extents file [ 608.587039][T10410] loop8: detected capacity change from 0 to 2048 [ 608.661194][T10410] Alternate GPT is invalid, using primary GPT. [ 608.677333][T10404] loop0: detected capacity change from 0 to 1024 [ 608.685328][T10410] loop8: p1 p2 p3 [ 608.770995][T10404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.915961][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.973060][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.101441][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.155885][T10119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.181007][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.232711][T10119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.260714][ T9893] udevd[9893]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 609.264201][ T9872] udevd[9872]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 609.275155][T10119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.287980][ T9798] udevd[9798]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 609.301344][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.356866][T10119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.384394][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 609.404887][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.423738][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.451156][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.516163][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.563712][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 609.569791][ T24] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 609.583040][ T24] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 609.604685][ T24] usb 9-1: config 0 has no interface number 0 [ 609.631378][ T24] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 609.672151][ T24] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 609.716773][ T24] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 609.716852][ T24] usb 9-1: Manufacturer: syz [ 609.716881][ T24] usb 9-1: SerialNumber: syz [ 609.727796][ T24] usb 9-1: config 0 descriptor?? [ 609.949850][ T24] usbtouchscreen 9-1:0.214: Failed to read FW rev: -71 [ 609.981497][ T24] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 609.984346][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.028672][ T24] usb 9-1: USB disconnect, device number 6 [ 612.107085][T10119] hsr_slave_0: entered promiscuous mode [ 612.127686][T10119] hsr_slave_1: entered promiscuous mode [ 612.144547][T10119] debugfs: 'hsr0' already exists in 'hsr' [ 612.151989][T10119] Cannot create hsr debugfs directory [ 612.192804][T10151] hsr_slave_0: entered promiscuous mode [ 612.206623][T10151] hsr_slave_1: entered promiscuous mode [ 612.227592][T10151] debugfs: 'hsr0' already exists in 'hsr' [ 612.236829][T10151] Cannot create hsr debugfs directory [ 613.930023][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.356696][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.104562][T10454] 9p: Bad value for 'wfdno' [ 618.813986][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.873294][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 619.645194][T10048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 620.072912][T10048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.094790][T10048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 620.160827][T10048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 620.481386][T10471] loop0: detected capacity change from 0 to 128 [ 622.377985][T10471] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.498547][T10471] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 622.707775][ T5613] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 622.759490][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 622.785185][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 622.807043][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 622.819224][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 622.829751][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 623.052979][ T13] bridge_slave_1: left allmulticast mode [ 623.093123][ T13] bridge_slave_1: left promiscuous mode [ 623.110788][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.193013][ T13] bridge_slave_0: left allmulticast mode [ 623.214666][ T13] bridge_slave_0: left promiscuous mode [ 623.225591][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.237731][T10490] loop0: detected capacity change from 0 to 1024 [ 623.268926][T10490] hfsplus: failed to load catalog file [ 623.337045][ T13] bridge_slave_1: left allmulticast mode [ 623.377187][ T13] bridge_slave_1: left promiscuous mode [ 623.405541][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.455665][ T13] bridge_slave_0: left allmulticast mode [ 623.479036][ T13] bridge_slave_0: left promiscuous mode [ 623.502450][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.382373][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.388905][ T5616] Bluetooth: hci0: command tx timeout [ 