last executing test programs: 11m56.025396506s ago: executing program 0 (id=136): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='bridge0\x00', 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @loopback, 0x7}, @in6={0xa, 0x4e23, 0x40000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x81}], 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setrlimit(0xf, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(r2, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00008, &(0x7f0000000040), 0x1, 0x7ad, &(0x7f0000001740)="$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") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 11m55.42769976s ago: executing program 0 (id=139): socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$kcm(0xa, 0x5, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 11m54.677857979s ago: executing program 0 (id=142): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m53.325895522s ago: executing program 0 (id=145): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000e40)={[{@abort}, {@barrier_val={'barrier', 0x3d, 0x10001}}]}, 0x2, 0x569, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10000}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 11m51.632035884s ago: executing program 0 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x6, 0x10}, {0xfff1}}}, 0x24}}, 0x0) 11m43.744113128s ago: executing program 0 (id=158): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000002c0)) 11m42.590149266s ago: executing program 32 (id=158): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f00000002c0)) 9m8.512937916s ago: executing program 4 (id=457): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) 9m7.364274554s ago: executing program 4 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004, 0x2406}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@dev={0xac, 0x14, 0x14, 0x31}]}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) splice(r5, 0x0, r2, 0x0, 0x16a, 0x1200000000000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m5.211174167s ago: executing program 4 (id=461): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4e23, @empty}, 0x10) r0 = socket(0x2, 0x2, 0x1) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) 9m4.929063525s ago: executing program 4 (id=467): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="31301f31", 0x4) write(0xffffffffffffffff, &(0x7f0000000600)='1\x00', 0x2) 9m3.546514169s ago: executing program 4 (id=470): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013", @ANYRES32=r1, @ANYBLOB='\x00\x00\"'], 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x20040841) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRESHEX=r5, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd9d}, 0x94) rt_sigsuspend(0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x1c9ad6529064729b}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}}, 0x4000000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x8201, 0x4) 9m2.189111772s ago: executing program 4 (id=473): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) accept(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 8m46.334780472s ago: executing program 33 (id=473): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) accept(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 15.172355027s ago: executing program 2 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 14.865134935s ago: executing program 2 (id=1300): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x15, 0x81, 0x2e}, {@private=0xa010100, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d56}}, 0x44) 13.944194917s ago: executing program 3 (id=1303): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 11.550152156s ago: executing program 5 (id=1307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.549848296s ago: executing program 1 (id=1308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000180)='d', 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/100, 0x64}], 0x1}, 0x1}], 0x1, 0x10000, 0x0) 11.523327487s ago: executing program 3 (id=1315): r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x2040) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x40000000}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 9.875695577s ago: executing program 5 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 9.875482137s ago: executing program 2 (id=1310): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x15, 0x81, 0x2e}, {@private=0xa010100, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d56}}, 0x44) 9.875273917s ago: executing program 3 (id=1311): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000fe000000000000000000"], 0x80}}, 0x0) 9.353607901s ago: executing program 1 (id=1312): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_bcm(0x1d, 0x2, 0x2) 8.769743534s ago: executing program 5 (id=1313): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000fe000000000000000000"], 0x80}}, 0x0) 7.104557685s ago: executing program 2 (id=1314): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 7.104104865s ago: executing program 3 (id=1316): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00000000c0)={0x83d9f762074edbc7}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$uinput_user_dev(r7, &(0x7f00000007c0)={'syz1\x00', {0x35e5, 0x2, 0xac, 0x7}, 0x33, [0xf2dc4bb, 0x4, 0x9, 0x348, 0x2fb, 0x4, 0x80, 0x2b, 0xfffffff8, 0x1, 0x3, 0xea, 0x5, 0xe, 0xa, 0x80, 0x8, 0xc, 0x401, 0x4, 0xfffffffd, 0x7, 0x0, 0x3, 0x5d00, 0x0, 0x5, 0x7ff, 0x1ff, 0x0, 0x6, 0xffffffff, 0x0, 0x4, 0x400ff, 0x7, 0x3, 0x2ec, 0x5, 0x320b, 0x7, 0x8, 0x34f42322, 0x10000, 0xf7d3, 0x5, 0x100, 0x9, 0x10000, 0xa, 0x2e70, 0x1, 0xfffffffe, 0x7, 0x8, 0x2, 0x6, 0xa72, 0x3, 0x6, 0x6, 0xb, 0xfffffffe, 0xb], [0x0, 0x0, 0x0, 0x3, 0x9, 0x6c6, 0x9, 0x0, 0xbd, 0x103, 0x1000, 0x8, 0x2, 0x6, 0x9, 0x4, 0x0, 0x1, 0x0, 0xd8, 0x5, 0x1, 0x338a76b2, 0xd9b, 0x3, 0xd, 0x56, 0xfffff609, 0x6, 0x0, 0x9, 0x5, 0x5, 0x5, 0xfffffff2, 0x7, 0x7, 0x1000, 0x10000, 0x8001, 0x612, 0xffffffff, 0x10, 0x401, 0x8000, 0x7fff, 0x3, 0x3, 0x5a83, 0x7, 0x1, 0xffffffff, 0x9, 0x1, 0x9cbb, 0x69, 0xff, 0xfffffffa, 0x3, 0xfffffac3, 0x8e800000, 0x8, 0x3, 0x4], [0x1ff, 0x7, 0x800, 0x3, 0x9, 0x1000, 0xfffffffb, 0xc0000000, 0x2, 0x9, 0x40, 0x5, 0x26, 0xc2e2, 0xfffffffd, 0x101002, 0x275, 0x2, 0x5, 0x200, 0x3, 0x10000, 0x4, 0x5287, 0xe, 0x32, 0xdfb2, 0x8, 0x1, 0x80000000, 0x4, 0xb, 0x3, 0x6, 0x1, 0xa, 0x5290, 0x4, 0x4, 0x1ff, 0x8000009a, 0x5, 0x1000, 0x8, 0xc, 0x5, 0x1ae3, 0xb, 0x4, 0xa8, 0x1, 0x9, 0xd5, 0x10000, 0x7, 0x6, 0xd2, 0x4, 0x8000, 0x7, 0xbb, 0x2429, 0x753, 0x5], [0x8, 0x3e, 0x9, 0xffffffff, 0x2, 0x4b, 0x20000, 0x3, 0xfffffffb, 0x6, 0x200000e4, 0x0, 0x1, 0x4, 0x2, 0x1, 0x8000, 0xfffffffc, 0x1, 0x4, 0x10, 0x4, 0x3, 0xffff, 0xc37, 0xfffffffd, 0x2, 0x5, 0x7, 0x8, 0x3, 0x7, 0x4, 0x1, 0x6, 0x3, 0x7, 0x1ff, 0x7, 0x6, 0x10008, 0x1ff, 0xfc, 0x5, 0x9, 0x0, 0x7, 0x20, 0x7fff, 0x8, 0x5, 0x100, 0x8, 0x6, 0x2, 0xfffffff2, 0x6, 0x10, 0x80, 0x7, 0xffff, 0x3, 0x800014f, 0xfffffffb]}, 0x45c) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x35, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @void, @val={0x1, 0x1, [{0x24, 0x1}]}, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x140a, 0x1, 0x8000, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000014) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x5204) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 7.102015936s ago: executing program 5 (id=1323): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'fo\x00', 0x15, 0x81, 0x2e}, {@private=0xa010100, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d56}}, 0x44) 6.93593134s ago: executing program 1 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f00000f9000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x2000000000000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a1d0400000000000000000a0000010900010073797a31000000005c000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f08000440000000370800024000000002240001800b0001007470726f78790000140002800800034000000016080001400000000a0900020073797a32000000001400000011"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 5.836164187s ago: executing program 3 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket(0x11, 0x3, 0x300) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) 5.664750401s ago: executing program 1 (id=1319): r0 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x1, 0x2040) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x40000000}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.664327691s ago: executing program 2 (id=1320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) listen(0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 4.49177134s ago: executing program 3 (id=1321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000180)='d', 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/100, 0x64}], 0x1}, 0x1}], 0x1, 0x10000, 0x0) 1.669591419s ago: executing program 1 (id=1322): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500192340834b", 0xb}], 0x1) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 1.66945121s ago: executing program 2 (id=1324): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) sendfile(r0, r1, 0x0, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7) 1.532682782s ago: executing program 5 (id=1325): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x2, 0x7ffe}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r4, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r2, r5, 0x6700000000000000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close_range(r1, 0xffffffffffffffff, 0x0) 291.794903ms ago: executing program 1 (id=1326): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_bcm(0x1d, 0x2, 0x2) 0s ago: executing program 5 (id=1327): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000150)='33554432\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r3, 0x331, 0x70bd2a, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c0c1}, 0x8004800) write(r1, &(0x7f0000000250)='/dev/zram0,65536\x00', 0x11) r5 = syz_open_dev$mtd(&(0x7f0000000500), 0x1, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x21, 0x7}, 0x4) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) ioctl$MEMERASE64(r5, 0x40104d14, &(0x7f0000000600)={0x0, 0x2000000}) kernel console output (not intermixed with test programs): s (loop1): Can't find a valid FAT filesystem [ 157.168707][ T6355] md: resync of RAID array md0 [ 157.248837][ T6355] md/raid10:md0: resync fails [ 157.272718][ T6355] md: md0: resync done. [ 158.561354][ T6356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.140926][ T6361] loop2: detected capacity change from 0 to 256 [ 159.148643][ T6361] exfat: Deprecated parameter 'utf8' [ 159.172652][ T6361] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 159.733094][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 159.944356][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 40698, setting to 64 [ 159.965032][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.974814][ T8] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 160.002680][ T8] usb 3-1: Product: syz [ 160.006928][ T8] usb 3-1: Manufacturer: syz [ 160.020884][ T6361] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.031976][ T8] hub 3-1:4.0: USB hub found [ 160.791465][ T8] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 160.903155][ T8] usb 3-1: USB disconnect, device number 2 [ 161.023599][ T6367] loop1: detected capacity change from 0 to 2048 [ 161.076427][ T6370] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 161.096106][ T6367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.582925][ T5816] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 163.690501][ T6173] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.976978][ T6393] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 164.648174][ T5816] usb 3-1: Using ep0 maxpacket: 32 [ 164.691550][ T5816] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 164.712701][ T5816] usb 3-1: config 0 has no interface number 0 [ 164.718929][ T5816] usb 3-1: config 0 interface 12 has no altsetting 0 [ 164.745442][ T5816] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 164.792571][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.800654][ T5816] usb 3-1: Product: syz [ 164.841744][ T5816] usb 3-1: Manufacturer: syz [ 164.852612][ T5816] usb 3-1: SerialNumber: syz [ 164.883844][ T5816] usb 3-1: config 0 descriptor?? [ 165.426703][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.437636][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.446963][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.455547][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.464915][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.472336][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.677222][ T6395] chnl_net:caif_netlink_parms(): no params data found [ 165.781478][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.788886][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.796322][ T6395] bridge_slave_0: entered allmulticast mode [ 165.806234][ T6395] bridge_slave_0: entered promiscuous mode [ 165.816407][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.823808][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.831081][ T6395] bridge_slave_1: entered allmulticast mode [ 165.838747][ T6395] bridge_slave_1: entered promiscuous mode [ 165.877610][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.890708][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.933460][ T6395] team0: Port device team_slave_0 added [ 165.942763][ T6395] team0: Port device team_slave_1 added [ 165.976463][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.983922][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.012783][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.026695][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.033893][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.061145][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.119901][ T6395] hsr_slave_0: entered promiscuous mode [ 166.128879][ T6395] hsr_slave_1: entered promiscuous mode [ 166.137748][ T6395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.145704][ T6395] Cannot create hsr debugfs directory [ 166.357260][ T6395] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.369385][ T6395] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.381573][ T6395] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.395799][ T6395] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.433577][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.441135][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.449871][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.457159][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.538594][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.561879][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.571212][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.593552][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.611238][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.619379][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.643858][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.651930][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.972999][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.299679][ T6395] veth0_vlan: entered promiscuous mode [ 167.316074][ T6395] veth1_vlan: entered promiscuous mode [ 167.358053][ T6395] veth0_macvtap: entered promiscuous mode [ 167.370876][ T6395] veth1_macvtap: entered promiscuous mode [ 167.394608][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.405554][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.417739][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.428690][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.439126][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.450039][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.462974][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.474080][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.490638][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.510391][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.521362][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.532718][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.544843][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.556190][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.563100][ T51] Bluetooth: hci3: command tx timeout [ 167.576186][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.587892][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.600841][ T5816] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 167.611011][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.612468][ T5816] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 167.628732][ T5816] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 167.636681][ T5816] f81534: probe of 3-1:0.12 failed with error -71 [ 167.644955][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.654627][ T5816] usb 3-1: USB disconnect, device number 3 [ 167.690614][ T6395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.701182][ T6395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.722195][ T6395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.737735][ T6395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.844716][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.866679][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.906938][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.915356][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.068534][ T6418] binder: 6415:6418 ioctl c0306201 200000000080 returned -14 [ 168.087316][ T6418] loop1: detected capacity change from 0 to 512 [ 168.103589][ T6418] EXT4-fs: Ignoring removed orlov option [ 168.214082][ T6418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.429011][ T6418] EXT4-fs: Mount option(s) incompatible with ext2 [ 169.042856][ T6362] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.060945][ T6418] binder: 6415:6418 ioctl c0306201 2000000003c0 returned -14 [ 170.401643][ T51] Bluetooth: hci3: command tx timeout [ 172.442661][ T51] Bluetooth: hci3: command tx timeout [ 175.542536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 176.160873][ T51] Bluetooth: hci3: command tx timeout [ 176.299461][ T6461] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 176.371972][ T6461] bond1: entered promiscuous mode [ 176.377607][ T6461] bond1: entered allmulticast mode [ 176.383641][ T6461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.411676][ T6461] bridge1: entered promiscuous mode [ 176.418136][ T6461] bridge1: entered allmulticast mode [ 176.424288][ T6461] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 176.465856][ T6461] bridge2: entered promiscuous mode [ 176.471727][ T6461] bridge2: entered allmulticast mode [ 176.485914][ T2977] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.511627][ T6461] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 176.550749][ T6465] loop2: detected capacity change from 0 to 256 [ 176.565592][ T6461] bridge3: entered promiscuous mode [ 176.578132][ T6461] bridge3: entered allmulticast mode [ 176.584465][ T6461] bond1: (slave bridge3): Enslaving as a backup interface with a down link [ 176.596514][ T6465] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.650172][ T2977] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.674591][ T6465] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.102779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 178.512723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 179.183821][ T6467] syzkaller0: entered promiscuous mode [ 179.203957][ T6467] syzkaller0: entered allmulticast mode [ 181.240793][ T6477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.619639][ T6495] loop2: detected capacity change from 0 to 4096 [ 184.441338][ T6501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.545859][ T6503] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 184.637228][ T28] audit: type=1800 audit(1788942179.810:5): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 184.925730][ T6504] bond0: entered promiscuous mode [ 185.282662][ T6504] bond0: entered allmulticast mode [ 186.046037][ T6504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.311405][ T6507] bridge1: entered promiscuous mode [ 186.323744][ T3515] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 186.344840][ T6507] bridge1: entered allmulticast mode [ 186.366932][ T6507] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 186.487737][ T3438] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 186.943818][ T6503] bridge2: entered promiscuous mode [ 187.413384][ T6503] bridge2: entered allmulticast mode [ 187.431238][ T6503] bond0: (slave bridge2): Enslaving as a backup interface with a down link [ 187.943937][ T6503] bridge3: entered promiscuous mode [ 187.949409][ T6503] bridge3: entered allmulticast mode [ 187.955731][ T6503] bond0: (slave bridge3): Enslaving as a backup interface with a down link [ 189.618293][ T6525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.873080][ T6537] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 189.996772][ T6537] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.011617][ T6537] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.022427][ T6537] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.037411][ T6537] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.050947][ T6537] bond2: (slave geneve2): making interface the new active one [ 190.069707][ T6537] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 190.080210][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.190'. [ 190.129528][ T6544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.210547][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.423132][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.445337][ T23] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 190.466587][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.486821][ T23] usb 5-1: Product: syz [ 190.491068][ T23] usb 5-1: Manufacturer: syz [ 190.512642][ T23] usb 5-1: SerialNumber: syz [ 190.543972][ T23] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 190.642115][ T6548] syzkaller0: entered promiscuous mode [ 190.652743][ T6548] syzkaller0: entered allmulticast mode [ 190.954123][ T23] gspca_mr97310a: reg write [19] error -71 [ 190.960171][ T23] mr97310a: probe of 5-1:1.0 failed with error -71 [ 191.029183][ T23] usb 5-1: USB disconnect, device number 2 [ 191.277651][ T6554] ip_tables: iptables: counters copy to user failed while replacing table [ 192.141313][ T6556] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.150248][ T6556] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.159413][ T6556] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.168290][ T6556] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.419401][ T6556] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 194.821370][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.844450][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.575796][ T6662] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 198.551980][ T6665] veth5: entered allmulticast mode [ 198.872121][ T6665] bond2: (slave veth5): Enslaving as an active interface with a down link [ 199.079576][ T6668] bond2: (slave veth0_to_bond): making interface the new active one [ 199.144506][ T6668] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 202.050628][ T6704] syzkaller0: entered promiscuous mode [ 202.084489][ T6704] syzkaller0: entered allmulticast mode [ 202.594276][ T6713] netlink: 'syz.2.223': attribute type 4 has an invalid length. [ 206.481121][ T6732] netlink: 'syz.1.227': attribute type 13 has an invalid length. [ 206.542287][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 206.623862][ T6732] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 208.111664][ T6733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.413082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 208.663145][ T6738] syzkaller0: entered promiscuous mode [ 208.680224][ T6738] syzkaller0: entered allmulticast mode [ 210.326954][ T6747] Set syz1 is full, maxelem 2 reached [ 212.370158][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 212.376922][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 212.383084][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 212.505540][ T6753] loop3: detected capacity change from 0 to 2048 [ 212.616567][ T6753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.056049][ T6758] loop2: detected capacity change from 0 to 256 [ 213.504046][ T6758] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 213.776667][ T28] audit: type=1800 audit(1788942208.950:6): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.238" name="file1" dev="loop2" ino=1048604 res=0 errno=0 [ 214.373251][ T6768] 9pnet_fd: Insufficient options for proto=fd [ 214.429286][ T6761] loop1: detected capacity change from 0 to 256 [ 214.436592][ T6761] FAT-fs (loop1): Unrecognized mount option "000000000000000000030x0000000000000008ÿÿÿÿ" or missing value [ 214.549814][ T6362] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 215.870976][ T6769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.092907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 217.154323][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'. [ 219.445332][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 219.755187][ T6798] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6395] was attempted by " [ 223.092972][ T6815] syzkaller0: entered promiscuous mode [ 223.196504][ T6815] syzkaller0: entered allmulticast mode [ 226.041206][ T6817] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 228.904002][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 228.940251][ T6844] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 228.975540][ T6844] bridge2: entered promiscuous mode [ 229.088747][ T6844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.096618][ T6844] IPv6: NLM_F_CREATE should be set when creating new route [ 229.105178][ T5783] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 229.140258][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 229.191420][ T6844] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 229.211385][ T6844] bridge3: entered promiscuous mode [ 229.315553][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.342841][ T5783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.358924][ T6847] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 229.368234][ T5783] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 229.382731][ T5783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.407417][ T5783] usb 2-1: config 0 descriptor?? [ 230.410175][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.452873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 231.862624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 232.060972][ T5783] usbhid 2-1:0.0: can't add hid device: -71 [ 232.094919][ T5783] usbhid: probe of 2-1:0.0 failed with error -71 [ 232.142579][ T5783] usb 2-1: USB disconnect, device number 2 [ 232.331566][ T6858] syzkaller0: entered promiscuous mode [ 232.337295][ T6858] syzkaller0: entered allmulticast mode [ 232.907906][ T6864] loop3: detected capacity change from 0 to 32768 [ 232.922968][ T6864] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.269 (6864) [ 232.951165][ T6864] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.962003][ T6864] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 232.970858][ T6864] BTRFS info (device loop3): use zlib compression, level 3 [ 232.978316][ T6864] BTRFS info (device loop3): turning on sync discard [ 232.985130][ T6864] BTRFS info (device loop3): using free space tree [ 233.152790][ T6864] BTRFS info (device loop3): enabling ssd optimizations [ 233.253068][ T6879] syzkaller0: entered promiscuous mode [ 233.258751][ T6879] syzkaller0: entered allmulticast mode [ 233.519641][ T28] audit: type=1800 audit(1788942228.690:7): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.269" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 234.983458][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.834309][ T6902] syzkaller0: entered promiscuous mode [ 235.839885][ T6902] syzkaller0: entered allmulticast mode [ 235.950441][ T6905] loop4: detected capacity change from 0 to 164 [ 235.988907][ T6362] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop3 scanned by udevd (6362) [ 236.557713][ T6918] rock: directory entry would overflow storage [ 236.564526][ T6918] rock: sig=0x4f50, size=4, remaining=3 [ 236.570191][ T6918] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 236.607037][ T5816] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 237.261179][ T5816] usb 4-1: config 0 has no interfaces? [ 237.487545][ T5816] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.809971][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.864431][ T5816] usb 4-1: Product: syz [ 237.868707][ T5816] usb 4-1: Manufacturer: syz [ 237.944822][ T5816] usb 4-1: SerialNumber: syz [ 237.971065][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 237.990064][ T5816] usb 4-1: config 0 descriptor?? [ 238.124895][ T6931] syz.1.283 uses obsolete (PF_INET,SOCK_PACKET) [ 238.158580][ T6931] Bluetooth: MGMT ver 1.22 [ 239.105438][ T5816] usb 4-1: USB disconnect, device number 3 [ 239.358285][ T6945] futex_wake_op: syz.4.288 tries to shift op by 32; fix this program [ 239.737533][ T6952] syzkaller0: left promiscuous mode [ 239.748342][ T6952] syzkaller0: left allmulticast mode [ 239.829611][ T6956] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 239.838011][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 239.853712][ T6956] netlink: 'syz.1.289': attribute type 29 has an invalid length. [ 239.862377][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.289'. [ 241.182118][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 241.586392][ T6962] veth3: entered allmulticast mode [ 242.361378][ T6962] bond3: (slave veth3): Enslaving as an active interface with an up link [ 244.808182][ T7013] loop2: detected capacity change from 0 to 512 [ 244.816098][ T7013] EXT4-fs: Ignoring removed orlov option [ 244.825806][ T7013] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 244.842010][ T7013] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 244.949830][ T7013] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #16: comm syz.2.304: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 244.996065][ T7013] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.304: couldn't read orphan inode 16 (err -117) [ 245.025532][ T7013] EXT4-fs (loop2): 1 orphan inode deleted [ 245.047895][ T7013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.147793][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.809489][ T7026] loop4: detected capacity change from 0 to 2048 [ 246.823175][ T7027] tipc: Started in network mode [ 246.828147][ T7027] tipc: Node identity 2000004, cluster identity 4711 [ 246.861730][ T7030] loop2: detected capacity change from 0 to 128 [ 246.906675][ T7027] tipc: Node number set to 33554436 [ 247.057006][ T7026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.241279][ T7034] syz.2.308 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 247.441589][ T7026] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 248.375903][ T6395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.786226][ T7062] syzkaller0: entered promiscuous mode [ 251.791931][ T7062] syzkaller0: entered allmulticast mode [ 252.068446][ T7069] loop2: detected capacity change from 0 to 1024 [ 252.140674][ T7069] EXT4-fs (loop2): #clusters per group too big: 6168576 [ 252.210182][ T6363] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.810468][ T7074] comedi comedi0: No hardware detected at I/O base 0x294 [ 254.177932][ T7069] loop2: detected capacity change from 0 to 512 [ 254.209067][ T7069] EXT4-fs: inline encryption not supported [ 254.266924][ T7069] EXT4-fs (loop2): Test dummy encryption mode enabled [ 254.299028][ T7069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 254.346792][ T7069] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.315: bad orphan inode 131083 [ 254.435717][ T7069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.734301][ T7086] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 254.944568][ T7092] loop4: detected capacity change from 0 to 128 [ 254.997007][ T7069] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 256.036543][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.127309][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.134771][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.627285][ T51] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 256.636714][ T51] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 259.565035][ T7137] 0x000000000007-0x000000020000 : "" [ 260.002254][ T7139] loop4: detected capacity change from 0 to 512 [ 260.062263][ T7137] ftl_cs: FTL header corrupt! [ 260.104763][ T7139] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 260.220864][ T7139] EXT4-fs (loop4): 1 truncate cleaned up [ 260.229725][ T7139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.675276][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 260.685197][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 261.081148][ T5085] Bluetooth: hci0: hardware error 0x00 [ 261.158520][ T6395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.256300][ T7148] loop3: detected capacity change from 0 to 736 [ 262.409918][ T7148] isofs_fill_super: get root inode failed [ 263.046415][ T7167] loop4: detected capacity change from 0 to 1024 [ 263.111028][ T7169] mmap: syz.3.341 (7169) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 263.148854][ T7167] hfsplus: invalid length 32517 has been corrected to 255 [ 263.233149][ T5085] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 263.988677][ T7173] syzkaller0: entered promiscuous mode [ 264.011212][ T7173] syzkaller0: entered allmulticast mode [ 264.074488][ T7173] tipc: Started in network mode [ 264.079451][ T7173] tipc: Node identity eecc98661156, cluster identity 4711 [ 264.102173][ T7173] tipc: Enabled bearer , priority 0 [ 264.129357][ T7172] tipc: Resetting bearer [ 264.136841][ T7167] hfsplus: invalid length 32517 has been corrected to 255 [ 264.346425][ T7167] hfsplus: invalid length 32517 has been corrected to 255 [ 264.382097][ T7167] hfsplus: invalid length 32517 has been corrected to 255 [ 264.537246][ T7172] tipc: Disabling bearer [ 264.955671][ T7179] hfsplus: invalid length 32517 has been corrected to 255 [ 265.172761][ T6492] tipc: Node number set to 4288321638 [ 265.234742][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 265.393820][ T1145] hfsplus: b-tree write err: -5, ino 25 [ 265.411110][ T1145] hfsplus: b-tree write err: -5, ino 4 [ 265.433224][ T1145] hfsplus: b-tree write err: -5, ino 2 [ 265.446943][ T7183] loop1: detected capacity change from 0 to 512 [ 265.511614][ T7183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 265.565003][ T7183] EXT4-fs (loop1): 1 truncate cleaned up [ 265.587082][ T7183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.704530][ T7183] netlink: 'syz.1.347': attribute type 322 has an invalid length. [ 267.535677][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.077939][ T7210] bonding: b is being created... [ 269.792022][ T7215] netlink: 550 bytes leftover after parsing attributes in process `syz.1.356'. [ 270.021057][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.056126][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.157640][ T7218] netlink: 'syz.4.354': attribute type 16 has an invalid length. [ 270.181403][ T7218] netlink: 'syz.4.354': attribute type 17 has an invalid length. [ 270.302631][ T6492] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 270.342206][ T7218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.505938][ T6492] usb 2-1: not running at top speed; connect to a high speed hub [ 270.547628][ T6492] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.577486][ T6492] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.608167][ T6492] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 270.644447][ T6492] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.666034][ T6492] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.683757][ T6492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.692405][ T6492] usb 2-1: Product: syz [ 270.715509][ T6492] usb 2-1: Manufacturer: syz [ 270.720181][ T6492] usb 2-1: SerialNumber: syz [ 272.376885][ T6492] usb 2-1: 0:2 : does not exist [ 272.403363][ T7241] gretap1: entered promiscuous mode [ 273.213790][ T6492] usb 2-1: USB disconnect, device number 3 [ 273.394867][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.106540][ T7273] syzkaller0: create flow: hash 3016450443 index 2 [ 276.340768][ T6650] syzkaller0: tun_net_xmit 76 [ 276.359003][ T6650] syzkaller0: tun_net_xmit 48 [ 276.372842][ T8] syzkaller0: tun_net_xmit 76 [ 276.390120][ T7267] syzkaller0: delete flow: hash 3016450443 index 2 [ 276.408280][ T8] syzkaller0: tun_net_xmit 76 [ 278.058652][ T8] syzkaller0: tun_net_xmit 76 [ 278.063845][ T5819] syzkaller0: tun_net_xmit 76 [ 279.967863][ T7286] loop1: detected capacity change from 0 to 256 [ 279.979987][ T7286] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.991785][ T7286] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 280.533698][ T7286] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 280.803066][ T7286] exFAT-fs (loop1): failed to load alloc-bitmap [ 280.824890][ T7286] exFAT-fs (loop1): failed to recognize exfat type [ 283.425541][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 283.450962][ T7310] binder: 7309:7310 ioctl c018620c 200000000180 returned -22 [ 283.560239][ T7312] loop1: detected capacity change from 0 to 512 [ 283.599666][ T7312] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 283.653679][ T7312] EXT4-fs (loop1): 1 truncate cleaned up [ 283.660764][ T7312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.692951][ T7318] netlink: 'syz.2.385': attribute type 1 has an invalid length. [ 284.734489][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.806806][ T7318] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.171802][ T7320] gretap1: entered promiscuous mode [ 285.712403][ T7320] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 285.739867][ T7324] macvlan2: entered promiscuous mode [ 285.745870][ T7324] macvlan2: entered allmulticast mode [ 285.752345][ T7324] bond4: entered promiscuous mode [ 285.759219][ T7324] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 285.769582][ T7324] bond4: left promiscuous mode [ 286.864480][ T7351] tipc: Enabling of bearer rejected, failed to enable media [ 287.459171][ T7365] loop1: detected capacity change from 0 to 512 [ 287.501240][ T7365] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.609625][ T7365] EXT4-fs error (device loop1): ext4_find_extent:947: inode #4: comm syz.1.394: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 288.122997][ T7365] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 288.180843][ T7365] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 288.340226][ T7365] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 288.365768][ T7365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.912804][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 289.057008][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.167093][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 289.189690][ T7378] ip_tables: iptables: counters copy to user failed while replacing table [ 294.866705][ T7429] bridge0: port 3(syz_tun) entered blocking state [ 294.898318][ T7429] bridge0: port 3(syz_tun) entered disabled state [ 294.906882][ T7429] syz_tun: entered allmulticast mode [ 296.589654][ T7429] syz_tun: entered promiscuous mode [ 296.633899][ T7429] bridge0: port 3(syz_tun) entered blocking state [ 296.641111][ T7429] bridge0: port 3(syz_tun) entered forwarding state [ 298.707017][ T7447] syzkaller0: entered promiscuous mode [ 298.712943][ T7447] syzkaller0: entered allmulticast mode [ 301.244411][ T7463] loop2: detected capacity change from 0 to 512 [ 301.271982][ T7463] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 304.863193][ T7463] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 304.863652][ T7463] EXT4-fs: failed to create workqueue [ 304.903649][ T7463] EXT4-fs (loop2): mount failed [ 305.772808][ T7474] loop4: detected capacity change from 0 to 1024 [ 306.854950][ T7481] wg1: entered promiscuous mode [ 306.872807][ T7481] wg1: entered allmulticast mode [ 307.460432][ T7492] loop3: detected capacity change from 0 to 2048 [ 307.512920][ T7492] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 307.539727][ T7492] NILFS (loop3): mounting unchecked fs [ 307.615534][ T6362] udevd[6362]: incorrect nilfs2 checksum on /dev/loop3 [ 307.645445][ T7492] NILFS (loop3): recovery complete [ 307.702784][ T7497] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.185662][ T7513] loop1: detected capacity change from 0 to 128 [ 311.714570][ T7527] loop4: detected capacity change from 0 to 512 [ 312.959234][ T7527] EXT4-fs (loop4): orphan cleanup on readonly fs [ 313.020586][ T7527] EXT4-fs error (device loop4): ext4_find_extent:947: inode #4: comm syz.4.438: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 313.194380][ T7527] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 313.496293][ T7527] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 314.077752][ T7527] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 314.109831][ T7527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.284820][ T7547] loop3: detected capacity change from 0 to 128 [ 315.357162][ T6395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.675420][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.448'. [ 317.743083][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.749583][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.296156][ T7609] loop4: detected capacity change from 0 to 128 [ 320.194785][ T7610] loop3: detected capacity change from 0 to 512 [ 320.378021][ T7610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 320.423011][ T7610] EXT4-fs error (device loop3): ext4_find_extent:947: inode #4: comm syz.3.456: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 320.588765][ T7610] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 320.631966][ T7619] bond1: Removing last arp target with arp_interval on [ 320.732707][ T7610] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 320.794363][ T7619] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 320.814103][ T7619] netlink: 'syz.4.458': attribute type 2 has an invalid length. [ 320.865528][ T7610] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 320.891819][ T7610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.902058][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 322.697979][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.046316][ T7640] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.398093][ T7651] netlink: 'syz.4.470': attribute type 4 has an invalid length. [ 325.440704][ T7661] loop2: detected capacity change from 0 to 512 [ 325.516302][ T7661] EXT4-fs (loop2): orphan cleanup on readonly fs [ 325.563743][ T7661] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.471: corrupted inode contents [ 325.946782][ T7661] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 326.213218][ T7661] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.471: corrupted inode contents [ 326.242995][ T7661] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.471: mark_inode_dirty error [ 326.291650][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 326.305963][ T7661] EXT4-fs (loop2): 1 orphan inode deleted [ 326.334500][ T7661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 326.499345][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.739838][ T7675] loop2: detected capacity change from 0 to 512 [ 326.798016][ T7675] EXT4-fs (loop2): orphan cleanup on readonly fs [ 327.068074][ T7675] EXT4-fs error (device loop2): ext4_find_extent:947: inode #4: comm syz.2.474: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 327.087381][ T7675] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 327.845007][ T7682] jffs2: notice: (7682) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 328.182757][ T7675] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 328.246225][ T7675] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 328.274762][ T7675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.530138][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.371304][ T7709] nftables ruleset with unbound set [ 333.524569][ T7716] syzkaller0: entered promiscuous mode [ 333.530814][ T7716] syzkaller0: entered allmulticast mode [ 335.790094][ T7736] zram0: detected capacity change from 0 to 8 [ 336.540888][ T7740] syz_tun: entered allmulticast mode [ 339.104938][ T7754] netlink: 'syz.1.497': attribute type 4 has an invalid length. [ 339.189278][ T7754] netlink: 'syz.1.497': attribute type 4 has an invalid length. [ 343.134065][ T7780] loop1: detected capacity change from 0 to 512 [ 343.157144][ T7780] EXT4-fs: Ignoring removed i_version option [ 343.211517][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.223891][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.232168][ T7780] EXT4-fs: Ignoring removed oldalloc option [ 