last executing test programs: 2m10.937002863s ago: executing program 3 (id=413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, r3, 0x8, 0xe) syz_open_procfs(0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002bc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400", @ANYRES16=r4, @ANYBLOB="110f25bd7000fddbdf250f000000367df63dff12c65bd205bf3fab5f879fce5164ded63a4aaff14ef32e9b218324"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}}, 0x40000) syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x10080, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], 0x1, 0x15e, &(0x7f0000000040)="$eJzsz0+LEmEcwPHvOKP2R1PIwDpU0KEhMccRu4VoJAlNA4WXDhHoRIFmKITHCrx16AXMwRI6iYcIunRY3b24q7DsXvctDOxhwaPLwyiLe9zz87k8PN/nxw+ep4/nOnFQ8T1pNT+1nU7Hqd99aVvlV3/+/r8mehi4BPSAthiu+/NbRXgvTg08w8/bUXj3oeE8rLUa4u4VQQdKV0UPFiKifYUroiX82eyq6fdQJzf8Zq5bENYtt2q3NCjF+CeaASx/XuY+EOBs3wnQdVOj4e6L2bSSfvD7jUqvkrpzXdnst53vZvnmIJJUqTo7v8Q36bqHmWl6PzMaHsxn1nPbsuc503yUM7KGkQ/be7NK/ssPtGeRz/D63L5QCKjCNwVchSN/nzdWoixD9Bd2MxZOAMcf46B0NW+sWMCkv4CNF7f2NhkcFBLxAKqOgiRJkiRJkiRJkiRd0GkAAAD//40OZ7o=") execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) 2m8.674155533s ago: executing program 3 (id=415): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r5}) 2m4.459307358s ago: executing program 3 (id=420): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x80800) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x28, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40000020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2m3.623993526s ago: executing program 3 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) write$vga_arbiter(r5, &(0x7f0000000080)=@other={'trylock', ' ', 'mem'}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000003040)='./file1\x00', 0x1200001, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="1a6c0af07c3d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp1250,codepage=cp1251,\x00'], 0x2, 0x342, &(0x7f0000000100)="$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") 2m2.530629624s ago: executing program 3 (id=425): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x7b7, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1m59.030441783s ago: executing program 3 (id=427): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, &(0x7f0000000140), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x9, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 1m42.96793061s ago: executing program 32 (id=427): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x10, r1) ptrace$peeksig(0x4212, r1, &(0x7f0000000140), 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x9, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x800) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 26.434067943s ago: executing program 2 (id=551): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x7b7, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) 24.964588589s ago: executing program 1 (id=553): syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) mkdir(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0x990a22, 0xfffffffd}) r3 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), 0x0, &(0x7f0000000340), {0x2a}, 0x0, 0x0, &(0x7f0000000380)=""/215, 0x0}, 0x58) prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xffffff74, 0x0, 0x1}) 23.605756212s ago: executing program 2 (id=554): open(0x0, 0x100, 0x97) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r2, 0x5, &(0x7f0000000140)={0x6, 0x9}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 19.561518662s ago: executing program 1 (id=562): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) listen(r4, 0x80000001) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 18.127256639s ago: executing program 1 (id=564): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_socket_connect_nvme_tcp() r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000003b00)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r4, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) close(r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x64}, 0x1, 0x2, 0x0, 0x1bb581880d1753e}, 0xc890) 16.139166796s ago: executing program 2 (id=567): open(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) rename(0x0, &(0x7f0000000080)='./cgroup/../file0\x00') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024882, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 14.189743685s ago: executing program 0 (id=570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x3, 0x0, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000500)={{&(0x7f0000c8c000/0x3000)=nil, 0x3000}, 