625.398685][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.035382][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.055642][T10509] loop0: detected capacity change from 0 to 512 [ 626.074564][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.075709][T10509] EXT4-fs (loop0): Test dummy encryption mode enabled [ 626.119181][T10509] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 626.123246][ T13] bond0 (unregistering): Released all slaves [ 626.503037][T10513] loop9: detected capacity change from 0 to 256 [ 626.571155][T10513] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 626.658933][T10513] exFAT-fs (loop9): valid_size(150994954) is greater than size(10) [ 626.674218][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.696131][ T31] audit: type=1800 audit(1786777300.210:205): pid=10513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1163" name="file1" dev="loop9" ino=1048676 res=0 errno=0 [ 626.744646][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.792646][ T13] bond0 (unregistering): Released all slaves [ 627.049141][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 627.260349][ T13] tipc: Left network mode [ 627.438142][ T5616] Bluetooth: hci0: command tx timeout [ 628.683194][T10548] Bluetooth: MGMT ver 1.23 [ 629.169135][T10154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 629.183137][T10154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 629.197368][T10154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 629.213341][T10154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 629.225134][T10154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 629.514603][ T5616] Bluetooth: hci0: command tx timeout [ 629.762793][ T13] hsr_slave_0: left promiscuous mode [ 629.794578][ T13] hsr_slave_1: left promiscuous mode [ 629.820531][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.848139][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.889984][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.921409][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.980327][ T13] hsr_slave_0: left promiscuous mode [ 630.001846][ T13] hsr_slave_1: left promiscuous mode [ 630.025718][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.046720][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.069718][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.080127][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.172866][ T13] veth1_macvtap: left promiscuous mode [ 630.180281][ T13] veth0_macvtap: left promiscuous mode [ 630.188294][ T13] veth1_vlan: left promiscuous mode [ 630.194038][ T13] veth0_vlan: left promiscuous mode [ 630.211053][ T13] veth1_macvtap: left promiscuous mode [ 630.219007][ T13] veth0_macvtap: left promiscuous mode [ 630.224715][ T5750] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 630.225294][ T13] veth1_vlan: left promiscuous mode [ 630.239742][ T13] veth0_vlan: left promiscuous mode [ 630.383826][ T5750] usb 9-1: Using ep0 maxpacket: 16 [ 630.393567][ T5750] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 630.406762][ T5750] usb 9-1: config 0 has an invalid interface number: 34 but max is 0 [ 630.419537][ T5750] usb 9-1: config 0 has no interface number 0 [ 630.429375][ T5750] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 630.442398][ T5750] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 630.459876][ T5750] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.468672][ T5750] usb 9-1: Product: syz [ 630.472984][ T5750] usb 9-1: Manufacturer: syz [ 630.479207][ T5750] usb 9-1: SerialNumber: syz [ 630.506901][ T5750] usb 9-1: config 0 descriptor?? [ 630.517523][T10575] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 630.529547][T10575] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 630.760780][T10575] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 630.770783][T10575] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 630.991976][ T5750] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 631.009007][ T13] team0 (unregistering): Port device team_slave_1 removed [ 631.053920][ T13] team0 (unregistering): Port device team_slave_0 removed [ 631.203756][ T5750] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 631.220882][ T5750] asix 9-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 631.234119][ T5750] asix 9-1:0.34: probe with driver asix failed with error -71 [ 631.268717][ T5750] usb 9-1: USB disconnect, device number 7 [ 631.353800][ T5616] Bluetooth: hci1: command tx timeout [ 631.593749][ T5616] Bluetooth: hci0: command tx timeout [ 631.614103][T10580] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1183'. [ 633.155818][T10590] loop0: detected capacity change from 0 to 512 [ 633.196445][T10590] EXT4-fs: Ignoring removed oldalloc option [ 633.207000][T10593] loop8: detected capacity change from 0 to 128 [ 633.231066][T10590] EXT4-fs: journaled quota format not specified [ 633.243493][T10593] vfat: Unknown parameter '184467440737095516150x000000000000000000000000000000000000' [ 633.483597][ T5616] Bluetooth: hci1: command tx timeout [ 633.655908][T10154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 