last executing test programs: 11m3.708897602s ago: executing program 0 (id=1668): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x84, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4007, @fd=r2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0) 10m57.542373165s ago: executing program 0 (id=1678): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) pipe2(0x0, 0x84000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x35}, 0xb}, 0x1c) 10m56.423072439s ago: executing program 0 (id=1679): memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) userfaultfd(0x80001) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 10m56.276620592s ago: executing program 0 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) socket$inet6(0xa, 0x800000000000002, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x499, 0x500a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x66, 0x80, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x10}}}}}]}}, 0x0) 10m54.475667051s ago: executing program 0 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 10m46.228611007s ago: executing program 0 (id=1690): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000380), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) 10m29.356658059s ago: executing program 32 (id=1690): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000380), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) 32.648531892s ago: executing program 3 (id=3220): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)=@fd={0x253, 0x3, 0x4, 0x0, 0x1, {}, {0x4, 0x2, 0xfb, 0x40, 0xf8, 0x4, "7e598506"}, 0x7, 0x4, {}, 0xe288}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x18, 0xe) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x101) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) epoll_create(0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x1, 0xa8, 0x40, 0x3, 0x8, 0x1, 0x1, 0x78, 0x8, 0x9f, 0x5}, 0xe) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r5, 0x1) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40001123) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000100)) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) 30.381838748s ago: executing program 2 (id=3222): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a7c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1625a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8b04cb6fe50b892a69ec6dbecc8b14240045738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937f785ac862bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d66ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbba46078aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dde3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b39c84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf524799561850000000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d7246565759c7d717d8fd87f20ed6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a00", 0x12) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000a5473200000008004500001c0000000000029078ac1e0001ac1414a312009078e0000001"], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8929, &(0x7f00000000c0)={'netdevsim0\x00', @ifru_addrs=@sco={0x1f, @none}}) socket(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e70000fa", 0xa, 0x4000801, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x32, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pipe2(&(0x7f00000000c0), 0x0) 27.512437249s ago: executing program 3 (id=3223): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 27.4892649s ago: executing program 2 (id=3225): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000280)='./bus\x00', 0x1900803, &(0x7f0000000500)={[], [{@measure}]}, 0xfc, 0xbd2, &(0x7f00000029c0)="$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") r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0800}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0xfffffffffffffffe, 0x200000000180, 0x5, 0xffff, 0x0, 0x4], 0x0, 0x0, 0x0}, 0x79) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000027c0), 0x1000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000028c0), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[], 0xc8, 0x4}}, {{&(0x7f0000001fc0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x100}}], 0x2, 0x2400c050) 24.977900202s ago: executing program 2 (id=3227): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r4], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 23.750934452s ago: executing program 3 (id=3228): socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000340)) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300), 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2480, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}]}}}]}, 0x48}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x24044010}, 0x4000000) r8 = signalfd4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvfrom(r9, 0x0, 0x0, 0x40000040, 0x0, 0x0) accept4$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x60421858d64fb6d9) 20.531218222s ago: executing program 2 (id=3232): epoll_create(0x30d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0x100) r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_io_uring_setup(0x4856, &(0x7f00000020c0)={0x0, 0xe18, 0x4000, 0x1, 0xa4}, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002080), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r6, 0x0) 18.307758667s ago: executing program 1 (id=3233): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283aff00000000000000000000000000000000ff02000000000000000000c1500000018700907800000000fe8000000000000000000000ebffffa90e000000000000001000000000000001"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f0000002200)="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", 0xffc) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0xd780, 0x3, 0x0, 0x5, 0x0}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000b15dbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 18.209148359s ago: executing program 3 (id=3234): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x810, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x180) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x139f, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x80, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2000, 0x10000001, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x200, 0x1, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x20, 0x0, 0x2fb, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x322, 0x0, r4}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r8, '\x00', {0x9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) write$UHID_INPUT(r2, &(0x7f0000001580)={0x9, {"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", 0x1000}}, 0x1006) close(r0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000440), 0x0) r12 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r12}, 0x38) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r13 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r13, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) 16.352070636s ago: executing program 2 (id=3236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='vfio-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) dup2(r5, 0x7b) ioctl(r6, 0x3b76, &(0x7f00000003c0)="18000000000000007b00"/24) r7 = eventfd(0x0) dup2(r7, 0x7c) ioctl(r6, 0x3b6e, &(0x7f0000000400)="18000000240000000100000000000000010000007c000000") ioctl(r6, 0x3b6e, &(0x7f0000000440)="18000000240000000200000000000000010000007c000000") r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f00000004c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) ioctl$KVM_IRQFD(r9, 0x4020ae76, 0x0) 16.059357623s ago: executing program 4 (id=3238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000f50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r5 = shmget$private(0x0, 0xa000, 0x80, &(0x7f000063c000/0xa000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 14.619049328s ago: executing program 4 (id=3239): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x6, 0x9, 0x10000, 0x2, 0x6, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xef2b, 0x200, 0x3, 0x2e8}, 0x0, 0x4, &(0x7f0000001540)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8a}, 0x0, 0x0, '\x00', {0x3, 0x832, 0x0, &(0x7f0000000540)=@buf_1k="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"}}, &(0x7f00000015c0)) io_uring_enter(0xffffffffffffffff, 0x40c1, 0xf2d5, 0x82, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, 0x0}, 0x108) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 11.069921866s ago: executing program 4 (id=3240): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$cont(0x1f, r0, 0x4f, 0x6) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x94) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000200)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000dc0)=ANY=[@ANYBLOB="73686f776173736f632c0080da3e68c346f09759880adda7fb7a95a2f9a5376cd7c5d2ddfca3e914f85cffd5047acdc68e67c6179a91f4b17bfee47a6f9f901f2685c19d25d93a65403e593e0aea376762d3323a54ea772757b22259d244f61622274d5e8b21d835ceb3afac660819b63431b9fe729c02baeb2313404366fa28fed4"], 0x5, 0x567, &(0x7f0000000740)="$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") 9.615662162s ago: executing program 4 (id=3241): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x9}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmsg(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000000d80)=""/5, 0x5}, {&(0x7f0000000dc0)=""/172, 0xac}, {&(0x7f0000000e80)=""/245, 0xf5}, {&(0x7f0000000f80)=""/246, 0xf6}], 0x6, &(0x7f0000001100)=""/159, 0x9f}, 0x10000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000c00118004000600"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40488d0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r9 = syz_open_dev$video(&(0x7f0000000040), 0xa6, 0x80) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x3, 0x1e}, 0x8001}}) r10 = socket$key(0xf, 0x3, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0xe5e54be0630c28fa, 0x4, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r11, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0xff, 0x0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x0, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) sendmsg$key(r10, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x400000000000003, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x8}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd27}]}, 0xe8}}, 0x0) 9.539566134s ago: executing program 1 (id=3242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x4004) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}}, 0x20000000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r6, &(0x7f0000000240)=""/157, 0x9d) 8.270897175s ago: executing program 1 (id=3243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x48, 0x29, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x1, 0x4}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_RATE={0x6, 0x5, {0xff}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000100)={0xe, {0xab, 0x829, 0xfc8, 0xb}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7.29334104s ago: executing program 4 (id=3244): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x3026, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, r3, 0x705, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x6, 0x7, 0x603, 0xffff, 0x1a, '\x00\b\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="715a7ea140209ec49988128008000100736974001400028008000201c0000200060008"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) prctl$PR_GET_CHILD_SUBREAPER(0x25) 7.214149412s ago: executing program 3 (id=3245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) rt_tgsigqueueinfo(r0, r2, 0x28, &(0x7f0000000200)={0x2c, 0x4993, 0x8}) 6.187866467s ago: executing program 1 (id=3246): syz_open_dev$vim2m(&(0x7f0000000280), 0x40003, 0x2) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, 0x0, 0x0) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, 0x0, 0x0, 0x4008040) r5 = socket$inet(0x2, 0xa, 0x200000) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x80051) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ipvs(0x0, r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.520819353s ago: executing program 3 (id=3247): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3a) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @loopback}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) r7 = socket(0x28, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x28, 0x6, 0xfffffffffffffffe, 0x20000002) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61}, {0x6}]}) 3.519753853s ago: executing program 4 (id=3248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r5, 0x26}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x3, 0x0, 0x0, 0xf, 0x2, [], "34aa"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "0374"}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/143, 0x39, 0x8f, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000003c0)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x4b, 0x21, 0xfffffffffffffffe}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100007, 0x0, 0x0, 0x20, 0xc, 0x3, 0xfc, 0x0, 0x1, 0x4, 0x8, 0x111, 0xff, 0x0, 0x0, [0x0, 0xfffffffe]}}) socket$netlink(0x10, 0x3, 0x2) 2.374451622s ago: executing program 1 (id=3249): sigaltstack(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 889.736168ms ago: executing program 1 (id=3250): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x203}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020) 0s ago: executing program 33 (id=3236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='vfio-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='0000:00:02.