0x1}) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) shutdown(r4, 0x1) 14.112581903s ago: executing program 1 (id=571): syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x6000, 0x400, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000580)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_usb_connect$cdc_ecm(0x4, 0x70, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0xfa, 0x10, 0x1c, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x2, 0x6, 0x0, 0xe, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x8, 0x312, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x6}, @mbim_extended={0x8, 0x24, 0x1c, 0x1b, 0xff, 0x708b}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x3, 0xa3}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x1f, &(0x7f0000000180)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x2, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0x4b, 0x1, 0x8b3, 0xf007, 0x3ff, [0xc000]}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3409}}]}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000100)) 11.762248169s ago: executing program 0 (id=572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x28014010, 0x2, 0x2, 0x0, 0xd, 0x0, 0x0, 0x20, 0x9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) gettid() dup3(r3, r5, 0x6700000000000000) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000001500)={&(0x7f0000000200)={0x50, 0x0, 0x200006, {0x7, 0x2b, 0x81, 0x400202, 0x0, 0xfe, 0x88000, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.759529532s ago: executing program 4 (id=573): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=ANY=[@ANYBLOB="08000000040000000400000822bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0400"/28], 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000400)=0x4000000) clock_adjtime(0x0, &(0x7f0000000040)={0x10000d4f, 0x0, 0x0, 0x80000000, 0x7, 0x0, 0x0, 0x1, 0xfffffffe, 0x7, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x3, 0x0, 0x2, 0x8, 0x3, 0xfffffffd, 0x0, 0x6, 0x3}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xa) 10.667477138s ago: executing program 0 (id=574): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 10.646053239s ago: executing program 1 (id=575): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000200)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@lastblock={'lastblock', 0x3d, 0x5}}, {@nostrict}, {}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@mode={'mode', 0x3d, 0x8}}, {@fileset={'fileset', 0x3d, 0xd9}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0xa}}, {@adinicb}, {@adinicb}]}, 0x1, 0xc4d, &(0x7f0000001bc0)="$eJzs3U9sHNd9B/DfGy3FldxWTJwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZsOhh9AYAOCBuDz2tVNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+/LzQ+e7eak98wH199pn49WxKxcbL83enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvnZr8vr1hcaZ585u2nx74L3+J44PXBh65uTT3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORopnv/+z1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnz32Fq6mt/6UZ2HL1UDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/ijilUjx87dPxLV8n6nuNV+MeKXMH0a8WeaLEan8YpyLeHeb7xGPploU8efl9b+wliar+0H3vnLp642vzlyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcRnIsXL//ZH1bjiqMalH7sw9PsDv9w7ZvypD9lPWfa5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPI8UL75xIy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIt6PFN/55lqKFBHNiIno5Er/w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDqT0X8IFI0/qB5Z10tIlL1b8eJ8pdz0Txc5iejOVTmi9G8mLNVZa357YfQfnanLxXxk0jRX3/rzgXP17+v8+nO1yDe/NbGp8/WOnmou3Hgvf4njh+7MDTy+ad2Wk7bNWDwUnvm1u3G+PDIyFjP6lo++id71g3k4xZ703UiYuH1N15rTU9Pzd//QvkVuM/q3Su5i6M/yIVUe2SaamEvFqJ2IJrxcPq+Sf1h3JzYd+Xz/91I8dvv/Hv3gd95/tfjlzqf7jzh4xd/svH8f2Hrju7x+V/bWi8//8snwXbP/yd71r2QfzfSV4uoL96c6zseUV94/Y2T7ZutG1M3pmbOnTr1laGhr5w91Xc4on69PT3Vs7QnpwsAAAAAAAAAAAAAAADgwUlF/G6kaP1kLTUi4nY1XmvgwtAzJ58+FIeq8Vabxm2/OnblYuOl2Ztz81MLC1OTjfGZ9rXZyal7PVy9Gu41PjyyL535UEf2uf1H6i/Nzr0+377xh4vbbj9av3h1YXG+dW37zXEkiohm75rBqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EimvnGukLeV0e/791hP+m8f9LW3e0h+P/P390Y/zfJ3qKlsdMqYhfRIrf+oun4gtVO4/GXecsl/ubSDF4/nO5XBwuy3Xb0HmvQGdkYFn2fyLFP7y/uWx3POSTG2VPf6ST+wgor/+xSPGDP/te/Hpet/n9D9tf/6Nbd7RP73/4VM+6o5veV7DrrpOv/8lI8eKTb8VvVGv+7wPf/9F9Y8OJTuGN93Ps0/X/1Z51A/m4v7lXnQcAAAAAAAAAAHiE9aUi/jZS/Giklp7P6+7l7/9Nbt3RPv39r0/3rJvcm/mKPnRh1ycVAAAAAA6IvlTETyPFjcW37oyh3jz+u2f85+9sjP8cTlu2Vn/O9yvVewP28s//eg3k407svtsAAAAAAAAAAAAAAAAAAABwoKRUxPN5PvWJajz/5I7zqa9Eipf/69lcLh0vy3XngR+ofq1fnp05eXF6erYei62r01ONsbnWtamy7qcixdpffy7XLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzknfnA6+vrEafLsp+IFP/595vL5qmp89zR1X