last executing test programs: 31m53.121574671s ago: executing program 32 (id=17): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000300)=ANY=[], 0x5, 0x1531, &(0x7f0000002f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5f4731e5de939cbc"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x7, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b97055b0fee1b227"}}, 0x48}}, 0x0) 30m57.081823978s ago: executing program 33 (id=77): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af00", 0x14) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 30m30.360117585s ago: executing program 34 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x3, 0x4, 0xfffffffc}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x44005) 29m42.826748267s ago: executing program 35 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x6) 26m31.655878234s ago: executing program 36 (id=339): write(0xffffffffffffffff, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x6) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}]}) 25m36.75672207s ago: executing program 37 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 23m16.547991423s ago: executing program 8 (id=558): socket$inet6(0xa, 0x80000, 0x4) close(0x3) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, 0x0, 0xc0b01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) close(0x3) socket$key(0xf, 0x3, 0x2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f00000007c0)=""/124, 0x7c}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=""/32, 0x20}, {0x0}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/245, 0xf5}], 0x8, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) close(0xffffffffffffffff) 23m10.272020519s ago: executing program 8 (id=562): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 23m8.654444974s ago: executing program 8 (id=563): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 23m4.584431347s ago: executing program 38 (id=552): socketpair(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e000000010000c0927bd7000ffdbdf256a6974746572656e74726f70795f726e6700"], 0xe0}}, 0x0) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc35, &(0x7f0000001ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000880)='./file0\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) 22m51.332413286s ago: executing program 8 (id=583): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x800) recvmmsg(r1, 0x0, 0x0, 0xfc0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) 22m44.294506001s ago: executing program 8 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fsopen(0x0, 0x1) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) waitid(0x1, r3, 0x0, 0x4, 0x0) dup(0xffffffffffffffff) 22m43.072353761s ago: executing program 8 (id=577): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 22m32.413771231s ago: executing program 5 (id=595): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffffff, 0x0, 0x8a) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x8, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0xc0086202, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x7fffffffff, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c840}, 0x24040808) accept4$netrom(r0, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @default, @null, @remote, @bcast, @rose, @remote, @default]}, 0x0, 0x800) 22m28.503037294s ago: executing program 5 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f00000001c0), 0x1003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x6, 0xe9951b6a92f87938) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}}, 0x40000) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0xfa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) prlimit64(r0, 0x4, 0x0, &(0x7f00000002c0)) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 22m26.502692804s ago: executing program 39 (id=577): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000009b80)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 22m24.100352089s ago: executing program 5 (id=604): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) pread64(0xffffffffffffffff, &(0x7f00000009c0)=""/239, 0xef, 0x1) r1 = getpgrp(0x0) lchown(0x0, 0xee01, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) openat(0xffffffffffffffff, 0x0, 0x408241, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x1, @pix_mp={0x800, 0x1193fddc, 0x34325258, 0x5, 0xb, [{0x1, 0xbf0e}, {0x4, 0xce83}, {0x5, 0x4}, {0xc2, 0x3}, {0x35, 0x6}, {0x10000, 0x8a9}, {0x1, 0x70}, {0x9, 0x3}], 0x5b, 0x4, 0x7, 0x0, 0x7}}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f29, 0x5, 0x3, 0x40004, 0xfffffffd, 0xb, 0x0, 0x0, 0x81, 0xfffffffc, 0x2, 0xfffffffe, 0x8, 0x1, 0x4, 0x101, 0x8, 0x2b0, 0x9, 0x5, 0x99, 0x400000, 0x80, 0x800, 0x7, 0x2000e69, 0x6, 0x80004, 0xfffffffe, 0x0, 0xfffffff8]}) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) 22m21.864810984s ago: executing program 5 (id=606): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000000), 0x0) add_key$user(&(0x7f0000000400), 0x0, &(0x7f0000001640), 0x0, 0xfffffffffffffffd) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x8, 0x11}, {@empty, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 22m13.511649685s ago: executing program 5 (id=612): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, 0x0) 22m11.495996036s ago: executing program 5 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fsopen(0x0, 0x1) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) waitid(0x1, r2, 0x0, 0x4, 0x0) dup(0xffffffffffffffff) 21m55.941810303s ago: executing program 40 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fsopen(0x0, 0x1) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) waitid(0x1, r2, 0x0, 0x4, 0x0) dup(0xffffffffffffffff) 16m40.981465915s ago: executing program 1 (id=951): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x200000c0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") rename(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = open(0x0, 0x145142, 0xc9) ftruncate(r3, 0x2007ffc) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8, 0x100000002, 0x0, 0xffffffffffffffff}) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 16m39.836041299s ago: executing program 1 (id=955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) sendfile(r5, r0, 0x0, 0x6208) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x5d2dd0c54751f823) 16m34.220203652s ago: executing program 1 (id=961): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0xc00) 16m30.359692673s ago: executing program 1 (id=964): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') 16m28.08629295s ago: executing program 1 (id=968): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {0x0}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 16m25.832072636s ago: executing program 1 (id=973): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20048000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_io_uring_submit(0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="845715a681ec735e7d0d95f6212e3b7feba7b2270ead34c14e091c2bfa", 0x1d}], 0x2}}], 0x1, 0x4400c800) 16m9.696239041s ago: executing program 41 (id=973): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20048000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) syz_io_uring_submit(0x0, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="845715a681ec735e7d0d95f6212e3b7feba7b2270ead34c14e091c2bfa", 0x1d}], 0x2}}], 0x1, 0x4400c800) 11m53.160128388s ago: executing program 4 (id=1239): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x7, 0xd) keyctl$session_to_parent(0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4040) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r1, 0x369a, 0x0, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x2}}, 0xfffffffd, 0x4, 0x2, 0x7, 0x45, 0x2, 0x5}, &(0x7f00000000c0)=0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r5, 0xfff6, 0x7, 0x5, 0x7, 0x9}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 11m44.385336859s ago: executing program 4 (id=1251): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x3}, 0x2000000}], 0x2, 0x101, 0x0) 11m42.964603251s ago: executing program 4 (id=1252): syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28400, 0x3c) getdents64(r3, 0x0, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0x4010, r4, 0x323c3000) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x160000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f00000001c0)={{0x40, 0x80}, {0x9, 0x9}, 0x3, 0x3, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) 11m35.331253968s ago: executing program 4 (id=1258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) sendfile(r4, r0, 0x0, 0x6208) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x5d2dd0c54751f823) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) 11m34.025841734s ago: executing program 4 (id=1259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) sendfile(r4, r0, 0x0, 0x6208) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x5d2dd0c54751f823) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) 11m26.292229207s ago: executing program 4 (id=1266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r2, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) syz_open_procfs(0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x5f501}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x40814) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) 11m8.315282028s ago: executing program 42 (id=1266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r2, 0x0) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b}) syz_open_procfs(0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x5f501}}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x40814) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) syz_usb_control_io(r3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x44) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x40000) 1m39.353430449s ago: executing program 7 (id=1996): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) write$P9_RGETATTR(r5, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m34.294744365s ago: executing program 7 (id=1999): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket(0x1e, 0x4, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x1b10, 0x2, 0x1, 0x2}, 0x1000002f, [0xdfa8, 0x1, 0x704d, 0x1, 0x5, 0x80000002, 0x6, 0x2, 0x4, 0xfffffc04, 0xfffffffb, 0x8, 0x1, 0x1, 0xfe, 0x4a, 0x7, 0x5, 0xaca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x80040, 0x1, 0x8000, 0x7, 0x797, 0x4000000, 0x10, 0x3, 0x1, 0x7, 0x1, 0x5, 0x80000006, 0xf, 0x7, 0xc6d9, 0xd, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7, 0x4, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x0, 0x4, 0x8, 0x802, 0xffffffff, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffefff, 0x959, 0x8, 0x8, 0x3, 0x0, 0x22cb, 0xc33, 0x3, 0x7, 0x4000800, 0x6c368000, 0x4, 0x100000f, 0x0, 0x10, 0x5, 0x81, 0x8001, 0x1003, 0x7fff, 0x9, 0x0, 0x5, 0x80000008, 0x4, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x584a, 0x7, 0x8, 0x8, 0x3, 0x5, 0x9, 0x5, 0x401, 0x2, 0x4, 0x0, 0x0, 0xa4, 0x4, 0x5, 0x200d69, 0x7266, 0xf404, 0x40000f1, 0x3, 0x3, 0x1, 0x6, 0x1000000, 0x0, 0x100, 0x8, 0xb, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffff8, 0x0, 0x7fff, 0x405, 0x400000b, 0x2, 0xffc, 0x7, 0x1004, 0xc, 0x7, 0x2, 0xa, 0x6, 0x4, 0x3, 0x5, 0xffffffff, 0x2, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x77f, 0x3, 0x400, 0x3, 0x41, 0x81, 0x40000c99, 0x25a, 0x2, 0x0, 0x3, 0x4, 0x3ff, 0xff, 0x4, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xa, 0x7, 0xe2f, 0xaa0, 0x81, 0xfffffff5, 0x2, 0xb, 0x100, 0x8, 0x0, 0x6, 0x12], [0xffffff7c, 0xd5800000, 0x0, 0x40002692, 0x2, 0x62a, 0x6, 0xffffdfcb, 0x9, 0x4, 0x1, 0x8, 0x0, 0x0, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xe, 0x3c5f, 0x7, 0x6, 0x8, 0xffffffff, 0x3, 0x1, 0x7, 0x1, 0x7, 0x3, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x3, 0xe, 0x5, 0x13a, 0x7, 0x0, 0x9, 0x7, 0x1b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x100003fd, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x81]}, 0x45c) fsopen(&(0x7f0000000580)='efs\x00', 0x1) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0x0, 0xc3}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0, 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m34.069799887s ago: executing program 7 (id=2001): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x800000, 0x2}) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x68, &(0x7f0000000200)}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x7b, 0x30}, &(0x7f0000000500)=0xc) syz_usbip_server_init(0x1) 1m31.043214895s ago: executing program 7 (id=2006): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x99, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1000000000000, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40000000003, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x800000000000000, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x10, 0x0, 0x870f, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000c80), 0x0}, 0x20) io_uring_setup(0x5f48, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 1m29.317731296s ago: executing program 7 (id=2012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1m26.67889577s ago: executing program 7 (id=2015): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) 1m10.230473542s ago: executing program 43 (id=2015): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setlease(r1, 0x400, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) 31.996948338s ago: executing program 0 (id=2073): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000002000500000000000400040000000000100002000000000020"], 0x24, 0x1) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0xfff}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xe, 0x2b, 0xa4f, 0xc1, 0x28, 0xffffff81, 0x80}, 0x9c) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 29.457979096s ago: executing program 0 (id=2081): ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x2, [], [0x2], [0x0, 0x6c], [0xfffffffffffffffc]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0xd, 0x3, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x1d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x8, 0x19, &(0x7f00000008c0)=""/25, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x3, 0x8, 0xc7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0x10000}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x82, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time={0x0, 0x5}, {0x5, 0x1}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x2, {}, {}, @queue={0x2, {0x2, 0x4}}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x4}, {0x0, 0x10}, @queue={0x0, {0x4, 0x8001}}}], 0x54) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) 26.49817493s ago: executing program 3 (id=2084): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80, 0xa7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 25.165836008s ago: executing program 0 (id=2087): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 23.807747787s ago: executing program 2 (id=2088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 22.04945095s ago: executing program 2 (id=2090): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f00000005c0)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x1cf}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@rodir}, {@shortname_win95}, {@numtail}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@shortname_win95}]}, 0x88, 0x29b, &(0x7f0000000180)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") mkdir(0x0, 0x100) r0 = inotify_init() mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x6000189) r1 = fanotify_init(0x4, 0x40000) fanotify_mark(r1, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 20.597010795s ago: executing program 0 (id=2091): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) socket(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 19.072417694s ago: executing program 9 (id=2092): socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 14.197987819s ago: executing program 9 (id=2093): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x800000, 0x2}) unshare(0x22020600) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x68, &(0x7f0000000200)}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f00000000c0)) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0x7b, 0x30}, &(0x7f0000000500)=0xc) syz_usbip_server_init(0x1) 14.197737199s ago: executing program 0 (id=2094): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) sendfile(r5, r0, 0x0, 0x6208) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x5d2dd0c54751f823) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) 14.18515514s ago: executing program 3 (id=2095): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 14.18454714s ago: executing program 2 (id=2103): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) write$P9_RGETATTR(r4, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 14.18251878s ago: executing program 6 (id=2096): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x1000000000000, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, &(0x7f0000000800)="3080", 0x2, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r5, 0x86a) socket$netlink(0x10, 0x3, 0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3e0, 0x220, 0x11, 0x148, 0x220, 0x0, 0x348, 0x2a8, 0x2a8, 0x348, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vlan1\x00', {0x0, 0xfb, 0x45, 0xfffffffb, 0x9, 0x100, 0x1, 0x3ff, 0x0, 0x20}, {0x3}}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x2, 0x400, 0x5, {0xb284}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @loopback, 0xff, 0x0, 'vlan0\x00', 'veth0\x00', {}, {}, 0x8, 0x0, 0x64}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x26, 0x1e, 0x0, 0x80000000, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 11.78028867s ago: executing program 2 (id=2097): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}}], 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x100) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = inotify_init() mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) inotify_add_watch(r1, &(0x7f0000000300)='./file0\x00', 0x6000189) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001008, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') unlink(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 11.7797648s ago: executing program 0 (id=2098): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x99, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7fffffff}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1000000000000, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40000000003, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x800000000000000, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x10, 0x0, 0x870f, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9]}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000c80), 0x0}, 0x20) io_uring_setup(0x5f48, &(0x7f00000001c0)={0x0, 0x0, 0x2}) 11.7793891s ago: executing program 3 (id=2099): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11.004293016s ago: executing program 6 (id=2100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x10001043, 0xffffffffffffffff, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) mq_notify(r6, 0x0) 9.56610851s ago: executing program 3 (id=2101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x3}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x100000000000f7) keyctl$revoke(0x3, r2) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000010004b0400000000000000007a0000", @ANYRES32=0x0], 0x5c}}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x3}, 0x2f) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000240)) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, 0x0) read$FUSE(r7, &(0x7f0000001e40)={0x2020}, 0x2020) preadv(r7, 0x0, 0x0, 