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) dup2(r5, 0x7b) ioctl(r6, 0x3b76, &(0x7f00000003c0)="18000000000000007b00"/24) r7 = eventfd(0x0) dup2(r7, 0x7c) ioctl(r6, 0x3b6e, &(0x7f0000000400)="18000000240000000100000000000000010000007c000000") ioctl(r6, 0x3b6e, &(0x7f0000000440)="18000000240000000200000000000000010000007c000000") r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f00000004c0)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi}]}) ioctl$KVM_IRQFD(r9, 0x4020ae76, 0x0) kernel console output (not intermixed with test programs): y change from 0 to 32768 [ 366.747388][ T9514] syz.0.1153: attempt to access beyond end of device [ 366.747388][ T9514] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 366.760997][ T9514] lbmIODone: I/O error in JFS log [ 366.766750][ T9514] *** Log Format Error ! *** [ 366.771996][ T9514] lmLogInit: exit(-22) [ 366.776439][ T9514] lmLogOpen: exit(-22) [ 366.889000][ T5818] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 367.092812][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 367.112743][ T5818] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 367.142347][ T5818] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 367.164453][ T5818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 367.177225][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.192228][ T5818] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 367.213403][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 367.232133][ T5818] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 367.241442][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.259840][ T5818] usb 4-1: config 0 descriptor?? [ 367.500042][ T5818] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 367.515498][ T9539] loop1: detected capacity change from 0 to 16 [ 367.620259][ T9539] erofs: (device loop1): mounted with root inode @ nid 36. [ 367.688959][ T9539] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 367.700508][ T9539] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 367.710934][ T9539] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 367.762119][ T9539] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 367.772496][ T9543] loop2: detected capacity change from 0 to 512 [ 367.806441][ T9539] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 367.850708][ T9543] EXT4-fs (loop2): Test dummy encryption mode enabled [ 367.886571][ T9539] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 367.897893][ T9543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 367.981350][ T5817] usb 4-1: USB disconnect, device number 8 [ 367.999007][ T9543] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1161: bad orphan inode 131083 [ 368.013655][ T9539] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 368.034462][ T5817] usblp0: removed [ 368.067555][ T9543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.079362][ T9539] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 368.092511][ T9539] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 368.108082][ T28] audit: type=1800 audit(1785366788.655:45): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1160" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 368.688466][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.840233][ T9561] loop0: detected capacity change from 0 to 512 [ 368.878900][ T9561] EXT4-fs (loop0): 1 truncate cleaned up [ 368.885993][ T9561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.045604][ T9567] loop2: detected capacity change from 0 to 128 [ 369.625325][ T9567] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.727618][ T9567] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 370.131926][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.946497][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.232763][ T9594] loop0: detected capacity change from 0 to 512 [ 371.314447][ T9594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.339762][ T9594] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.742031][ T9603] loop1: detected capacity change from 0 to 8 [ 371.827373][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.858231][ T9603] SQUASHFS error: zstd decompression failed, data probably corrupt [ 371.867336][ T9603] SQUASHFS error: Failed to read block 0x4ec: -5 [ 371.878692][ T9603] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 371.883422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 371.889843][ T9603] SQUASHFS error: Unable to read inode 0x2011f [ 372.409949][ T9607] loop0: detected capacity change from 0 to 4096 [ 372.518962][ T9607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.842290][ T9628] syzkaller0: entered promiscuous mode [ 375.848074][ T9628] syzkaller0: entered allmulticast mode [ 375.959634][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.974687][ T9669] loop2: detected capacity change from 0 to 4096 [ 381.030777][ T9669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.084888][ T9671] loop3: detected capacity change from 0 to 4096 [ 381.099162][ T9671] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.116116][ T9671] EXT4-fs (loop3): Test dummy encryption mode enabled [ 381.140284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 381.210813][ T9671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.405287][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.543291][ T9683] loop1: detected capacity change from 0 to 512 [ 381.639109][ T9683] EXT4-fs (loop1): inodes count not valid: 40 vs 32 [ 381.871754][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.093577][ T9698] syzkaller0: entered promiscuous mode [ 383.107491][ T9698] syzkaller0: entered allmulticast mode [ 384.274818][ T9716] loop1: detected capacity change from 0 to 512 [ 384.294954][ T9716] EXT4-fs (loop1): 1 truncate cleaned up [ 384.302072][ T9716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.352446][ T9716] EXT4-fs error (device loop1): xattr_find_entry:337: inode #12: comm syz.1.1212: corrupted xattr entries [ 384.440482][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.968463][ T9738] syzkaller0: entered promiscuous mode [ 386.974626][ T9738] syzkaller0: entered allmulticast mode [ 388.078590][ T9748] loop3: detected capacity change from 0 to 128 [ 388.561650][ T9755] kvm: emulating exchange as write [ 388.928588][ T9763] loop2: detected capacity change from 0 to 256 [ 389.237791][ T9763] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 389.604186][ T9763] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 389.983133][ T9763] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 390.354345][ T9770] syzkaller0: entered promiscuous mode [ 390.455238][ T9770] syzkaller0: entered allmulticast mode [ 392.418655][ T9780] binder: 9779:9780 ioctl c0306201 2000000004c0 returned -14 [ 393.774739][ T9787] syzkaller0: entered promiscuous mode [ 393.815646][ T9787] syzkaller0: entered allmulticast mode [ 395.224977][ T9806] loop1: detected capacity change from 0 to 4096 [ 395.274757][ T9806] EXT4-fs: Ignoring removed mblk_io_submit option [ 395.303231][ T9806] EXT4-fs (loop1): Test dummy encryption mode enabled [ 398.138835][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.349146][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.521271][ T9806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.778143][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.989875][ T7225] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 399.265244][ T9843] loop0: detected capacity change from 0 to 512 [ 399.455134][ T9843] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.1245: corrupted inode contents [ 399.524215][ T9843] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #16: comm syz.0.1245: mark_inode_dirty error [ 399.559243][ T9843] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.1245: corrupted inode contents [ 399.584871][ T9843] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #16: comm syz.0.1245: mark_inode_dirty error [ 399.614243][ T9843] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.1245: corrupted inode contents [ 399.630358][ T9843] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 399.643350][ T9843] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.1245: corrupted inode contents [ 399.657079][ T9843] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.1245: mark_inode_dirty error [ 399.681134][ T9843] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 399.697685][ T9843] EXT4-fs (loop0): 1 truncate cleaned up [ 399.706362][ T9843] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.729356][ T1141] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 399.746180][ T9843] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.757168][ T1141] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 1 [ 400.226800][ T1141] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm kworker/u4:7: Invalid inode table block 34 in block_group 0 [ 400.261500][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.278516][ T5774] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 400.293198][ T5774] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 400.306519][ T5774] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 400.325026][ T5774] EXT4-fs error (device loop0): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 400.338906][ T5774] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 400.360314][ T5774] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 403.001690][ T9865] loop1: detected capacity change from 0 to 512 [ 403.021905][ T9869] loop3: detected capacity change from 0 to 256 [ 403.049254][ T9869] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 403.077586][ T9869] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 403.110967][ T9865] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1257: corrupted inode contents [ 403.132578][ T9865] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #16: comm syz.1.1257: mark_inode_dirty error [ 403.145572][ T9869] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 403.187751][ T9865] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1257: corrupted inode contents [ 403.230553][ T9865] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #16: comm syz.1.1257: mark_inode_dirty error [ 403.242909][ T9865] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1257: corrupted inode contents [ 403.260459][ T9865] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 403.272350][ T9865] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1257: corrupted inode contents [ 403.288719][ T9865] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.1257: mark_inode_dirty error [ 403.314300][ T9865] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 403.326922][ T9865] EXT4-fs (loop1): 1 truncate cleaned up [ 403.335510][ T9865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.348326][ T9865] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.358986][ T11] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 403.391105][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 1 [ 404.793118][ T1141] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:7: Invalid inode table block 34 in block_group 0 [ 405.113934][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.245332][ T5782] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 405.478793][ T5782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 405.709210][ T5782] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #4: comm syz-executor: mark_inode_dirty error [ 405.762518][ T5782] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 405.777951][ T5782] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 405.818718][ T5782] EXT4-fs error (device loop1): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 406.551163][ T174] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 406.763520][ T174] usb 4-1: Using ep0 maxpacket: 8 [ 406.846216][ T174] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 406.923361][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.984778][ T174] usb 4-1: Product: syz [ 407.028305][ T174] usb 4-1: Manufacturer: syz [ 407.065478][ T174] usb 4-1: SerialNumber: syz [ 407.719341][ T174] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 407.765362][ T174] usb 4-1: unit 3 not found! [ 407.793345][ T9926] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 407.826801][ T9926] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 407.864389][ T174] usb 4-1: USB disconnect, device number 9 [ 407.969170][ T7225] udevd[7225]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.087073][ T9933] loop1: detected capacity change from 0 to 1024 [ 408.115911][ T9933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.172592][ T9933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.203585][ T9933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.227640][ T28] audit: type=1800 audit(1785366826.183:46): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1273" name="bColorPrimaries" dev="configfs" ino=27126 res=0 errno=0 [ 408.275343][ T28] audit: type=1800 audit(1785366826.211:47): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1273" name="bTransferCharacteristics" dev="configfs" ino=26410 res=0 errno=0 [ 408.391249][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.802672][ T9957] loop1: detected capacity change from 0 to 512 [ 409.851965][ T9957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.019859][ T9957] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.852843][ T9975] loop2: detected capacity change from 0 to 1024 [ 412.014465][ T9975] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 412.054152][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.080661][ T9975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 412.152794][ T9984] binder: 9983:9984 ioctl c0306201 200000000080 returned -14 [ 412.166439][ T9984] binder: 9983:9984 ioctl c0306201 2000000003c0 returned -14 [ 412.206583][ T9975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.370870][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.008448][T10013] loop0: detected capacity change from 0 to 128 [ 414.087827][T10010] binder: 10009:10010 unknown command 0 [ 414.094602][T10010] binder: 10009:10010 ioctl c0306201 200000000080 returned -22 [ 414.212861][T10015] loop3: detected capacity change from 0 to 512 [ 414.220436][T10015] EXT4-fs: Ignoring removed i_version option [ 414.306721][T10015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.355489][T10015] ext4 filesystem being mounted at /310/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.381153][ T174] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 414.401440][T10024] loop2: detected capacity change from 0 to 512 [ 414.410172][ T174] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 414.427829][T10024] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 414.578211][T10024] EXT4-fs (loop2): invalid journal inode [ 414.594890][T10024] EXT4-fs (loop2): can't get journal size [ 414.611309][T10024] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.1297: blocks 4-4 from inode overlap system zone [ 414.646137][T10024] EXT4-fs (loop2): failed to initialize system zone (-117) [ 414.689564][T10024] EXT4-fs (loop2): mount failed [ 416.147855][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.664640][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 417.590591][T10027] loop1: detected capacity change from 0 to 40427 [ 417.624508][T10027] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 417.658785][T10027] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 417.836002][T10027] F2FS-fs (loop1): invalid crc value [ 418.682666][T10057] loop3: detected capacity change from 0 to 1024 [ 418.696002][T10057] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 418.708856][T10057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.790074][T10057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.877525][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 418.987642][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.113924][T10065] loop2: detected capacity change from 0 to 2048 [ 419.192527][T10065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.362305][ T28] audit: type=1800 audit(1785366836.603:48): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1312" name="bColorPrimaries" dev="configfs" ino=27852 res=0 errno=0 [ 419.431704][ T28] audit: type=1800 audit(1785366836.622:49): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1312" name="bTransferCharacteristics" dev="configfs" ino=27853 res=0 errno=0 [ 419.646003][ T5777] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 419.727259][T10080] UDC core: g1: couldn't find an available UDC or it's busy [ 419.771281][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.978579][ T174] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 420.850030][T10087] binder: 10086:10087 ioctl c0306201 200000000080 returned -14 [ 420.862393][T10087] binder: 10086:10087 ioctl c0306201 2000000003c0 returned -14 [ 420.930200][ T174] usb 2-1: Using ep0 maxpacket: 8 [ 420.966024][T10089] loop2: detected capacity change from 0 to 512 [ 421.054367][ T174] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 421.084690][T10089] EXT4-fs: Ignoring removed i_version option [ 421.161297][ T174] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.292938][ T174] usb 2-1: Product: syz [ 421.369847][ T174] usb 2-1: Manufacturer: syz [ 421.418228][T10089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.450303][ T174] usb 2-1: SerialNumber: syz [ 421.615046][T10089] ext4 filesystem being mounted at /337/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.032133][ T174] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 422.057624][ T174] usb 2-1: unit 3 not found! [ 422.115827][ T174] usb 2-1: USB disconnect, device number 9 [ 422.197412][ T7225] udevd[7225]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.217267][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.327512][T10102] loop0: detected capacity change from 0 to 512 [ 422.390973][T10102] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1333: invalid indirect mapped block 4294967295 (level 1) [ 422.437356][T10102] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1333: invalid indirect mapped block 4294967295 (level 1) [ 422.521319][T10102] EXT4-fs (loop0): 2 truncates cleaned up [ 422.545959][T10102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.594313][T10098] loop3: detected capacity change from 0 to 40427 [ 422.619163][T10098] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 422.627885][T10098] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 422.656601][T10098] F2FS-fs (loop3): invalid crc value [ 422.669317][ T28] audit: type=1804 audit(1785366839.699:50): pid=10102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1333" name="/newroot/329/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 422.815602][T10102] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1333: bg 0: block 5: invalid block bitmap [ 422.832539][T10098] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 422.860185][T10098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 422.936890][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.987245][ T28] audit: type=1800 audit(1785366839.989:51): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1323" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 423.072276][T10098] syz.3.1323: attempt to access beyond end of device [ 423.072276][T10098] loop3: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 423.106104][T10117] syz.3.1323: attempt to access beyond end of device [ 423.106104][T10117] loop3: rw=2049, sector=54224, nr_sectors = 8 limit=40427 [ 423.248903][ T5786] syz-executor: attempt to access beyond end of device [ 423.248903][ T5786] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 423.286202][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 423.310657][T10122] loop1: detected capacity change from 0 to 2048 [ 423.382505][T10126] UDC core: g1: couldn't find an available UDC or it's busy [ 423.396243][T10122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.610034][ T5782] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 423.642737][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.381528][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.392761][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.420816][T10140] loop3: detected capacity change from 0 to 4096 [ 424.434116][T10140] EXT4-fs: Ignoring removed orlov option [ 424.455330][T10140] EXT4-fs (loop3): Test dummy encryption mode enabled [ 424.476496][T10140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.602371][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.078135][ T174] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 425.315183][ T174] usb 4-1: config 0 has no interfaces? [ 425.320752][ T174] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.345741][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.364829][ T174] usb 4-1: config 0 descriptor?? [ 425.468771][T10151] loop0: detected capacity change from 0 to 40427 [ 425.489485][T10151] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 425.499360][T10151] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 425.511313][T10151] F2FS-fs (loop0): invalid crc value [ 425.602740][ T5764] usb 4-1: USB disconnect, device number 10 [ 425.678162][T10151] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 425.685377][T10151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 425.792067][ T28] audit: type=1800 audit(1785366842.618:52): pid=10151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1339" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 425.903653][T10151] syz.0.1339: attempt to access beyond end of device [ 425.903653][T10151] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 425.980127][T10151] syz.0.1339: attempt to access beyond end of device [ 425.980127][T10151] loop0: rw=2049, sector=54224, nr_sectors = 8 limit=40427 [ 425.999734][T10151] syz.0.1339: attempt to access beyond end of device [ 425.999734][T10151] loop0: rw=2049, sector=54232, nr_sectors = 8 limit=40427 [ 426.084871][ T5774] syz-executor: attempt to access beyond end of device [ 426.084871][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 426.117955][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 426.391679][T10162] kvm_intel: kvm [10161]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 426.928001][T10174] UDC core: g1: couldn't find an available UDC or it's busy [ 427.905334][T10172] loop3: detected capacity change from 0 to 32768 [ 428.381959][T10172] syz.3.1346: attempt to access beyond end of device [ 428.381959][T10172] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 428.395036][T10172] lbmIODone: I/O error in JFS log [ 428.400605][T10172] *** Log Format Error ! *** [ 428.409131][T10172] lmLogInit: exit(-22) [ 428.415997][T10172] lmLogOpen: exit(-22) [ 429.001604][ T56] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 429.124911][T10177] loop1: detected capacity change from 0 to 40427 [ 429.156902][T10177] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 429.166855][T10177] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 429.183711][T10177] F2FS-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 429.204624][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 429.227725][ T56] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 429.245572][T10171] loop0: detected capacity change from 0 to 40427 [ 429.257110][ T56] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 429.283411][ T56] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 429.316536][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 429.340590][T10171] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 429.351802][T10171] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 429.352689][ T56] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 429.383243][T10171] F2FS-fs (loop0): invalid crc value [ 429.404674][ T56] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 429.418103][ T56] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 429.427836][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.450776][ T56] usb 3-1: config 0 descriptor?? [ 429.614488][T10171] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 429.625212][T10171] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 429.699735][ T56] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 429.745269][ T28] audit: type=1800 audit(1785366846.313:53): pid=10171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1352" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 429.820587][T10171] syz.0.1352: attempt to access beyond end of device [ 429.820587][T10171] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 429.854419][T10171] syz.0.1352: attempt to access beyond end of device [ 429.854419][T10171] loop0: rw=2049, sector=54224, nr_sectors = 8 limit=40427 [ 429.869511][T10171] syz.0.1352: attempt to access beyond end of device [ 429.869511][T10171] loop0: rw=2049, sector=54232, nr_sectors = 8 limit=40427 [ 429.905757][ T5774] syz-executor: attempt to access beyond end of device [ 429.905757][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 429.930567][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 430.061328][ T56] usb 3-1: USB disconnect, device number 7 [ 430.093769][ T56] usblp0: removed [ 431.919015][T10206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.939268][T10206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.376203][T10211] kvm_intel: kvm [10210]: vcpu2, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x7 [ 432.713548][T10220] syzkaller0: entered promiscuous mode [ 432.731372][T10220] syzkaller0: entered allmulticast mode [ 434.176293][T10222] loop0: detected capacity change from 0 to 40427 [ 434.205149][T10222] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 434.230574][T10222] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 434.263765][T10222] F2FS-fs (loop0): invalid crc value [ 434.587308][T10222] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 434.603483][T10222] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 434.705581][ T28] audit: type=1800 audit(1785366850.952:54): pid=10222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1360" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 434.785730][T10222] syz.0.1360: attempt to access beyond end of device [ 434.785730][T10222] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 434.896524][T10222] syz.0.1360: attempt to access beyond end of device [ 434.896524][T10222] loop0: rw=2049, sector=54224, nr_sectors = 8 limit=40427 [ 434.946690][T10222] syz.0.1360: attempt to access beyond end of device [ 434.946690][T10222] loop0: rw=2049, sector=54232, nr_sectors = 8 limit=40427 [ 434.979720][T10246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 435.046339][ T5774] syz-executor: attempt to access beyond end of device [ 435.046339][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 435.070677][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 435.173492][T10256] netlink: 'syz.2.1371': attribute type 11 has an invalid length. [ 435.249232][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 437.711080][T10285] loop0: detected capacity change from 0 to 128 [ 438.339269][T10299] file system registered [ 438.376208][T10297] syzkaller0: entered promiscuous mode [ 438.404144][T10297] syzkaller0: entered allmulticast mode [ 438.433082][T10297] tipc: Enabled bearer , priority 0 [ 438.451710][T10295] tipc: Resetting bearer [ 438.468631][ T5782] ffs_data_put(): freeing [ 438.493852][T10292] loop3: detected capacity change from 0 to 40427 [ 438.515261][T10292] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 438.542158][T10295] tipc: Disabling bearer [ 438.551210][T10292] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 438.561531][T10292] F2FS-fs (loop3): invalid crc value [ 438.820952][T10292] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 438.878320][T10292] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 439.182566][T10308] loop0: detected capacity change from 0 to 2048 [ 439.700430][ T28] audit: type=1800 audit(1785366855.629:55): pid=10292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1380" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 439.812767][T10308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.939813][T10292] syz.3.1380: attempt to access beyond end of device [ 439.939813][T10292] loop3: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 439.971043][ T5774] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 440.028104][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.138044][T10292] syz.3.1380: attempt to access beyond end of device [ 440.138044][T10292] loop3: rw=2049, sector=54224, nr_sectors = 8 limit=40427 [ 440.185085][T10292] syz.3.1380: attempt to access beyond end of device [ 440.185085][T10292] loop3: rw=2049, sector=54232, nr_sectors = 8 limit=40427 [ 441.326080][ T5786] syz-executor: attempt to access beyond end of device [ 441.326080][ T5786] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.425375][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 442.500518][T10320] loop2: detected capacity change from 0 to 32768 [ 442.702272][T10320] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.744114][T10342] loop3: detected capacity change from 0 to 256 [ 442.771078][T10342] exFAT-fs (loop3): bogus data start sector [ 442.777068][T10342] exFAT-fs (loop3): failed to read boot sector [ 442.835662][T10342] exFAT-fs (loop3): failed to recognize exfat type [ 443.329153][T10320] XFS (loop2): Ending clean mount [ 443.612543][T10358] loop1: detected capacity change from 0 to 2048 [ 443.676662][T10358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.968940][T10367] syzkaller0: entered promiscuous mode [ 444.989529][T10367] syzkaller0: entered allmulticast mode [ 445.062090][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 445.144243][T10316] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 445.285977][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.563496][T10366] loop3: detected capacity change from 0 to 40427 [ 445.593964][T10366] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 445.600390][T10366] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 445.632372][T10366] F2FS-fs (loop3): invalid crc value [ 445.864329][T10366] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 445.897167][T10366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 446.091715][ T28] audit: type=1800 audit(1785366861.607:56): pid=10366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1403" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 446.307868][T10366] syz.3.1403: attempt to access beyond end of device [ 446.307868][T10366] loop3: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 446.453787][ T5786] syz-executor: attempt to access beyond end of device [ 446.453787][ T5786] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 446.499372][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 446.702786][T10380] loop1: detected capacity change from 0 to 40427 [ 446.804043][T10380] F2FS-fs (loop1): Found nat_bits in checkpoint [ 446.839457][T10396] loop0: detected capacity change from 0 to 128 [ 446.884769][T10396] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 446.916728][T10396] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.991876][T10380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 447.000314][T10396] ext2 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.320235][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.373930][ T8] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 448.449707][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10241, setting to 64 [ 448.479682][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 448.501120][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.527674][ T8] usb 2-1: config 0 descriptor?? [ 448.975670][ T8] isku 0003:1E7D:319C.0004: unknown main item tag 0x2 [ 448.993051][ T8] isku 0003:1E7D:319C.0004: unknown main item tag 0x3 [ 449.019372][ T8] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 449.218269][ T8] isku 0003:1E7D:319C.0004: couldn't init struct isku_device [ 449.234223][ T8] isku 0003:1E7D:319C.0004: couldn't install keyboard [ 449.265748][ T8] isku: probe of 0003:1E7D:319C.0004 failed with error -71 [ 449.302365][ T8] usb 2-1: USB disconnect, device number 10 [ 450.549030][T10423] syzkaller0: entered promiscuous mode [ 450.567303][T10423] syzkaller0: entered allmulticast mode [ 450.816735][T10426] loop2: detected capacity change from 0 to 8192 [ 450.840709][T10426] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 454.713285][T10450] syzkaller0: entered promiscuous mode [ 454.733712][T10450] syzkaller0: entered allmulticast mode [ 454.797355][T10454] loop2: detected capacity change from 0 to 256 [ 454.858836][T10454] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 454.992855][T10454] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 455.000821][T10454] exFAT-fs (loop2): Filesystem has been set read-only [ 455.090496][T10458] binder: 10457:10458 unknown command 0 [ 455.096147][T10458] binder: 10457:10458 ioctl c0306201 2000000001c0 