7PlGX/KlJ845+2L3t8o+zZsuz3IsWPv9Holj1alu2+H/XTG2WfuzZb7MNVAQAAAAAAAAAAAAAAAAAA4OOmLxXxp5Hiv28u3xnLn+f/7+v5WHnzWz3z/W9xu5rnf6Ca/3+n5fuZ/796r8DSTkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3ogUc5fX0kp/+bmjfqk9c+v2+PDI9tWOpKrmoap8+VM/febsuS8/P3S+mx9cf699Jl4du3Kx8dLszbn5qYWFqcnG+Ez72uzk1D3vYbf1txqsTkDj5mu3Jq9fX2icee7sps23B97rf+L4wIWhZ04+3S07PjwyMtZTptZ330e/S9ph/eEo4i8jxbPf/1n6UX9EEbs/Fx/y3dlvR6pODFadGB8eqToy3W7NLJYbR7snooho9FRqds/RA7gWu9KMWCqbXzZ4sOze2FxrvnV1eqox2ppfbC+2Z2dGU6e1ZX8aUcT5FLEcEav9d++uL4p4LVJ899ha+uf+iEPd8/Cly2NfO3Vm53YU+9jHe1C2s9EXsVw8AtfsAOuPIv4xUvz87RPxL/0Rtej8xBcjXinzhxFvRud6p/KLcS7i3W2+RzyaalHE/5bX/8Jaeru/vB907yuXvt746sz12Z6y3fvKI/98eJAO+L2pHkX8uLrjr6V/9d81AAAAAAAAAAAAAAAAwAFSxK9FihfeOZGq8cF3xhS3Z240rrSuTneG9XXH/nXHTK+vr683UiebOSdyLuVczrmSczVnFLl+zmaZ9fX1ifx5KedyzpWcqznjUK6fs5lzIudSzuWcKzlXc0Yt18/ZzDmRcynncs6VnKs544CM3QMAAAAAAAAAAAAAAAAAAB4vRfVPiu98cy2t93fml56ITq6YD/Sx9/8BAAD//9kg9g0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) fstat(r3, &(0x7f0000000940)) newfstatat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0/file0\x00', &(0x7f0000000bc0), 0x2000) getresgid(0x0, 0x0, &(0x7f0000000cc0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000580)="a3ba1ee4a3c59379454c16548f4dc837ba4e564d4d36fa13e6f2a444c6245fa0c33131b1c2f334c8dd129c46d047fedb5a0c6955d70e05285316aeb4a9cf7d7b545ed6bdeba99daef853d6e4bab291f40b3e98d4155fe227d1921ea8c2c517cc295a11acd40b1efe4b460e48264ce74e6e45916b58e2eec42d0b8d16ad63b8b69f531e90cd0a2d8d1d9a9cb960a3ccb2f1d4411c31f361c6b418ec5872286d196bc772d7fac79d44246e6b6de0ad51f267fd18b9db9481eb5ece85d293c6649c95b64299246881477652eb77", 0xcc}, {0x0}, {0x0}], 0x3, &(0x7f0000000d00), 0x0, 0x4000000}, 0x85) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast2, 0xb}, r5}}, 0x30) 9.931128593s ago: executing program 5 (id=576): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x301600, 0x0) ioctl$COMEDI_LOCK(r3, 0x6405) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1201f010000800000000014ff83bd214e55914d40542c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d62a9c5b9", 0x40}, 0x48, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8.703147345s ago: executing program 0 (id=577): syz_usb_connect(0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 8.648333516s ago: executing program 4 (id=578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") shmget$private(0x0, 0x7000, 0x78000000, &(0x7f0000ff9000/0x7000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102400, 0x19000) shmctl$SHM_UNLOCK(r0, 0xc) add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180), &(0x7f0000000340), 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) syz_io_uring_setup(0x50d0, &(0x7f0000000480)={0x0, 0xfffffffd, 0x4000, 0x2, 0x3c7}, &(0x7f0000000100), 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800800, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYBLOB="4a3a9f8c2aab73255ecca15a5ad5b0b10a818868cc63e509dca434325eec52c449bc0f78c4d4996b7c34f8c4027731d8084daf83fa32ac4f26093d06abe1c066b64b56d81577ccc09ee10fa7258f8c9a08a6fa6f21d52366469e697011812e7133138514e15b9fe1f64a7d3062ee9a77ca0a5d9f6af20321dc3f0f0577b860b69773048ec9a9a6d40e94d2f4aca5a132897494efd6232446f0d416f1a75c1e7e1e233ad655fc58f85c"], 0xff, 0x6de, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) 7.352419089s ago: executing program 5 (id=579): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x0, &(0x7f0000000740)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f00000009c0)={{r4}, "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"}) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r5, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xdc, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5aa6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ceaa276}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19dca423}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c38}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9bc}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f18af11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2480fbfb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x412a1394}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43755344}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x524078db}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5646}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048000}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x40043d14, &(0x7f0000000040)) 6.323341244s ago: executing program 5 (id=580): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000400)=""/216, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) 