633.675063][T10154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 633.685733][T10154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 633.697285][T10154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 633.708840][T10154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.538849][T10154] Bluetooth: hci1: command tx timeout [ 635.558023][ T13] team0 (unregistering): Port device team_slave_1 removed [ 635.629779][ T13] team0 (unregistering): Port device team_slave_0 removed [ 635.764784][T10154] Bluetooth: hci3: command tx timeout [ 636.285020][T10607] loop9: detected capacity change from 0 to 164 [ 638.036328][T10154] Bluetooth: hci1: command tx timeout [ 638.042769][ T5616] Bluetooth: hci3: command tx timeout [ 638.207032][T10607] Unsupported NM flag settings (240) [ 640.074073][ T5616] Bluetooth: hci3: command tx timeout [ 640.098639][T10481] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.128396][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.188020][T10481] bridge_slave_0: entered allmulticast mode [ 640.237701][T10481] bridge_slave_0: entered promiscuous mode [ 640.337449][T10481] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.356177][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.605257][T10632] 9p: Bad value for 'wfdno' [ 640.842362][T10481] bridge_slave_1: entered allmulticast mode [ 641.152186][T10481] bridge_slave_1: entered promiscuous mode [ 641.437236][T10481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.634929][T10481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.787241][T10481] team0: Port device team_slave_0 added [ 641.856492][T10481] team0: Port device team_slave_1 added [ 642.133713][T10481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.150698][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.153830][ T5616] Bluetooth: hci3: command tx timeout [ 642.183323][T10481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.187715][T10643] loop9: detected capacity change from 0 to 128 [ 642.226370][T10643] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 642.270161][T10643] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 642.382225][ T9670] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 642.429829][T10481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.437983][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.465069][T10481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.578509][T10651] loop9: detected capacity change from 0 to 128 [ 642.590626][T10651] vfat: Unknown parameter '184467440737095516150x000000000000000000000000000000000000' [ 644.984910][T10481] hsr_slave_0: entered promiscuous mode [ 645.012410][T10481] hsr_slave_1: entered promiscuous mode [ 645.035225][T10481] debugfs: 'hsr0' already exists in 'hsr' [ 645.053527][T10481] Cannot create hsr debugfs directory [ 645.496201][T10558] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.526324][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.558077][T10558] bridge_slave_0: entered allmulticast mode [ 645.591172][T10558] bridge_slave_0: entered promiscuous mode [ 645.616555][T10671] loop8: detected capacity change from 0 to 512 [ 645.622952][T10558] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.637798][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.648826][T10558] bridge_slave_1: entered allmulticast mode [ 645.658701][T10558] bridge_slave_1: entered promiscuous mode [ 646.495052][T10154] Bluetooth: hci5: command 0x0406 tx timeout [ 649.364044][ T13] bridge_slave_1: left allmulticast mode [ 649.384725][ T13] bridge_slave_1: left promiscuous mode [ 649.409358][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.449439][ T13] bridge_slave_0: left allmulticast mode [ 649.480119][ T13] bridge_slave_0: left promiscuous mode [ 649.498670][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.509583][T10686] [ 649.511967][T10686] ====================================================== [ 649.518980][T10686] WARNING: possible circular locking dependency detected [ 649.525994][T10686] syzkaller #0 Tainted: G L [ 649.531967][T10686] ------------------------------------------------------ [ 649.538975][T10686] syz.0.1208/10686 is trying to acquire lock: [ 649.545029][T10686] ffff88801caed210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 649.555257][T10686] [ 649.555257][T10686] but task is already holding lock: [ 649.562625][T10686] ffff8880277f09b0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 649.573944][T10686] [ 649.573944][T10686] which lock already depends on the new lock. [ 649.573944][T10686] [ 649.584343][T10686] [ 649.584343][T10686] the existing dependency chain (in reverse order) is: [ 649.593440][T10686] [ 649.593440][T10686] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 649.602073][T10686] lock_acquire+0x1b9/0x370 [ 649.607126][T10686] blk_alloc_queue+0x610/0x790 [ 649.612430][T10686] blk_mq_alloc_queue+0x174/0x290 [ 649.617980][T10686] __blk_mq_alloc_disk+0x29/0x120 [ 649.623533][T10686] loop_add+0x498/0xb60 [ 649.628211][T10686] loop_init+0x1d3/0x200 [ 649.633008][T10686] do_one_initcall+0x11d/0x700 [ 