returned -22 [ 455.303457][T10462] loop3: detected capacity change from 0 to 128 [ 455.333742][T10462] EXT4-fs: Ignoring removed orlov option [ 455.357567][T10462] EXT4-fs (loop3): Test dummy encryption mode enabled [ 455.399051][T10462] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.429574][T10462] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.879385][T10462] loop3: detected capacity change from 128 to 3 [ 457.651248][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.878697][ T7225] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 458.060401][T10489] loop2: detected capacity change from 0 to 2048 [ 458.212085][T10489] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #2: comm syz.2.1438: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 458.275324][T10489] EXT4-fs (loop2): get root inode failed [ 458.281091][T10489] EXT4-fs (loop2): mount failed [ 458.381601][T10497] syzkaller0: entered promiscuous mode [ 458.387166][T10497] syzkaller0: entered allmulticast mode [ 458.449749][T10489] syzkaller0: entered promiscuous mode [ 458.455573][T10489] syzkaller0: entered allmulticast mode [ 462.326741][T10541] loop0: detected capacity change from 0 to 40427 [ 462.608506][T10541] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 462.743038][T10541] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 463.018162][T10541] F2FS-fs (loop0): invalid crc value [ 463.622995][T10541] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 463.632714][T10541] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 463.783242][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.794055][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.410871][ T28] audit: type=1800 audit(1785366878.743:57): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1453" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 464.586724][T10541] syz.0.1453: attempt to access beyond end of device [ 464.586724][T10541] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 464.638941][T10571] syz.0.1453: attempt to access beyond end of device [ 464.638941][T10571] loop0: rw=2049, sector=54224, nr_sectors = 8 limit=40427 [ 464.985638][ T5774] syz-executor: attempt to access beyond end of device [ 464.985638][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 465.009444][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 465.882797][T10593] fuse: Bad value for 'fd' [ 467.931564][T10600] loop1: detected capacity change from 0 to 40427 [ 467.980055][T10600] F2FS-fs (loop1): invalid crc value [ 468.036879][T10600] F2FS-fs (loop1): Found nat_bits in checkpoint [ 469.048545][T10600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 471.589535][T10637] syzkaller0: entered promiscuous mode [ 471.595290][T10637] syzkaller0: entered allmulticast mode [ 472.028699][T10642] loop1: detected capacity change from 0 to 512 [ 472.121934][T10642] EXT4-fs error (device loop1): ext4_quota_enable:7140: comm syz.1.1478: Bad quota inum: 9, type: 2 [ 472.151925][T10642] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 472.181931][T10642] EXT4-fs (loop1): mount failed [ 472.240012][T10647] syzkaller0: entered promiscuous mode [ 472.252389][T10647] syzkaller0: entered allmulticast mode [ 472.269135][ T7225] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 474.212940][T10664] syzkaller0: entered promiscuous mode [ 474.218936][T10664] syzkaller0: entered allmulticast mode [ 476.300240][T10683] loop5: detected capacity change from 0 to 6 [ 476.719426][ T3462] loop: Write error at byte offset 0, length 3072. [ 476.745682][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 476.755203][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 476.885314][T10693] loop0: detected capacity change from 0 to 128 [ 476.892908][T10693] EXT4-fs: Ignoring removed orlov option [ 476.901189][T10693] EXT4-fs (loop0): Test dummy encryption mode enabled [ 476.943588][T10693] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 476.965648][T10693] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.078975][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.578255][T10733] syzkaller0: entered promiscuous mode [ 480.597476][T10733] syzkaller0: entered allmulticast mode [ 480.920254][T10744] loop1: detected capacity change from 0 to 256 [ 480.938823][T10744] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 484.151772][T10759] overlayfs: failed to clone upperpath [ 484.512939][T10764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1517'. [ 489.377929][T10810] syzkaller0: entered promiscuous mode [ 489.385325][T10810] syzkaller0: entered allmulticast mode [ 497.686038][ T6913] loop: Write error at byte offset 0, length 1024. [ 497.699577][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 497.709119][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 497.845086][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 498.219378][T10893] fuse: Bad value for 'fd' [ 498.383123][T10891] syzkaller0: entered promiscuous mode [ 498.388796][T10891] syzkaller0: entered allmulticast mode [ 499.733905][T10898] bridge0: port 3(syz_tun) entered disabled state [ 499.814686][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.822249][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.911554][T10898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.942164][T10898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.572446][T10898] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.591399][T10898] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.600432][T10898] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.612782][T10898] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.027678][T10958] trusted_key: encrypted_key: insufficient parameters specified [ 506.825724][T10981] sctp: [Deprecated]: syz.0.1569 (pid 10981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.825724][T10981] Use struct sctp_sack_info instead [ 510.237810][T11003] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 512.225913][T11012] syzkaller0: entered promiscuous mode [ 512.234008][T11012] syzkaller0: entered allmulticast mode [ 516.966817][T11040] tipc: Started in network mode [ 516.974644][T11040] tipc: Node identity 9eaa6e68978f, cluster identity 4711 [ 516.982024][T11040] tipc: Enabled bearer , priority 0 [ 517.018541][T11040] syzkaller0: entered promiscuous mode [ 517.024108][T11040] syzkaller0: entered allmulticast mode [ 517.095172][T11040] tipc: Resetting bearer [ 517.117445][T11039] tipc: Resetting bearer [ 517.179736][T11039] tipc: Disabling bearer [ 517.504887][T11045] netlink: 'syz.2.1588': attribute type 1 has an invalid length. [ 517.924822][T11045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.368983][T11048] bond1: (slave gretap2): making interface the new active one [ 518.405248][T11048] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 520.687548][T11048] syz.2.1588 (11048) used greatest stack depth: 18936 bytes left [ 523.701636][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1595'. [ 523.925746][T11073] vlan2: entered allmulticast mode [ 523.968397][T11073] bridge1: entered allmulticast mode [ 524.004445][T11075] bridge1: port 1(erspan0) entered blocking state [ 524.041345][T11075] bridge1: port 1(erspan0) entered disabled state [ 524.048044][T11075] erspan0: entered allmulticast mode [ 524.127400][T11075] erspan0: entered promiscuous mode [ 524.171629][T11075] bridge1: port 1(erspan0) entered blocking state [ 524.178221][T11075] bridge1: port 1(erspan0) entered forwarding state [ 524.271501][T11079] tipc: Enabled bearer , priority 0 [ 524.379088][T11077] tipc: Resetting bearer [ 524.487848][T11080] syzkaller0: entered promiscuous mode [ 524.499058][T11080] syzkaller0: entered allmulticast mode [ 524.534000][T11076] tipc: Resetting bearer [ 525.696922][T11076] tipc: Disabling bearer [ 525.792877][T10921] tipc: Node number set to 153448040 [ 527.255931][T11101] syzkaller0: entered promiscuous mode [ 527.280409][T11101] syzkaller0: entered allmulticast mode [ 528.168898][T11108] overlayfs: failed to clone lowerpath [ 529.487330][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.493953][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.329665][T11118] tipc: Enabled bearer , priority 0 [ 530.361735][T11118] syzkaller0: entered promiscuous mode [ 530.372624][T11118] syzkaller0: entered allmulticast mode [ 531.767546][T11118] tipc: Resetting bearer [ 531.812097][T11117] tipc: Resetting bearer [ 531.868635][T11117] tipc: Disabling bearer [ 531.916356][T11143] syzkaller0: entered promiscuous mode [ 531.922228][T11143] syzkaller0: entered allmulticast mode [ 538.900878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 542.281199][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 543.080689][T11227] afs: Unknown parameter '' [ 545.109207][T11234] trusted_key: encrypted_key: insufficient parameters specified [ 553.291196][T11274] syzkaller0: entered promiscuous mode [ 553.343913][T11274] syzkaller0: entered allmulticast mode [ 553.440662][T11276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1643'. [ 557.512785][T11305] netlink: 'syz.3.1648': attribute type 10 has an invalid length. [ 557.592879][T11320] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1651'. [ 559.431047][T11305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 572.024148][T11408] syz.3.1674 (11408) used greatest stack depth: 18896 bytes left [ 577.935556][T11435] overlayfs: overlapping lowerdir path [ 578.006132][T11436] random: crng reseeded on system resumption [ 585.010336][T11455] overlayfs: failed to clone upperpath [ 591.580567][T11493] syzkaller0: entered promiscuous mode [ 591.598626][T11493] syzkaller0: entered allmulticast mode [ 595.148381][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.192893][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.592772][T11520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1701'. [ 600.376878][T11529] syzkaller0: entered promiscuous mode [ 600.382446][T11529] syzkaller0: entered allmulticast mode [ 604.630362][T11562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 604.669716][T11562] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 604.691224][T11562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 604.701433][ T9089] syz_tun (unregistering): left allmulticast mode [ 604.715246][T11562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 604.724772][ T9089] syz_tun (unregistering): left promiscuous mode [ 604.731643][T11562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 604.734518][ T9089] bridge0: port 3(syz_tun) entered disabled state [ 604.745882][T11562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.956721][T11573] syzkaller0: entered promiscuous mode [ 605.962285][T11573] syzkaller0: entered allmulticast mode [ 608.210119][ T5085] Bluetooth: hci0: command tx timeout [ 610.378355][ T5085] Bluetooth: hci0: command tx timeout [ 611.238033][T11561] chnl_net:caif_netlink_parms(): no params data found [ 612.698315][ T5085] Bluetooth: hci0: command tx timeout [ 613.780868][ T3430] tipc: Left network mode [ 613.886278][T11561] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.893595][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.077498][T11561] bridge_slave_0: entered allmulticast mode [ 614.085118][T11561] bridge_slave_0: entered promiscuous mode [ 614.560656][T11561] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.635015][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.895050][T11561] bridge_slave_1: entered allmulticast mode [ 614.907072][ T5085] Bluetooth: hci0: command tx timeout [ 616.401646][T11561] bridge_slave_1: entered promiscuous mode [ 616.862613][T11621] syz.3.1725 (11621) used greatest stack depth: 17928 bytes left [ 620.623923][T11561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.688161][T11561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.374020][T11646] loop2: detected capacity change from 0 to 128 [ 621.398586][T11646] UDF-fs: bad mount option "" or missing value [ 622.018106][T11561] team0: Port device team_slave_0 added [ 622.084692][T11526] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 622.118459][T11561] team0: Port device team_slave_1 added [ 624.612803][T11561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.636752][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.678533][T11656] kvm: kvm [11655]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 624.703658][T11561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.733779][T11561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.752993][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.823946][T11561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.042274][T11561] hsr_slave_0: entered promiscuous mode [ 626.064935][T11561] hsr_slave_1: entered promiscuous mode [ 626.224075][T11561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.257540][T11561] Cannot create hsr debugfs directory [ 629.858316][ T3430] hsr_slave_0: left promiscuous mode [ 630.510184][ T3430] hsr_slave_1: left promiscuous mode [ 630.521933][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.552128][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.602364][ T3430] bridge_slave_1: left allmulticast mode [ 630.613861][ T3430] bridge_slave_1: left promiscuous mode [ 630.629877][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.665634][ T3430] bridge_slave_0: left allmulticast mode [ 630.679942][ T3430] bridge_slave_0: left promiscuous mode [ 630.686043][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.095271][T11719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.091154][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 633.201471][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 633.291237][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.992119][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.257476][ T3430] bond0 (unregistering): Released all slaves [ 637.405924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 639.529268][T11561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 639.593964][T11561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 641.135599][T11561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 641.327964][T11561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 641.718725][T11561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.856645][T11561] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.909289][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.916589][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.953692][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.960991][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.613300][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.154659][T11793] kAFS: No cell specified [ 651.848570][T11561] veth0_vlan: entered promiscuous mode [ 651.885727][T11561] veth1_vlan: entered promiscuous mode [ 652.009601][T11561] veth0_macvtap: entered promiscuous mode [ 652.044651][T11561] veth1_macvtap: entered promiscuous mode [ 652.137084][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.157405][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.167317][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.210663][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.220591][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.274936][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.298051][T11561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.330141][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.349617][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.372478][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.403806][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.426212][T11561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.453997][T11561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.481554][T11561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.510173][T11561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.518962][T11561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.788452][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.796445][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.504205][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.559446][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.311096][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1761'. [ 