0x8, 0xb553) 7.949977925s ago: executing program 6 (id=2102): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) write$P9_RGETATTR(r4, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.504186891s ago: executing program 9 (id=2104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x36a3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 5.924732403s ago: executing program 9 (id=2105): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$eJzslb+r01AUx7/3Ji9pfW5uLg4+8DmYJqm/lgfPxclB8Edxs9i0VFMrbQZbEPEvcHdzcPFfEKGu/hFSBVEQXdT5SnJvkptqSltbing+0JNv7j09OfeccAKCIP5bPrz/ORU/Dj5VABzFHmy1/tnIfbjm/67y7dGbK5cbT80Xb+2pUy1Gs5d+vglgcslApO6FEELf31PX6+CZvgGO00o3wOAofRscN5UOwHBL6bua7u8oEQbOnX7YanfDwI2NFxs/NvXZ/L4+YWhp+TFtfzga32uGYTDYmLBKKjf5kuVXAQ60/PR+OZDZulr9PHB4StfBcE3pi7DhOE5eEu38x808vjH3/BaWP+SuvvIx6U660p5xNrBkHXfm+MS1Xa0xAPtz719t9m1YRVgorOBlvmXIrbSjW0917QJm8aR/EVDYBtaf4QV7DUPk9aHsX5bqY3lfdO7vzu/y4WLvz6KVz+aneM5wSptPcpQ8Sz4Wtaj3oDYcjc90e81O0Anu+379vHvWdc/5tWQQSVsyA+P41WQ+HZGhY6plvhaz8LAZRQNP2uzelzY/QP4fnsw/jv2TSL4cDMeuzsb9DiB9KFM/nlxjtW+UJk8QBLFFToBlg9NMhfqaqA1LCOH/NvQIgiAIgiAIgiAIgvhn+BUAAP//aA9ZjQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 4.350444185s ago: executing program 9 (id=2106): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80, 0xa7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.350120645s ago: executing program 3 (id=2107): r0 = socket$inet(0x2b, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[], 0x38}}, 0xc810) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x8600) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x9, 0xa, 0x4, 0x2, 0xfc, {}, {0x1, 0x2, 0x8, 0x6a, 0x2, 0x4, "3b7a1286"}, 0x8, 0x1, {0x0}, 0x7}) r7 = syz_open_dev$video(&(0x7f0000000080), 0xfffffffffdfffffd, 0x2a943) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f00000000c0)={0x8000005, 0x0, "679c51ecbc83d1e22e845e3ede57135adc714d432546da16827000", 0x1, 0x349, 0x0, 0x4, 0x85}) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x480, 0x0, 0x0) 4.346721035s ago: executing program 6 (id=2116): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) kcmp(0x0, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.346018225s ago: executing program 2 (id=2108): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) write$P9_RGETATTR(r4, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3.406383221s ago: executing program 6 (id=2109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) sendfile(r5, r0, 0x0, 0x6208) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}], 0x1, 0x5d2dd0c54751f823) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) 3.320177126s ago: executing program 2 (id=2110): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4004800, &(0x7f0000000140)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x20802, 0x0) pread64(r3, 0x0, 0x0, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x4) 1.823727333s ago: executing program 3 (id=2111): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd28, 0x4000}, 0x10}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f0, &(0x7f0000000440)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x1e1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 23.215338ms ago: executing program 6 (id=2112): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdca, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r3, 0x5608) accept$alg(r2, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x82c02, 0x80) write$P9_RGETATTR(r4, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x200, {0x8, 0x2}, 0x22, 0x0, 0x0, 0x1, 0xf62d, 0x0, 0x1, 0x5, 0x7, 0x7, 0xff, 0x3, 0xf, 0xb, 0x4, 0xfffffffffffffffd, 0x9, 0xd1c8}}, 0xa0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 9 (id=2113): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 05721][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 862.024216][ T9204] device veth0_macvtap entered promiscuous mode [ 862.035457][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 862.048074][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 862.064414][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 862.093418][ T9204] device veth1_macvtap entered promiscuous mode [ 862.100536][ T8083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.109314][ T8083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.125940][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 862.155046][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.174308][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.192341][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.212823][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.223499][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.239223][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.253727][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.266926][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.306388][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.326024][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.394021][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.413884][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.427315][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.437333][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.448274][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.458350][ T9204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.469025][ T9204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.490438][ T9333] loop1: detected capacity change from 0 to 256 [ 862.522696][ T9340] loop0: detected capacity change from 0 to 256 [ 862.540821][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.647919][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 863.158403][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 863.754691][ T6427] Bluetooth: hci0: command 0x0419 tx timeout [ 864.056069][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 864.149693][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 864.215346][ T9204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.257584][ T9204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.162723][ T9204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.192014][ T9204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.570887][ T5464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.588010][ T5464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.617322][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 865.702208][ T5439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.856470][ T9365] loop1: detected capacity change from 0 to 256 [ 865.868887][ T9365] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 866.562868][ T5439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.591002][ T9192] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 866.629336][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 867.872239][ T9377] loop4: detected capacity change from 0 to 2048 [ 869.541786][ T9377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 869.969095][ T9403] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 869.986283][ T9403] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 870.170576][ T9403] EXT4-fs (loop4): This should not happen!! Data will be lost [ 870.170576][ T9403] [ 870.181605][ T9403] EXT4-fs (loop4): Total free blocks count 0 [ 870.187774][ T9403] EXT4-fs (loop4): Free/Dirty block details [ 870.193882][ T9403] EXT4-fs (loop4): free_blocks=2415919504 [ 870.205014][ T9403] EXT4-fs (loop4): dirty_blocks=48 [ 870.210352][ T9403] EXT4-fs (loop4): Block reservation details [ 870.216575][ T9403] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 870.485997][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.492379][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.609884][ T9002] EXT4-fs (loop4): unmounting filesystem. [ 873.671367][ T9425] loop0: detected capacity change from 0 to 256 [ 875.333868][ T9441] blktrace: Concurrent blktraces are not allowed on nullb0 [ 875.686897][ T9446] loop0: detected capacity change from 0 to 2048 [ 875.818026][ T9446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 878.840591][ T9469] binder: BINDER_SET_CONTEXT_MGR already set [ 878.846694][ T9469] binder: 9464:9469 ioctl 4018620d 200000000040 returned -16 [ 881.169725][ T9472] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 881.771140][ T9479] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 881.819001][ T9479] cgroup: name respecified [ 885.485687][ T9486] loop7: detected capacity change from 0 to 16384 [ 885.908880][ T9486] loop7: detected capacity change from 16384 to 0 [ 888.657096][ T9506] loop3: detected capacity change from 0 to 1024 [ 888.748848][ T9506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 889.780989][ T9513] binder: 9508:9513 ioctl 0 0 returned -22 [ 890.103233][ T9506] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 890.245300][ T9522] loop4: detected capacity change from 0 to 256 [ 890.281301][ T9522] exfat: Deprecated parameter 'utf8' [ 890.836199][ T9522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 891.548155][ T9534] loop6: detected capacity change from 0 to 128 [ 891.718562][ T9204] EXT4-fs (loop3): unmounting filesystem. [ 892.277668][ T9534] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 893.685348][ T9534] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 894.051082][ T9552] binder: BINDER_SET_CONTEXT_MGR already set [ 894.057233][ T9552] binder: 9546:9552 ioctl 4018620d 200000000040 returned -16 [ 897.004220][ T4903] EXT4-fs (loop6): unmounting filesystem. [ 897.852596][ T9561] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 898.088108][ T9566] loop3: detected capacity change from 0 to 32768 [ 899.888458][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 900.137939][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 900.156973][ T27] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 900.203852][ T9581] Bluetooth: MGMT ver 1.22 [ 900.210676][ T27] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 900.251100][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.300596][ T27] usb 4-1: Product: syz [ 900.304896][ T27] usb 4-1: Manufacturer: syz [ 900.324274][ T27] usb 4-1: SerialNumber: syz [ 901.766764][ T27] usb 4-1: config 0 descriptor?? [ 901.859121][ T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 901.947841][ T27] usb 4-1: setting power ON [ 901.968268][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 902.040055][ T9576] dvb-usb: bulk message failed: -22 (3/0) [ 902.052287][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.125804][ T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 902.162768][ T27] usb 4-1: media controller created [ 902.210627][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.297265][ T27] usb 4-1: selecting invalid altsetting 6 [ 902.325000][ T27] usb 4-1: digital interface selection failed (-22) [ 902.345367][ T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 902.389782][ T27] usb 4-1: setting power OFF [ 902.406363][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 902.413152][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 902.432888][ T27] (NULL device *): no alternate interface [ 902.610032][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 902.710534][ T27] usb 4-1: USB disconnect, device number 2 [ 904.937640][ T9616] loop3: detected capacity change from 0 to 2048 [ 905.285797][ T9616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 905.295316][ T4311] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 905.343856][ T4311] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 906.064245][ T9619] fido_id[9619]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 907.496074][ T9628] loop6: detected capacity change from 0 to 2048 [ 907.578400][ T9630] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 910.476534][ T9630] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 910.517750][ T9630] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 910.558200][ T9630] Remounting filesystem read-only [ 910.565621][ T4903] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 910.783249][ T9648] loop6: detected capacity change from 0 to 512 [ 910.889827][ T9648] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 910.980282][ T9648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 911.017549][ T9648] System zones: 1-12 [ 911.920792][ T9648] EXT4-fs (loop6): 1 truncate cleaned up [ 911.926459][ T9648] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 912.791601][ T4903] EXT4-fs (loop6): unmounting filesystem. [ 919.932307][ T9702] loop4: detected capacity change from 0 to 128 [ 921.854235][ T9713] loop6: detected capacity change from 0 to 512 [ 921.905182][ T9713] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 923.233755][ T9713] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 923.337500][ T9713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0102] [ 923.416847][ T9713] System zones: 1-12 [ 923.428879][ T9713] EXT4-fs (loop6): orphan cleanup on readonly fs [ 923.436176][ T9713] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.840: invalid indirect mapped block 2 (level 2) [ 923.498745][ T9713] EXT4-fs (loop6): Remounting filesystem read-only [ 923.505550][ T9713] EXT4-fs (loop6): 1 truncate cleaned up [ 923.648119][ T9734] loop1: detected capacity change from 0 to 256 [ 923.662035][ T9734] exfat: Deprecated parameter 'namecase' [ 923.668605][ T9734] exfat: Unknown parameter 'zero_size_dir' [ 924.965669][ T9713] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 925.110795][ T9734] loop1: detected capacity change from 0 to 2048 [ 925.137248][ T9734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 925.659165][ T9737] blktrace: Concurrent blktraces are not allowed on nullb0 [ 926.278669][ T4903] EXT4-fs (loop6): unmounting filesystem. [ 929.083465][ T9756] loop6: detected capacity change from 0 to 164 [ 931.419109][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.425519][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.164163][ T9794] loop0: detected capacity change from 0 to 128 [ 936.281026][ T9804] loop6: detected capacity change from 0 to 512 [ 938.006849][ T9732] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 945.329950][ T9840] loop4: detected capacity change from 0 to 8192 [ 945.403588][ T9840] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 945.416771][ T9840] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 945.426377][ T9840] REISERFS (device loop4): using ordered data mode [ 945.433003][ T9840] reiserfs: using flush barriers [ 945.444989][ T9840] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 945.463669][ T9840] REISERFS (device loop4): checking transaction log (loop4) [ 946.959801][ T9840] REISERFS (device loop4): Using tea hash to sort names [ 946.968385][ T9840] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 948.976448][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 957.801599][ T9904] loop1: detected capacity change from 0 to 512 [ 957.933972][ T9904] EXT4-fs: Ignoring removed nobh option [ 958.168640][ T9904] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.881: iget: bad i_size value: 38620345925642 [ 958.383735][ T9904] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.881: couldn't read orphan inode 15 (err -117) [ 958.466984][ T9904] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 960.869049][ T6952] EXT4-fs (loop1): unmounting filesystem. [ 962.354671][ T9925] loop6: detected capacity change from 0 to 2048 [ 962.450092][ T9925] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 962.648979][ T9938] loop4: detected capacity change from 0 to 32768 [ 962.847088][ T9941] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 962.847088][ T9941] [ 962.863383][ T9941] ERROR: (device loop4): remounting filesystem as read-only [ 962.878637][ T9941] syz.4.886: attempt to access beyond end of device [ 962.878637][ T9941] loop4: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 963.624842][ T107] blkno = 1580, nblocks = 1 [ 963.638065][ T107] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 963.638065][ T107] [ 963.667461][ T9925] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 963.684527][ T9925] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 963.696850][ T9925] EXT4-fs (loop6): This should not happen!! Data will be lost [ 963.696850][ T9925] [ 963.706623][ T9925] EXT4-fs (loop6): Total free blocks count 0 [ 963.712689][ T9925] EXT4-fs (loop6): Free/Dirty block details [ 963.718743][ T9925] EXT4-fs (loop6): free_blocks=2415919504 [ 963.724681][ T9925] EXT4-fs (loop6): dirty_blocks=48 [ 963.730119][ T9925] EXT4-fs (loop6): Block reservation details [ 963.736134][ T9925] EXT4-fs (loop6): i_reserved_data_blocks=3 [ 971.176041][ T9999] loop0: detected capacity change from 0 to 256 [ 971.185459][ T9999] exfat: Deprecated parameter 'namecase' [ 971.191421][ T9999] exfat: Unknown parameter 'zero_size_dir' [ 972.442633][ T9695] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 972.531593][ T9999] loop0: detected capacity change from 0 to 2048 [ 972.777284][ T9999] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 973.100092][ T4903] EXT4-fs (loop6): unmounting filesystem. [ 973.436592][T10012] overlayfs: overlapping lowerdir path [ 974.806739][T10011] loop4: detected capacity change from 0 to 2048 [ 974.971862][T10021] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 975.787127][T10021] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 975.874076][T10021] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 976.355657][T10021] Remounting filesystem read-only [ 976.573107][T10032] loop1: detected capacity change from 0 to 8192 [ 980.001146][ T6427] Bluetooth: hci0: command 0x0406 tx timeout [ 981.616495][T10070] random: crng reseeded on system resumption [ 986.459785][T10104] netlink: 'syz.1.916': attribute type 2 has an invalid length. [ 988.612546][T10102] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 988.647917][T10102] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 988.781391][T10102] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 988.790056][T10102] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 988.803270][T10102] overlayfs: d_ino too big (32, ino=9223372036854776005, xinobits=3) [ 988.813875][T10102] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 988.823482][T10102] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 988.833159][T10102] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 988.842279][T10102] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 988.851650][T10102] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 988.860660][T10102] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 988.873707][T10102] overlayfs: d_ino too big (syz8, ino=4611686018427388235, xinobits=3) [ 992.815067][T10131] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 992.847581][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.854083][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.887984][T10131] cgroup: name respecified [ 993.958883][T10129] binder: 10127:10129 ioctl c0306201 0 returned -14 [ 995.029970][T10145] loop0: detected capacity change from 0 to 1764 [ 997.330669][T10143] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 998.706584][T10163] loop4: detected capacity change from 0 to 2048 [ 999.022657][ T4270] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 999.031520][ T4270] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 999.054540][T10163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1001.545665][T10173] loop6: detected capacity change from 0 to 256 [ 1001.555495][T10173] exfat: Deprecated parameter 'namecase' [ 1001.562148][T10173] exfat: Unknown parameter 'zero_size_dir' [ 1002.346064][T10167] fido_id[10167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1005.219306][T10206] 9pnet_fd: Insufficient