343.240645][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.251879][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.263442][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.274995][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.404133][ T7780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.503262][ T7780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.916255][ T7667] bridge0: port 3(syz_tun) entered disabled state [ 345.287967][ T7667] syz_tun (unregistering): left allmulticast mode [ 345.295231][ T7667] syz_tun (unregistering): left promiscuous mode [ 345.301822][ T7667] bridge0: port 3(syz_tun) entered disabled state [ 345.313250][ T51] Bluetooth: hci4: command tx timeout [ 346.033909][ T6622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.916472][ T6622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.362723][ T7782] chnl_net:caif_netlink_parms(): no params data found [ 347.392565][ T51] Bluetooth: hci4: command tx timeout [ 347.516720][ T6622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.691891][ T6622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.955644][ T7823] syzkaller0: entered promiscuous mode [ 347.961475][ T7823] syzkaller0: entered allmulticast mode [ 349.482730][ T51] Bluetooth: hci4: command tx timeout [ 349.709137][ T7843] loop3: detected capacity change from 0 to 4096 [ 349.778096][ T7844] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.838995][ T28] audit: type=1800 audit(1788942348.017:8): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.517" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 351.559934][ T51] Bluetooth: hci4: command tx timeout [ 352.158616][ T7834] syzkaller0: entered promiscuous mode [ 352.165779][ T7834] syzkaller0: entered allmulticast mode [ 352.209024][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.222597][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.229930][ T7782] bridge_slave_0: entered allmulticast mode [ 352.242601][ T7782] bridge_slave_0: entered promiscuous mode [ 352.280177][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.298378][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.306390][ T7782] bridge_slave_1: entered allmulticast mode [ 352.314992][ T7782] bridge_slave_1: entered promiscuous mode [ 352.418217][ T7850] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 352.478932][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.681686][ T6622] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.706324][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.602750][ T6492] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 354.075601][ T7782] team0: Port device team_slave_0 added [ 356.124397][ T6492] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 356.279108][ T6492] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 356.422641][ T6492] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 249, changing to 11 [ 356.465178][ T7782] team0: Port device team_slave_1 added [ 356.521497][ T6492] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 18234, setting to 1024 [ 356.642841][ T6492] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 356.782584][ T6492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.830713][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.882743][ T6492] usb 4-1: can't set config #1, error -71 [ 356.940072][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.982818][ T6492] usb 4-1: USB disconnect, device number 4 [ 357.029280][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.144027][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.151059][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.219777][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.322306][ T7782] hsr_slave_0: entered promiscuous mode [ 357.349776][ T7782] hsr_slave_1: entered promiscuous mode [ 357.368101][ T7782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.380912][ T7782] Cannot create hsr debugfs directory [ 358.149081][ T7922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.233165][ T7782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 361.404490][ T7782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 361.864365][ T7782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.878784][ T7782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 361.972820][ T790] kernel write not supported for file /input/event2 (pid: 790 comm: kworker/1:2) [ 362.010982][ T7945] loop3: detected capacity change from 0 to 256 [ 362.019333][ T7945] FAT-fs (loop3): Unrecognized mount option "000000000000000000030x0000000000000008ÿÿÿÿ" or missing value [ 362.130352][ T6362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 362.573744][ T6622] hsr_slave_0: left promiscuous mode [ 362.593705][ T6622] hsr_slave_1: left promiscuous mode [ 362.600436][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.622623][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.632096][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.640241][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.649733][ T6622] bridge_slave_1: left allmulticast mode [ 362.655957][ T6622] bridge_slave_1: left promiscuous mode [ 362.664012][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.675282][ T6622] bridge_slave_0: left allmulticast mode [ 362.681268][ T6622] bridge_slave_0: left promiscuous mode [ 362.687632][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.731655][ T6622] veth1_macvtap: left promiscuous mode [ 362.738759][ T6622] veth0_macvtap: left promiscuous mode [ 362.746123][ T6622] veth1_vlan: left promiscuous mode [ 362.751920][ T6622] veth0_vlan: left promiscuous mode [ 362.976704][ T6622] bond1 (unregistering): Released all slaves [ 364.188146][ T7964] loop1: detected capacity change from 0 to 4096 [ 364.240325][ T7968] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.307322][ T28] audit: type=1800 audit(1788942362.477:9): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.526" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 365.056171][ T6622] team0 (unregistering): Port device team_slave_1 removed [ 365.167456][ T6622] team0 (unregistering): Port device team_slave_0 removed [ 365.255801][ T6622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.357114][ T6622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.878658][ T6622] bond0 (unregistering): Released all slaves [ 366.158805][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.226388][ T7782] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.301377][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.308679][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.375575][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.382844][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.487534][ T7983] 8021q: adding VLAN 0 to HW filter on device .` [ 366.548411][ T7983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.726848][ T7782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.748055][ T7782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.932608][ T5821] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 367.170202][ T5821] usb 2-1: config 0 has no interfaces? [ 367.248361][ T5821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.309921][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.963461][ T5821] usb 2-1: Product: syz [ 367.967731][ T5821] usb 2-1: Manufacturer: syz [ 367.998097][ T5821] usb 2-1: SerialNumber: syz [ 368.028677][ T5821] usb 2-1: config 0 descriptor?? [ 369.596070][ T8011] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 369.949155][ T5821] usb 2-1: USB disconnect, device number 4 [ 370.131124][ T7782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.585741][ T7782] veth0_vlan: entered promiscuous mode [ 372.658718][ T7782] veth1_vlan: entered promiscuous mode [ 373.209005][ T7782] veth0_macvtap: entered promiscuous mode [ 373.578708][ T7782] veth1_macvtap: entered promiscuous mode [ 373.692015][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.763274][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.808327][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.842620][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.872473][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.902548][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.940100][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.962574][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.984644][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.014563][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.043471][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.062855][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.082495][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.117386][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.128687][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.139610][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.156896][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.170694][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.201198][ T7782] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.217390][ T7782] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.228497][ T7782] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.245757][ T7782] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.329971][ T8056] loop3: detected capacity change from 0 to 512 [ 374.426215][ T8056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.483702][ T8056] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.488757][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.502001][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.593938][ T4823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.601855][ T4823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.238144][ T8064] loop1: detected capacity change from 0 to 2048 [ 375.364768][ T8064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.573195][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.639362][ T8069] xt_l2tp: invalid flags combination: 0 [ 376.595014][ T8078] loop3: detected capacity change from 0 to 256 [ 378.451198][ T8078] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 378.585119][ T28] audit: type=1800 audit(1788942376.747:10): pid=8078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.545" name="file1" dev="loop3" ino=1048608 res=0 errno=0 [ 378.689234][ T8086] loop1: detected capacity change from 0 to 1024 [ 378.749303][ T8086] EXT4-fs (loop1): orphan cleanup on readonly fs [ 378.788470][ T8086] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 378.852605][ T8086] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 378.862335][ T8086] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.547: Failed to acquire dquot type 0 [ 379.000746][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.085572][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.304906][ T8086] EXT4-fs (loop1): 1 truncate cleaned up [ 379.430039][ T8086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.180184][ T7975] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 380.393845][ T7975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.449745][ T7975] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 380.489613][ T7975] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 380.577302][ T7975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.719498][ T7975] usb 2-1: config 0 descriptor?? [ 381.650568][ T8110] FAULT_INJECTION: forcing a failure. [ 381.650568][ T8110] name failslab, interval 1, probability 0, space 0, times 1 [ 381.664112][ T8110] CPU: 1 PID: 8110 Comm: syz.5.553 Not tainted syzkaller #0 [ 381.671565][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.681701][ T8110] Call Trace: [ 381.685545][ T8110] [ 381.688616][ T8110] dump_stack_lvl+0x18c/0x250 [ 381.693547][ T8110] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 381.699389][ T8110] ? show_regs_print_info+0x20/0x20 [ 381.704741][ T8110] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 381.710462][ T8110] should_fail_ex+0x394/0x4c0 [ 381.715266][ T8110] should_failslab+0x9/0x20 [ 381.719876][ T8110] slab_pre_alloc_hook+0x59/0x300 [ 381.725026][ T8110] kmem_cache_alloc+0x5a/0x2c0 [ 381.729850][ T8110] ? zswap_store+0x77b/0x1e70 [ 381.734586][ T8110] zswap_store+0x77b/0x1e70 [ 381.739159][ T8110] ? lockdep_hardirqs_on+0x98/0x150 [ 381.744512][ T8110] ? drain_slots_cache_cpu+0x3f0/0x3f0 [ 381.750215][ T8110] ? folio_free_swap+0x4e4/0xc30 [ 381.755228][ T8110] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 381.760886][ T8110] ? folio_free_swap+0x4e4/0xc30 [ 381.765886][ T8110] swap_writepage+0x7e/0x190 [ 381.770573][ T8110] shrink_folio_list+0x2e55/0x7e80 [ 381.775788][ T8110] ? reclaim_clean_pages_from_list+0xc00/0xc00 [ 381.782153][ T8110] ? verify_lock_unused+0x140/0x140 [ 381.787459][ T8110] ? mark_lock+0x94/0x320 [ 381.791865][ T8110] ? mark_lock+0x94/0x320 [ 381.796286][ T8110] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 381.802336][ T8110] ? __lock_acquire+0x7d80/0x7d80 [ 381.807433][ T8110] ? lock_chain_count+0x20/0x20 [ 381.812400][ T8110] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 381.818487][ T8110] ? lockdep_hardirqs_on+0x98/0x150 [ 381.823846][ T8110] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 381.829803][ T8110] ? _raw_spin_unlock+0x10/0x40 [ 381.834735][ T8110] reclaim_folio_list+0xf6/0x3a0 [ 381.839921][ T8110] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 381.846596][ T8110] ? reclaim_pages+0x690/0x690 [ 381.851452][ T8110] reclaim_pages+0x574/0x690 [ 381.856131][ T8110] ? folio_isolate_lru+0xef0/0xef0 [ 381.861322][ T8110] ? preempt_schedule_thunk+0x1a/0x30 [ 381.866915][ T8110] madvise_cold_or_pageout_pte_range+0x1932/0x2030 [ 381.873491][ T8110] ? lock_chain_count+0x20/0x20 [ 381.878514][ T8110] ? folio_put+0xd0/0xd0 [ 381.882833][ T8110] ? walk_pgd_range+0xb54/0x1810 [ 381.887867][ T8110] walk_pgd_range+0xc40/0x1810 [ 381.892727][ T8110] ? walk_kernel_page_table_range+0x260/0x260 [ 381.898864][ T8110] __walk_page_range+0x137/0x5b0 [ 381.903867][ T8110] ? process_vma_walk_lock+0x140/0x450 [ 381.909386][ T8110] walk_page_range+0x35a/0x520 [ 381.914214][ T8110] ? page_mapped_in_vma+0x9a0/0x9a0 [ 381.919489][ T8110] ? mlock_drain_local+0x79/0x490 [ 381.924623][ T8110] do_madvise+0x24e4/0x3790 [ 381.929214][ T8110] ? madvise_set_anon_name+0x440/0x440 [ 381.934753][ T8110] ? schedule+0xc7/0x170 [ 381.939179][ T8110] ? futex_wait_queue+0x27/0x1b0 [ 381.944236][ T8110] ? futex_wait_queue+0x138/0x1b0 [ 381.949401][ T8110] ? futex_unqueue+0xcb/0xf0 [ 381.954049][ T8110] ? futex_wait+0x4a7/0x5c0 [ 381.958628][ T8110] ? futex_wait_setup+0x270/0x270 [ 381.963790][ T8110] ? do_futex+0x2ff/0x3e0 [ 381.968183][ T8110] ? __ia32_sys_get_robust_list+0x110/0x110 [ 381.974159][ T8110] ? lock_chain_count+0x20/0x20 [ 381.979113][ T8110] __x64_sys_madvise+0xa6/0xc0 [ 381.984012][ T8110] do_syscall_64+0x55/0xb0 [ 381.988512][ T8110] ? clear_bhb_loop+0x40/0x90 [ 381.993264][ T8110] ? clear_bhb_loop+0x40/0x90 [ 381.998011][ T8110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.004196][ T8110] RIP: 0033:0x7fc6bed9e159 [ 382.008793][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.028693][ T8110] RSP: 002b:00007fc6bfbbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 382.037185][ T8110] RAX: ffffffffffffffda RBX: 00007fc6bf026090 RCX: 00007fc6bed9e159 [ 382.045227][ T8110] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 382.053276][ T8110] RBP: 00007fc6bee3503b R08: 0000000000000000 R09: 0000000000000000 [ 382.061347][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.069473][ T8110] R13: 00007fc6bf026128 R14: 00007fc6bf026090 R15: 00007ffc27de22d8 [ 382.077551][ T8110] [ 382.788993][ T7975] usb 2-1: Direct firmware load for ar3k/AthrBT_0x00000000.dfu failed with error -2 [ 382.870895][ T7975] usb 2-1: Falling back to sysfs fallback for: ar3k/AthrBT_0x00000000.dfu [ 383.098692][ T8115] tipc: Failed to remove unknown binding: 66,0,0/0:1099463452/1099463453 [ 383.114497][ T8118] tipc: Failed to remove unknown binding: 66,0,0/0:3252497769/3252497771 [ 383.186728][ T8115] tipc: Failed to remove unknown binding: 66,0,0/0:1099463452/1099463453 [ 384.514183][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.343093][ T8130] syzkaller0: entered promiscuous mode [ 385.387547][ T8130] syzkaller0: entered allmulticast mode [ 385.537700][ T8136] tipc: Started in network mode [ 385.666183][ T8136] tipc: Node identity 72bd10c774b9, cluster identity 4711 [ 385.859224][ T8136] tipc: Enabled bearer , priority 0 [ 386.079686][ T8127] tipc: Resetting bearer [ 388.123787][ T8127] tipc: Disabling bearer [ 388.264321][ T7977] tipc: Node number set to 100929735 [ 388.291564][ T8152] netlink: 550 bytes leftover after parsing attributes in process `syz.3.562'. [ 390.368193][ T8173] FAULT_INJECTION: forcing a failure. [ 390.368193][ T8173] name failslab, interval 1, probability 0, space 0, times 0 [ 390.381601][ T8173] CPU: 1 PID: 8173 Comm: syz.2.564 Not tainted syzkaller #0 [ 390.388968][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.399079][ T8173] Call Trace: [ 390.402405][ T8173] [ 390.405381][ T8173] dump_stack_lvl+0x18c/0x250 [ 390.410127][ T8173] ? show_regs_print_info+0x20/0x20 [ 390.415381][ T8173] ? load_image+0x420/0x420 [ 390.419996][ T8173] ? __might_sleep+0xe0/0xe0 [ 390.424679][ T8173] should_fail_ex+0x394/0x4c0 [ 390.429420][ T8173] should_failslab+0x9/0x20 [ 390.433984][ T8173] slab_pre_alloc_hook+0x59/0x300 [ 390.439083][ T8173] kmem_cache_alloc+0x5a/0x2c0 [ 390.443910][ T8173] ? zswap_store+0x77b/0x1e70 [ 390.448687][ T8173] zswap_store+0x77b/0x1e70 [ 390.453257][ T8173] ? folio_free_swap+0x4c6/0xc30 [ 390.458246][ T8173] ? do_raw_spin_lock+0x11f/0x2b0 [ 390.463336][ T8173] ? drain_slots_cache_cpu+0x3f0/0x3f0 [ 390.468860][ T8173] ? _raw_spin_unlock+0x28/0x40 [ 390.473762][ T8173] ? folio_free_swap+0x4e4/0xc30 [ 390.478759][ T8173] swap_writepage+0x7e/0x190 [ 390.483415][ T8173] shrink_folio_list+0x2e55/0x7e80 [ 390.488625][ T8173] ? reclaim_clean_pages_from_list+0xc00/0xc00 [ 390.494853][ T8173] ? verify_lock_unused+0x140/0x140 [ 390.500120][ T8173] ? mark_lock+0x94/0x320 [ 390.504515][ T8173] ? mark_lock+0x94/0x320 [ 390.508902][ T8173] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 390.514950][ T8173] ? __lock_acquire+0x7d80/0x7d80 [ 390.520059][ T8173] ? lock_chain_count+0x20/0x20 [ 390.524976][ T8173] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 390.530940][ T8173] ? lockdep_hardirqs_on+0x98/0x150 [ 390.536208][ T8173] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 390.542188][ T8173] ? _raw_spin_unlock+0x10/0x40 [ 390.547095][ T8173] reclaim_folio_list+0xf6/0x3a0 [ 390.552094][ T8173] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 390.558752][ T8173] ? reclaim_pages+0x690/0x690 [ 390.563610][ T8173] reclaim_pages+0x574/0x690 [ 390.568277][ T8173] ? folio_isolate_lru+0xef0/0xef0 [ 390.573453][ T8173] ? preempt_schedule_thunk+0x1a/0x30 [ 390.578900][ T8173] madvise_cold_or_pageout_pte_range+0x1932/0x2030 [ 390.585583][ T8173] ? folio_put+0xd0/0xd0 [ 390.589897][ T8173] ? lock_release+0x594/0x8c0 [ 390.594650][ T8173] walk_pgd_range+0xc40/0x1810 [ 390.599502][ T8173] ? walk_kernel_page_table_range+0x260/0x260 [ 390.605641][ T8173] __walk_page_range+0x137/0x5b0 [ 390.610645][ T8173] ? process_vma_walk_lock+0x140/0x450 [ 390.616162][ T8173] walk_page_range+0x35a/0x520 [ 390.621008][ T8173] ? page_mapped_in_vma+0x9a0/0x9a0 [ 390.626286][ T8173] ? mlock_drain_local+0x79/0x490 [ 390.631430][ T8173] do_madvise+0x24e4/0x3790 [ 390.636026][ T8173] ? madvise_set_anon_name+0x440/0x440 [ 390.641578][ T8173] ? schedule+0xc7/0x170 [ 390.645884][ T8173] ? futex_wait_queue+0x27/0x1b0 [ 390.650984][ T8173] ? futex_wait_queue+0x138/0x1b0 [ 390.656075][ T8173] ? futex_unqueue+0xcb/0xf0 [ 390.660730][ T8173] ? futex_wait+0x4a7/0x5c0 [ 390.665307][ T8173] ? futex_wait_setup+0x270/0x270 [ 390.670418][ T8173] ? file_end_write+0x159/0x250 [ 390.675335][ T8173] ? vfs_write+0x5de/0x9a0 [ 390.679822][ T8173] ? do_futex+0x2ff/0x3e0 [ 390.684222][ T8173] ? __ia32_sys_get_robust_list+0x110/0x110 [ 390.690239][ T8173] ? lock_chain_count+0x20/0x20 [ 390.695226][ T8173] __x64_sys_madvise+0xa6/0xc0 [ 390.700067][ T8173] do_syscall_64+0x55/0xb0 [ 390.704550][ T8173] ? clear_bhb_loop+0x40/0x90 [ 390.709288][ T8173] ? clear_bhb_loop+0x40/0x90 [ 390.714029][ T8173] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.719986][ T8173] RIP: 0033:0x7f525b39e159 [ 390.724454][ T8173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.744210][ T8173] RSP: 002b:00007f525c302028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 390.752692][ T8173] RAX: ffffffffffffffda RBX: 00007f525b626090 RCX: 00007f525b39e159 [ 390.760829][ T8173] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 390.768858][ T8173] RBP: 00007f525b43503b R08: 0000000000000000 R09: 0000000000000000 [ 390.776887][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.784940][ T8173] R13: 00007f525b626128 R14: 00007f525b626090 R15: 00007fff2635e778 [ 390.792992][ T8173] [ 391.572670][ T51] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 391.582200][ T51] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 391.589547][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 391.851801][ T23] usb 6-1: config 0 has no interfaces? [ 391.867804][ T8185] loop3: detected capacity change from 0 to 128 [ 391.892196][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.924816][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.961506][ T23] usb 6-1: Product: syz [ 391.976102][ T23] usb 6-1: Manufacturer: syz [ 393.752484][ T6362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 393.762825][ T23] usb 6-1: SerialNumber: syz [ 393.784139][ T23] usb 6-1: config 0 descriptor?? [ 394.576969][ T23] usb 6-1: USB disconnect, device number 2 [ 395.007647][ T8196] Need at least one configuration in g1. [ 395.041106][ T8196] udc dummy_udc.0: failed to start g1: -22 [ 395.062738][ T8196] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 395.109075][ T8196] UDC core: g1: couldn't find an available UDC or it's busy [ 395.642923][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 395.653502][ T5085] Bluetooth: hci1: Injecting HCI hardware error event [ 395.663506][ T5085] Bluetooth: hci1: hardware error 0x00 [ 395.792984][ T5780] Bluetooth: hci4: command 0x0406 tx timeout [ 400.524701][ T5085] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 401.771413][ T8234] loop5: detected capacity change from 0 to 4096 [ 401.789658][ T8236] netlink: 'syz.3.578': attribute type 1 has an invalid length. [ 401.815888][ T8238] loop2: detected capacity change from 0 to 256 [ 401.824408][ T8238] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.886205][ T8238] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 401.943241][ T8241] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 402.017143][ T8238] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 402.042288][ T28] audit: type=1800 audit(1788942400.207:11): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.576" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 402.057900][ T8236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.082751][ T8238] exFAT-fs (loop2): failed to load alloc-bitmap [ 402.089205][ T8238] exFAT-fs (loop2): failed to recognize exfat type [ 402.223683][ T8242] bond3: (slave geneve2): making interface the new active one [ 402.232865][ T6363] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.261572][ T8242] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 403.677805][ T8256] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 403.699086][ T8257] loop2: detected capacity change from 0 to 128 [ 403.799871][ T6362] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.935040][ T8268] loop1: detected capacity change from 0 to 8 [ 405.018943][ T8268] SQUASHFS error: lzo decompression failed, data probably corrupt [ 405.062614][ T8268] SQUASHFS error: Failed to read block 0x91: -5 [ 405.092354][ T8268] SQUASHFS error: Unable to read metadata cache entry [8f] [ 405.130870][ T8268] SQUASHFS error: Unable to read inode 0x11f [ 407.943463][ T8287] loop3: detected capacity change from 0 to 256 [ 407.992040][ T8287] exfat: Unknown parameter 'ÿÿ0x0000000000000000' [ 409.874751][ T8305] loop2: detected capacity change from 0 to 256 [ 410.009968][ T8305] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 410.326576][ T8308] loop3: detected capacity change from 0 to 4096 [ 410.742928][ T8313] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 410.762547][ T28] audit: type=1800 audit(1788942408.637:12): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.592" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 410.903310][ T28] audit: type=1800 audit(1788942408.667:13): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.592" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 411.044775][ T28] audit: type=1800 audit(1788942409.147:14): pid=8308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.593" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 412.491062][ T8336] loop2: detected capacity change from 0 to 512 [ 412.513524][ T8336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 412.589019][ T8336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.653891][ T8336] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.751098][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.556401][ T8370] FAULT_INJECTION: forcing a failure. [ 415.556401][ T8370] name failslab, interval 1, probability 0, space 0, times 0 [ 415.569646][ T8370] CPU: 1 PID: 8370 Comm: syz.1.600 Not tainted syzkaller #0 [ 415.577002][ T8370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.587115][ T8370] Call Trace: [ 415.590445][ T8370] [ 415.593468][ T8370] dump_stack_lvl+0x18c/0x250 [ 415.598305][ T8370] ? show_regs_print_info+0x20/0x20 [ 415.603577][ T8370] ? load_image+0x420/0x420 [ 415.608149][ T8370] ? __might_sleep+0xe0/0xe0 [ 415.612828][ T8370] should_fail_ex+0x394/0x4c0 [ 415.617580][ T8370] should_failslab+0x9/0x20 [ 415.622244][ T8370] slab_pre_alloc_hook+0x59/0x300 [ 415.627439][ T8370] kmem_cache_alloc+0x5a/0x2c0 [ 415.632274][ T8370] ? zswap_store+0x77b/0x1e70 [ 415.637281][ T8370] zswap_store+0x77b/0x1e70 [ 415.641915][ T8370] ? folio_free_swap+0x4c6/0xc30 [ 415.646972][ T8370] ? do_raw_spin_lock+0x11f/0x2b0 [ 415.652072][ T8370] ? drain_slots_cache_cpu+0x3f0/0x3f0 [ 415.657644][ T8370] ? _raw_spin_unlock+0x28/0x40 [ 415.662574][ T8370] ? folio_free_swap+0x4e4/0xc30 [ 415.667642][ T8370] swap_writepage+0x7e/0x190 [ 415.672310][ T8370] shrink_folio_list+0x2e55/0x7e80 [ 415.677536][ T8370] ? reclaim_clean_pages_from_list+0xc00/0xc00 [ 415.683796][ T8370] ? verify_lock_unused+0x140/0x140 [ 415.689073][ T8370] ? mark_lock+0x94/0x320 [ 415.693509][ T8370] ? mark_lock+0x94/0x320 [ 415.698064][ T8370] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 415.704147][ T8370] ? __lock_acquire+0x7d80/0x7d80 [ 415.709238][ T8370] ? lock_chain_count+0x20/0x20 [ 415.714169][ T8370] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 415.720128][ T8370] ? lockdep_hardirqs_on+0x98/0x150 [ 415.725394][ T8370] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 415.731354][ T8370] ? _raw_spin_unlock+0x10/0x40 [ 415.736298][ T8370] reclaim_folio_list+0xf6/0x3a0 [ 415.741345][ T8370] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 415.748016][ T8370] ? reclaim_pages+0x690/0x690 [ 415.752926][ T8370] reclaim_pages+0x574/0x690 [ 415.757614][ T8370] ? folio_isolate_lru+0xef0/0xef0 [ 415.762830][ T8370] ? preempt_schedule_thunk+0x1a/0x30 [ 415.768325][ T8370] madvise_cold_or_pageout_pte_range+0x1932/0x2030 [ 415.774905][ T8370] ? lock_chain_count+0x20/0x20 [ 415.779920][ T8370] ? folio_put+0xd0/0xd0 [ 415.784257][ T8370] walk_pgd_range+0xc40/0x1810 [ 415.789118][ T8370] ? walk_kernel_page_table_range+0x260/0x260 [ 415.795270][ T8370] __walk_page_range+0x137/0x5b0 [ 415.800755][ T8370] ? process_vma_walk_lock+0x140/0x450 [ 415.806284][ T8370] walk_page_range+0x35a/0x520 [ 415.811131][ T8370] ? page_mapped_in_vma+0x9a0/0x9a0 [ 415.816409][ T8370] ? mlock_drain_local+0x79/0x490 [ 415.821510][ T8370] do_madvise+0x24e4/0x3790 [ 415.826109][ T8370] ? madvise_set_anon_name+0x440/0x440 [ 415.831649][ T8370] ? schedule+0xc7/0x170 [ 415.836086][ T8370] ? futex_wait_queue+0x27/0x1b0 [ 415.841106][ T8370] ? futex_wait_queue+0x138/0x1b0 [ 415.846202][ T8370] ? futex_unqueue+0xcb/0xf0 [ 415.850858][ T8370] ? futex_wait+0x4a7/0x5c0 [ 415.855448][ T8370] ? futex_wait_setup+0x270/0x270 [ 415.860673][ T8370] ? file_end_write+0x159/0x250 [ 415.865685][ T8370] ? vfs_write+0x5de/0x9a0 [ 415.870172][ T8370] ? do_futex+0x2ff/0x3e0 [ 415.874575][ T8370] ? __ia32_sys_get_robust_list+0x110/0x110 [ 415.880553][ T8370] ? lock_chain_count+0x20/0x20 [ 415.885477][ T8370] __x64_sys_madvise+0xa6/0xc0 [ 415.890334][ T8370] do_syscall_64+0x55/0xb0 [ 415.894902][ T8370] ? clear_bhb_loop+0x40/0x90 [ 415.899637][ T8370] ? clear_bhb_loop+0x40/0x90 [ 415.904381][ T8370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.910339][ T8370] RIP: 0033:0x7fac4459e159 [ 415.914837][ T8370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.934525][ T8370] RSP: 002b:00007fac453c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 415.943096][ T8370] RAX: ffffffffffffffda RBX: 00007fac44826090 RCX: 00007fac4459e159 [ 415.951134][ T8370] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 415.959165][ T8370] RBP: 00007fac4463503b R08: 0000000000000000 R09: 0000000000000000 [ 415.967206][ T8370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.975233][ T8370] R13: 00007fac44826128 R14: 00007fac44826090 R15: 00007ffe4a504518 [ 415.983368][ T8370] [ 416.782872][ T7977] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 418.187776][ T7977] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.264372][ T7977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 418.294262][ T7977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 418.355215][ T7977] usb 3-1: Product: syz [ 418.359470][ T7977] usb 3-1: Manufacturer: syz [ 418.642156][ T7977] usb 3-1: SerialNumber: syz [ 419.510638][ T7977] usb 3-1: can't set config #1, error -71 [ 419.518263][ T7977] usb 3-1: USB disconnect, device number 4 [ 419.592855][ T8386] loop5: detected capacity change from 0 to 4096 [ 419.787060][ T8396] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.785321][ T28] audit: type=1800 audit(1788942418.937:15): pid=8386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.606" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 