5.735336511s ago: executing program 4 (id=581): openat$iommufd(0xffffffffffffff9c, 0x0, 0x10080, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, 0x0, 0x0, 0x0) 5.383080889s ago: executing program 0 (id=582): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x91) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000100)}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x1, 0xf000, 0x2000, &(0x7f000082e000/0x2000)=nil}) r7 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0x54000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fcntl$lock(r8, 0x24, &(0x7f0000000100)={0x2, 0x4, 0x0, 0x5, r4}) 4.352409922s ago: executing program 5 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000280)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 3.930053459s ago: executing program 4 (id=584): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x1}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$fuseblk(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8000, &(0x7f00000004c0)={{'fd', 0x3d, r2}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) recvfrom$inet(r2, &(0x7f00000000c0)=""/25, 0x19, 0x12042, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) 2.334817867s ago: executing program 4 (id=585): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") setreuid(0xee01, 0xee01) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 1.863230841s ago: executing program 2 (id=586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x100, r2, 0x0, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @local}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r5 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsmount(r5, 0x0, 0x1) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) read$FUSE(r4, 0x0, 0x0) 1.597649416s ago: executing program 5 (id=587): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) socket(0x1e, 0x1, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="fb5a0c5a28bff4d1eabc9b5e1b002927e42f898086b6bd3a0e8ac1187bc611911486c8bac2fbe135179cc1af68b7b1b77ef66df43b71636ab0f3e86a90855ff090e2ed7b1f446091934082de9b302cdf509d5038867b833afdd95183930c0ab8ccdc74c131f83b97caa6739b434bdf1c79cfa3aea786da52fdbc9f2d859ef00734561d6187f22814213c69a30a45e2ba854e1c3455", 0x95, 0xc0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x808}}, 0x47) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x418, 0x220, 0x0, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0xfd, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast2, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r9, 0x0, r8}) 459.664057ms ago: executing program 1 (id=588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x48, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg$unix(r6, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {&(0x7f0000002540)=""/193, 0xc1}], 0x2}}], 0x1, 0x20, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@t={0x81, 0x6, 0x0, 0xec}) sendmmsg$unix(r6, &(0x7f0000000680), 0x4924924924925c6, 0x0) 441.835389ms ago: executing program 4 (id=589): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000cc0)=ANY=[], 0x4, 0xfbd, &(0x7f0000006d00)="$eJzs3U+MG+XZAPB3vPb+yS5ZL/DBAh8hH3wVgcJuSCI1vQWBeqmEuPQOCgmNWChqaCUiIJseEJUQRUKcKg4gLpRKKVKRQJUq1FPbU6v21F5QL1SqUimohxYpcZXdd7z2rCf2ztpje/37SY/ffecdz/OM19nMjO3XAZhYlY3bY8eWkxDe/vStR19+Kvn42rK7mmsc3LhNYq8eQqi19JPM9j6PC65cfulkpzYJRzZu03547FLzvvMhhPVwMHwW6uHD1bUvP3jnkUMfvTp7yxvnnnllQLvflN0PAADYiy7+fu0v9/39dw8sfXXxwIkw01yeHp/XY38+HvcfjgfK6fFyJbT3k5ZoNZ1ZbypGJbPeVGa9aiZPNSdfLbOdWs56013yTbUs67SfAAAAMI7S89p6SCorbf1KZWVl87z/ms8Xp5OV586snT47pEIBAACAwv51fuNNt2McsyNQg8jGXPoE29n9Pvz2zu+zq6iUnK9acr6JiWLPNyGEEEKI/oXjETEG0Vgs8WIDAAAAQIf5wrZZ7+9MXc2t1XvLf+nhSuf7Qx9knn/bp53o8/P/+vlnt69Qav4OBp+/NuT8193/9y/4iwMAQHF79Wgy3a/0ODqdxyA7j+BU273mp3Z6/lHJbKe6wzrz5hUcl/kG8+qcKrmOovLq3+nvcVjy6s/Ohzmq8urPztM5qvLqnym5jqLy6u9w5SeM4j/rvPrnSq6jqLz695VcR1F59c+XXEdRefUvlFxHUXn131ByHUXl1b+/5DqKyqt/XN5Wm1d/veQ6isqrf2mzGfnDiLz6byy5jqLy6r+p5DqKyqv/5pLrGJY7Y5s+Dgdy1pvvcPA3cgeDAAAAQEf/Gfv5//ZkJF3XqQ69xomPjdfYh5h/agQeg0HHfP+3+fTCCOyXGKW4sPmfYfvy2Q7LxK6iMgI1DCrmOj2HhBBCiJGM88O79AAAAACMiPRzAemn3htROj61bfyv7127TcerreOzWxtIx2tdtj/dZXymyzgAAAAQwq9eO33bm8nWfHfZz/TvdD68dN6oufDx1VBgHqPsfIQ7zb/bec92m7/zhCPjMhsbAAAAe1Xyrc+u3v/ouy8sfXXxwImWs9+r8Xw3nQe0Gq8NfBL76fsCFjL9JD2HPtGep5KzXvb6wA1523t8lzsKAAAAEyw9f6+HpLLSct5dD5XKysrW+fhyqCWnz6ydOhz76fez/HaxNnNt+UMl1w0AAAD0but8v/P5f/o9vsthOll57sza6bOb/YXm8lql9brA4tbypPW6QD2z/EjO8qOxH7+/M3x3cW5j+crJ76091e+dBwAAgAlx9sVzzzy5tnbq+5PzQzWEsKvthFHYCz/4YaA/DPsvEwAA0G9ffPFW7QdHF369+fn/rfnvrsYfDsZ+Pc7t94e4PH2fQPo5gG2f13+iPc9i3nrPt69Xz6w3FWMmU/dsy3bCxnyD7fdbystXb9/