656.007063][T11845] syzkaller0: entered promiscuous mode [ 656.029410][T11845] syzkaller0: entered allmulticast mode [ 656.332556][T11851] syzkaller0: entered promiscuous mode [ 656.348177][T11851] syzkaller0: entered allmulticast mode [ 659.026829][T11878] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 659.053476][T11878] UDC core: g1: couldn't find an available UDC or it's busy [ 659.271875][T11889] ieee802154 phy0 wpan0: encryption failed: -22 [ 661.771633][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 661.780292][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 666.464831][T11920] loop4: detected capacity change from 0 to 128 [ 666.622722][T11920] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 666.717668][T11920] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 667.434965][T11920] syz.4.1774 (pid 11920) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 667.505010][T11930] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 667.701164][T11920] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 667.898480][T11561] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 668.283241][T11940] syz_tun: entered allmulticast mode [ 668.307608][T11940] syz.1.1778(11940): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 673.715315][T11980] loop4: detected capacity change from 0 to 512 [ 673.753159][T11980] EXT4-fs (loop4): Test dummy encryption mode enabled [ 673.760048][T11980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 673.839987][T11980] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 674.035958][T11980] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 674.153528][T11977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.547833][T12005] se_device not configured yet, cannot port link [ 677.625781][T12019] overlayfs: failed to clone upperpath [ 686.584011][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 686.624266][T12057] bond0: option lp_interval: invalid value (0) [ 686.630527][T12057] bond0: option lp_interval: allowed values 1 - 2147483647 [ 688.762706][T12076] se_device not configured yet, cannot port link [ 696.183512][T12125] syzkaller0: entered promiscuous mode [ 696.202604][T12125] syzkaller0: entered allmulticast mode [ 697.358615][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 697.383413][T12142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.404944][T12142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.995353][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 706.365864][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 707.181168][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.194722][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 707.204394][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 707.213577][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.227773][ T9] usb 2-1: config 0 descriptor?? [ 707.240602][T12221] sctp: [Deprecated]: syz.3.1833 (pid 12221) Use of int in max_burst socket option. [ 707.240602][T12221] Use struct sctp_assoc_value instead [ 707.837518][T12238] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 708.190339][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 708.563867][ T5789] Bluetooth: hci0: Malformed LE Event: 0x1b [ 710.575086][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 710.581970][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 710.911325][T10934] usb 2-1: USB disconnect, device number 11 [ 711.008567][T12259] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 711.028921][T12259] loop2: detected capacity change from 0 to 256 [ 714.353003][T12273] bridge2: entered promiscuous mode [ 714.387439][T12273] bridge2: entered allmulticast mode [ 714.448395][T12273] team0: Port device bridge2 added [ 714.530874][T12274] bridge0: port 3(team0) entered blocking state [ 714.571346][T12274] bridge0: port 3(team0) entered disabled state [ 714.578309][T12274] team0: entered allmulticast mode [ 714.601865][T12274] team_slave_0: entered allmulticast mode [ 714.623238][T12274] team_slave_1: entered allmulticast mode [ 714.649757][T12274] team0: entered promiscuous mode [ 714.662509][T12274] team_slave_0: entered promiscuous mode [ 714.681255][T12274] team_slave_1: entered promiscuous mode [ 714.706458][T12274] bridge0: port 3(team0) entered blocking state [ 714.713609][T12274] bridge0: port 3(team0) entered forwarding state [ 714.979108][T12286] loop4: detected capacity change from 0 to 2048 [ 715.051661][T12286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 716.375738][T10934] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 716.611843][T10934] usb 2-1: device descriptor read/64, error -71 [ 716.950492][T10934] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 717.327649][T10934] usb 2-1: device descriptor read/64, error -71 [ 717.578529][T10934] usb usb2-port1: attempt power cycle [ 719.467271][ T5085] Bluetooth: hci2: Malformed LE Event: 0x1b [ 726.516327][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.523942][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 731.948456][T12412] tipc: Started in network mode [ 731.953679][T12412] tipc: Node identity 7f000001, cluster identity 4711 [ 731.960915][T12412] tipc: Enabling of bearer rejected, failed to enable media [ 732.255324][T12411] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 732.264862][T12411] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 732.274576][T12411] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 732.338179][T12411] syz.2.1868 (12411) used greatest stack depth: 17736 bytes left [ 732.427605][ T28] audit: type=1800 audit(1785367129.271:58): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1868" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 737.097876][T12437] afs: Unknown parameter '' [ 737.745120][T12447] mmap: syz.2.1871 (12447) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 740.635266][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 746.788951][T12492] trusted_key: encrypted_key: insufficient parameters specified [ 749.168748][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 758.572554][T12554] loop4: detected capacity change from 0 to 2048 [ 759.041312][T12536] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 760.244308][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.372621][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.912420][ T5085] Bluetooth: hci1: Malformed LE Event: 0x1b [ 778.373586][T12644] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 781.097706][ T5085] Bluetooth: hci3: Malformed LE Event: 0x1b [ 781.197539][ T5085] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 787.864722][T12705] netlink: 'syz.2.1927': attribute type 10 has an invalid length. [ 787.873732][T12705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1927'. [ 788.422249][T12705] team0: Port device geneve0 added [ 793.688278][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 793.694952][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 796.424639][T12780] loop4: detected capacity change from 0 to 1024 [ 803.765147][T12834] JFS: discard option not supported on device [ 803.791115][T12834] syz.4.1957: attempt to access beyond end of device [ 803.791115][T12834] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 803.814305][T12834] syz.4.1957: attempt to access beyond end of device [ 803.814305][T12834] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 803.830087][T12834] Mount JFS Failure: -5 [ 803.835493][T12834] jfs_mount failed w/return code = -5 [ 806.334181][T12843] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 815.181696][T12878] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1969'. [ 820.853221][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1976'. [ 820.933676][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.041057][T12923] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 822.217098][T12923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.252274][T12930] loop2: detected capacity change from 0 to 512 [ 822.280558][T12927] bridge0: port 3(team0) entered disabled state [ 822.287177][T12927] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.294679][T12927] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.442791][T12930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 822.942058][T12930] EXT4-fs (loop2): 1 truncate cleaned up [ 822.949326][T12930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.016373][T12927] bridge0: port 3(team0) entered blocking state [ 823.022850][T12927] bridge0: port 3(team0) entered forwarding state [ 823.029798][T12927] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.037215][T12927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.044785][T12927] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.052084][T12927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.286777][T12927] bond1: (slave bridge0): making interface the new active one [ 823.962899][T12927] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 824.132556][T12931] netlink: 'syz.1.1981': attribute type 21 has an invalid length. [ 824.140839][T12931] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1981'. [ 824.898567][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.762624][T12944] virtio-fs: tag not found [ 826.017955][T12944] "syz.3.1985" (12944) uses obsolete ecb(arc4) skcipher [ 826.604438][ T5085] Bluetooth: hci1: unexpected subevent 0x06 length: 18 > 10 [ 828.400934][T12954] Process accounting resumed [ 828.817770][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 832.879505][T12971] netlink: 'syz.3.1992': attribute type 12 has an invalid length. [ 832.913314][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 833.075829][T10940] IPVS: starting estimator thread 0... [ 833.322288][T12975] IPVS: using max 19 ests per chain, 45600 per kthread [ 835.489241][T12991] loop4: detected capacity change from 0 to 128 [ 835.509754][T12991] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 835.574744][T12991] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 835.590831][T12991] FAT-fs (loop4): Filesystem has been set read-only [ 835.744510][T12991] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 836.775863][T12999] tipc: Started in network mode [ 836.780785][T12999] tipc: Node identity ac14140f, cluster identity 4711 [ 836.788780][T12999] tipc: New replicast peer: 172.30.0.5 [ 836.794839][T12999] tipc: Enabled bearer , priority 10 [ 837.863981][T10940] tipc: Node number set to 2886997007 [ 838.056646][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 838.946610][ T9] usb 2-1: device descriptor read/64, error -71 [ 842.746311][T13052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2013'. [ 843.623175][T13060] Bluetooth: MGMT ver 1.22 [ 849.512278][T13083] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 851.620586][T13092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2017'. [ 852.994790][T13100] loop0: detected capacity change from 0 to 32768 [ 853.049536][T13100] loop2: detected capacity change from 0 to 32768 [ 853.107626][T13100] loop3: detected capacity change from 0 to 32768 [ 854.591975][T13100] md: could not open device unknown-block(7,1). [ 854.610597][T13100] md: error, md_import_device() returned -16 [ 857.307812][T13129] netlink: 'syz.1.2033': attribute type 1 has an invalid length. [ 857.353906][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 859.173708][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 859.180117][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 860.163488][T13141] syzkaller1: entered promiscuous mode [ 860.169157][T13141] syzkaller1: entered allmulticast mode [ 863.727987][T13157] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 863.738283][T13157] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 863.746553][T13157] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 863.753430][T13157] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 863.760604][T13157] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 863.769208][T13157] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 863.777403][T13157] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 863.784558][T13157] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 863.792777][T13157] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 863.800067][T13157] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 863.807366][T13157] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 863.814211][T13157] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 863.821449][T13157] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 863.828830][T13157] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 863.836574][T13157] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 863.844105][T13157] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 863.851533][T13157] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 863.858556][T13157] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 863.865442][T13157] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 863.872379][T13157] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 863.879520][T13157] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 863.886603][T13157] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 863.894145][T13157] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 863.901096][T13157] comedi comedi0: 8255: I/O port conflict (0x6,4) [ 863.907952][T13157] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 863.914718][T13157] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 868.959631][T13183] atomic_op ffff888062fe4998 conn xmit_atomic 0000000000000000 [ 869.903644][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 870.096076][ T8] usb 2-1: device descriptor read/64, error -71 [ 870.384618][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 870.637863][ T8] usb 2-1: device descriptor read/64, error -71 [ 870.737558][T10940] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 870.863738][T13210] overlayfs: failed to clone lowerpath [ 870.920326][T13211] overlayfs: failed to clone lowerpath [ 871.335443][ T8] usb usb2-port1: attempt power cycle [ 871.421869][T10940] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.448308][T10940] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 871.538899][T10940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.574554][T10940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.588036][T10940] usb 3-1: Product: syz [ 871.592335][T10940] usb 3-1: Manufacturer: syz [ 871.608098][T10940] usb 3-1: SerialNumber: syz [ 871.633038][T10940] cdc_mbim 3-1:1.0: skipping garbage [ 872.832963][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 872.850444][T13222] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.860303][T13222] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.869269][T13222] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.878151][T13222] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.908831][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 