421.568569][ T8410] syz_tun: entered allmulticast mode [ 425.957393][ T8447] syzkaller0: entered promiscuous mode [ 425.972287][ T8447] syzkaller0: entered allmulticast mode [ 427.322529][ T5783] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 427.581239][ T5783] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 427.678868][ T5783] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 427.931122][ T5783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 249, changing to 11 [ 428.129978][ T5783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 18234, setting to 1024 [ 428.453355][ T5783] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 428.463335][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.531977][ T8449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 428.553708][ T8449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 428.586163][ T8449] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 428.623508][ T5783] pl2303 6-1:1.0: pl2303 converter detected [ 428.641822][ T5783] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 428.818937][ T8470] loop3: detected capacity change from 0 to 512 [ 428.862462][ T8470] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 428.945318][ T8470] EXT4-fs (loop3): 1 truncate cleaned up [ 429.006230][ T8470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.092039][ T8449] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 429.120497][ T8449] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 429.166784][ T8449] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 429.182336][ T8449] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 429.384311][ T8449] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 430.207802][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.730719][ T8448] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 430.746193][ T8448] pl2303 ttyUSB0: error sending break = -32 [ 430.764709][ T5783] usb 6-1: USB disconnect, device number 3 [ 430.817236][ T5783] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 430.830068][ T5783] pl2303 6-1:1.0: device disconnected [ 435.833823][ T8523] syzkaller0: entered promiscuous mode [ 435.879411][ T8523] syzkaller0: entered allmulticast mode [ 436.596419][ T8532] loop1: detected capacity change from 0 to 1024 [ 436.643960][ T8532] EXT4-fs: Ignoring removed bh option [ 436.693949][ T8532] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 436.767835][ T8532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.058626][ T8532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.718759][ T8548] loop3: detected capacity change from 0 to 512 [ 437.895677][ T8548] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 437.913591][ T8548] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #11: comm syz.3.629: corrupted inode contents [ 437.932708][ T8548] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #11: comm syz.3.629: mark_inode_dirty error [ 437.948256][ T8548] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.629: invalid indirect mapped block 1 (level 1) [ 437.974774][ T8548] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #11: comm syz.3.629: corrupted inode contents [ 437.998873][ T8548] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 438.010884][ T8548] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #11: comm syz.3.629: corrupted inode contents [ 438.056012][ T8548] EXT4-fs error (device loop3): ext4_truncate:4302: inode #11: comm syz.3.629: mark_inode_dirty error [ 438.085377][ T8548] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 438.094864][ T8548] EXT4-fs (loop3): 1 truncate cleaned up [ 438.103039][ T8548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.398923][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.431315][ T8561] kvm: emulating exchange as write [ 438.719764][ T8570] md: couldn't update array info. -22 [ 442.346334][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.366064][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.588152][ T8610] loop3: detected capacity change from 0 to 512 [ 442.654753][ T8610] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 442.732549][ T8610] EXT4-fs (loop3): 1 truncate cleaned up [ 442.739685][ T8610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.770178][ T8613] binder: 8611:8613 ioctl c0306201 200000000180 returned -14 [ 444.293994][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.648701][ T7975] Bluetooth: Patch file not found ar3k/AthrBT_0x00000000.dfu [ 445.756869][ T7975] Bluetooth: Loading patch file failed [ 445.782543][ T7975] ath3k: probe of 2-1:0.0 failed with error -110 [ 445.888796][ T7975] usb 2-1: USB disconnect, device number 5 [ 447.107779][ T8663] syzkaller0: entered promiscuous mode [ 447.113532][ T8663] syzkaller0: entered allmulticast mode [ 453.160153][ T8728] loop3: detected capacity change from 0 to 1024 [ 453.242611][ T8728] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 454.367125][ T8728] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.677: lblock 2 mapped to illegal pblock 2 (length 1) [ 454.472750][ T8728] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 454.509297][ T8728] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.677: lblock 0 mapped to illegal pblock 48 (length 1) [ 454.756844][ T8728] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 455.533040][ T8728] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.677: Failed to acquire dquot type 0 [ 455.552103][ T8745] loop5: detected capacity change from 0 to 1024 [ 455.591077][ T8745] EXT4-fs: Ignoring removed bh option [ 455.609422][ T8728] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 455.665764][ T8728] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.677: mark_inode_dirty error [ 455.679489][ T8745] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 455.699175][ T8728] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 455.752813][ T8728] EXT4-fs (loop3): 1 orphan inode deleted [ 455.773845][ T170] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 455.795069][ T8728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.829141][ T8745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.091911][ T170] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 456.865089][ T170] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 457.018210][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.093598][ T5772] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 457.153508][ T8745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.209453][ T5772] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 457.252894][ T5772] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 458.581186][ T8780] netlink: 48 bytes leftover after parsing attributes in process `syz.3.689'. [ 458.814071][ T8783] netlink: 'syz.3.689': attribute type 4 has an invalid length. [ 458.821811][ T8783] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.689'. [ 459.525187][ T8761] loop1: detected capacity change from 0 to 32768 [ 459.687820][ T8761] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 461.797418][ T8761] XFS (loop1): Ending clean mount [ 461.894518][ T5774] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 468.195251][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 471.389809][ T8881] syzkaller0: entered promiscuous mode [ 471.412664][ T8881] syzkaller0: entered allmulticast mode [ 474.769274][ T8928] loop5: detected capacity change from 0 to 512 [ 474.813689][ T8928] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 474.859359][ T8928] EXT4-fs (loop5): 1 truncate cleaned up [ 474.878283][ T8928] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.968484][ T7782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.391824][ T8947] loop3: detected capacity change from 0 to 512 [ 476.491509][ T8947] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 477.139780][ T8947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.242579][ T8947] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.594801][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.633599][ T7977] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 480.582761][ T7977] usb 2-1: Using ep0 maxpacket: 16 [ 480.669460][ T7977] usb 2-1: device descriptor read/all, error -71 [ 480.874865][ T8989] loop5: detected capacity change from 0 to 1024 [ 480.910817][ T8992] loop1: detected capacity change from 0 to 512 [ 480.962780][ T8992] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 481.007969][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.021147][ T8992] EXT4-fs (loop1): 1 truncate cleaned up [ 481.052608][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.069327][ T8992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.144430][ T8995] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.176234][ T8995] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.395639][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.618514][ T8998] loop2: detected capacity change from 0 to 32768 [ 481.810501][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.953162][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 481.993077][ T8998] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 482.027818][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.094723][ T8995] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.159006][ T8998] XFS (loop2): Ending clean mount [ 482.169410][ T8995] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.435224][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.582862][ T9009] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.590259][ T9009] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.686588][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.702762][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.724169][ T9011] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.731551][ T9011] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.793636][ T9013] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.815937][ T9013] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.838906][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 482.872754][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.880132][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.903638][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.911206][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.946276][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 482.962954][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.144628][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 483.201071][ T8989] hfsplus: request for non-existent node 33423360 in B*Tree [ 489.132751][ T9047] loop3: detected capacity change from 0 to 2048 [ 489.210128][ T9047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.709158][ T9073] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 494.916352][ T9088] loop1: detected capacity change from 0 to 2048 [ 494.939473][ T9091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.746'. [ 495.031261][ T9088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.357628][ T9101] loop5: detected capacity change from 0 to 2048 [ 497.670827][ T9101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.815003][ T7782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.027127][ T9120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.863347][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.751'. [ 499.872293][ T9124] bond4: entered promiscuous mode [ 500.063331][ T9129] dummy0: entered promiscuous mode [ 500.133752][ T9129] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 501.253505][ T9141] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 501.549689][ T9141] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 501.767411][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 501.879773][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.897891][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.727251][ T9154] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 507.065147][ T9176] tipc: Enabled bearer , priority 0 [ 507.120106][ T9176] syzkaller0: entered promiscuous mode [ 507.135352][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 507.139431][ T9176] syzkaller0: entered allmulticast mode [ 507.193205][ T9176] tipc: Resetting bearer [ 507.240089][ T9172] tipc: Resetting bearer [ 507.293686][ T9181] loop2: detected capacity change from 0 to 512 [ 507.320126][ T9181] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 507.358637][ T9172] tipc: Disabling bearer [ 507.442531][ T9181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.457076][ T9181] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.756289][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.681891][ T9229] loop2: detected capacity change from 0 to 2048 [ 517.728957][ T9229] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 518.939658][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 519.011830][ T9238] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 519.634529][ T9241] bond5: entered promiscuous mode [ 519.639647][ T9241] bond5: entered allmulticast mode [ 519.752621][ T9245] syzkaller0: entered promiscuous mode [ 519.758196][ T9245] syzkaller0: entered allmulticast mode [ 521.920522][ T9255] loop2: detected capacity change from 0 to 512 [ 521.938202][ T9255] EXT4-fs (loop2): Test dummy encryption mode enabled [ 521.972196][ T9255] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 523.699835][ T9255] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 523.806428][ T9255] EXT4-fs (loop2): 1 truncate cleaned up [ 523.840802][ T9255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.095966][ T9271] bridge0: port 3(ip6gretap0) entered blocking state [ 525.103494][ T9271] bridge0: port 3(ip6gretap0) entered disabled state [ 525.113669][ T9271] ip6gretap0: entered allmulticast mode [ 525.157599][ T9271] ip6gretap0: entered promiscuous mode [ 525.175613][ T9271] bridge0: port 3(ip6gretap0) entered blocking state [ 525.182523][ T9271] bridge0: port 3(ip6gretap0) entered forwarding state [ 525.423087][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.955311][ T9299] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 531.467393][ T9311] loop3: detected capacity change from 0 to 128 [ 531.520612][ T9311] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 531.540651][ T9311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 534.822638][ T5783] IPVS: starting estimator thread 0... [ 534.856382][ T9323] unsupported nlmsg_type 40 [ 534.945864][ T9322] IPVS: using max 16 ests per chain, 38400 per kthread [ 536.397234][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.805'. [ 536.754404][ T9347] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 537.436330][ T9343] bond2: entered promiscuous mode [ 537.441702][ T9343] bond2: entered allmulticast mode [ 547.636694][ T9380] loop1: detected capacity change from 0 to 128 [ 547.715309][ T9380] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 547.819601][ T6362] udevd[6362]: incorrect ext4 checksum on /dev/loop1 [ 550.414455][ T9384] loop3: detected capacity change from 0 to 32768 [ 553.982496][ T7977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 555.842637][ T7977] usb 4-1: Using ep0 maxpacket: 32 [ 555.858994][ T7977] usb 4-1: config 0 has no interfaces? [ 555.875078][ T7977] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 555.892662][ T7977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.911105][ T7977] usb 4-1: Product: syz [ 555.916683][ T7977] usb 4-1: Manufacturer: syz [ 555.921439][ T7977] usb 4-1: SerialNumber: syz [ 555.942147][ T7977] usb 4-1: config 0 descriptor?? [ 556.192087][ T5842] usb 4-1: USB disconnect, device number 5 [ 562.549518][ T7977] IPVS: starting estimator thread 0... [ 563.279596][ T9449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.834'. [ 563.343089][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.349717][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.356340][ T9448] IPVS: using max 16 ests per chain, 38400 per kthread [ 574.271182][ T9477] bond5: option use_carrier: invalid value (5) [ 574.312938][ T9477] bond5 (unregistering): Released all slaves [ 576.826415][ T9512] loop2: detected capacity change from 0 to 1024 [ 576.923512][ T9512] EXT4-fs: Ignoring removed oldalloc option [ 577.025249][ T9512] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.182461][ T9512] EXT4-fs (loop2): unsupported descriptor size 0 [ 577.427604][ T9535] loop2: detected capacity change from 0 to 1024 [ 578.417419][ T9537] tipc: Started in network mode [ 580.093582][ T9537] tipc: Node identity ac14142f, cluster identity 4711 [ 580.129299][ T9537] tipc: New replicast peer: 127.0.0.1 [ 580.167690][ T9537] tipc: Enabled bearer , priority 10 [ 580.313889][ T9544] loop1: detected capacity change from 0 to 512 [ 580.341341][ T9544] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 580.353090][ T9544] System zones: 1-12 [ 580.371593][ T9544] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.842: missing EA_INODE flag [ 580.391062][ T9544] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.842: error while reading EA inode 12 err=-117 [ 580.453448][ T9544] EXT4-fs (loop1): 1 orphan inode deleted [ 580.460982][ T9544] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.546621][ T5861] tipc: Node number set to 2886997039 [ 581.625838][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.395833][ T9577] loop1: detected capacity change from 0 to 512 [ 585.453087][ T9577] EXT4-fs (loop1): Test dummy encryption mode enabled [ 585.459965][ T9577] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 585.506485][ T9579] random: crng reseeded on system resumption [ 585.613556][ T9577] EXT4-fs (loop1): 1 truncate cleaned up [ 585.636906][ T9577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.937707][ T9592] bridge0: port 3(ip6gretap0) entered blocking state [ 585.950926][ T9592] bridge0: port 3(ip6gretap0) entered disabled state [ 586.039278][ T9592] ip6gretap0: entered allmulticast mode [ 586.153854][ T9592] ip6gretap0: entered promiscuous mode [ 586.160287][ T9592] bridge0: port 3(ip6gretap0) entered blocking state [ 586.167197][ T9592] bridge0: port 3(ip6gretap0) entered forwarding state [ 586.563463][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.936723][ T9677] loop1: detected capacity change from 0 to 1024 [ 590.983814][ T9677] EXT4-fs: Ignoring removed oldalloc option [ 591.012598][ T9677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 591.024847][ T9677] EXT4-fs (loop1): unsupported descriptor size 0 [ 591.059597][ T9680] netlink: 'syz.5.869': attribute type 1 has an invalid length. [ 592.553442][ T9683] 8021q: adding VLAN 0 to HW filter on device bond2 [ 592.603676][ T9683] bond1: (slave bond2): making interface the new active one [ 592.632513][ T9683] bond1: (slave bond2): Enslaving as an active interface with an up link [ 592.681642][ T9687] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 598.162751][ T9740] loop1: detected capacity change from 0 to 128 [ 598.276159][ T9740] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 601.577378][ T9784] autofs4:pid:9784:autofs_fill_super: called with bogus options [ 606.701886][ T9799] netlink: 'syz.2.890': attribute type 4 has an invalid length. [ 607.038840][ T9803] loop2: detected capacity change from 0 to 128 [ 607.073591][ T9803] EXT4-fs: Ignoring removed bh option [ 607.151255][ T9803] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 607.833171][ T9803] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.992011][ T28] audit: type=1326 audit(1788942606.057:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9807 comm="syz.1.893" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4459e159 code=0x0 [ 608.495044][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.392517][ T28] audit: type=1326 audit(1788942610.547:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 612.542595][ T28] audit: type=1326 audit(1788942610.617:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 612.608137][ T28] audit: type=1326 audit(1788942610.617:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 612.632565][ T28] audit: type=1326 audit(1788942610.617:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.299365][ T28] audit: type=1326 audit(1788942610.617:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.431678][ T28] audit: type=1326 audit(1788942610.617:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.456357][ T28] audit: type=1326 audit(1788942610.617:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.480690][ T28] audit: type=1326 audit(1788942610.617:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.504690][ T28] audit: type=1326 audit(1788942610.617:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.529477][ T28] audit: type=1326 audit(1788942610.617:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.553782][ T28] audit: type=1326 audit(1788942610.647:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.577937][ T28] audit: type=1326 audit(1788942610.647:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.602198][ T28] audit: type=1326 audit(1788942610.647:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 613.739745][ T28] audit: type=1326 audit(1788942610.647:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.2.900" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b39e159 code=0x7ffc0000 [ 614.379274][ T9854] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 614.560784][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 614.570872][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 614.603860][ T9858] team0: entered promiscuous mode [ 614.609075][ T9858] team_slave_0: entered promiscuous mode [ 614.622939][ T9858] team_slave_1: entered promiscuous mode [ 614.651892][ T9858] .`: entered promiscuous mode [ 614.669356][ T9858] bond_slave_0: entered promiscuous mode [ 614.675563][ T9858] bond_slave_1: entered promiscuous mode [ 614.682847][ T9858] .`: left promiscuous mode [ 614.687444][ T9858] bond_slave_0: left promiscuous mode [ 614.693583][ T9858] bond_slave_1: left promiscuous mode [ 614.704098][ T9858] team0: left promiscuous mode [ 614.709308][ T9858] team_slave_0: left promiscuous mode [ 614.735879][ T9858] team_slave_1: left promiscuous mode [ 620.287731][ T9873] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 622.602723][ T5860] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 624.960238][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.967475][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.745636][ T5860] usb 4-1: device descriptor read/all, error -71 [ 625.902705][ T9931] loop5: detected capacity change from 0 to 512 [ 625.929458][ T9931] EXT4-fs (loop5): Test dummy encryption mode enabled [ 625.949649][ T9931] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 626.053269][ T9931] EXT4-fs (loop5): 1 truncate cleaned up [ 626.106923][ T9931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.122813][ T9935] random: crng reseeded on system resumption [ 626.417673][ T9938] bridge0: port 3(ip6gretap0) entered blocking state [ 626.453980][ T9938] bridge0: port 3(ip6gretap0) entered disabled state [ 626.463307][ T9938] ip6gretap0: entered allmulticast mode [ 626.638267][ T9938] ip6gretap0: entered promiscuous mode [ 626.683749][ T9938] bridge0: port 3(ip6gretap0) entered blocking state [ 626.690676][ T9938] bridge0: port 3(ip6gretap0) entered forwarding state [ 629.763834][ T7782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.202169][ T9957] tipc: Enabled bearer , priority 0 [ 631.233927][ T9957] syzkaller0: entered promiscuous mode [ 631.239525][ T9957] syzkaller0: entered allmulticast mode [ 631.386383][ T9957] tipc: Resetting bearer [ 631.429950][ T9956] tipc: Resetting bearer [ 631.573741][ T9956] tipc: Disabling bearer [ 634.979289][ T9985] loop1: detected capacity change from 0 to 164 [ 635.861653][ T9994] loop3: detected capacity change from 0 to 512 [ 635.927993][ T9994] EXT4-fs (loop3): Test dummy encryption mode enabled [ 635.967708][ T9994] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 636.101041][ T9994] EXT4-fs (loop3): 1 truncate cleaned up [ 636.109224][ T9994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.859707][ T9996] autofs4:pid:9996:autofs_fill_super: called with bogus options [ 637.127207][T10002] bridge0: port 3(ip6gretap0) entered blocking state [ 637.134478][T10002] bridge0: port 3(ip6gretap0) entered disabled state [ 637.142224][T10002] ip6gretap0: entered allmulticast mode [ 637.154102][T10002] ip6gretap0: entered promiscuous mode [ 637.162893][T10002] bridge0: port 3(ip6gretap0) entered blocking state [ 637.169736][T10002] bridge0: port 3(ip6gretap0) entered forwarding state [ 637.415498][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.825647][T10020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 641.892012][T10022] loop1: detected capacity change from 0 to 512 [ 641.961811][T10022] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 642.042714][T10022] System zones: 1-12 [ 642.077062][T10022] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.952: corrupted in-inode xattr: e_value size too large [ 642.194666][T10022] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.952: couldn't read orphan inode 15 (err -117) [ 642.270578][T10022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.694702][T10029] dns_resolver: Unsupported server list version (6) [ 643.127295][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.159130][ T5783] IPVS: starting estimator thread 0... [ 645.283803][T10042] IPVS: using max 26 ests per chain, 62400 per kthread [ 648.612989][T10050] 0x000000000007-0x000000020000 : "" [ 648.624183][T10050] ftl_cs: FTL header corrupt! [ 655.758814][T10092] block device autoloading is deprecated and will be removed. [ 655.796290][T10092] syz.2.968: attempt to access beyond end of device [ 655.796290][T10092] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 660.650581][T10135] loop2: detected capacity change from 0 to 512 [ 660.769301][T10135] EXT4-fs (loop2): Test dummy encryption mode enabled [ 660.839234][T10135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 660.950312][T10135] EXT4-fs (loop2): 1 truncate cleaned up [ 660.979195][T10135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.135998][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.822046][T10180] atomic_op ffff88807db70198 conn xmit_atomic 0000000000000000 [ 669.198289][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 669.198348][ T28] audit: type=1800 audit(1788942667.287:58): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.991" name="memory_backed" dev="configfs" ino=21800 res=0 errno=0 [ 669.565336][ T28] audit: type=1800 audit(1788942667.287:59): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.991" name="zone_nr_conv" dev="configfs" ino=21801 res=0 errno=0 [ 670.116781][ T28] audit: type=1800 audit(1788942667.287:60): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.991" name="power" dev="configfs" ino=21802 res=0 errno=0 [ 670.187899][T10190] null_blk: disk nullb1 created [ 675.157121][T10227] capability: warning: `syz.2.998' uses deprecated v2 capabilities in a way that may be insecure [ 687.378504][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.385354][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.397955][T10308] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 687.428244][T10308] CIFS: Attempting to mount //127.0.0.1/share [ 687.492821][T10308] CIFS: VFS: Error connecting to socket. Aborting operation. [ 687.501238][T10308] CIFS: VFS: cifs_mount failed w/return code = -111 [ 688.010811][ T28] audit: type=1800 audit(1788942686.177:61): pid=10310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1019" name="/" dev="fuse" ino=1 res=0 errno=0 [ 689.379335][T10325] warning: `syz.1.1021' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 693.853992][T10353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.673010][T10357] netlink: 'syz.5.1036': attribute type 1 has an invalid length. [ 694.949498][T10355] kvm: kvm [10354]: vcpu0, guest rIP: 0x1c0 Unhandled WRMSR(0x11e) = 0x0 [ 695.169218][T10357] bridge1: entered promiscuous mode [ 695.231989][T10357] bond3: (slave bridge1): making interface the new active one [ 695.282844][T10357] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 695.373070][T10360] bridge2: entered promiscuous mode [ 695.399883][T10360] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 695.602576][ T5783] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 695.805993][ T5783] usb 3-1: Using ep0 maxpacket: 8 [ 697.003995][ T5783] usb 3-1: config 0 has no interfaces? [ 697.009586][ T5783] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 697.062351][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.102991][ T5783] usb 3-1: config 0 descriptor?? [ 703.552953][ T7975] usb 3-1: USB disconnect, device number 5 [ 707.193516][ T28] audit: type=1800 audit(1788942705.307:62): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1050" name="bus" dev="ramfs" ino=21329 res=0 errno=0 [ 709.741310][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 709.778323][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 709.809589][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 709.839922][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 709.889460][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 709.966727][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 710.009758][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 710.102666][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 710.144251][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 710.172951][T10440] kvm: kvm [10439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 716.690704][T10479] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 719.083447][T10501] netlink: 'syz.5.1072': attribute type 1 has an invalid length. [ 719.424156][T10501] 8021q: adding VLAN 0 to HW filter on device bond5 [ 720.508084][T10503] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 732.905253][T10574] netdevsim netdevsim1: loading /lib/firmware// failed with error -22 [ 732.914103][T10574] netdevsim netdevsim1: Direct firmware load for / failed with error -22 [ 732.922662][T10574] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 733.265369][ T5842] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 733.437460][T10589] loop2: detected capacity change from 0 to 1024 [ 734.172408][ T5842] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 734.209994][ T5842] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 734.254626][ T5842] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 734.284909][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.311100][ T5842] usb 6-1: Product: syz [ 734.331997][ T5842] usb 6-1: Manufacturer: syz [ 734.352024][ T5842] usb 6-1: SerialNumber: syz [ 734.388776][ T5842] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 734.459752][ T5842] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 734.504177][ T5842] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 736.585835][ T5842] usb 6-1: USB disconnect, device number 4 [ 736.657268][ T5842] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 736.738261][ T5842] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 736.793516][ T5842] ti_usb_3410_5052 6-1:2.0: device disconnected [ 737.493339][T10609] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 739.455559][T10616] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1099'. [ 742.776347][T10635] syzkaller0: entered promiscuous mode [ 742.781914][T10635] syzkaller0: entered allmulticast mode [ 745.324871][T10647] Bluetooth: hci4: command 0x0406 tx timeout [ 747.432664][ T6492] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 747.636652][ T6492] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7 [ 747.654791][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.669158][ T6492] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 747.676450][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.687505][T10671] tipc: Enabled bearer , priority 0 [ 747.694934][ T6492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.723104][T10671] syzkaller0: entered promiscuous mode [ 747.728668][T10671] syzkaller0: entered allmulticast mode [ 747.739676][ T6492] usb 6-1: Product: syz [ 747.761423][ T6492] usb 6-1: Manufacturer: syz [ 747.780072][ T6492] usb 6-1: SerialNumber: syz [ 747.964213][T10675] tipc: Resetting bearer [ 748.024706][T10670] tipc: Resetting bearer [ 748.649208][T10670] tipc: Disabling bearer [ 750.598830][T10687] syzkaller0: entered promiscuous mode [ 750.605026][T10687] syzkaller0: entered allmulticast mode [ 751.298671][T10705] overlayfs: failed to clone upperpath [ 751.566065][ T6492] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 752.514515][T10703] loop1: detected capacity change from 0 to 8192 [ 752.544161][ T7977] Process accounting resumed [ 752.556886][ T6492] usb 6-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 752.604154][T10703] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 752.621796][ T6492] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 752.641539][ T6492] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 752.762401][ T6492] usb 6-1: USB disconnect, device number 5 [ 752.914935][T10423] udevd[10423]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.066561][T10719] loop5: detected capacity change from 0 to 512 [ 754.159382][T10423] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 754.415118][T10727] autofs4:pid:10727:autofs_fill_super: called with bogus options [ 757.509235][T10751] loop5: detected capacity change from 0 to 512 [ 757.528039][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 758.313293][T10751] EXT4-fs (loop5): Test dummy encryption mode enabled [ 758.321370][T10751] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 758.362521][T10748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.482964][T10751] EXT4-fs (loop5): 1 truncate cleaned up [ 758.551703][T10751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.673471][T10763] loop1: detected capacity change from 0 to 256 [ 759.702578][T10748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.439924][ T7782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.032474][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 762.974234][T10799] syzkaller0: entered promiscuous mode [ 762.979872][T10799] syzkaller0: entered allmulticast mode [ 763.046062][T10799] 0: reclassify loop, rule prio 0, protocol 800 [ 763.431007][T10801] syzkaller0: entered promiscuous mode [ 763.503570][T10801] syzkaller0: entered allmulticast mode [ 763.539983][T10803] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 765.902889][T10819] loop1: detected capacity change from 0 to 256 [ 765.969479][T10819] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 768.741321][ T28] audit: type=1800 audit(1788942766.907:63): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1162" name=8006 dev="sda1" ino=2052 res=0 errno=0 [ 768.764766][T10839] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 773.184811][T10867] syzkaller0: entered promiscuous mode [ 773.200632][T10867] syzkaller0: entered allmulticast mode [ 781.165774][T10905] bond_slave_0: entered promiscuous mode [ 781.172052][T10905] bond_slave_1: entered promiscuous mode [ 781.178953][T10905] vlan3: entered promiscuous mode [ 781.184153][T10905] bond0: entered promiscuous mode [ 783.514966][T10958] netlink: 'syz.1.1186': attribute type 3 has an invalid length. [ 784.415134][T10973] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 784.698714][T10979] 8021q: adding VLAN 0 to HW filter on device bond4 [ 784.756092][T10979] bond3: (slave bond4): making interface the new active one [ 784.793981][T10979] bond3: (slave bond4): Enslaving as an active interface with an up link [ 784.821224][T10973] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 789.534568][T11014] loop2: detected capacity change from 0 to 256 [ 789.819018][T11014] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 796.064358][T11062] jffs2: notice: (11062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 804.065029][T11118] netlink: 'syz.5.1220': attribute type 4 has an invalid length. [ 807.487168][T11144] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 807.606331][T11147] loop2: detected capacity change from 0 to 256 [ 807.927947][T11131] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11131] [ 809.105129][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.116375][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.770042][T11210] loop1: detected capacity change from 0 to 4096 [ 813.788500][T11210] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 813.869477][T11210] ntfs3: loop1: Failed to load $Extend (-22). [ 813.875880][T11210] ntfs3: loop1: Failed to initialize $Extend. [ 814.846464][T11206] loop5: detected capacity change from 0 to 1024 [ 822.278515][T11252] tipc: Enabled bearer , priority 0 [ 822.433650][T11252] syzkaller0: mtu less than device minimum [ 828.008669][T11275] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 841.840072][T11346] tipc: Enabled bearer , priority 0 [ 841.899806][T11348] syzkaller0: entered promiscuous mode [ 841.908189][T11348] syzkaller0: entered allmulticast mode [ 842.075352][T11346] tipc: Resetting bearer [ 842.132448][T11345] tipc: Resetting bearer [ 842.234068][T11345] tipc: Disabling bearer [ 853.676495][T11445] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 856.255507][T11464] tipc: Enabled bearer , priority 0 [ 856.451954][T11468] syzkaller0: entered promiscuous mode [ 856.475751][T11468] syzkaller0: entered allmulticast mode [ 857.633567][T11471] tipc: Resetting bearer [ 857.640737][T11462] tipc: Resetting bearer [ 857.664575][T11462] tipc: Disabling bearer [ 867.818883][T11537] zram: Cannot change disksize for initialized device [ 867.865879][T11537] block2mtd: erasesize must be a divisor of device size [ 867.891094][T11537] ------------[ cut here ]------------ [ 867.897672][T11537] WARNING: CPU: 0 PID: 11537 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290 [ 867.907042][T11537] Modules linked in: [ 867.911043][T11537] CPU: 0 PID: 11537 Comm: syz.5.1327 Not tainted syzkaller #0 [ 867.918921][T11537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.929539][T11537] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 867.935783][T11537] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f 1c cc fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 db a3 a1 fd eb 11 e8 b4 9a 73 fd <0f> 0b 48 85 db 75 9f e8 a8 9a 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 867.956075][T11537] RSP: 0018:ffffc900034b7970 EFLAGS: 00010283 [ 867.962460][T11537] RAX: ffffffff8413e7bc RBX: ffff8880201eaf00 RCX: 0000000000080000 [ 867.971361][T11537] RDX: ffffc9000e45f000 RSI: 000000000000e237 RDI: 000000000000e238 [ 867.979911][T11537] RBP: 0000000000000002 R08: ffff8880201eaf3b R09: 1ffff1100403d5e7 [ 867.988482][T11537] R10: dffffc0000000000 R11: ffffed100403d5e8 R12: dffffc0000000000 [ 867.996884][T11537] R13: dffffc0000000000 R14: ffff8880201eb034 R15: ffff8880201eaf38 [ 868.005205][T11537] FS: 00007fc6bfbdf6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 868.014324][T11537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.020994][T11537] CR2: 000000110c4110de CR3: 0000000069912000 CR4: 00000000003506f0 [ 868.029408][T11537] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 868.038016][T11537] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 868.046549][T11537] Call Trace: [ 868.049899][T11537] [ 868.053055][T11537] ? blkdev_put+0x492/0x7a0 [ 868.057644][T11537] blkdev_put+0x49a/0x7a0 [ 868.062058][T11537] block2mtd_setup2+0x98f/0xe30 [ 868.067115][T11537] ? block2mtd_setup+0xd0/0xd0 [ 868.071953][T11537] ? rcu_is_watching+0x15/0xb0 [ 868.077798][T11537] ? mutex_lock_nested+0x20/0x20 [ 868.083004][T11537] ? __virt_addr_valid+0x10c/0x380 [ 868.088337][T11537] ? kernfs_fop_write_iter+0x1dc/0x520 [ 868.094115][T11537] block2mtd_setup+0x27/0xd0 [ 868.098774][T11537] param_attr_store+0x20e/0x300 [ 868.103782][T11537] ? param_attr_show+0x170/0x170 [ 868.108796][T11537] ? sysfs_kf_read+0x360/0x360 [ 868.113729][T11537] module_attr_store+0x5f/0x80 [ 868.118567][T11537] kernfs_fop_write_iter+0x3a4/0x520 [ 868.124024][T11537] vfs_write+0x474/0x9a0 [ 868.128349][T11537] ? file_end_write+0x250/0x250 [ 868.133363][T11537] ? __fget_files+0x3fc/0x460 [ 868.138158][T11537] ? __fdget_pos+0x2a3/0x330 [ 868.142927][T11537] ? ksys_write+0x74/0x260 [ 868.147856][T11537] ksys_write+0x151/0x260 [ 868.152360][T11537] ? __ia32_sys_read+0x90/0x90 [ 868.157223][T11537] ? lockdep_hardirqs_on+0x98/0x150 [ 868.162566][T11537] do_syscall_64+0x55/0xb0 [ 868.167042][T11537] ? clear_bhb_loop+0x40/0x90 [ 868.171817][T11537] ? clear_bhb_loop+0x40/0x90 [ 868.177407][T11537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.183636][T11537] RIP: 0033:0x7fc6bed9e159 [ 868.188127][T11537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.207910][T11537] RSP: 002b:00007fc6bfbdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.216569][T11537] RAX: ffffffffffffffda RBX: 00007fc6bf025fa0 RCX: 00007fc6bed9e159 [ 868.224693][T11537] RDX: 0000000000000011 RSI: 0000200000000250 RDI: 0000000000000004 [ 868.232826][T11537] RBP: 00007fc6bee3503b R08: 0000000000000000 R09: 0000000000000000 [ 868.240870][T11537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.249364][T11537] R13: 00007fc6bf026038 R14: 00007fc6bf025fa0 R15: 00007ffc27de22d8 [ 868.257602][T11537] [ 868.260686][T11537] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 868.268038][T11537] CPU: 0 PID: 11537 Comm: syz.5.1327 Not tainted syzkaller #0 [ 868.275571][T11537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.285680][T11537] Call Trace: [ 868.289015][T11537] [ 868.292006][T11537] dump_stack_lvl+0x18c/0x250 [ 868.296765][T11537] ? show_regs_print_info+0x20/0x20 [ 868.302029][T11537] ? load_image+0x420/0x420 [ 868.306613][T11537] panic+0x2ca/0x720 [ 868.310619][T11537] ? bpf_jit_dump+0xd0/0xd0 [ 868.315213][T11537] __warn+0x2e0/0x470 [ 868.319259][T11537] ? blkdev_flush_mapping+0xac/0x290 [ 868.324607][T11537] ? blkdev_flush_mapping+0xac/0x290 [ 868.329948][T11537] report_bug+0x2be/0x4f0 [ 868.334375][T11537] ? blkdev_flush_mapping+0xac/0x290 [ 868.339745][T11537] ? blkdev_flush_mapping+0xac/0x290 [ 868.345085][T11537] ? blkdev_flush_mapping+0xae/0x290 [ 868.350434][T11537] handle_bug+0xcf/0x120 [ 868.354762][T11537] exc_invalid_op+0x1a/0x50 [ 868.359319][T11537] asm_exc_invalid_op+0x1a/0x20 [ 868.364225][T11537] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 868.370171][T11537] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f 1c cc fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 db a3 a1 fd eb 11 e8 b4 9a 73 fd <0f> 0b 48 85 db 75 9f e8 a8 9a 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 868.389843][T11537] RSP: 0018:ffffc900034b7970 EFLAGS: 00010283 [ 868.396000][T11537] RAX: ffffffff8413e7bc RBX: ffff8880201eaf00 RCX: 0000000000080000 [ 868.404021][T11537] RDX: ffffc9000e45f000 RSI: 000000000000e237 RDI: 000000000000e238 [ 868.412019][T11537] RBP: 0000000000000002 R08: ffff8880201eaf3b R09: 1ffff1100403d5e7 [ 868.420020][T11537] R10: dffffc0000000000 R11: ffffed100403d5e8 R12: dffffc0000000000 [ 868.428023][T11537] R13: dffffc0000000000 R14: ffff8880201eb034 R15: ffff8880201eaf38 [ 868.436025][T11537] ? blkdev_flush_mapping+0xac/0x290 [ 868.441357][T11537] ? blkdev_put+0x492/0x7a0 [ 868.445893][T11537] blkdev_put+0x49a/0x7a0 [ 868.450344][T11537] block2mtd_setup2+0x98f/0xe30 [ 868.455263][T11537] ? block2mtd_setup+0xd0/0xd0 [ 868.460088][T11537] ? rcu_is_watching+0x15/0xb0 [ 868.464905][T11537] ? mutex_lock_nested+0x20/0x20 [ 868.469894][T11537] ? __virt_addr_valid+0x10c/0x380 [ 868.475045][T11537] ? kernfs_fop_write_iter+0x1dc/0x520 [ 868.480545][T11537] block2mtd_setup+0x27/0xd0 [ 868.485168][T11537] param_attr_store+0x20e/0x300 [ 868.490057][T11537] ? param_attr_show+0x170/0x170 [ 868.495035][T11537] ? sysfs_kf_read+0x360/0x360 [ 868.499826][T11537] module_attr_store+0x5f/0x80 [ 868.504619][T11537] kernfs_fop_write_iter+0x3a4/0x520 [ 868.509935][T11537] vfs_write+0x474/0x9a0 [ 868.514221][T11537] ? file_end_write+0x250/0x250 [ 868.519121][T11537] ? __fget_files+0x3fc/0x460 [ 868.523842][T11537] ? __fdget_pos+0x2a3/0x330 [ 868.528476][T11537] ? ksys_write+0x74/0x260 [ 868.532939][T11537] ksys_write+0x151/0x260 [ 868.537317][T11537] ? __ia32_sys_read+0x90/0x90 [ 868.542123][T11537] ? lockdep_hardirqs_on+0x98/0x150 [ 868.547539][T11537] do_syscall_64+0x55/0xb0 [ 868.551991][T11537] ? clear_bhb_loop+0x40/0x90 [ 868.556702][T11537] ? clear_bhb_loop+0x40/0x90 [ 868.561413][T11537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.567338][T11537] RIP: 0033:0x7fc6bed9e159 [ 868.571788][T11537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.591437][T11537] RSP: 002b:00007fc6bfbdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.599891][T11537] RAX: ffffffffffffffda RBX: 00007fc6bf025fa0 RCX: 00007fc6bed9e159 [ 868.607896][T11537] RDX: 0000000000000011 RSI: 0000200000000250 RDI: 0000000000000004 [ 868.615917][T11537] RBP: 00007fc6bee3503b R08: 0000000000000000 R09: 0000000000000000 [ 868.623922][T11537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.631918][T11537] R13: 00007fc6bf026038 R14: 00007fc6bf025fa0 R15: 00007ffc27de22d8 [ 868.639944][T11537] [ 868.643752][T11537] Kernel Offset: disabled [ 868.648307][T11537] Rebooting in 86400 seconds..