OdE6++Uy+hUy+7DwF1cz6SYe5BEOHmQDT9RYzy7PzMFYzOZJM/rs75AIAAIDU6gvPPr969sVzD5559smnTz196rmjR45/8/jxww9946HVjff1r7a+ux8AAAAYR1tv+h12JQAAAAAAAAAAAAAAAAAAADC5yvg6sWHvIwAAAEy6f54PIawLkRPpFwwOu45xj2QEahhcNGaGX8PejuDfoRCiQ/z5jeHXMAJR8fdRiN5iuOd9s+UeyzQajcYIPOYjGI1G9pvmAQAAAAbryuWXTra226wnfc3X3Fp9s7ka86btwoN/WroW6WqXHm6/XrKvr9Uw6cp+/ss/qvlnOo6/f6G/+TcuxNe3+t3//lXaN3Bi47Yae3O95r139WfLzfwhhNurPeZv2/8LITzea8Z2hzL57w295W+8m3n8n2jrVXrNf18m/74e81/K/v6fz8swe93898f8y7F/6J5e87fv4kwmW69PgK9n9v+p0Gv+zP7Xe0yY8UDMDwCTqPm/eeP8cAvps/QoIT2eno/9dH/TA9bsux92evxfyWynuuvK27ebHgfdGvvNo7r19rypndafPi4Lsb2hYJ1Z4/Kukrz6+/V7HLS8+msl11FUXv3TJddRVF79nc/ei6w0WHn1X//scXTk1d/zhYghy6t/XK4r59U/X3IdReXVv1ByHUXl1b/T/8eHJa/+/SXXUVRe/Ysl11FUXv0FL6uVLq/+pZLrKCqv/htLrqOovPpvKrmOovLqv7nkOobljtjmnQ+n55+LcSzt1zP9mQ6PZc8vhgAAAAAD9Y+RnP+v5crB0GsRQghRdtT8/RcFYmoEahBinOPfjU3DrkP0IRqLw69BjGRszIvIxErG6L3iAPTPYGezYNT5/U82v//J5vfP9aSvxCeZfmqqy3i1y3ity/h0ZjzJ3HEmbzy6KbPdRnpdM7q5y/j/xD3IG9+fuf8PM+O3dtn+cpfx27qM395l/I4u4wAAAEyGW2Lr/BAAAAD2rpd//snrv7z3ictLX108cCJMb5t3/nDsz8TX1l+L/ey896lafM3/R7H/Xmx/E9u/Zdb3/hMAAAAYvPR7Yrz+DwAAAHtX+j2lzv8BAABg71qKrfN/AAAA2LtujK3zfwAAANjDktnOi2ObXhe4O7a9zusHAIy+/43tnbE9ENu7Yvt/sU2PA+6J7f+XVB8A0D8//c6Pj7+ZbM33fzQzfiUuT9tt1jevFCSV9pn852K7L7Zf67Ge7PcB9Jo/tb/HPIPKv7jL/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3lHZuD12bDkJ4e1P33r0J9Ov//HasruaaxzcuE1irx5CqDXvl45u9X8RV7xy+aWTre3V2CbhSEhC0lweHrvUzDQfQlgPB8NnoR4+XF378oN3Hjn00auzt7xx7plXBvgQtO0fAAAA7EX/DQAA//8Q4Bqg") r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x8, 0x7, 0x8, 0x4, 0x8, "ab22470855c32beb2d20022380eb633cb3edab"}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = syz_open_dev$loop(&(0x7f00000006c0), 0x6, 0x22002) ioctl$BLKBSZSET(r5, 0x40081271, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 244.211426ms ago: executing program 2 (id=590): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c0c8) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) tkill(r3, 0xb) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000180)) 94.073014ms ago: executing program 0 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000940)='lp', 0x2) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0x6}, @window={0x3, 0x2, 0x80}, @mss={0x2, 0x100}, @mss={0x2, 0x80}, @mss={0x2, 0x8}, @timestamp], 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000fedbdb2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x1, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x7, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x2, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x93de, 0x6, 0xfffffffe, 0x8001, 0x0, 0x3, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0xfffffffe, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x401, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x81, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x3, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0xc, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x3, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0xc, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x1, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x101, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x0, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x4fe, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x8, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc90, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0x100fff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x4, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x100, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x0, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x8, 0xfffffe01, 0x1, 0x6, 0x0, 0x7, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x4, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x9, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x8, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x4000009, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x26bc, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xf90, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x9, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x2, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0x1000000e, 0x40000005, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xa2ab, 0x4, 0x30, 0x6, 0x4, 0x7fffffff, 0x4000ffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x3, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x2, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x9, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x99, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x2005, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x51, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x3, 