649.638306][T10686] kernel_init_freeable+0x6ea/0x7b0 [ 649.644030][T10686] kernel_init+0x1f/0x1e0 [ 649.648934][T10686] ret_from_fork+0x72b/0xd50 [ 649.654060][T10686] ret_from_fork_asm+0x1a/0x30 [ 649.659398][T10686] [ 649.659398][T10686] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 649.666631][T10686] lock_acquire+0x1b9/0x370 [ 649.671664][T10686] fs_reclaim_acquire+0xc4/0x100 [ 649.677126][T10686] kmem_cache_alloc_noprof+0x63/0x6a0 [ 649.683054][T10686] __kernfs_iattrs+0x126/0x450 [ 649.688355][T10686] __kernfs_setattr+0x4d/0x3c0 [ 649.693653][T10686] kernfs_iop_setattr+0xda/0x130 [ 649.699123][T10686] notify_change+0xb25/0x1330 [ 649.704326][T10686] do_truncate+0x1df/0x240 [ 649.709271][T10686] path_openat+0x370f/0x4280 [ 649.714392][T10686] do_file_open+0x20e/0x430 [ 649.719433][T10686] do_sys_openat2+0x10f/0x1e0 [ 649.724631][T10686] __x64_sys_openat+0x12d/0x210 [ 649.730002][T10686] do_syscall_64+0x115/0x870 [ 649.735118][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.741532][T10686] [ 649.741532][T10686] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 649.750062][T10686] check_prev_add+0xeb/0xe60 [ 649.755197][T10686] __lock_acquire+0x136c/0x1a40 [ 649.760573][T10686] lock_acquire+0x1b9/0x370 [ 649.765611][T10686] down_read+0x99/0x4c0 [ 649.770394][T10686] kernfs_iop_getattr+0x9c/0xf0 [ 649.775777][T10686] vfs_getattr_nosec+0x2d4/0x430 [ 649.781257][T10686] vfs_getattr+0x4a/0x60 [ 649.786054][T10686] loop_query_min_dio_size.isra.0+0x117/0x250 [ 649.792689][T10686] lo_ioctl+0x13aa/0x1bc0 [ 649.797548][T10686] blkdev_ioctl+0x5ad/0x6f0 [ 649.802583][T10686] __x64_sys_ioctl+0x18e/0x210 [ 649.807886][T10686] do_syscall_64+0x115/0x870 [ 649.813005][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.819422][T10686] [ 649.819422][T10686] other info that might help us debug this: [ 649.819422][T10686] [ 649.829648][T10686] Chain exists of: [ 649.829648][T10686] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 649.829648][T10686] [ 649.844201][T10686] Possible unsafe locking scenario: [ 649.844201][T10686] [ 649.851643][T10686] CPU0 CPU1 [ 649.857002][T10686] ---- ---- [ 649.862352][T10686] lock(&q->q_usage_counter(io)#22); [ 649.867741][T10686] lock(fs_reclaim); [ 649.874252][T10686] lock(&q->q_usage_counter(io)#22); [ 649.882160][T10686] rlock(&root->kernfs_iattr_rwsem); [ 649.887534][T10686] [ 649.887534][T10686] *** DEADLOCK *** [ 649.887534][T10686] [ 649.895666][T10686] 3 locks held by syz.0.1208/10686: [ 649.900851][T10686] #0: ffff888027a91430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 649.911062][T10686] #1: ffff8880277f09b0 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 649.922796][T10686] #2: ffff8880277f09e8 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 649.934688][T10686] [ 649.934688][T10686] stack backtrace: [ 649.940572][T10686] CPU: 1 UID: 0 PID: 10686 Comm: syz.0.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.940619][T10686] Tainted: [L]=SOFTLOCKUP [ 649.940629][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 649.940647][T10686] Call Trace: [ 649.940657][T10686] [ 649.940668][T10686] dump_stack_lvl+0x100/0x190 [ 649.940709][T10686] print_circular_bug.cold+0x178/0x1c7 [ 649.940778][T10686] check_noncircular+0x146/0x160 [ 649.940814][T10686] check_prev_add+0xeb/0xe60 [ 649.940842][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.940879][T10686] __lock_acquire+0x136c/0x1a40 [ 649.940917][T10686] lock_acquire+0x1b9/0x370 [ 649.940948][T10686] ? kernfs_iop_getattr+0x9c/0xf0 [ 649.940989][T10686] ? __pfx___might_resched+0x10/0x10 [ 649.941023][T10686] down_read+0x99/0x4c0 [ 649.941062][T10686] ? kernfs_iop_getattr+0x9c/0xf0 [ 649.941103][T10686] ? find_held_lock+0x2b/0x80 [ 649.941144][T10686] ? __pfx_down_read+0x10/0x10 [ 649.941182][T10686] ? kernfs_root+0xee/0x2a0 [ 649.941217][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.941256][T10686] kernfs_iop_getattr+0x9c/0xf0 [ 649.941308][T10686] vfs_getattr_nosec+0x2d4/0x430 [ 649.941352][T10686] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 649.941393][T10686] vfs_getattr+0x4a/0x60 [ 649.941435][T10686] loop_query_min_dio_size.isra.0+0x117/0x250 [ 649.941471][T10686] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 649.941518][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.941554][T10686] lo_ioctl+0x13aa/0x1bc0 [ 649.941591][T10686] ? __pfx_lo_ioctl+0x10/0x10 [ 649.941630][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.941664][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.941697][T10686] ? blk_get_meta_cap+0xd4/0x6c0 [ 649.941741][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.941775][T10686] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 649.941836][T10686] ? tomoyo_path_number_perm+0x28f/0x580 [ 649.941881][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.941918][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.941951][T10686] ? blkdev_common_ioctl+0x515/0x2b80 [ 649.941980][T10686] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 649.942007][T10686] ? __pfx_futex_wait+0x10/0x10 [ 