872.920086][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 872.953915][T13204] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 873.366071][T13224] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 873.588023][T10940] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 873.740826][T10934] Process accounting resumed [ 873.805992][T10940] cdc_mbim 3-1:1.0: bind() failure [ 873.815884][T10940] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 873.823635][T10940] cdc_ncm 3-1:1.1: bind() failure [ 874.336371][T13232] libceph: resolve '400' (ret=-3): failed [ 874.345823][T13233] ceph: No mds server is up or the cluster is laggy [ 875.564640][ T9] usb 3-1: USB disconnect, device number 8 [ 878.628144][T13279] tmpfs: Unknown parameter 'grpquota_block_har' [ 880.818643][T10940] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 886.234255][T13324] bridge0: port 3(hsr_slave_1) entered blocking state [ 886.241696][T13324] bridge0: port 3(hsr_slave_1) entered disabled state [ 886.249706][T13324] hsr_slave_1: entered allmulticast mode [ 886.267298][T13324] hsr_slave_1: left allmulticast mode [ 889.905654][T10940] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 890.080348][T10940] usb 3-1: device descriptor read/64, error -71 [ 890.536484][T10940] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 891.220667][T10940] usb 3-1: device descriptor read/64, error -71 [ 891.419241][T10940] usb usb3-port1: attempt power cycle [ 894.445685][ T1141] Bluetooth: Error in BCSP hdr checksum [ 894.729914][ T11] Bluetooth: Error in BCSP hdr checksum [ 894.996876][ T6913] Bluetooth: Error in BCSP hdr checksum [ 896.321077][T13371] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 896.355306][ T11] Bluetooth: Error in BCSP hdr checksum [ 896.373701][ T5085] Bluetooth: hci4: command 0x1003 tx timeout [ 896.381827][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 896.812446][ T5789] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 897.102943][ T5789] Bluetooth: hci0: unexpected cc 0x2042 length: 2 > 1 [ 897.109847][ T5789] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 897.191670][ T5789] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 898.950006][T13429] loop2: detected capacity change from 0 to 2048 [ 899.014272][T10921] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 899.185212][T10921] usb 2-1: device descriptor read/64, error -71 [ 899.437961][T13443] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2117'. [ 899.450817][T13443] i2c i2c-0: Invalid block write size 59 [ 899.465400][T13443] lo: entered promiscuous mode [ 899.486856][T10921] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 899.495642][T13443] tunl0: entered promiscuous mode [ 899.519986][T13443] gre0: entered promiscuous mode [ 899.607832][T13443] gretap0: entered promiscuous mode [ 899.641609][T13443] erspan0: entered promiscuous mode [ 899.669138][T10921] usb 2-1: device descriptor read/64, error -71 [ 899.697613][T13443] ip_vti0: entered promiscuous mode [ 899.748571][T13443] ip6_vti0: entered promiscuous mode [ 899.786316][T13443] sit0: entered promiscuous mode [ 899.806542][T10921] usb usb2-port1: attempt power cycle [ 899.930043][T13443] ip6tnl0: entered promiscuous mode [ 899.966866][T13443] ip6gre0: entered promiscuous mode [ 900.009594][T13443] syz_tun: entered promiscuous mode [ 900.155895][T13443] ip6gretap0: entered promiscuous mode [ 900.180802][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.188359][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.202965][T13443] bridge0: entered promiscuous mode [ 900.254663][T13451] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 900.935721][T10921] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 900.978064][T13443] vcan0: entered promiscuous mode [ 901.021331][T13443] bond0: entered promiscuous mode [ 901.034856][T13443] bond_slave_0: entered promiscuous mode [ 901.040954][T13443] bond_slave_1: entered promiscuous mode [ 901.094021][T10921] usb 2-1: device descriptor read/8, error -71 [ 901.153823][T13443] team0: entered promiscuous mode [ 901.159519][T13443] team_slave_0: entered promiscuous mode [ 901.173271][T13443] team_slave_1: entered promiscuous mode [ 901.188229][T13443] geneve0: entered promiscuous mode [ 901.219322][T13443] dummy0: entered promiscuous mode [ 901.270996][T13443] nlmon0: entered promiscuous mode [ 901.288136][T13443] caif0: entered promiscuous mode [ 901.357298][T13443] batadv0: entered promiscuous mode [ 901.430973][T13443] veth0: entered promiscuous mode [ 901.489622][T13443] veth1: entered promiscuous mode [ 901.598403][T13443] wg0: entered promiscuous mode [ 901.647105][T13443] wg1: entered promiscuous mode [ 901.689903][T13443] wg2: entered promiscuous mode [ 901.728862][T13443] veth0_to_bridge: entered promiscuous mode [ 901.830720][T13443] veth1_to_bridge: entered promiscuous mode [ 901.948201][T13443] veth0_to_bond: entered promiscuous mode [ 902.025781][T13443] veth1_to_bond: entered promiscuous mode [ 902.054229][T13443] veth0_to_team: entered promiscuous mode [ 902.115581][T13443] veth1_to_team: entered promiscuous mode [ 902.275623][T13443] veth0_to_batadv: entered promiscuous mode [ 902.302039][T13443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.346876][T13443] batadv_slave_0: entered promiscuous mode [ 902.385817][T13443] xfrm0: entered promiscuous mode [ 902.422925][T13443] veth0_to_hsr: entered promiscuous mode [ 902.472843][T13443] veth1_to_hsr: entered promiscuous mode [ 902.541510][T13443] hsr0: left promiscuous mode [ 902.564236][T13443] hsr0: entered promiscuous mode [ 902.593785][T13443] veth1_virt_wifi: entered promiscuous mode [ 902.624083][T13443] veth0_virt_wifi: entered promiscuous mode [ 902.647036][T13443] virt_wifi0: entered promiscuous mode [ 902.744369][T13443] vlan0: entered promiscuous mode [ 902.745828][T10921] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 902.767263][T13443] vlan1: entered promiscuous mode [ 902.774303][T13443] macvlan0: entered promiscuous mode [ 902.808022][T13443] macvlan1: entered promiscuous mode [ 902.822264][T13443] ipvlan0: entered promiscuous mode [ 902.827740][T13443] ipvlan1: entered promiscuous mode [ 902.895823][T13443] macvtap0: entered promiscuous mode [ 902.925644][T13443] macsec0: entered promiscuous mode [ 902.927259][T10921] usb 2-1: device descriptor read/64, error -71 [ 902.978431][T13443] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.987507][T13443] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.996511][T13443] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.006681][T13443] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.016084][T13443] geneve1: entered promiscuous mode [ 903.049978][T13443] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 903.075644][T13443] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 903.100114][T13443] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 903.130283][T13443] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 903.165963][T13443] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 903.190151][T13443] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 903.215518][T13443] erspan0.1: entered promiscuous mode [ 903.221297][T13443] gtp0: entered promiscuous mode [ 903.227463][T13443] gtp1: entered promiscuous mode [ 903.234656][T13443] : entered promiscuous mode [ 903.247689][T10921] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 903.258879][T13443] bridge1: entered promiscuous mode [ 903.274989][T13443] gtp2: entered promiscuous mode [ 903.286321][T13443] gretap1: entered promiscuous mode [ 903.293658][T13443] vlan2: entered promiscuous mode [ 903.308682][T13443] macsec1: entered promiscuous mode [ 903.326115][T13443] bond1: entered promiscuous mode [ 903.331225][T13443] gretap2: entered promiscuous mode [ 903.361668][T13443] gretap3: entered promiscuous mode [ 903.382321][T13449] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 903.399762][T13449] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 903.410132][T13449] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 903.423152][T10921] usb 2-1: device descriptor read/64, error -71 [ 903.590089][T10921] usb usb2-port1: attempt power cycle [ 904.038732][T10921] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 904.691603][T10921] usb 2-1: device descriptor read/8, error -71 [ 904.990185][T10921] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 905.739162][T10921] usb 2-1: device descriptor read/8, error -71 [ 906.024750][T10921] usb usb2-port1: unable to enumerate USB device [ 906.325818][ T28] audit: type=1326 audit(1785367292.106:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.1.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177d99df99 code=0x7ffc0000 [ 906.422747][ T28] audit: type=1326 audit(1785367292.134:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.1.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177d99df99 code=0x7ffc0000 [ 907.425069][ T28] audit: type=1326 audit(1785367292.134:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.1.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f177d99df99 code=0x7ffc0000 [ 907.449500][ T28] audit: type=1326 audit(1785367292.134:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13507 comm="syz.1.2138" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f177d99df99 code=0x7ffc0000 [ 907.626635][ T5789] Bluetooth: hci3: unexpected event for opcode 0x080e [ 912.147063][ T5764] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 912.345294][ T5764] usb 3-1: device descriptor read/64, error -71 [ 913.243347][ T5764] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 913.425192][ T5764] usb 3-1: device descriptor read/64, error -71 [ 915.713315][ T5764] usb usb3-port1: attempt power cycle [ 915.943017][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'. [ 915.982629][T13579] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 916.031337][T13579] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2164'. [ 916.172698][ T5764] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 916.226025][ T5764] usb 3-1: device descriptor read/8, error -71 [ 916.515170][ T5764] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 916.655537][T13595] syz_tun: entered allmulticast mode [ 916.781860][ T5764] usb 3-1: device not accepting address 16, error -71 [ 916.817212][ T5764] usb usb3-port1: unable to enumerate USB device [ 921.175166][T13644] loop2: detected capacity change from 0 to 512 [ 921.229164][T13644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 921.248339][T13644] EXT4-fs (loop2): 1 truncate cleaned up [ 921.256609][T13644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.316425][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.571622][ T28] audit: type=1326 audit(1785367307.306:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.2.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 922.672374][ T28] audit: type=1326 audit(1785367307.306:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.2.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 922.748307][ T28] audit: type=1326 audit(1785367307.334:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.2.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 922.802823][ T28] audit: type=1326 audit(1785367307.334:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.2.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 922.883616][ T28] audit: type=1326 audit(1785367307.334:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13660 comm="syz.2.2200" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 924.351462][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.361930][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.119329][T13703] netlink: 'syz.1.2214': attribute type 12 has an invalid length. [ 926.140620][T13704] netlink: 'syz.4.2215': attribute type 41 has an invalid length. [ 926.159469][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2214'. [ 927.046072][T13722] x_tables: duplicate entry at hook 3 [ 930.560775][T13735] loop2: detected capacity change from 0 to 1024 [ 931.613749][T13740] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 931.896422][ T5789] Bluetooth: Unexpected start frame (len 0) [ 934.469443][T13786] SET target dimension over the limit! [ 936.283130][T13805] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 938.806734][T13839] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 939.798478][T10934] IPVS: starting estimator thread 0... [ 939.927156][T13876] IPVS: using max 18 ests per chain, 43200 per kthread [ 942.317963][T13911] netlink: 'syz.3.2296': attribute type 10 has an invalid length. [ 942.325998][T13911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2296'. [ 942.346655][T10931] libceph: connect (1)[c::]:6789 error -101 [ 942.360884][T10931] libceph: mon0 (1)[c::]:6789 connect error [ 942.380542][T13911] geneve0: entered promiscuous mode [ 942.386128][T13911] geneve0: entered allmulticast mode [ 942.392216][T13911] team0: Port device geneve0 added [ 942.408906][T13909] ceph: No mds server is up or the cluster is laggy [ 942.790889][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 942.806559][T13921] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.815523][T13921] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.824502][T13921] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.833332][T13921] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.857709][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 942.867611][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'. [ 943.871374][T13898] loop2: detected capacity change from 0 to 32768 [ 943.916365][T13898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2289 (13898) [ 943.997377][T13898] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 944.032767][T13898] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 944.106472][T13898] BTRFS info (device loop2): using free space tree [ 945.738606][T13898] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 945.852976][T13898] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 946.694985][T13898] BTRFS error (device loop2): open_ctree failed: -12 [ 946.835134][T13963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2309'. [ 947.190934][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'. [ 947.322769][T13971] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2314'. [ 947.446520][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 951.697919][ T5764] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 952.542067][ T5764] usb 3-1: Using ep0 maxpacket: 8 [ 952.580767][ T5764] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.616940][ T5764] usb 3-1: config 64 interface 0 has no altsetting 0 [ 952.627305][ T5764] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 952.636512][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.654807][ T5764] usb 3-1: Product: syz [ 952.659227][ T5764] usb 3-1: Manufacturer: syz [ 952.667635][ T5764] usb 3-1: SerialNumber: syz [ 952.726502][ T5764] snd_usb_toneport 3-1:64.0: Line 6 TonePort UX2 found [ 952.955339][ T5764] snd_usb_toneport 3-1:64.0: cannot get proper max packet size [ 953.155690][ T5764] snd_usb_toneport 3-1:64.0: Line 6 TonePort UX2 now disconnected [ 953.166920][ T5764] snd_usb_toneport: probe of 3-1:64.0 failed with error -22 [ 953.183224][ T5764] usb 3-1: USB disconnect, device number 17 [ 959.568189][T14098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 959.629430][T14100] loop2: detected capacity change from 0 to 256 [ 962.807648][ T3462] loop: Write error at byte offset 0, length 1024. [ 962.814299][ T3462] loop: Write error at byte offset 0, length 