0x6, 0x7, 0x9fd, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 0s ago: executing program 5 (id=592): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e4638f863f2887a03f9aa6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x73) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x5, 0x0, 'queue1\x00', 0x200000}) setfsgid(0xee00) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200890, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x3ee7880}, 0x276e1}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&-]:'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x31) kernel console output (not intermixed with test programs): ll (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.034967][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.061228][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.069126][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.096059][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.109048][ T5839] team0: Port device team_slave_1 added [ 74.115721][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.122644][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.148943][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.240185][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.247467][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.273834][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.326653][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.333663][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.359977][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.400789][ T5832] hsr_slave_0: entered promiscuous mode [ 74.407236][ T5832] hsr_slave_1: entered promiscuous mode [ 74.413303][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 74.419069][ T5832] Cannot create hsr debugfs directory [ 74.466127][ T5828] hsr_slave_0: entered promiscuous mode [ 74.472677][ T5828] hsr_slave_1: entered promiscuous mode [ 74.479133][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 74.484977][ T5828] Cannot create hsr debugfs directory [ 74.637996][ T5839] hsr_slave_0: entered promiscuous mode [ 74.644514][ T5839] hsr_slave_1: entered promiscuous mode [ 74.650573][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 74.656496][ T5839] Cannot create hsr debugfs directory [ 74.893940][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.925428][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.962168][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.972904][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.051621][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.068350][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.079344][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.126839][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.190433][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.207354][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.217712][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.227835][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.365452][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.376402][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.388111][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.399944][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.513958][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.533795][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.544878][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.572655][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.591377][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.617717][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.641478][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.670543][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.677881][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.706620][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.738286][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.745498][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.758766][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.796610][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.803800][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.812684][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.819840][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.835795][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.865995][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.873101][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.873994][ T5844] Bluetooth: hci2: command tx timeout [ 75.912235][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.919382][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.953929][ T5844] Bluetooth: hci0: command tx timeout [ 76.005027][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.036268][ T5843] Bluetooth: hci1: command tx timeout [ 76.036276][ T5840] Bluetooth: hci3: command tx timeout [ 76.048007][ T5844] Bluetooth: hci4: command tx timeout [ 76.086725][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.151184][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.198870][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.206079][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.240842][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.248026][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.300534][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.323534][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.330655][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.356863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.364046][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.416595][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.472185][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.538045][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.712877][ T5829] veth0_vlan: entered promiscuous mode [ 76.771944][ T5831] veth0_vlan: entered promiscuous mode [ 76.787611][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.816563][ T5829] veth1_vlan: entered promiscuous mode [ 76.853153][ T5831] veth1_vlan: entered promiscuous mode [ 76.955589][ T5829] veth0_macvtap: entered promiscuous mode [ 76.982433][ T5829] veth1_macvtap: entered promiscuous mode [ 76.998962][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.036242][ T5831] veth0_macvtap: entered promiscuous mode [ 77.072477][ T5832] veth0_vlan: entered promiscuous mode [ 77.081264][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.090650][ T5831] veth1_macvtap: entered promiscuous mode [ 77.130705][ T5832] veth1_vlan: entered promiscuous mode [ 77.149131][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.192341][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.229823][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.252802][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.268887][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.278144][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.298595][ T5828] veth0_vlan: entered promiscuous mode [ 77.310617][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.330994][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.369948][ T5828] veth1_vlan: entered promiscuous mode [ 77.381069][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393098][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.411811][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.450668][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.477574][ T5832] veth0_macvtap: entered promiscuous mode [ 77.510777][ T5832] veth1_macvtap: entered promiscuous mode [ 77.585645][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.595509][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.596143][ T5828] veth0_macvtap: entered promiscuous mode [ 77.623139][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.638684][ T5828] veth1_macvtap: entered promiscuous mode [ 77.667699][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.688582][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.705803][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.728828][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.738654][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.763901][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.774071][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.781910][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.790942][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.801269][ T5839] veth0_vlan: entered promiscuous mode [ 77.828792][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.844801][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.849743][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.860444][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.875502][ T5839] veth1_vlan: entered promiscuous mode [ 77.912766][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.946268][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.955620][ T5844] Bluetooth: hci2: command tx timeout [ 