options for proto=fd [ 1007.129503][T10213] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1007.220787][T10213] cgroup: name respecified [ 1010.231267][T10222] loop6: detected capacity change from 0 to 1024 [ 1011.393285][T10232] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1011.892008][T10235] loop4: detected capacity change from 0 to 128 [ 1011.997404][T10235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1012.088283][T10237] loop0: detected capacity change from 0 to 2048 [ 1012.096026][T10235] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1012.201406][T10244] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1015.061866][T10260] loop1: detected capacity change from 0 to 32768 [ 1015.200776][ T9002] EXT4-fs (loop4): unmounting filesystem. [ 1015.253182][T10261] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1015.253182][T10261] [ 1015.266389][T10261] ERROR: (device loop1): remounting filesystem as read-only [ 1015.277740][T10261] syz.1.951: attempt to access beyond end of device [ 1015.277740][T10261] loop1: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1015.933069][T10244] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1015.981784][T10244] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1016.032280][T10244] Remounting filesystem read-only [ 1016.045970][ T107] blkno = 1580, nblocks = 1 [ 1016.050691][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 1016.050691][ T107] [ 1016.066686][ T7908] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1016.194789][T10263] loop6: detected capacity change from 0 to 8192 [ 1016.559888][T10272] 9pnet_fd: Insufficient options for proto=fd [ 1016.566840][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 1018.136725][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 1020.124712][T10289] No such timeout policy "syz1" [ 1020.134154][T10289] autofs4:pid:10289:autofs_fill_super: called with bogus options [ 1021.747823][T10299] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1024.486339][T10324] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1024.506605][T10324] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1024.550046][T10324] ovl_remap_lower_ino: 23 callbacks suppressed [ 1024.550082][T10324] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1024.564374][T10324] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1024.573319][T10324] overlayfs: d_ino too big (124, ino=9223372036854776516, xinobits=3) [ 1024.582408][T10324] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1024.591884][T10324] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1024.601440][T10324] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1024.610377][T10324] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1024.619666][T10324] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1024.628732][T10324] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 1024.637859][T10324] overlayfs: d_ino too big (syz8, ino=4611686018427388235, xinobits=3) [ 1025.618568][T10335] loop4: detected capacity change from 0 to 256 [ 1025.631806][T10335] exfat: Deprecated parameter 'namecase' [ 1025.637943][T10335] exfat: Unknown parameter 'zero_size_dir' [ 1026.997037][T10332] loop3: detected capacity change from 0 to 2048 [ 1027.863691][T10349] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1028.426921][T10354] loop4: detected capacity change from 0 to 512 [ 1028.602581][T10354] EXT4-fs (loop4): can't mount with commit=8, fs mounted w/o journal [ 1031.444610][T10369] binder: 10353:10369 ioctl 4018620d 0 returned -22 [ 1031.945422][T10349] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1031.991740][T10349] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1032.034389][T10349] Remounting filesystem read-only [ 1032.052169][ T9204] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 1036.605564][T10396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1036.615176][T10396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1036.632957][T10396] ovl_remap_lower_ino: 23 callbacks suppressed [ 1036.632975][T10396] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1036.647265][T10396] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1036.655560][T10396] overlayfs: d_ino too big (41, ino=9223372036854776061, xinobits=3) [ 1036.663861][T10396] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1036.672808][T10396] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1036.681870][T10396] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1036.690845][T10396] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1036.701015][T10396] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1036.717159][T10396] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 1036.725699][T10396] overlayfs: d_ino too big (syz8, ino=4611686018427388235, xinobits=3) [ 1038.552762][T10410] loop0: detected capacity change from 0 to 512 [ 1039.330526][T10174] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1043.825417][T10442] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1047.273489][T10464] loop6: detected capacity change from 0 to 128 [ 1049.388355][T10466] netlink: 68 bytes leftover after parsing attributes in process `syz.3.992'. [ 1050.916600][T10478] syz.6.993: attempt to access beyond end of device [ 1050.916600][T10478] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1051.265999][T10466] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1051.612728][T10485] loop0: detected capacity change from 0 to 32768 [ 1052.173693][T10489] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 1052.173693][T10489] [ 1052.186020][T10489] ERROR: (device loop0): remounting filesystem as read-only [ 1052.198596][T10489] syz.0.996: attempt to access beyond end of device [ 1052.198596][T10489] loop0: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1054.430002][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.436491][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.529118][ T107] blkno = 1580, nblocks = 1 [ 1054.533668][ T107] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 1054.533668][ T107] [ 1054.799791][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1054.818173][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1054.834776][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1054.878492][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1054.889654][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1054.898653][ T4274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1056.508123][T10511] loop6: detected capacity change from 0 to 2048 [ 1056.641272][ T22] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1056.651694][T10511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1056.694252][ T22] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1057.449404][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1058.094698][ T5470] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.106587][T10516] fido_id[10516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1060.393893][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 1060.626592][ T5470] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.856895][T10527] loop0: detected capacity change from 0 to 2048 [ 1060.870662][T10531] loop3: detected capacity change from 0 to 1764 [ 1061.033276][T10531] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1061.229565][T10534] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1061.595286][ T5470] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.798354][ T5470] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.672286][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 1064.108082][T10534] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1064.173939][T10534] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1064.246438][T10534] Remounting filesystem read-only [ 1064.290517][ T7908] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1064.416799][T10502] chnl_net:caif_netlink_parms(): no params data found [ 1064.747777][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 1067.423537][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.433686][T10578] loop0: detected capacity change from 0 to 128 [ 1067.440528][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.618878][T10502] device bridge_slave_0 entered promiscuous mode [ 1068.671007][T10584] loop6: detected capacity change from 0 to 32768 [ 1071.219125][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.226317][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.368806][T10502] device bridge_slave_1 entered promiscuous mode [ 1074.545974][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.079974][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.271063][T10502] team0: Port device team_slave_0 added [ 1076.323837][T10502] team0: Port device team_slave_1 added [ 1077.932006][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.964136][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.027878][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.076397][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.097689][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.147790][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.413569][ T5470] device hsr_slave_0 left promiscuous mode [ 1078.432483][ T5470] device hsr_slave_1 left promiscuous mode [ 1078.461590][ T5470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.477811][ T5470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.489624][ T5470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.497079][ T5470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.528541][ T5470] device bridge_slave_1 left promiscuous mode [ 1078.534799][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.559217][ T5470] device bridge_slave_0 left promiscuous mode [ 1078.565512][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.637446][ T5470] device veth1_macvtap left promiscuous mode [ 1078.647974][ T5470] device veth0_macvtap left promiscuous mode [ 1078.654128][ T5470] device veth1_vlan left promiscuous mode [ 1078.680080][ T5470] device veth0_vlan left promiscuous mode [ 1079.272484][ T5470] team0 (unregistering): Port device team_slave_1 removed [ 1079.316334][ T5470] team0 (unregistering): Port device team_slave_0 removed [ 1079.365059][ T5470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.413384][ T5470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.739237][ T5470] bond0 (unregistering): Released all slaves [ 1079.855009][T10502] device hsr_slave_0 entered promiscuous mode [ 1079.862778][T10502] device hsr_slave_1 entered promiscuous mode [ 1079.869745][T10502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1079.877326][T10502] Cannot create hsr debugfs directory [ 1080.685868][T10502] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1080.702026][T10502] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1080.714132][T10502] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1080.730258][T10502] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1080.815840][T10502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.832284][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1080.841559][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1080.856126][T10502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.879761][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1080.888824][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1080.899819][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.906956][ T5466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.915330][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1080.925846][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1080.934815][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.942008][ T5466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.958885][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1080.967363][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1080.976740][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1081.004834][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1081.016151][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1081.025626][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1081.035970][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1081.052357][T10502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1081.063121][T10502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.076497][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1081.085620][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1081.094512][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1081.103281][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1081.112838][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1081.122641][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1081.415382][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.423504][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.442668][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.887865][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1081.899177][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1081.925271][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1081.935313][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1081.952818][T10502] device veth0_vlan entered promiscuous mode [ 1081.962363][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1081.973228][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1081.988706][T10502] device veth1_vlan entered promiscuous mode [ 1082.015689][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1082.030492][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1082.038980][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1082.048540][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1082.065380][T10502] device veth0_macvtap entered promiscuous mode [ 1082.076797][T10502] device veth1_macvtap entered promiscuous mode [ 1082.093816][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.106216][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.118715][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.130056][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.141669][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.153843][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.163908][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.174617][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.186176][T10502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.195537][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1082.208479][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1082.216666][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1082.226665][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1082.238082][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.249867][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.262185][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.272913][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.292413][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.304104][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.319437][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1082.333133][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.347477][T10502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.362523][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1082.373010][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1082.386277][T10502] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.396476][T10502] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.405914][T10502] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.415500][T10502] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.499608][ T5470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.507487][ T5470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.525902][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1082.557114][ T5470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.570171][ T5470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.581620][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1086.296854][T10722] loop4: detected capacity change from 0 to 32768 [ 1086.347475][T10722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1023 (10722) [ 1086.375508][T10722] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1086.386026][T10722] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1086.395077][T10722] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1086.403506][T10722] BTRFS info (device loop4): enabling auto defrag [ 1086.410099][T10722] BTRFS info (device loop4): max_inline at 0 [ 1086.416080][T10722] BTRFS info (device loop4): using free space tree [ 1089.167800][ T9002] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1089.534829][T10760] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1089.591725][T10760] cgroup: name respecified [ 1093.250476][T10768] loop3: detected capacity change from 0 to 128 [ 1093.781403][T10777] syz.3.1027: attempt to access beyond end of device [ 1093.781403][T10777] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1095.830325][T10791] loop4: detected capacity change from 0 to 16 [ 1095.850051][T10791] erofs: (device loop4): mounted with root inode @ nid 36. [ 1095.871838][T10791] syz.4.1026: attempt to access beyond end of device [ 1095.871838][T10791] loop4: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1095.889447][T10791] syz.4.1026: attempt to access beyond end of device [ 1095.889447][T10791] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1095.908069][T10791] syz.4.1026: attempt to access beyond end of device [ 1095.908069][T10791] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1095.925540][T10790] syz.4.1026: attempt to access beyond end of device [ 1095.925540][T10790] loop4: rw=524288, sector=1342178544, nr_sectors = 16 limit=16 [ 1095.938494][ T26] audit: type=1800 audit(1771017603.510:9): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1026" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1095.941718][T10790] syz.4.1026: attempt to access beyond end of device [ 1095.941718][T10790] loop4: rw=0, sector=1342178552, nr_sectors = 8 limit=16 [ 1095.974757][T10790] syz.4.1026: attempt to access beyond end of device [ 1095.974757][T10790] loop4: rw=0, sector=1342178552, nr_sectors = 8 limit=16 [ 1095.989395][T10790] syz.4.1026: attempt to access beyond end of device [ 1095.989395][T10790] loop4: rw=0, sector=1342178552, nr_sectors = 8 limit=16 [ 1096.003208][T10790] syz.4.1026: attempt to access beyond end of device [ 1096.003208][T10790] loop4: rw=0, sector=1342178552, nr_sectors = 8 limit=16 [ 1096.215848][ T26] audit: type=1800 audit(1771017603.530:10): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1026" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 1098.566978][T10808] loop0: detected capacity change from 0 to 64 [ 1098.762242][T10808] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 1101.511410][T10824] loop7: detected capacity change from 0 to 512 [ 1103.177214][T10718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1103.229314][T10832] trusted_key: encrypted_key: key user:syz not found [ 1111.236654][T10882] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1043'. [ 1113.434051][T10896] loop7: detected capacity change from 0 to 128 [ 1115.332361][T10896] syz.7.1048: attempt to access beyond end of device [ 1115.332361][T10896] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 1116.809968][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.816297][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.839712][T10912] sctp: failed to load transform for md5: -2 [ 1119.937847][ T4340] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1120.150948][ T4340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.220859][ T4340] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1120.350243][ T4340] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1120.480938][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.602783][ T4340] usb 4-1: config 0 descriptor?? [ 1120.652396][ T4340] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1120.717753][ T4340] dvb-usb: bulk message failed: -22 (3/0) [ 1120.757122][ T4340] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1120.802767][ T4340] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1120.827692][ T4340] usb 4-1: media controller created [ 1120.845588][ T4340] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1120.855777][T10931] dvb-usb: bulk message failed: -22 (2/0) [ 1121.031212][ T4340] dvb-usb: bulk message failed: -22 (6/0) [ 1121.041628][ T4340] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1121.771867][ T4340] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 1121.786172][ T4340] dvb-usb: schedule remote query interval to 150 msecs. [ 1121.806833][ T4340] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1121.819776][ T4340] usb 4-1: USB disconnect, device number 3 [ 1122.832599][ T4340] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1123.570236][T10958] blktrace: Concurrent blktraces are not allowed on nullb0 [ 1126.173372][T10967] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1127.481337][T10971] loop4: detected capacity change from 0 to 128 [ 1129.676936][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.686422][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.695031][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.703484][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.711948][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.720400][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.728848][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.737286][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.746008][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.754557][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.763139][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.772033][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.780531][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.788990][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.797439][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.805873][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.814303][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.822766][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.831376][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.839835][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.848291][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.856744][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.865174][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.873950][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.882391][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.890900][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.899394][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.908142][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.916595][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.925053][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.933544][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.942445][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.950948][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.959403][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.967875][T10971] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1129.997855][ T26] audit: type=1800 audit(1771017637.578:11): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1069" name="file1" dev="loop4" ino=1048740 res=0 errno=0 [ 1133.145360][T10994] loop0: detected capacity change from 0 to 2048 [ 1133.156799][T10994] UDF-fs: bad mount option "uid=18446744073709551615" or missing value [ 1133.544796][T10998] loop0: detected capacity change from 0 to 512 [ 1133.564462][T10998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1138.081348][T11037] fuse: Bad value for 'fd' [ 1138.317697][ T7908] EXT4-fs (loop0): unmounting filesystem. [ 1138.655275][T11046] input: syz1 as /devices/virtual/input/input9 [ 1139.148665][T11049] loop0: detected capacity change from 0 to 128 [ 1139.208392][T11049] FAT-fs (loop0): bogus number of reserved sectors [ 1139.230197][T11049] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1139.268273][T11049] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1140.417205][T11055] ipt_CLUSTERIP: Please specify destination IP [ 1144.264347][ T26] audit: type=1326 audit(1771017651.076:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1144.716532][ T26] audit: type=1326 audit(1771017651.076:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1144.739393][ T26] audit: type=1326 audit(1771017651.085:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1144.762760][ T26] audit: type=1326 audit(1771017651.085:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1144.766789][ T5223] Bluetooth: (null): Invalid header checksum [ 1144.791358][ T26] audit: type=1326 audit(1771017651.085:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1145.109258][ T26] audit: type=1326 audit(1771017651.085:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1145.228839][ T26] audit: type=1326 audit(1771017651.085:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1145.251197][ C1] vkms_vblank_simulate: vblank timer overrun [ 1145.393915][ T26] audit: type=1326 audit(1771017651.085:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1145.439325][ T26] audit: type=1326 audit(1771017651.085:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1145.494780][ T26] audit: type=1326 audit(1771017651.085:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.6.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2af9bf79 code=0x7ffc0000 [ 1146.155617][ T5123] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1147.814654][ T5123] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1147.841628][ T5123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.885171][ T5123] usb 1-1: Product: syz [ 1147.889431][ T5123] usb 1-1: Manufacturer: syz [ 1147.907481][ T5123] usb 1-1: SerialNumber: syz [ 1148.607427][ T5123] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1148.671734][ T5123] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1148.792132][ T5123] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1148.942485][ T5123] lan78xx: probe of 1-1:1.0 failed with error -32 [ 1152.087308][T10778] usb 1-1: USB disconnect, device number 2 [ 1155.349444][T11154] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1155.414098][T11154] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1155.435647][T11154] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1155.512730][T11154] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1156.512408][T11154] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1156.555370][T11154] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1156.736724][ T4279] Bluetooth: hci4: command 0x0c1a tx timeout [ 1156.819618][T11154] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1157.602789][ T4279] Bluetooth: hci2: command 0x0c1a tx timeout [ 1157.733472][T11154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1157.872735][T11154] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1157.906482][T11154] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1157.923536][T11154] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1158.719173][T11154] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1158.741312][ T4279] Bluetooth: hci1: command 0x0c1a tx timeout [ 1158.791382][T11154] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1158.830833][T11189] loop0: detected capacity change from 0 to 128 [ 1158.854056][T11189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1158.873609][T11189] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1159.815835][ T6427] Bluetooth: hci2: command 0x0406 tx timeout [ 1159.890396][ T6427] Bluetooth: hci0: command 0x0c1a tx timeout [ 1160.831211][ T6427] Bluetooth: hci3: command 0x0c1a tx timeout [ 1160.916718][ T6427] Bluetooth: hci1: command 0x0406 tx timeout [ 1162.279374][ T6427] Bluetooth: hci0: command 0x0406 tx timeout [ 1163.055086][ T6427] Bluetooth: hci3: command 0x0406 tx timeout [ 1163.318857][ T7908] EXT4-fs (loop0): unmounting filesystem. [ 1169.846090][T11240] loop6: detected capacity change from 0 to 512 [ 1169.853133][T11240] EXT4-fs: Ignoring removed i_version option [ 1169.926411][T11240] EXT4-fs: Ignoring removed bh option [ 1170.031118][T11240] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1170.052257][T11240] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.847564][ T4903] EXT4-fs (loop6): unmounting filesystem. [ 1176.175133][T11283] loop0: detected capacity change from 0 to 164 [ 1180.259474][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.530282][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.841211][T11301] Bluetooth: MGMT ver 1.22 [ 1187.564923][T11329] loop0: detected capacity change from 0 to 8 [ 1188.628179][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1188.639933][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1188.647606][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1189.334203][T11333] loop4: detected capacity change from 0 to 256 [ 1194.874010][T11370] loop3: detected capacity change from 0 to 2048 [ 1194.900338][T11370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.999559][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 1194.999601][ T26] audit: type=1800 audit(1771017954.541:83): pid=11370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1142" name="file1" dev="loop3" ino=1313 res=0 errno=0 [ 1197.845771][T11373] loop0: detected capacity change from 0 to 64 [ 1198.674625][T11373] Trying to free block not in datazone [ 1206.687644][T11414] binder_alloc: 11411: binder_alloc_buf, no vma [ 1218.872464][T11470] loop7: detected capacity change from 0 to 128 [ 1224.365500][ T6427] Bluetooth: hci3: command 0x0405 tx timeout [ 1230.913086][T11524] loop7: detected capacity change from 0 to 256 [ 1231.631873][T11525] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1235.946051][T11547] loop7: detected capacity change from 0 to 131072 [ 1235.986608][T11547] F2FS-fs (loop7): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 1235.995179][T11547] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1236.004461][T11547] F2FS-fs (loop7): invalid crc value [ 1236.070523][T11547] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1236.123108][T11547] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1236.130231][T11547] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1243.444662][T11582] netlink: 'syz.7.1181': attribute type 22 has an invalid length. [ 1244.764352][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1181'. [ 1244.806345][T11582] bond0: option ad_select: unable to set because the bond device is up [ 1246.466880][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1246.473253][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.527199][T11613] loop3: detected capacity change from 0 to 1024 [ 1252.190297][T11613] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #3: block 2: comm syz.3.1182: lblock 2 mapped to illegal pblock 2 (length 1) [ 1252.230660][T11613] Quota error (device loop3): write_blk: dquota write failed [ 1252.259849][T11613] Quota error (device loop3): find_free_dqentry: Can't write quota data block 2 [ 1252.293268][T11613] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1252.306623][T11613] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1182: Failed to acquire dquot type 0 [ 1252.752041][T11613] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.1182: lblock 2 mapped to illegal pblock 2 (length 1) [ 1253.564008][T11613] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1253.604638][T11613] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1182: Failed to acquire dquot type 0 [ 1253.668712][T11613] EXT4-fs error (device loop3): ext4_free_blocks:6221: comm syz.3.1182: Freeing blocks not in datazone - block = 0, count = 4096 [ 1253.716360][T11613] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.1182: lblock 2 mapped to illegal pblock 2 (length 1) [ 1253.751069][T11613] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1253.767014][T11613] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.1182: Failed to acquire dquot type 0 [ 1253.810237][T11613] EXT4-fs (loop3): 1 orphan inode deleted [ 1253.829057][T11613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1254.639150][ T9204] EXT4-fs (loop3): unmounting filesystem. [ 1262.409518][T11688] binder: BINDER_SET_CONTEXT_MGR already set [ 1262.415640][T11688] binder: 11686:11688 ioctl 4018620d 200000000040 returned -16 [ 1270.296738][T11726] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1280.907502][T11786] binder_alloc: 11782: binder_alloc_buf, no vma [ 1287.431441][T11804] syz.3.1222 (11804): drop_caches: 2 [ 1297.118006][T11856] loop6: detected capacity change from 0 to 128 [ 1297.512899][T11860] device batadv_slave_0 entered promiscuous mode [ 1297.995583][T11855] device batadv_slave_0 left promiscuous mode [ 1298.499530][T11866] loop6: detected capacity change from 0 to 512 [ 1298.640112][T11866] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1299.576767][T11873] binder: BINDER_SET_CONTEXT_MGR already set [ 1299.582897][T11873] binder: 11870:11873 ioctl 4018620d 200000000040 returned -16 [ 1302.971625][T11882] loop3: detected capacity change from 0 to 128 [ 1303.032822][T11882] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1303.087260][T11882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1308.706124][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 1312.792518][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1312.798884][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1317.727010][T11960] loop4: detected capacity change from 0 to 16 [ 1317.787208][T11960] erofs: (device loop4): mounted with root inode @ nid 36. [ 1318.194133][T11972] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1318.208244][T11972] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1318.218992][T11972] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1318.860950][T11969] binder_alloc: 11964: binder_alloc_buf, no vma [ 1321.915722][T11978] loop7: detected capacity change from 0 to 128 [ 1334.730679][T12040] loop7: detected capacity change from 0 to 1024 [ 1336.280019][ T5439] hfsplus: b-tree write err: -5, ino 4 [ 1336.381702][T10610] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1336.768267][T10610] usb 5-1: Using ep0 maxpacket: 16 [ 1337.607493][T10610] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1337.621716][T10610] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 1337.690446][T10610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.760777][T10610] usb 5-1: config 0 descriptor?? [ 1338.593651][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1277'. [ 1341.479198][T12102] loop0: detected capacity change from 0 to 128 [ 1343.796730][T10610] usbhid 5-1:0.0: can't add hid device: -32 [ 1343.811699][T10610] usbhid: probe of 5-1:0.0 failed with error -32 [ 1345.927776][T12120] binder_alloc: 12116: binder_alloc_buf, no vma [ 1347.979539][T10610] usb 5-1: USB disconnect, device number 2 [ 1348.563355][ T6427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1348.583460][ T6427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1348.606517][ T6427] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1348.633188][ T6427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1348.640822][ T6427] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1348.649697][ T6427] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1350.124545][ T5464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.874611][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 1353.091271][ T6427] Bluetooth: hci5: command 0x041b tx timeout [ 1353.851647][ T5464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.420734][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1291'. [ 1355.974730][ T6427] Bluetooth: hci5: command 0x040f tx timeout [ 1356.067010][ T5464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.179309][ T5464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.371582][T12174] device bridge1 entered promiscuous mode [ 1356.925854][T12127] chnl_net:caif_netlink_parms(): no params data found [ 1357.344012][T12127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.351409][T12127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.360350][T12127] device bridge_slave_0 entered promiscuous mode [ 1357.369160][T12127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.376345][T12127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.384752][T12127] device bridge_slave_1 entered promiscuous mode [ 1357.421983][T12127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.437563][T12127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1357.577088][T12196] binder: BINDER_SET_CONTEXT_MGR already set [ 1357.583387][T12196] binder: 12192:12196 ioctl 4018620d 200000000040 returned -16 [ 1358.138548][ T6427] Bluetooth: hci5: command 0x0419 tx timeout [ 1360.038564][T12127] team0: Port device team_slave_0 added [ 1360.077026][T12127] team0: Port device team_slave_1 added [ 1360.297556][T12127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.320816][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.279406][T12127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1361.465964][T12210] loop7: detected capacity change from 0 to 128 [ 1361.507473][T12127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.524470][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.284262][T12127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.297367][T12210] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1362.360142][T12210] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.924132][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1301'. [ 1363.990520][T10502] EXT4-fs (loop7): unmounting filesystem. [ 1363.997426][T12127] device hsr_slave_0 entered promiscuous mode [ 1364.044974][T12127] device hsr_slave_1 entered promiscuous mode [ 1364.062685][T12127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1364.108170][T12127] Cannot create hsr debugfs directory [ 1365.420686][T12258] loop6: detected capacity change from 0 to 512 [ 1365.477629][T12258] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1365.532314][T12258] EXT4-fs (loop6): 1 truncate cleaned up [ 1365.544118][T12258] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1368.866628][T12279] binder_alloc: 12277: binder_alloc_buf, no vma [ 1370.656514][ T4903] EXT4-fs (loop6): unmounting filesystem. [ 1371.239051][ T5464] device hsr_slave_0 left promiscuous mode [ 1371.254120][ T5464] device hsr_slave_1 left promiscuous mode [ 1371.264130][ T5464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.304210][ T5464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.339046][ T5464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.365316][ T5464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.388998][ T5464] device bridge_slave_1 left promiscuous mode [ 1371.409359][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.432445][ T5464] device bridge_slave_0 left promiscuous mode [ 1371.450447][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.484713][T12292] loop6: detected capacity change from 0 to 1024 [ 1372.505959][T12292] EXT4-fs: inline encryption not supported [ 1372.534116][T12291] loop3: detected capacity change from 0 to 128 [ 1372.553635][T12292] EXT4-fs: Ignoring removed oldalloc option [ 1372.596618][T12292] EXT4-fs: Ignoring removed mblk_io_submit option [ 1373.931470][ T5464] device veth1_macvtap left promiscuous mode [ 1373.938051][ T5464] device veth0_macvtap left promiscuous mode [ 1373.944645][ T5464] device veth1_vlan left promiscuous mode [ 1373.950642][ T5464] device veth0_vlan left promiscuous mode [ 1373.953508][T12291] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1373.996824][T12292] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1374.027983][T12291] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.432740][T12303] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 161808409 free clusters [ 1374.760831][T12303] EXT4-fs (loop6): Remounting filesystem read-only [ 1374.795258][ T9204] EXT4-fs (loop3): unmounting filesystem. [ 1375.060117][ T4903] EXT4-fs (loop6): unmounting filesystem. [ 1377.348867][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1377.355533][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.584082][T12321] binder_alloc: 12319: binder_alloc_buf, no vma [ 1381.377343][T12337] loop6: detected capacity change from 0 to 1024 [ 1381.553812][T12337] hfsplus: bad catalog entry used to create inode [ 1381.581847][T12337] hfsplus: failed to load root directory [ 1381.753826][T12344] input: syz1 as /devices/virtual/input/input10 [ 1390.361416][T12382] binder: BINDER_SET_CONTEXT_MGR already set [ 1390.367840][T12382] binder: 12381:12382 ioctl 4018620d 200000000040 returned -16 [ 1390.701667][ T26] audit: type=1400 audit(1771018137.589:84): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=12383 comm="syz.7.1338" [ 1391.426803][ T5464] team0 (unregistering): Port device team_slave_1 removed [ 1391.693381][ T5464] team0 (unregistering): Port device team_slave_0 removed [ 1392.550249][ T6427] Bluetooth: Frame is too long (len 18, expected len 4) [ 1394.018189][ T5464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.166436][T12409] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1397.001033][ T5464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.244012][ T5464] bond0 (unregistering): Released all slaves [ 1403.738832][T12446] loop3: detected capacity change from 0 to 128 [ 1403.746267][T12446] befs: Unrecognized mount option "$" or missing value [ 1403.753175][T12446] befs: (loop3): cannot parse mount options [ 1404.642506][T10718] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1406.797431][T12127] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1407.291265][T12127] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1407.396403][T12127] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1407.472775][T12463] binder_alloc: 12460: binder_alloc_buf, no vma [ 1407.485275][T12127] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1408.621510][T12478] loop0: detected capacity change from 0 to 128 [ 1410.309465][T12478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1410.473843][T12478] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.572818][T12127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.954447][T12127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.110098][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1411.564530][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1413.136669][ T7908] EXT4-fs (loop0): unmounting filesystem. [ 1413.186311][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1413.440164][T12492] binder_alloc: 12488: binder_alloc_buf, no vma [ 1413.447525][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1413.557768][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.564937][ T5439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1413.644594][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1413.685731][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1413.719992][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.727165][ T5439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.879645][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1414.904635][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1414.959500][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1417.043654][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1417.055034][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1417.068994][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1417.077862][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1417.091153][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1417.098532][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1418.938671][T12533] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 1419.134152][T12533] loop6: detected capacity change from 0 to 4096 [ 1419.373133][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1420.871261][T12541] binder: BINDER_SET_CONTEXT_MGR already set [ 1420.877321][T12541] binder: 12534:12541 ioctl 4018620d 200000000040 returned -16 [ 1420.913630][T12543] loop3: detected capacity change from 0 to 512 [ 1420.988480][T12543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1421.051501][T12543] EXT4-fs (loop3): 1 truncate cleaned up [ 1421.070310][T12543] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1421.400707][T12547] futex_wake_op: syz.3.1370 tries to shift op by -1; fix this program [ 1421.524003][T12509] chnl_net:caif_netlink_parms(): no params data found [ 1421.545822][ T4903] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 1421.588663][ T4903] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1421.682078][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 1421.933458][ T9204] EXT4-fs (loop3): unmounting filesystem. [ 1424.505165][ T6427] Bluetooth: hci1: command 0x040f tx timeout [ 1425.897247][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.217262][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1377'. [ 1426.439591][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.507370][T12509] device bridge_slave_0 entered promiscuous mode [ 1426.576242][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.706553][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.745395][T12509] device bridge_slave_1 entered promiscuous mode [ 1426.881805][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.976645][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.994629][ T6427] Bluetooth: hci1: command 0x0419 tx timeout [ 1427.879847][T12509] team0: Port device team_slave_0 added [ 1429.000799][T12509] team0: Port device team_slave_1 added [ 1429.292117][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.438075][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1429.471672][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.121483][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.154342][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.421290][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.685069][ T6427] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1434.533547][T12621] binder_alloc: 12616: binder_alloc_buf, no vma [ 1434.546495][T12509] device hsr_slave_0 entered promiscuous mode [ 1434.563929][T12509] device hsr_slave_1 entered promiscuous mode [ 1434.574308][T12509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1435.366092][T12509] Cannot create hsr debugfs directory [ 1438.945888][T12653] loop0: detected capacity change from 0 to 512 [ 1439.065315][T12653] EXT4-fs (loop0): can't mount with commit=8, fs mounted w/o journal [ 1440.339505][T10718] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1440.676222][T12661] binder: 12652:12661 ioctl 4018620d 0 returned -22 [ 1442.119124][ T6427] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1442.979600][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1442.988608][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1443.209352][ T5448] device hsr_slave_0 left promiscuous mode [ 1443.224441][ T5448] device hsr_slave_1 left promiscuous mode [ 1443.253329][ T5448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.275446][ T5448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.286279][ T5448] device bridge_slave_1 left promiscuous mode [ 1443.301017][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.310561][ T5448] device bridge_slave_0 left promiscuous mode [ 1443.316828][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.648469][T12678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1398'. [ 1450.438277][T12717] loop7: detected capacity change from 0 to 256 [ 1452.018386][T12712] binder_alloc: 12711: binder_alloc_buf, no vma [ 1452.064008][T12717] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1452.199959][ T5448] team0 (unregistering): Port device team_slave_1 removed [ 1452.373655][ T5448] team0 (unregistering): Port device team_slave_0 removed [ 1453.035605][ T5448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.362002][ T5448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1456.805147][T12741] loop6: detected capacity change from 0 to 16 [ 1456.970642][T12741] erofs: (device loop6): mounted with root inode @ nid 36. [ 1457.705756][T12745] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1457.738616][T12745] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 1457.750245][T12745] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 1457.793587][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1457.803707][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1457.813177][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1457.823885][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1457.833285][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1457.842503][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1457.851897][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1457.861152][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1457.870365][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1457.880226][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1457.975857][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.018621][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1458.028600][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1458.037897][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1458.047796][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1458.058916][T12744] syz.6.1412: attempt to access beyond end of device [ 1458.058916][T12744] loop6: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1458.072997][T12744] syz.6.1412: attempt to access beyond end of device [ 1458.072997][T12744] loop6: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1458.087580][T12744] syz.6.1412: attempt to access beyond end of device [ 1458.087580][T12744] loop6: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1458.103329][T12744] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[2639] [ 1458.118393][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 1458.127555][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1458.136892][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.146262][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 1458.155424][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.164821][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 1458.174221][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 1458.183478][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 1458.192818][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.202409][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 1458.211574][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.221140][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 1458.230472][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1458.239719][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1458.248939][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 1458.258143][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1458.268201][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1458.277513][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 1458.286709][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.296110][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 1458.305294][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.314794][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1458.324066][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 1458.333325][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1458.342749][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1458.352044][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.361487][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1458.370614][T12744] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1458.380072][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1458.389334][T12744] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1458.398850][T12744] syz.6.1412: attempt to access beyond end of device [ 1458.398850][T12744] loop6: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 1458.415076][T12744] syz.6.1412: attempt to access beyond end of device [ 1458.415076][T12744] loop6: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1458.428942][T12744] syz.6.1412: attempt to access beyond end of device [ 1458.428942][T12744] loop6: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 1458.447034][T12744] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[5297] [ 1459.405903][T12748] loop6: detected capacity change from 0 to 1024 [ 1460.024438][T12750] hfsplus: xattr searching failed [ 1460.051811][T12750] hfsplus: xattr searching failed [ 1460.065911][T12750] hfsplus: xattr searching failed [ 1460.443316][ T9] hfsplus: b-tree write err: -5, ino 3 [ 1460.580537][T12757] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1460.794146][ T5448] bond0 (unregistering): Released all slaves [ 1464.654350][T12775] binder_alloc: 12772: binder_alloc_buf, no vma [ 1465.813311][T12509] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1465.832793][T12509] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1465.853552][T12509] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1466.805337][T12509] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1468.306830][T12777] syz.7.1422 (12777): drop_caches: 2 [ 1468.620247][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.716202][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1468.749981][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1468.790291][T12509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.824037][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1468.842413][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1468.867278][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.874422][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.915945][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1469.055174][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1469.173805][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1469.286516][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.293756][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.481113][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1469.803048][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1471.554744][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1471.600078][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1471.643381][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1472.055946][T12509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1472.082391][T12509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1472.162964][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1472.206320][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1472.215101][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1472.269212][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1472.436175][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1472.457595][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1472.484594][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1474.128335][T12838] syz.3.1426 (12838) used greatest stack depth: 17080 bytes left [ 1477.136464][T12859] loop7: detected capacity change from 0 to 128 [ 1477.149085][T12859] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1477.171217][T12859] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1477.863101][ T5470] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1480.866801][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1480.879851][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1481.122781][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1481.131276][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1481.632331][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1481.641636][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1482.868578][T12898] loop7: detected capacity change from 0 to 64 [ 1482.915897][T12898] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing [ 1483.988894][ T6427] Bluetooth: hci5: command 0x0409 tx timeout [ 1486.167699][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 1486.245024][T12936] loop6: detected capacity change from 0 to 512 [ 1486.283694][T12936] EXT4-fs (loop6): can't mount with commit=8, fs mounted w/o journal [ 1486.300666][T12878] chnl_net:caif_netlink_parms(): no params data found [ 1487.990860][T12945] binder: 12935:12945 ioctl 4018620d 0 returned -22 [ 1488.391520][ T4279] Bluetooth: hci5: command 0x040f tx timeout [ 1489.886122][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1489.919471][T12878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.038387][T12878] device bridge_slave_0 entered promiscuous mode [ 1490.615192][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 1490.712256][T12878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.719412][T12878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.800553][T12878] device bridge_slave_1 entered promiscuous mode [ 1490.947999][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1490.981825][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1491.351528][T12878] team0: Port device team_slave_0 added [ 1491.456658][T12878] team0: Port device team_slave_1 added [ 1491.938645][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.974130][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1493.672089][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.566705][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.584843][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1494.610877][ C1] vkms_vblank_simulate: vblank timer overrun [ 1494.669430][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.134912][T12979] loop0: detected capacity change from 0 to 32768 [ 1495.157884][T12979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1455 (12979) [ 1495.769126][T12979] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1495.779454][T12979] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1495.788643][T12979] BTRFS info (device loop0): setting nodatacow, compression disabled [ 1495.796910][T12979] BTRFS info (device loop0): enabling auto defrag [ 1495.803415][T12979] BTRFS info (device loop0): max_inline at 0 [ 1495.809418][T12979] BTRFS info (device loop0): using free space tree [ 1496.069422][T12878] device hsr_slave_0 entered promiscuous mode [ 1496.116506][T12878] device hsr_slave_1 entered promiscuous mode [ 1496.138134][T12878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1496.158817][T12878] Cannot create hsr debugfs directory [ 1499.018865][ T7908] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1499.035911][T13013] binder_alloc: 13011: binder_alloc_buf, no vma [ 1500.435234][T13035] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1500.458722][T13036] device gretap1 entered promiscuous mode [ 1504.151256][ T5439] device hsr_slave_0 left promiscuous mode [ 1504.296413][ T5439] device hsr_slave_1 left promiscuous mode [ 1504.354972][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.572148][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.630931][ T5439] device bridge_slave_1 left promiscuous mode [ 1504.705206][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.817062][ T5439] device bridge_slave_0 left promiscuous mode [ 1504.868043][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.704200][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1508.710672][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1511.140580][ T5439] team0 (unregistering): Port device team_slave_1 removed [ 1511.300790][T13095] binder_alloc: 13094: binder_alloc_buf, no vma [ 1511.404454][ T5439] team0 (unregistering): Port device team_slave_0 removed [ 1511.609106][T13097] loop7: detected capacity change from 0 to 32768 [ 1511.631250][T13097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1470 (13097) [ 1511.671447][T13097] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1511.681802][T13097] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1511.690745][T13097] BTRFS info (device loop7): setting nodatacow, compression disabled [ 1511.698891][T13097] BTRFS info (device loop7): enabling auto defrag [ 1511.705349][T13097] BTRFS info (device loop7): max_inline at 0 [ 1511.711386][T13097] BTRFS info (device loop7): using free space tree [ 1511.828926][ T5439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.998065][ T5439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.903101][T10502] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1514.758032][T13101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop7 scanned by udevd (13101) [ 1514.854569][T13140] binder: 13131:13140 ioctl 4018620d 0 returned -22 [ 1523.146885][ T5439] bond0 (unregistering): Released all slaves [ 1526.370577][ T26] audit: type=1326 audit(1771018263.803:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.473821][ T26] audit: type=1326 audit(1771018263.812:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.562957][ T26] audit: type=1326 audit(1771018263.849:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.585913][ T26] audit: type=1326 audit(1771018263.849:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.609312][ T26] audit: type=1326 audit(1771018263.849:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.632328][ T26] audit: type=1326 audit(1771018263.868:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.654596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.676585][ T26] audit: type=1326 audit(1771018263.868:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.705810][ T26] audit: type=1326 audit(1771018263.868:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.746361][ T26] audit: type=1326 audit(1771018263.906:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1526.801740][ T26] audit: type=1326 audit(1771018263.906:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb763d9bf79 code=0x7ffc0000 [ 1527.111029][T12878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1527.152351][T12878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1527.186931][T12878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1527.207135][T12878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1527.499511][T12878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.514382][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1527.530600][ T5242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1527.554323][T12878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.565536][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1527.584033][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1527.596347][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.603564][ T5439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.630834][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1527.661562][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1527.671629][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1527.685026][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.692224][ T5439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.711755][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1527.741741][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1527.753811][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1527.771932][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1527.782128][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1527.798941][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1527.811600][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1527.821683][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1527.838675][T12878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.877339][T12878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1527.900047][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1527.909411][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1527.941779][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1533.206565][T12878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1533.214398][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1536.082936][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1536.603284][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1536.625715][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1536.870528][T12878] device veth0_vlan entered promiscuous mode [ 1536.881013][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1536.890394][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1536.920006][T12878] device veth1_vlan entered promiscuous mode [ 1536.927600][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1536.938813][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1536.963063][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1537.008138][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1537.180077][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1537.194969][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1537.260360][T12878] device veth0_macvtap entered promiscuous mode [ 1537.350735][T12878] device veth1_macvtap entered promiscuous mode [ 1537.666688][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1537.754893][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.009770][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.067398][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.099683][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.142837][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.177193][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1538.213722][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.264572][T12878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.313581][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.324175][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.334085][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.344705][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.354616][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.365129][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.375483][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1538.404895][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1538.436974][T12878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.501616][T13267] trusted_key: encrypted_key: key user:syz not found [ 1539.139879][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1539.259309][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1539.309925][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1539.340034][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1539.376230][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1539.385181][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1539.401090][T12878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.410382][T12878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.420661][T12878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.429643][T12878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.359911][T13274] binder_alloc: 13273: binder_alloc_buf, no vma [ 1540.593151][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.643718][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.904952][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1546.648749][ T6427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1546.661004][ T6427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1546.672054][ T6427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1546.681007][ T6427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1546.698190][ T6427] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1546.709800][ T6427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1549.005723][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1551.252179][ T6427] Bluetooth: hci1: command 0x041b tx timeout [ 1551.395034][ T4702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.404576][T13352] loop7: detected capacity change from 0 to 512 [ 1551.467548][T13352] EXT4-fs (loop7): can't mount with commit=8, fs mounted w/o journal [ 1551.494960][T13326] chnl_net:caif_netlink_parms(): no params data found [ 1552.208057][T13356] binder: BINDER_SET_CONTEXT_MGR already set [ 1552.214094][T13356] binder: 13355:13356 ioctl 4018620d 200000000040 returned -16 [ 1552.291540][ T4702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.347048][T13352] binder: 13351:13352 ioctl 4018620d 0 returned -22 [ 1552.491539][ T4702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.237839][ T4702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.312021][T13326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.379807][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.412943][T13326] device bridge_slave_0 entered promiscuous mode [ 1553.430289][T13326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.475872][ T6427] Bluetooth: hci1: command 0x040f tx timeout [ 1553.485909][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.535770][T13326] device bridge_slave_1 entered promiscuous mode [ 1554.259153][T13382] input: syz1 as /devices/virtual/input/input11 [ 1554.657931][T13326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.699654][ T6427] Bluetooth: hci1: command 0x0419 tx timeout [ 1556.385114][T13326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.654737][T13326] team0: Port device team_slave_0 added [ 1556.683295][T13326] team0: Port device team_slave_1 added [ 1558.963353][T13326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.970368][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.024187][T13326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.132066][T13326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.139073][T13326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.701715][T13326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.837722][T13326] device hsr_slave_0 entered promiscuous mode [ 1564.873556][T13326] device hsr_slave_1 entered promiscuous mode [ 1564.903843][T13326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1564.945912][T13326] Cannot create hsr debugfs directory [ 1565.685666][T13431] binder_alloc: 13430: binder_alloc_buf, no vma [ 1565.964664][ T4702] device hsr_slave_0 left promiscuous mode [ 1565.971199][ T4702] device hsr_slave_1 left promiscuous mode [ 1565.984745][ T4702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.992268][ T4702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.006378][ T4702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.013940][ T4702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1566.027855][ T4702] device bridge_slave_1 left promiscuous mode [ 1566.034237][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.049833][ T4702] device bridge_slave_0 left promiscuous mode [ 1566.056193][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.111501][ T4702] device veth1_macvtap left promiscuous mode [ 1566.121971][ T4702] device veth0_macvtap left promiscuous mode [ 1566.130336][ T4702] device veth1_vlan left promiscuous mode [ 1566.140322][ T4702] device veth0_vlan left promiscuous mode [ 1566.881622][ T4702] team0 (unregistering): Port device team_slave_1 removed [ 1566.943467][ T4702] team0 (unregistering): Port device team_slave_0 removed [ 1567.000357][ T4702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.059304][ T4702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.443706][ T4702] bond0 (unregistering): Released all slaves [ 1567.575291][T13326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1567.612223][T13326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1567.649892][T13326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1567.691648][T13326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1567.827377][T13326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.866914][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1567.874973][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1567.892023][T13326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.907285][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1567.918641][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1567.940949][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.948087][ T5470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.958336][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1568.026137][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1568.045078][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1568.054671][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.061842][ T5470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.070171][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1568.097336][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1568.115577][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1568.131422][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1568.140651][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1568.150915][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1568.178302][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1568.195274][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1568.215724][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1568.224428][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1568.233364][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1568.246617][T13326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1568.555638][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1568.565355][ T1105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1568.578144][T13326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.600837][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1568.610226][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1568.639796][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1568.648608][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1568.659096][T13326] device veth0_vlan entered promiscuous mode [ 1568.668686][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1568.676602][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1568.695188][T13326] device veth1_vlan entered promiscuous mode [ 1568.729085][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1568.739107][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1568.752012][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1568.762311][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1568.779374][T13326] device veth0_macvtap entered promiscuous mode [ 1568.790828][T13326] device veth1_macvtap entered promiscuous mode [ 1568.813896][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.831386][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.842381][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.857117][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.868088][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.885130][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.896483][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1568.910924][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.922933][T13326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.933785][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.947305][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.957656][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.968200][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.978081][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1568.988623][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1568.998577][T13326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.009040][T13326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.021660][T13326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.031944][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1569.040749][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1569.050598][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1569.060312][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1569.071105][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1569.081631][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1569.094038][T13326] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.103016][T13326] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.112076][T13326] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.121543][T13326] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.241746][T10132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.253424][T10132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.264462][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1569.295863][ T4702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.307184][ T4702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.323924][T10132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1570.106827][T13480] loop7: detected capacity change from 0 to 8 [ 1571.634997][T13516] loop2: detected capacity change from 0 to 512 [ 1571.802699][T13517] loop7: detected capacity change from 0 to 16 [ 1572.232283][T13517] erofs: (device loop7): mounted with root inode @ nid 36. [ 1572.275762][T13513] syz.7.1530: attempt to access beyond end of device [ 1572.275762][T13513] loop7: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1572.290494][T13513] syz.7.1530: attempt to access beyond end of device [ 1572.290494][T13513] loop7: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1572.306129][T13513] syz.7.1530: attempt to access beyond end of device [ 1572.306129][T13513] loop7: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1572.334761][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1572.334777][ T26] audit: type=1800 audit(1771018307.477:102): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1530" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1573.125662][T13516] EXT4-fs (loop2): can't mount with commit=8, fs mounted w/o journal [ 1573.146646][ T4279] Bluetooth: hci1: command 0x2016 tx timeout [ 1573.208433][ T26] audit: type=1800 audit(1771018307.486:103): pid=13513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1530" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1573.531142][T13530] binder: 13515:13530 ioctl 4018620d 0 returned -22 [ 1574.186900][T13533] binder_alloc: 13529: binder_alloc_buf, no vma [ 1574.409546][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1574.415942][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1580.385534][T13583] loop2: detected capacity change from 0 to 128 [ 1580.396427][T13583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1580.405249][T13583] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.587818][T13556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1581.348244][T13326] EXT4-fs (loop2): unmounting filesystem. [ 1584.160258][T13624] binder_alloc: 13622: binder_alloc_buf, no vma [ 1586.559988][T13644] loop2: detected capacity change from 0 to 512 [ 1586.713046][T13644] EXT4-fs (loop2): can't mount with commit=8, fs mounted w/o journal [ 1587.000435][T13215] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1588.265496][T13653] binder: 