1024. [ 962.847348][ T3462] loop: Write error at byte offset 0, length 1024. [ 962.854359][ C0] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 962.863889][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 962.872332][ C0] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 962.880760][ C0] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 963.307440][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 963.502659][ T8] usb 3-1: device descriptor read/64, error -71 [ 963.809849][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 963.981351][ T8] usb 3-1: device descriptor read/64, error -71 [ 964.110839][ T8] usb usb3-port1: attempt power cycle [ 964.456427][T14191] bond0: option use_carrier: invalid value (2) [ 964.569101][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 964.837087][ T8] usb 3-1: device not accepting address 20, error -71 [ 976.531232][T14335] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2458'. [ 978.628271][T14353] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2466'. [ 978.669131][T14353] bridge_slave_0: left allmulticast mode [ 978.693423][T14353] bridge_slave_0: left promiscuous mode [ 978.701386][T14353] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.718196][T14353] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 980.080771][T14395] tipc: Enabling of bearer rejected, failed to enable media [ 981.474791][T14411] bridge0: port 1(syz_tun) entered blocking state [ 981.507585][T14411] bridge0: port 1(syz_tun) entered disabled state [ 981.514531][T14411] syz_tun: entered allmulticast mode [ 981.522644][T14411] syz_tun: left allmulticast mode [ 982.380034][T14418] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 982.966584][T14443] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2505'. [ 983.010123][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2505'. [ 983.019156][T14443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2505'. [ 983.968730][T14453] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2509'. [ 984.029192][T14453] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2509'. [ 985.020840][T14483] loop2: detected capacity change from 0 to 1024 [ 985.059438][T14483] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 985.134100][T14483] hfsplus: filesystem is marked journaled, leaving read-only. [ 986.916163][T14534] loop2: detected capacity change from 0 to 256 [ 986.924402][T14534] exfat: Deprecated parameter 'utf8' [ 986.942834][T14534] exfat: Deprecated parameter 'utf8' [ 986.993698][T14534] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 987.197143][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 987.218799][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2547'. [ 988.409843][T14571] IPv6: NLM_F_CREATE should be specified when creating new route [ 988.621992][T14581] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2564'. [ 989.248149][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.255460][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.203685][T10931] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 994.259479][T14673] netlink: 'syz.3.2596': attribute type 21 has an invalid length. [ 994.267877][T14673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2596'. [ 994.353161][ T8] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 994.428043][T10931] usb 3-1: Using ep0 maxpacket: 32 [ 994.474867][T10931] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 994.555690][T10931] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 994.603221][ T8] usb 2-1: device descriptor read/64, error -71 [ 994.615965][T10934] IPVS: starting estimator thread 0... [ 994.651052][T10931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 994.800242][T10931] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 994.822648][T10931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.845033][T10931] usb 3-1: Product: syz [ 994.855173][T10931] usb 3-1: Manufacturer: syz [ 994.860202][T14674] IPVS: using max 19 ests per chain, 45600 per kthread [ 994.877187][T10931] usb 3-1: SerialNumber: syz [ 994.891980][T10931] usb 3-1: config 0 descriptor?? [ 994.984380][ T8] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 995.177392][ T8] usb 2-1: device descriptor read/64, error -71 [ 995.322142][ T8] usb usb2-port1: attempt power cycle [ 995.378237][T10931] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 995.818333][T10931] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 995.836071][T10931] gs_usb: probe of 3-1:0.0 failed with error -71 [ 995.876870][T10931] usb 3-1: USB disconnect, device number 22 [ 996.868471][T14711] loop2: detected capacity change from 0 to 512 [ 996.892807][T14711] EXT4-fs: Ignoring removed bh option [ 996.916235][T14711] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 997.001901][T14711] EXT4-fs (loop2): 1 truncate cleaned up [ 997.016387][T14711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 997.197026][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 997.253742][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.398382][ T8] usb 2-1: config 0 has no interfaces? [ 997.407302][ T8] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 997.427035][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.445377][T14730] loop2: detected capacity change from 0 to 64 [ 997.455433][ T8] usb 2-1: config 0 descriptor?? [ 998.047862][T14713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.134900][T14713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.305987][T10931] usb 2-1: USB disconnect, device number 31 [ 998.947983][T14739] loop2: detected capacity change from 0 to 4096 [ 998.987172][T10931] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 999.185136][T10931] usb 2-1: Using ep0 maxpacket: 8 [ 999.197059][T10931] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 999.216169][T10931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.240933][T10931] usb 2-1: config 0 has no interface number 0 [ 999.250586][T10931] usb 2-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 999.260909][T10931] usb 2-1: config 0 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 999.274325][T10931] usb 2-1: config 0 interface 1 has no altsetting 0 [ 999.281043][T10931] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 999.293782][T10931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.318737][T10931] usb 2-1: config 0 descriptor?? [ 999.359609][T10931] hso 2-1:0.1: Failed to find BULK IN ep [ 999.658085][T10931] usb 2-1: USB disconnect, device number 32 [ 1000.960156][T10931] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1001.152443][T10931] usb 3-1: device descriptor read/64, error -71 [ 1001.451490][T10931] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1001.622624][T10931] usb 3-1: device descriptor read/64, error -71 [ 1001.773204][T10931] usb usb3-port1: attempt power cycle [ 1001.901040][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1002.061148][ T8] usb 2-1: device descriptor read/64, error -71 [ 1002.221784][T10931] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1002.276077][T10931] usb 3-1: device descriptor read/8, error -71 [ 1002.360304][ T8] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1002.531266][ T8] usb 2-1: device descriptor read/64, error -71 [ 1002.584777][T10931] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1002.628385][T10931] usb 3-1: device descriptor read/8, error -71 [ 1002.670827][ T8] usb usb2-port1: attempt power cycle [ 1002.756148][T10931] usb usb3-port1: unable to enumerate USB device [ 1003.119406][ T8] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1003.163077][ T8] usb 2-1: device descriptor read/8, error -71 [ 1003.461983][ T8] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1003.515880][ T8] usb 2-1: device descriptor read/8, error -71 [ 1003.658194][ T8] usb usb2-port1: unable to enumerate USB device [ 1007.684267][ T5764] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1007.878491][ T5764] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1007.893260][ T5764] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1007.908237][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.931210][ T5764] usb 2-1: config 0 descriptor?? [ 1008.385337][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.410072][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.428335][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.438972][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.447192][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.455769][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.467058][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.483697][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.492681][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.501591][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.510274][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.517500][ T5764] logitech 0003:046D:C29C.0005: unknown main item tag 0x0 [ 1008.525381][ T5764] logitech 0003:046D:C29C.0005: item fetching failed at offset 26/36 [ 1008.551059][ T5764] logitech 0003:046D:C29C.0005: parse failed [ 1008.557260][ T5764] logitech: probe of 0003:046D:C29C.0005 failed with error -22 [ 1008.617323][ T5764] usb 2-1: USB disconnect, device number 37 [ 1009.106067][T10940] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1009.311292][T10940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.323271][T10940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.337563][T10940] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1009.349254][T10940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.374481][T10940] usb 3-1: config 0 descriptor?? [ 1009.845840][T10940] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 1009.865730][T10940] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 1009.901322][T10940] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0006/input/input14 [ 1010.019562][T10940] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1010.057259][T15032] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2753'. [ 1010.100541][ T5764] usb 3-1: USB disconnect, device number 27 [ 1010.117146][T15032] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2753'. [ 1010.317331][T15033] fido_id[15033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1010.469505][T15045] overlayfs: failed to resolve './cgroup': -2 [ 1010.784435][ T8] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1010.899309][T15061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2763'. [ 1011.023769][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 1011.043072][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1011.073870][ T8] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1011.083114][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.111151][ T8] usb 2-1: Product: syz [ 1011.126714][ T8] usb 2-1: Manufacturer: syz [ 1011.131489][ T8] usb 2-1: SerialNumber: syz [ 1011.150176][ T8] oti6858 2-1:1.0: oti6858 converter detected [ 1011.167811][ T8] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 1011.622168][T10940] usb 2-1: USB disconnect, device number 38 [ 1011.667973][T10940] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1011.680356][T10940] oti6858 2-1:1.0: device disconnected [ 1011.927236][T15096] loop2: detected capacity change from 0 to 128 [ 1011.935373][T15096] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1011.953212][T15096] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1011.989034][ T28] audit: type=1800 audit(1785367390.949:68): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2775" name="bus" dev="loop2" ino=1048697 res=0 errno=0 [ 1012.076955][ T6913] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1012.138521][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1012.561020][T15112] loop2: detected capacity change from 0 to 2048 [ 1012.592919][T15112] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1012.654190][T15112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1014.929392][T15184] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1014.946277][T15184] overlayfs: failed to set xattr on upper [ 1014.952212][T15184] overlayfs: ...falling back to redirect_dir=nofollow. [ 1014.978683][T15184] overlayfs: ...falling back to index=off. [ 1014.987799][T15184] overlayfs: ...falling back to uuid=null. [ 1014.993865][T15184] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1021.092124][T10934] kernel write not supported for file bpf-prog (pid: 10934 comm: kworker/0:14) [ 1021.600117][T15300] Bluetooth: MGMT ver 1.22 [ 1022.934385][T15335] syzkaller0: entered promiscuous mode [ 1023.091245][T15337] 9pnet_fd: Insufficient options for proto=fd [ 1023.808460][T15360] overlayfs: failed to clone upperpath [ 1023.945467][T15358] 9pnet_fd: Insufficient options for proto=fd [ 1025.577317][T15423] netlink: 'syz.1.2900': attribute type 4 has an invalid length. [ 1025.677850][T15427] netlink: 'syz.1.2900': attribute type 4 has an invalid length. [ 1027.536797][T15462] binder: 15460:15462 ioctl 4018620d 0 returned -22 [ 1027.761171][T10940] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1027.974329][T10940] usb 3-1: Using ep0 maxpacket: 16 [ 1027.987482][T10940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.008984][T10940] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1028.037092][T10940] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1028.056990][T10940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.086908][T10940] usb 3-1: Product: syz [ 1028.091176][T10940] usb 3-1: Manufacturer: syz [ 1028.115407][T10940] usb 3-1: SerialNumber: syz [ 1028.131454][T10940] usb 3-1: config 0 descriptor?? [ 1028.412808][T15461] loop2: detected capacity change from 0 to 512 [ 1028.484575][T15461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.563013][T15461] ext4 filesystem being mounted at /715/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.434330][T15510] netlink: 'syz.4.2936': attribute type 4 has an invalid length. [ 1030.631402][T10934] usb 3-1: USB disconnect, device number 28 [ 1030.701234][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.579602][ T5764] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1031.759624][ T5764] usb 3-1: device descriptor read/64, error -71 [ 1033.161276][ T5764] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1033.341863][ T5764] usb 3-1: device descriptor read/64, error -71 [ 1033.480955][ T5764] usb usb3-port1: attempt power cycle [ 1033.525453][T15571] tipc: Enabling of bearer rejected, failed to enable media [ 1033.673140][T10934] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1033.854763][T10934] usb 2-1: device descriptor read/64, error -71 [ 1033.931924][ T5764] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1033.973473][ T5764] usb 3-1: device descriptor read/8, error -71 [ 1034.154698][T10934] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1034.335917][T10934] usb 2-1: device descriptor read/64, error -71 [ 1034.479315][T10934] usb usb2-port1: attempt power cycle [ 1035.736266][T10934] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1035.781345][T10934] usb 2-1: device descriptor read/8, error -71 [ 1036.089241][T10934] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1036.143180][T10934] usb 2-1: device descriptor read/8, error -71 [ 1036.271316][T10934] usb usb2-port1: unable to enumerate USB device [ 1036.423956][T15626] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.453141][T15626] binder: 15625:15626 ioctl 4018620d 200000000100 returned -16 [ 1036.486528][T15626] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.492601][T15626] binder: 15625:15626 