649.942036][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.942069][T10686] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.942102][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.942137][T10686] ? do_vfs_ioctl+0x226/0x13e0 [ 649.942171][T10686] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 649.942209][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.942241][T10686] ? find_held_lock+0x2b/0x80 [ 649.942283][T10686] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.942317][T10686] ? __pfx_lo_ioctl+0x10/0x10 [ 649.942355][T10686] blkdev_ioctl+0x5ad/0x6f0 [ 649.942388][T10686] ? __pfx_blkdev_ioctl+0x10/0x10 [ 649.942417][T10686] ? __pfx_blkdev_ioctl+0x10/0x10 [ 649.942444][T10686] __x64_sys_ioctl+0x18e/0x210 [ 649.942478][T10686] do_syscall_64+0x115/0x870 [ 649.942517][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.942545][T10686] RIP: 0033:0x7fdc1ed9e0d9 [ 649.942568][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.942609][T10686] RSP: 002b:00007fdc1fbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.942635][T10686] RAX: ffffffffffffffda RBX: 00007fdc1f025fa0 RCX: 00007fdc1ed9e0d9 [ 649.942655][T10686] RDX: 0000000000000005 RSI: 0000000000004c06 RDI: 0000000000000004 [ 649.942672][T10686] RBP: 00007fdc1ee35024 R08: 0000000000000000 R09: 0000000000000000 [ 649.942689][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.942706][T10686] R13: 00007fdc1f026038 R14: 00007fdc1f025fa0 R15: 00007ffeb178dd08 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 649.942735][T10686] [ 650.329469][ T13] bridge_slave_1: left allmulticast mode [ 650.335512][ T13] bridge_slave_1: left promiscuous mode [ 650.341255][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.417389][ T13] bridge_slave_0: left allmulticast mode [ 650.423093][ T13] bridge_slave_0: left promiscuous mode [ 650.432548][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.461751][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 650.652647][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.704051][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.751321][ T13] bond0 (unregistering): Released all slaves [ 650.861138][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.880549][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.907830][ T13] bond0 (unregistering): Released all slaves [ 651.026196][T10558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.160245][ T13] hsr_slave_0: left promiscuous mode [ 651.201589][ T13] hsr_slave_1: left promiscuous mode [ 651.229050][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.270597][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.383039][ T13] hsr_slave_0: left promiscuous mode [ 651.420350][ T13] hsr_slave_1: left promiscuous mode [ 651.453055][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.490574][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.017239][ T13] team0 (unregistering): Port device team_slave_1 removed [ 652.048759][ T13] team0 (unregistering): Port device team_slave_0 removed [ 652.310698][ T13] team0 (unregistering): Port device team_slave_1 removed [ 652.337542][ T13] team0 (unregistering): Port device team_slave_0 removed [ 653.085018][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.163292][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.219827][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.282920][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.415316][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.460291][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.534119][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.601125][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.724428][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.775146][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.846958][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.873687][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.989898][ T13] bridge_slave_1: left allmulticast mode [ 653.997168][ T13] bridge_slave_1: left promiscuous mode [ 654.002893][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.012183][ T13] bridge_slave_0: left allmulticast mode [ 654.018109][ T13] bridge_slave_0: left promiscuous mode [ 654.025726][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.040093][ T13] bridge_slave_1: left allmulticast mode [ 654.045801][ T13] bridge_slave_1: left promiscuous mode [ 654.051490][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.060732][ T13] bridge_slave_0: left allmulticast mode [ 654.067318][ T13] bridge_slave_0: left promiscuous mode [ 654.073022][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.095066][ T13] bridge_slave_1: left allmulticast mode [ 654.100780][ T13] bridge_slave_1: left promiscuous mode [ 654.106762][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.115533][ T13] bridge_slave_0: left allmulticast mode [ 654.121224][ T13] bridge_slave_0: left promiscuous mode [ 654.127016][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.137163][ T13] bridge_slave_1: left allmulticast mode [ 654.142857][ T13] bridge_slave_1: left promiscuous mode [ 654.148826][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.158079][ T13] bridge_slave_0: left allmulticast mode [ 654.165070][ T13] bridge_slave_0: left promiscuous mode [ 654.170806][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.183289][ T13] bridge_slave_1: left allmulticast mode [ 654.189038][ T13] bridge_slave_1: left promiscuous mode [ 654.197172][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.207699][ T13] bridge_slave_0: left allmulticast mode [ 654.213595][ T13] bridge_slave_0: left promiscuous mode [ 654.219309][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.232584][ T13] bridge_slave_1: left allmulticast mode [ 654.238465][ T13] bridge_slave_1: left promiscuous mode [ 654.244543][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.252949][ T13] bridge_slave_0: left allmulticast mode [ 654.258996][ T13] bridge_slave_0: left promiscuous mode [ 654.270954][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.470727][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.486527][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.505267][ T13] bond0 (unregistering): Released all slaves [ 654.577082][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.587739][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.598219][ T13] bond0 (unregistering): Released all slaves [ 654.633693][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.652425][ T13] bond0 (unregistering): Released all slaves [ 654.691421][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.715917][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.727376][ T13] bond0 (unregistering): Released all slaves [ 654.770541][ T13] bond0 (unregistering): Released all slaves [ 654.846602][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.860137][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.877969][ T13] bond0 (unregistering): Released all slaves [ 654.921053][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.932033][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.954847][ T13] bond0 (unregistering): Released all slaves [ 655.102856][ T13] tipc: Left network mode [ 655.455709][ T13] hsr_slave_0: left promiscuous mode [ 655.461558][ T13] hsr_slave_1: left promiscuous mode [ 655.469202][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.476865][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.484894][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.492288][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.506730][ T13] hsr_slave_0: left promiscuous mode [ 655.512752][ T13] hsr_slave_1: left promiscuous mode [ 655.522714][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.533084][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.541049][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.548662][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.559050][ T13] hsr_slave_0: left promiscuous mode [ 655.571247][ T13] hsr_slave_1: left promiscuous mode [ 655.577589][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.587083][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.601093][ T13] hsr_slave_0: left promiscuous mode [ 655.607294][ T13] hsr_slave_1: left promiscuous mode [ 655.613078][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.620915][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.629819][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.638723][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.649716][ T13] hsr_slave_0: left promiscuous mode [ 655.655946][ T13] hsr_slave_1: left promiscuous mode [ 655.661719][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.670004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.688784][ T13] veth1_macvtap: left promiscuous mode [ 655.695522][ T13] veth0_macvtap: left promiscuous mode [ 655.701091][ T13] veth1_vlan: left promiscuous mode [ 655.706812][ T13] veth0_vlan: left promiscuous mode [ 655.713139][ T13] veth1_macvtap: left promiscuous mode [ 655.719056][ T13] veth0_macvtap: left promiscuous mode [ 655.724645][ T13] veth1_vlan: left promiscuous mode [ 655.729900][ T13] veth0_vlan: left promiscuous mode [ 655.737282][ T13] veth1_macvtap: left promiscuous mode [ 655.742802][ T13] veth0_macvtap: left promiscuous mode [ 655.749107][ T13] veth1_vlan: left promiscuous mode [ 655.754893][ T13] veth0_vlan: left promiscuous mode [ 656.041081][ T13] team0 (unregistering): Port device team_slave_1 removed [ 656.054767][ T13] team0 (unregistering): Port device team_slave_0 removed [ 656.226357][ T13] team0 (unregistering): Port device team_slave_1 removed [ 656.250014][ T13] team0 (unregistering): Port device team_slave_0 removed [ 656.412353][ T13] team0 (unregistering): Port device team_slave_1 removed [ 656.425125][ T13] team0 (unregistering): Port device team_slave_0 removed [ 656.586040][ T13] team0 (unregistering): Port device team_slave_1 removed [ 656.597886][ T13] team0 (unregistering): Port device team_slave_0 removed [ 656.740413][ T13] team0 (unregistering): Port device team_slave_1 removed [ 656.756096][ T13] team0 (unregistering): Port device team_slave_0 removed