13643:13653 ioctl 4018620d 0 returned -22 [ 1593.929445][T13689] binder_alloc: 13688: binder_alloc_buf, no vma [ 1597.545062][T13715] binder_alloc: 13714: binder_alloc_buf, no vma [ 1597.715371][T13720] input: syz1 as /devices/virtual/input/input12 [ 1605.379128][T13778] binder_alloc: 13775: binder_alloc_buf, no vma [ 1608.243588][T13791] loop2: detected capacity change from 0 to 2048 [ 1608.252710][T13791] UDF-fs: bad mount option "uid=18446744073709551615" or missing value [ 1609.807609][T13796] binder_alloc: 13795: binder_alloc_buf, no vma [ 1610.206241][T13803] loop0: detected capacity change from 0 to 16 [ 1611.108774][T13803] erofs: (device loop0): mounted with root inode @ nid 36. [ 1611.118237][T13803] syz.0.1591: attempt to access beyond end of device [ 1611.118237][T13803] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1611.132585][T13803] syz.0.1591: attempt to access beyond end of device [ 1611.132585][T13803] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1611.148273][ T26] audit: type=1800 audit(1771018343.798:104): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1591" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1613.216275][T13817] input: syz1 as /devices/virtual/input/input13 [ 1617.509373][T13855] netlink: 'syz.6.1604': attribute type 2 has an invalid length. [ 1621.502727][T13879] binder_alloc: 13877: binder_alloc_buf, no vma [ 1621.787510][T13881] loop0: detected capacity change from 0 to 8192 [ 1629.748768][T13935] loop6: detected capacity change from 0 to 16 [ 1629.771390][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1629.782761][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1629.790623][T13936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1630.426738][ T4279] Bluetooth: hci1: command 0x0405 tx timeout [ 1630.491663][T13935] erofs: (device loop6): mounted with root inode @ nid 36. [ 1630.500634][T13935] syz.6.1618: attempt to access beyond end of device [ 1630.500634][T13935] loop6: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1630.514972][T13935] syz.6.1618: attempt to access beyond end of device [ 1630.514972][T13935] loop6: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1630.528826][ T26] audit: type=1800 audit(1771018361.936:105): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1618" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1630.716184][T13942] binder_alloc: 13941: binder_alloc_buf, no vma [ 1640.110152][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1640.117091][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1644.369057][T14024] loop0: detected capacity change from 0 to 16 [ 1644.421739][T14024] erofs: (device loop0): mounted with root inode @ nid 36. [ 1650.837465][T14068] loop6: detected capacity change from 0 to 128 [ 1655.200613][T14095] binder_alloc: 14092: binder_alloc_buf, no vma [ 1656.881921][T14110] loop2: detected capacity change from 0 to 16 [ 1656.901129][T14110] erofs: (device loop2): mounted with root inode @ nid 36. [ 1656.913745][T14110] syz.2.1645: attempt to access beyond end of device [ 1656.913745][T14110] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1656.931163][T14110] syz.2.1645: attempt to access beyond end of device [ 1656.931163][T14110] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1656.949124][T14110] syz.2.1645: attempt to access beyond end of device [ 1656.949124][T14110] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1656.965956][T14109] syz.2.1645: attempt to access beyond end of device [ 1656.965956][T14109] loop2: rw=524288, sector=1342178704, nr_sectors = 16 limit=16 [ 1656.980422][T14109] syz.2.1645: attempt to access beyond end of device [ 1656.980422][T14109] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1656.994457][T14109] syz.2.1645: attempt to access beyond end of device [ 1656.994457][T14109] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1657.009865][T14109] syz.2.1645: attempt to access beyond end of device [ 1657.009865][T14109] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1657.014951][ T26] audit: type=1800 audit(1771018386.639:106): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1645" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1657.024135][T14109] syz.2.1645: attempt to access beyond end of device [ 1657.024135][T14109] loop2: rw=0, sector=1342178712, nr_sectors = 8 limit=16 [ 1658.094250][ T26] audit: type=1800 audit(1771018386.658:107): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1645" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1658.158026][T14116] loop0: detected capacity change from 0 to 16 [ 1658.168720][T14116] erofs: (device loop0): mounted with root inode @ nid 36. [ 1659.732832][T14131] loop2: detected capacity change from 0 to 64 [ 1660.792090][T14134] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1661.563707][T14129] Trying to free block not in datazone [ 1661.729926][T14138] loop7: detected capacity change from 0 to 2048 [ 1661.761375][T14138] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1661.846079][ T26] audit: type=1800 audit(1771018391.223:108): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1649" name="file1" dev="loop7" ino=1313 res=0 errno=0 [ 1666.204604][T14172] loop0: detected capacity change from 0 to 16 [ 1666.305226][T14172] erofs: (device loop0): mounted with root inode @ nid 36. [ 1666.314583][T14172] syz.0.1657: attempt to access beyond end of device [ 1666.314583][T14172] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1666.328966][T14172] syz.0.1657: attempt to access beyond end of device [ 1666.328966][T14172] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1666.344415][T14172] syz.0.1657: attempt to access beyond end of device [ 1666.344415][T14172] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1666.468526][ T26] audit: type=1800 audit(1771018395.442:109): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1657" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1666.490188][ T26] audit: type=1800 audit(1771018395.451:110): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1657" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1669.408467][T14184] input: syz1 as /devices/virtual/input/input14 [ 1671.848404][T14197] loop0: detected capacity change from 0 to 16 [ 1671.860267][T14197] erofs: (device loop0): mounted with root inode @ nid 36. [ 1671.878435][T14197] syz.0.1662: attempt to access beyond end of device [ 1671.878435][T14197] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1671.893092][T14197] syz.0.1662: attempt to access beyond end of device [ 1671.893092][T14197] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1671.909163][T14197] syz.0.1662: attempt to access beyond end of device [ 1671.909163][T14197] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1671.924272][ T26] audit: type=1800 audit(1771018400.642:111): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1662" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1671.944950][T14196] syz.0.1662: attempt to access beyond end of device [ 1671.944950][T14196] loop0: rw=524288, sector=1342178688, nr_sectors = 16 limit=16 [ 1671.959504][T14196] syz.0.1662: attempt to access beyond end of device [ 1671.959504][T14196] loop0: rw=0, sector=1342178696, nr_sectors = 8 limit=16 [ 1671.973361][T14196] syz.0.1662: attempt to access beyond end of device [ 1671.973361][T14196] loop0: rw=0, sector=1342178696, nr_sectors = 8 limit=16 [ 1671.987189][T14196] syz.0.1662: attempt to access beyond end of device [ 1671.987189][T14196] loop0: rw=0, sector=1342178696, nr_sectors = 8 limit=16 [ 1672.000989][T14196] syz.0.1662: attempt to access beyond end of device [ 1672.000989][T14196] loop0: rw=0, sector=1342178696, nr_sectors = 8 limit=16 [ 1672.283244][ T26] audit: type=1800 audit(1771018400.661:112): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1662" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1677.568738][T14235] loop0: detected capacity change from 0 to 2048 [ 1677.943439][T14235] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1678.041552][ T26] audit: type=1800 audit(1771018406.376:113): pid=14235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1666" name="file1" dev="loop0" ino=1313 res=0 errno=0 [ 1679.957387][T14245] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1683.730843][T14274] syz.0.1676 (14274): drop_caches: 2 [ 1684.187630][T14272] loop2: detected capacity change from 0 to 256 [ 1690.876927][T14326] loop7: detected capacity change from 0 to 64 [ 1701.956681][T14382] loop2: detected capacity change from 0 to 256 [ 1702.089511][T14385] loop7: detected capacity change from 0 to 256 [ 1703.024460][T14397] input: syz1 as /devices/virtual/input/input15 [ 1705.743376][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1705.749762][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1707.127153][T14427] loop7: detected capacity change from 0 to 256 [ 1708.891125][T14445] syz.6.1705 (14445): drop_caches: 2 [ 1708.904250][T14445] syz.6.1705 (14445): drop_caches: 2 [ 1718.762953][T14502] loop0: detected capacity change from 0 to 256 [ 1737.053389][T14596] input: syz1 as /devices/virtual/input/input16 [ 1745.520436][T14649] binder_alloc: 14648: binder_alloc_buf, no vma [ 1745.670395][T14659] loop0: detected capacity change from 0 to 16 [ 1745.704624][T14659] erofs: (device loop0): mounted with root inode @ nid 36. [ 1746.043779][T14661] erofs: (device loop0): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1746.054510][T14661] erofs: (device loop0): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1746.067156][T14661] erofs: (device loop0): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1749.071661][T14676] loop0: detected capacity change from 0 to 16 [ 1749.085413][T14676] erofs: (device loop0): mounted with root inode @ nid 36. [ 1749.096480][T14676] syz.0.1758: attempt to access beyond end of device [ 1749.096480][T14676] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1749.111587][T14676] syz.0.1758: attempt to access beyond end of device [ 1749.111587][T14676] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1749.946074][ T26] audit: type=1800 audit(1771018472.874:114): pid=14676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1758" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1756.311650][T14699] loop0: detected capacity change from 0 to 16 [ 1756.349133][T14699] erofs: (device loop0): mounted with root inode @ nid 36. [ 1756.362138][T14699] syz.0.1756: attempt to access beyond end of device [ 1756.362138][T14699] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1756.376720][T14699] syz.0.1756: attempt to access beyond end of device [ 1756.376720][T14699] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1756.392532][T14699] syz.0.1756: attempt to access beyond end of device [ 1756.392532][T14699] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1756.409248][T14697] syz.0.1756: attempt to access beyond end of device [ 1756.409248][T14697] loop0: rw=524288, sector=1342178976, nr_sectors = 16 limit=16 [ 1756.418575][ T26] audit: type=1800 audit(1771018479.665:115): pid=14699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1756" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1756.424037][T14697] syz.0.1756: attempt to access beyond end of device [ 1756.424037][T14697] loop0: rw=0, sector=1342178984, nr_sectors = 8 limit=16 [ 1756.458030][T14697] syz.0.1756: attempt to access beyond end of device [ 1756.458030][T14697] loop0: rw=0, sector=1342178984, nr_sectors = 8 limit=16 [ 1756.471977][T14697] syz.0.1756: attempt to access beyond end of device [ 1756.471977][T14697] loop0: rw=0, sector=1342178984, nr_sectors = 8 limit=16 [ 1756.485883][T14697] syz.0.1756: attempt to access beyond end of device [ 1756.485883][T14697] loop0: rw=0, sector=1342178984, nr_sectors = 8 limit=16 [ 1756.505874][ T26] audit: type=1800 audit(1771018479.684:116): pid=14699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1756" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 1758.438949][T14716] loop0: detected capacity change from 0 to 256 [ 1758.642742][T14718] loop7: detected capacity change from 0 to 16 [ 1758.856835][T14718] erofs: (device loop7): mounted with root inode @ nid 36. [ 1759.622775][T14724] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1759.633140][T14724] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1759.643494][T14724] erofs: (device loop7): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 1762.274955][T14742] loop7: detected capacity change from 0 to 16 [ 1762.967037][T14742] erofs: (device loop7): mounted with root inode @ nid 36. [ 1762.983189][T14741] syz.7.1764: attempt to access beyond end of device [ 1762.983189][T14741] loop7: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1762.997572][T14741] syz.7.1764: attempt to access beyond end of device [ 1762.997572][T14741] loop7: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1763.012093][ T26] audit: type=1800 audit(1771018485.867:117): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1764" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1763.285553][T14752] input: syz1 as /devices/virtual/input/input17 [ 1763.861424][T14758] binder: 14756:14758 ioctl 4018620d 0 returned -22 [ 1768.171017][T14763] loop0: detected capacity change from 0 to 256 [ 1769.768399][ T26] audit: type=1400 audit(1771018492.143:118): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=14775 comm="syz.6.1774" [ 1771.476270][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1771.482721][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1774.947865][T14830] loop0: detected capacity change from 0 to 256 [ 1776.848378][ T4279] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1779.824145][T14880] loop0: detected capacity change from 0 to 256 [ 1780.754942][T14894] loop7: detected capacity change from 0 to 256 [ 1792.604058][ T4279] Bluetooth: Unexpected continuation frame (len 10) [ 1792.634305][T14973] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1810.557534][T15116] loop2: detected capacity change from 0 to 512 [ 1810.650843][T15116] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1811.107028][T15116] EXT4-fs (loop2): 1 truncate cleaned up [ 1811.264803][T15116] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1811.846992][T15127] futex_wake_op: syz.2.1846 tries to shift op by -1; fix this program [ 1812.345382][T13326] EXT4-fs (loop2): unmounting filesystem. [ 1821.859661][ T4279] Bluetooth: Unexpected continuation frame (len 10) [ 1833.826291][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 1835.203772][T15278] loop2: detected capacity change from 0 to 128 [ 1835.347176][T15282] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 1837.695919][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1837.743818][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1840.078804][T15297] binder_alloc: 15296: binder_alloc_buf, no vma [ 1840.508305][T15301] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1840.955578][T15310] device gretap1 entered promiscuous mode [ 1841.452819][T15321] loop2: detected capacity change from 0 to 256 [ 1841.464455][T15326] loop7: detected capacity change from 0 to 1024 [ 1846.113318][T15358] loop7: detected capacity change from 0 to 256 [ 1849.944770][T15375] binder: BINDER_SET_CONTEXT_MGR already set [ 1849.950835][T15375] binder: 15374:15375 ioctl 4018620d 200000000040 returned -16 [ 1851.638905][T15393] loop2: detected capacity change from 0 to 16 [ 1851.646520][T15393] erofs: (device loop2): mounted with root inode @ nid 36. [ 1851.655625][T15393] syz.2.1899: attempt to access beyond end of device [ 1851.655625][T15393] loop2: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1851.669965][T15393] syz.2.1899: attempt to access beyond end of device [ 1851.669965][T15393] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1851.684487][ T26] audit: type=1800 audit(1771018568.799:119): pid=15393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1899" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1851.705129][T15393] syz.2.1899: attempt to access beyond end of device [ 1851.705129][T15393] loop2: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1851.846730][ T26] audit: type=1800 audit(1771018568.837:120): pid=15393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1899" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 1855.809427][T15433] loop0: detected capacity change from 0 to 16 [ 1855.861683][T15433] erofs: (device loop0): mounted with root inode @ nid 36. [ 1856.320069][T15437] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.399177][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.408986][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.418338][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1856.427425][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.436728][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1856.445800][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.455144][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1856.464289][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1856.473377][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1856.484372][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1856.493557][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.503294][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1856.512446][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1856.521483][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1856.530621][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1856.541459][T15433] syz.0.1908: attempt to access beyond end of device [ 1856.541459][T15433] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1856.555244][T15433] syz.0.1908: attempt to access beyond end of device [ 1856.555244][T15433] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1856.569669][T15433] syz.0.1908: attempt to access beyond end of device [ 1856.569669][T15433] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1856.585160][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 1856.594267][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 1856.603396][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.613134][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 1856.622266][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.631587][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 1856.640736][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 1856.649766][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 1856.658910][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.668287][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 1856.677363][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.686717][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 1856.695808][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 1856.704905][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 1856.713969][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 1856.723474][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 1856.732683][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 1856.741809][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 1856.750917][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.760259][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 1856.769339][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.778630][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 1856.787721][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 1856.796816][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 1856.805944][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 