ioctl 4018620d 200000000180 returned -16 [ 1038.761745][T15636] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.784356][T15636] binder: 15635:15636 ioctl 4018620d 200000004a80 returned -16 [ 1038.937143][T15648] netlink: 'syz.1.2974': attribute type 10 has an invalid length. [ 1038.965719][T15648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.026185][T15648] bond0: (slave team0): Enslaving as an active interface with an up link [ 1043.753010][T15697] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 36 [ 1045.041756][T15716] tipc: Started in network mode [ 1045.046852][T15716] tipc: Node identity 2007ff, cluster identity 4711 [ 1045.054731][T15716] tipc: Node number set to 2099199 [ 1045.084335][T15715] netlink: 'syz.1.2996': attribute type 10 has an invalid length. [ 1045.131996][T15715] bridge_slave_1: left allmulticast mode [ 1045.146242][T15715] bridge_slave_1: left promiscuous mode [ 1045.165638][T15715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.177102][T15715] vlan2: left promiscuous mode [ 1045.181913][T15715] macvtap0: left promiscuous mode [ 1045.220022][T15715] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1048.916820][T15738] loop2: detected capacity change from 0 to 2048 [ 1049.208827][T15743] netlink: 'syz.1.3009': attribute type 1 has an invalid length. [ 1049.325472][T15743] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1049.418875][T15743] bond3 (unregistering): Released all slaves [ 1049.489493][T15751] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.511170][T15751] binder: 15750:15751 ioctl 4018620d 200000000240 returned -16 [ 1049.558502][T15752] bridge2: entered promiscuous mode [ 1049.598346][T15751] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.606863][T15751] binder: 15750:15751 ioctl 4018620d 200000000180 returned -16 [ 1049.617364][T15752] bond2: (slave bridge2): making interface the new active one [ 1049.679074][T15752] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1050.037150][T15761] syzkaller0: entered promiscuous mode [ 1050.052751][T15761] syzkaller0: entered allmulticast mode [ 1050.328138][T15771] tipc: Enabling of bearer rejected, failed to enable media [ 1050.486933][T15751] syz.2.3011 (15751): drop_caches: 2 [ 1051.763722][T15781] syzkaller0: entered promiscuous mode [ 1051.769291][T15781] syzkaller0: entered allmulticast mode [ 1053.191726][T15789] syzkaller0: entered promiscuous mode [ 1053.198736][T15789] syzkaller0: entered allmulticast mode [ 1054.618130][T15802] sctp: [Deprecated]: syz.2.3023 (pid 15802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1054.618130][T15802] Use struct sctp_sack_info instead [ 1054.934921][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.941700][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.225501][T15821] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1057.225501][T15821] The task syz.3.3030 (15821) triggered the difference, watch for misbehavior. [ 1062.204455][T15839] hub 8-0:1.0: USB hub found [ 1062.216500][T15839] hub 8-0:1.0: 1 port detected [ 1063.650170][T15848] syzkaller0: entered promiscuous mode [ 1063.655733][T15848] syzkaller0: entered allmulticast mode [ 1070.949740][T15880] syzkaller0: entered promiscuous mode [ 1070.960911][T15880] syzkaller0: entered allmulticast mode [ 1072.614312][ T28] audit: type=1326 audit(1785367447.616:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1073.163005][ T28] audit: type=1326 audit(1785367447.616:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1073.649734][ T28] audit: type=1326 audit(1785367447.616:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1074.040880][ T28] audit: type=1326 audit(1785367447.616:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1074.240171][ T28] audit: type=1326 audit(1785367447.616:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1074.308018][ T28] audit: type=1326 audit(1785367447.625:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1074.474143][ T28] audit: type=1326 audit(1785367447.625:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1074.499124][ T28] audit: type=1326 audit(1785367447.625:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1074.839712][T15898] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 1075.024647][ T28] audit: type=1326 audit(1785367447.625:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1075.634550][ T28] audit: type=1326 audit(1785367447.625:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15887 comm="syz.2.3050" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3bfc39df99 code=0x7ffc0000 [ 1081.766010][T15941] syzkaller0: entered promiscuous mode [ 1081.781164][T15941] syzkaller0: entered allmulticast mode [ 1084.702805][T15964] syzkaller0: entered promiscuous mode [ 1084.708424][T15964] syzkaller0: entered allmulticast mode [ 1085.339147][T15970] sctp: [Deprecated]: syz.1.3071 (pid 15970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1085.339147][T15970] Use struct sctp_sack_info instead [ 1090.967965][T16000] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3078'. [ 1093.714481][T16021] loop2: detected capacity change from 0 to 512 [ 1093.953200][T16021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.126971][T16021] ext4 filesystem being mounted at /748/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.251630][T16039] sctp: [Deprecated]: syz.4.3081 (pid 16039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1095.251630][T16039] Use struct sctp_sack_info instead [ 1095.760153][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.040260][T16047] overlayfs: failed to clone upperpath [ 1101.870601][T16079] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 1105.719747][T16091] tc action pedit 'at' offset 6 out of bounds [ 1108.937074][T16106] tipc: Enabling of bearer rejected, failed to enable media [ 1120.834114][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.840614][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1130.640196][T16220] syzkaller0: entered promiscuous mode [ 1130.645777][T16220] syzkaller0: entered allmulticast mode [ 1131.428260][T16220] tipc: Enabled bearer , priority 0 [ 1131.551825][T16218] tipc: Resetting bearer [ 1131.582552][T16235] loop2: detected capacity change from 0 to 128 [ 1131.743710][T16218] tipc: Disabling bearer [ 1133.870368][ T5789] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1141.126018][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3148'. [ 1147.891674][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1152.233586][T16321] bridge2: entered promiscuous mode [ 1152.238889][T16321] bridge2: entered allmulticast mode [ 1152.340454][T16321] team0: Port device bridge2 added [ 1152.380050][T16324] bridge0: port 3(team0) entered blocking state [ 1152.424445][T16324] bridge0: port 3(team0) entered disabled state [ 1152.432577][T16324] team0: entered allmulticast mode [ 1152.551662][T16324] team_slave_0: entered allmulticast mode [ 1152.563514][T16324] team_slave_1: entered allmulticast mode [ 1152.594907][T16324] geneve0: entered allmulticast mode [ 1153.024255][T16329] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 1153.856855][T16340] ubi0: attaching mtd0 [ 1153.886283][T16340] ubi0: scanning is finished [ 1153.891288][T16340] ubi0: empty MTD device detected [ 1154.472569][T16340] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1164.613885][T16400] loop2: detected capacity change from 0 to 4096 [ 1165.680332][T16400] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1166.341381][T16400] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1166.410647][T16400] ntfs3: loop2: failed to convert "c46c" to cp936 [ 1168.002504][T16403] syz.4.3176 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1181.242392][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3191'. [ 1186.314098][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.322988][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.865486][T16534] tipc: New replicast peer: 172.30.0.4 [ 1193.871382][T16534] tipc: Enabled bearer , priority 10 [ 1194.067395][T16539] netlink: 'syz.1.3210': attribute type 1 has an invalid length. [ 1195.551375][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3214'. [ 1195.560427][T16551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3214'. [ 1195.573898][T16551] geneve2: entered promiscuous mode [ 1195.579158][T16551] geneve2: entered allmulticast mode [ 1195.772499][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'. [ 1196.759066][T16559] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16562] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16559] [ 1200.227316][T16572] loop2: detected capacity change from 0 to 1024 [ 1204.829975][T16593] loop2: detected capacity change from 0 to 4096 [ 1205.327693][T16599] hub 1-0:1.0: USB hub found [ 1205.342221][T16599] hub 1-0:1.0: 1 port detected [ 1206.309015][T16026] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1207.896633][T16611] md: could not open device unknown-block(0,0). [ 1207.903205][T16611] md: md_import_device returned -6 [ 1209.501689][T16618] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[16622] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[16618] [ 1216.934728][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3233'. [ 1216.943982][T16650] vlan2: left allmulticast mode [ 1216.949028][T16650] macvtap0: left allmulticast mode [ 1216.954357][T16650] veth0_macvtap: left allmulticast mode [ 1216.960497][T16650] bridge0: port 3(vlan2) entered disabled state [ 1220.663352][T16661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1222.333264][T16676] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1223.252654][ T10] device offline error, dev sda, sector 704838 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1223.264022][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88104) [ 1223.299935][ T10] Buffer I/O error on device sda1, logical block 88066 [ 1223.356610][ T10] device offline error, dev sda, sector 704870 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1223.367249][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88108) [ 1223.461009][ T10] Buffer I/O error on device sda1, logical block 88070 [ 1223.472087][ T10] device offline error, dev sda, sector 704902 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 1223.482630][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88112) [ 1223.494228][ T10] Buffer I/O error on device sda1, logical block 88074 [ 1223.501160][ T10] Buffer I/O error on device sda1, logical block 88075 [ 1223.508152][ T10] device offline error, dev sda, sector 704934 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 1223.519005][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88116) [ 1223.530648][ T10] Buffer I/O error on device sda1, logical block 88078 [ 1223.537675][ T10] Buffer I/O error on device sda1, logical block 88079 [ 1223.544964][ T10] device offline error, dev sda, sector 704982 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1223.555666][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88122) [ 1223.567410][ T10] Buffer I/O error on device sda1, logical block 88084 [ 1223.599174][ T10] device offline error, dev sda, sector 704998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1223.610305][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88124) [ 1223.621966][ T10] Buffer I/O error on device sda1, logical block 88086 [ 1223.629004][ T10] Buffer I/O error on device sda1, logical block 88087 [ 1223.636611][ T10] Buffer I/O error on device sda1, logical block 88088 [ 1223.643927][ T10] device offline error, dev sda, sector 705190 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1223.654721][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88148) [ 1223.666530][ T10] device offline error, dev sda, sector 705222 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1223.677498][ T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88152) [ 1224.006533][ T63] device offline error, dev sda, sector 705614 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1224.148054][ T63] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88201) [ 1224.277294][ T63] device offline error, dev sda, sector 705678 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1224.325229][ T63] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 88209) [ 1226.425107][ T5102] Aborting journal on device sda1-8. [ 1226.435815][ T5762] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 1226.463169][ T63] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 1227.725934][ T5102] JBD2: I/O error when updating journal superblock for sda1-8. [ 1227.819685][T12776] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 1227.848326][ T5762] EXT4-fs (sda1): I/O error while writing superblock [ 1227.855572][ T5762] EXT4-fs (sda1): Remounting filesystem read-only [ 1229.826193][T16712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1230.877330][T16668] sd 0:0:1:0: [sda] Synchronizing SCSI cache SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 1235.080496][T14158] syz_tun (unregistering): left allmulticast mode [ 1235.348138][T14367] syz_tun (unregistering): left allmulticast mode [ 1235.708956][ T3430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.911752][ T3430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.109645][ T3430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.237451][ T3430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.529446][ T3430] tipc: Disabling bearer [ 1236.542792][ T3430] tipc: Left network mode [ 1237.702368][ T3430] hsr_slave_0: left promiscuous mode [ 1237.711228][ T3430] hsr_slave_1: left promiscuous mode [ 1237.718539][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.727903][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.740483][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.748257][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.756438][ T3430] bridge_slave_1: left allmulticast mode [ 1237.762610][ T3430] bridge_slave_1: left promiscuous mode [ 1237.774569][ T3430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.791211][ T3430] bridge_slave_0: left allmulticast mode [ 1237.796886][ T3430] bridge_slave_0: left promiscuous mode [ 1237.803698][ T3430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.837482][ T3430] veth1_macvtap: left promiscuous mode [ 1237.844128][ T3430] veth0_macvtap: left promiscuous mode [ 1237.849784][ T3430] veth1_vlan: left promiscuous mode [ 1237.855510][ T3430] veth0_vlan: left promiscuous mode [ 1238.721813][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 1238.782185][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 1238.840736][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.900042][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.367182][ T3430] bond0 (unregistering): Released all slaves [ 1239.765604][ T3430] IPVS: stop unused estimator thread 0... [ 1239.893494][ T3430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1239.904616][ T3430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.986927][ T3430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1239.997430][ T3430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.058444][ T3430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.068867][ T3430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.140368][ T3430] bond0: (slave netdevsim0): Releasing backup interface [ 1240.150004][ T3430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.160571][ T3430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.852558][ T3430] tipc: Disabling bearer [ 1240.859131][ T3430] tipc: Left network mode [ 1240.880601][ T3430] tipc: Left network mode