1856.815051][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.824735][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1856.833861][T15433] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1856.843196][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1856.852240][T15433] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1856.861406][T15433] syz.0.1908: attempt to access beyond end of device [ 1856.861406][T15433] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 1856.875095][T15433] syz.0.1908: attempt to access beyond end of device [ 1856.875095][T15433] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1856.888720][T15433] syz.0.1908: attempt to access beyond end of device [ 1856.888720][T15433] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 1857.019322][T15437] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -11 in[46, 4050] out[5297] [ 1857.634685][T15437] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1857.653378][ T7908] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1857.741269][ T7908] syz-executor: attempt to access beyond end of device [ 1857.741269][ T7908] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1857.904114][T15446] binder_alloc: 15442: binder_alloc_buf, no vma [ 1857.917945][ T7908] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1858.029885][ T7908] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1859.851184][T15463] loop0: detected capacity change from 0 to 256 [ 1860.285003][T15467] loop7: detected capacity change from 0 to 256 [ 1867.828607][T15526] binder_alloc: 15523: binder_alloc_buf, no vma [ 1867.878840][T15528] loop7: detected capacity change from 0 to 256 [ 1873.775488][T15549] loop0: detected capacity change from 0 to 256 [ 1877.493053][T15575] binder: 15568:15575 ioctl c0306201 0 returned -14 [ 1880.064906][T15588] binder: BINDER_SET_CONTEXT_MGR already set [ 1880.105973][T15588] binder: 15585:15588 ioctl 4018620d 200000000040 returned -16 [ 1881.982101][T15612] loop0: detected capacity change from 0 to 256 [ 1882.289698][T15617] loop7: detected capacity change from 0 to 16 [ 1882.570740][T15617] erofs: (device loop7): mounted with root inode @ nid 36. [ 1882.590197][T15617] syz.7.1946: attempt to access beyond end of device [ 1882.590197][T15617] loop7: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 1882.605282][T15617] syz.7.1946: attempt to access beyond end of device [ 1882.605282][T15617] loop7: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1882.622114][T15617] syz.7.1946: attempt to access beyond end of device [ 1882.622114][T15617] loop7: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 1882.639761][T15614] syz.7.1946: attempt to access beyond end of device [ 1882.639761][T15614] loop7: rw=524288, sector=1342179152, nr_sectors = 16 limit=16 [ 1882.654132][T15614] syz.7.1946: attempt to access beyond end of device [ 1882.654132][T15614] loop7: rw=0, sector=1342179160, nr_sectors = 8 limit=16 [ 1882.654854][ T26] audit: type=1800 audit(1771018597.740:121): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1946" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1882.669630][T15614] syz.7.1946: attempt to access beyond end of device [ 1882.669630][T15614] loop7: rw=0, sector=1342179160, nr_sectors = 8 limit=16 [ 1882.701914][T15614] syz.7.1946: attempt to access beyond end of device [ 1882.701914][T15614] loop7: rw=0, sector=1342179160, nr_sectors = 8 limit=16 [ 1882.715790][T15614] syz.7.1946: attempt to access beyond end of device [ 1882.715790][T15614] loop7: rw=0, sector=1342179160, nr_sectors = 8 limit=16 [ 1885.109184][ T26] audit: type=1800 audit(1771018597.759:122): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1946" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 1888.620150][T15656] loop2: detected capacity change from 0 to 2048 [ 1889.264240][T15656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1889.848691][T15669] loop0: detected capacity change from 0 to 256 [ 1895.341182][T15718] loop0: detected capacity change from 0 to 256 [ 1895.847699][T15718] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1902.762049][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1902.768574][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1906.924519][T15798] xt_hashlimit: max too large, truncated to 1048576 [ 1906.932285][T15798] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1909.321389][ T26] audit: type=1400 audit(1771018622.716:123): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=15802 comm="syz.3.1985" [ 1909.789186][T15814] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1911.914675][T15825] loop7: detected capacity change from 0 to 256 [ 1921.889468][T15894] loop0: detected capacity change from 0 to 256 [ 1934.349925][T15972] loop2: detected capacity change from 0 to 40427 [ 1934.451548][T15972] F2FS-fs (loop2): invalid crc value [ 1934.495652][T15972] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1934.537942][T15972] F2FS-fs (loop2): Start checkpoint disabled! [ 1934.580107][T15972] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1938.415100][ T8083] kworker/u4:3: attempt to access beyond end of device [ 1938.415100][ T8083] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1939.899542][T15999] loop0: detected capacity change from 0 to 512 [ 1939.906833][T15999] ext4: Bad value for 'inode_readahead_blks' [ 1939.995312][T15215] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1947.058277][ T6427] Bluetooth: hci0: command 0x2016 tx timeout [ 1949.871262][T16065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1949.899071][T16065] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1949.907579][T16065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1949.916661][T16065] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1949.926694][T16065] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1949.935129][T16065] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1950.309896][ T5439] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.335104][T16064] chnl_net:caif_netlink_parms(): no params data found [ 1950.443619][ T5439] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.519843][T16064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.528765][T16064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.541375][T16064] device bridge_slave_0 entered promiscuous mode [ 1950.577888][ T5439] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.595337][T16064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.605842][T16064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.615692][T16064] device bridge_slave_1 entered promiscuous mode [ 1950.647465][T16064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1950.674316][ T5439] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.693837][T16064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1950.728459][T16064] team0: Port device team_slave_0 added [ 1950.736820][T16064] team0: Port device team_slave_1 added [ 1950.783149][T16064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1950.790157][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1950.816984][T16064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1950.859582][T16064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1950.869357][T16064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1950.895861][T16064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1950.978426][T16064] device hsr_slave_0 entered promiscuous mode [ 1950.985738][T16064] device hsr_slave_1 entered promiscuous mode [ 1950.992394][T16064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1951.001413][T16064] Cannot create hsr debugfs directory [ 1952.107294][T16065] Bluetooth: hci5: command 0x0409 tx timeout [ 1952.565883][ T5439] device hsr_slave_0 left promiscuous mode [ 1952.572989][ T5439] device hsr_slave_1 left promiscuous mode [ 1952.588081][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1952.595954][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1952.611192][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1952.619442][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1952.632934][ T5439] device bridge_slave_1 left promiscuous mode [ 1952.639233][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.648268][ T5439] device bridge_slave_0 left promiscuous mode [ 1952.654613][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.693597][ T5439] device veth1_macvtap left promiscuous mode [ 1952.699899][ T5439] device veth0_macvtap left promiscuous mode [ 1952.706525][ T5439] device veth1_vlan left promiscuous mode [ 1952.712383][ T5439] device veth0_vlan left promiscuous mode [ 1953.447164][ T5439] team0 (unregistering): Port device team_slave_1 removed [ 1953.511102][ T5439] team0 (unregistering): Port device team_slave_0 removed [ 1953.565262][ T5439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1953.624287][ T5439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1954.069159][ T5439] bond0 (unregistering): Released all slaves [ 1954.330946][ T6427] Bluetooth: hci5: command 0x041b tx timeout [ 1955.169062][T16064] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1955.204755][T16064] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1955.215604][T16064] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1955.232607][T16064] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1955.349166][T16064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1955.366152][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1955.376198][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1955.388193][T16064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1955.408575][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1955.417778][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1955.434995][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1955.442159][ T5439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1955.481057][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1955.489743][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1955.499759][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1955.508586][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.515711][ T5439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1955.524668][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1955.534468][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1955.543731][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1955.556782][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1955.569320][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1955.594299][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1955.607549][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1955.619595][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1955.633265][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1955.645366][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1955.662715][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1955.675853][T16064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1956.021873][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1956.029443][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1956.046382][T16064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1956.521195][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1956.531643][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1956.554765][ T6427] Bluetooth: hci5: command 0x040f tx timeout [ 1956.567545][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1956.579409][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1956.592429][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1956.602361][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1956.619024][T16064] device veth0_vlan entered promiscuous mode [ 1956.638645][T16064] device veth1_vlan entered promiscuous mode [ 1956.664596][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1956.676389][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1956.686580][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1956.700091][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1956.711948][T16064] device veth0_macvtap entered promiscuous mode [ 1956.733602][T16064] device veth1_macvtap entered promiscuous mode [ 1956.766473][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1956.778249][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.788309][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1956.799141][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.809085][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1956.819803][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.829922][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1956.840632][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.852146][T16064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1956.864150][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1956.874340][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1956.887253][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1956.895983][ T5470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1956.908735][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1956.919925][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.930427][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1956.941160][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.951150][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1956.961726][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.971629][T16064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1956.982419][T16064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1956.994201][T16064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1957.002599][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1957.012557][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1957.029156][T16064] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.041407][T16064] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.051271][T16064] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.060655][T16064] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.172765][ T5439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.188835][ T5439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.204747][ T5448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1957.234623][ T4645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.245227][ T4645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.258341][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1959.216857][ T6427] Bluetooth: hci5: command 0x0419 tx timeout [ 1968.446374][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1968.452782][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1972.380831][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2059'. [ 1972.430594][T16242] device batadv0 entered promiscuous mode [ 1972.474613][T16242] device macvtap1 entered promiscuous mode [ 1972.500899][T16242] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1974.027149][T16251] loop9: detected capacity change from 0 to 256 [ 1974.082473][T16244] device batadv0 left promiscuous mode [ 1974.111429][T16251] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1980.365509][T16295] loop9: detected capacity change from 0 to 128 [ 1980.411752][T16295] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1980.425469][T16295] hpfs: filesystem error: improperly stopped [ 1980.431929][T16295] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1980.439918][T16295] hpfs: You really don't want any checks? You are crazy... [ 1980.447360][T16295] hpfs: Code page index out of array [ 1980.452832][T16295] hpfs: code page support is disabled [ 1980.468882][T16295] hpfs: hpfs_map_4sectors(): unaligned read [ 1980.478725][T16295] hpfs: hpfs_map_4sectors(): unaligned read [ 1980.485048][T16295] hpfs: filesystem error: unable to find root dir [ 1980.546009][T16295] hpfs: hpfs_map_4sectors(): unaligned read [ 1980.562433][T16295] hpfs: hpfs_map_4sectors(): unaligned read [ 1981.460270][T16312] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1998.804142][ T6427] Bluetooth: hci5: command 0x0405 tx timeout [ 2001.022458][T16427] loop2: detected capacity change from 0 to 256 [ 2001.311412][T16430] loop9: detected capacity change from 0 to 16 [ 2001.349123][T16430] erofs: (device loop9): mounted with root inode @ nid 36. [ 2001.380967][T16430] syz.9.2092: attempt to access beyond end of device [ 2001.380967][T16430] loop9: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 2001.453909][T16430] syz.9.2092: attempt to access beyond end of device [ 2001.453909][T16430] loop9: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 2001.475440][ T26] audit: type=1800 audit(1771018708.913:124): pid=16430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2092" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 2004.252813][T16452] xt_hashlimit: size too large, truncated to 1048576 [ 2004.259970][T16452] xt_hashlimit: invalid rate [ 2008.363397][T16472] binder: 16470:16472 ioctl c018620c 200000000240 returned -22 [ 2011.251898][T16515] loop9: detected capacity change from 0 to 16 [ 2011.262429][T16515] erofs: (device loop9): mounted with root inode @ nid 36. [ 2011.272988][T16515] syz.9.2105: attempt to access beyond end of device [ 2011.272988][T16515] loop9: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 2011.287642][T16515] syz.9.2105: attempt to access beyond end of device [ 2011.287642][T16515] loop9: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 2011.302015][ T26] audit: type=1800 audit(1771018718.117:125): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2105" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 2011.304192][T16515] syz.9.2105: attempt to access beyond end of device [ 2011.304192][T16515] loop9: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 2011.365284][ T26] audit: type=1800 audit(1771018718.145:126): pid=16515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2105" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 2014.128322][T16525] loop9: detected capacity change from 0 to 40427 [ 2014.151700][T16525] F2FS-fs (loop9): invalid crc value [ 2014.167843][T16525] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2014.202884][T16525] F2FS-fs (loop9): Start checkpoint disabled! [ 2015.821332][T16540] binder_alloc: 16539: binder_alloc_buf, no vma [ 2018.986425][T16562] loop9: detected capacity change from 0 to 16 [ 2020.495324][T16562] erofs: (device loop9): mounted with root inode @ nid 36. [ 2024.012429][T10610] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 2024.215431][T10610] usb 4-1: device descriptor read/64, error -71 [ 2024.544131][T10610] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 2024.553234][T16585] loop9: detected capacity change from 0 to 2048 [ 2024.671498][T16591] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2024.728512][T10610] usb 4-1: device descriptor read/64, error -71 [ 2026.461873][T10610] usb usb4-port1: attempt power cycle [ 2027.885088][T16591] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2027.925104][T16591] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2027.968134][T16591] Remounting filesystem read-only [ 2027.984703][T16064] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer [ 2034.136846][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2034.143197][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2085.612005][T16065] Bluetooth: hci5: command 0x0406 tx timeout [ 2099.811383][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.817744][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.494144][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.500477][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2231.179719][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2231.186163][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2296.860165][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2296.866594][ T1268] ieee802154 phy1 wpan1: encryption failed: -22