77.972888][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.005462][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.015497][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.034604][ T5844] Bluetooth: hci0: command tx timeout [ 78.113069][ T5952] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 78.119625][ T5844] Bluetooth: hci4: command tx timeout [ 78.119966][ T5843] Bluetooth: hci1: command tx timeout [ 78.125997][ T5844] Bluetooth: hci3: command tx timeout [ 78.154405][ T5839] veth0_macvtap: entered promiscuous mode [ 78.166644][ T5921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.199842][ T5921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.200549][ T5839] veth1_macvtap: entered promiscuous mode [ 78.293026][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.338443][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.405535][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.436706][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.485820][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.189363][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.219477][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.243169][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.252180][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.263162][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.288080][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.502908][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.033948][ T5844] Bluetooth: hci2: command tx timeout [ 80.089964][ T5970] loop0: detected capacity change from 0 to 256 [ 80.124134][ T5844] Bluetooth: hci0: command tx timeout [ 80.151678][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.181546][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.193964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.202980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.211961][ T5844] Bluetooth: hci1: command tx timeout [ 80.217574][ T5840] Bluetooth: hci4: command tx timeout [ 80.223197][ T5843] Bluetooth: hci3: command tx timeout [ 80.442639][ T5977] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 80.457672][ T5977] FAT-fs (loop0): Filesystem has been set read-only [ 80.468705][ T5977] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 80.489532][ T5977] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 80.523379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.524132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.576492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 80.593771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.728007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 80.728143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.830505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 80.834373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.883056][ T30] audit: type=1800 audit(1769519284.187:2): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 80.954194][ T5977] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 80.967572][ T5982] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 80.974659][ T5982] overlayfs: failed to set xattr on upper [ 80.980371][ T5982] overlayfs: ...falling back to redirect_dir=nofollow. [ 80.987359][ T5982] overlayfs: ...falling back to index=off. [ 80.993203][ T5982] overlayfs: ...falling back to uuid=null. [ 80.999845][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.016596][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.823613][ T5997] loop4: detected capacity change from 0 to 40427 [ 84.032348][ T5998] loop4: detected capacity change from 0 to 256 [ 84.135399][ T5998] exFAT-fs (loop4): error, The cluster chain has a loop [ 84.142605][ T5998] exFAT-fs (loop4): failed to count the number of clusters in root [ 84.150650][ T5998] exFAT-fs (loop4): failed to recognize exfat type [ 84.922716][ T6007] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 85.040151][ T6012] loop1: detected capacity change from 0 to 16 [ 85.088645][ T6012] erofs (device loop1): dirblkbits 15 isn't supported [ 86.439051][ T6027] netlink: 'syz.1.23': attribute type 1 has an invalid length. [ 86.560527][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 86.601321][ T987] cfg80211: failed to load regulatory.db [ 86.637412][ T6027] dummy0: entered allmulticast mode [ 86.698541][ T6032] dummy0: left allmulticast mode [ 86.864795][ T6038] input: syz1 as /devices/virtual/input/input5 [ 87.076061][ T6044] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.224636][ T6049] loop5: detected capacity change from 0 to 2640 [ 87.241011][ T6049] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 87.249460][ T6049] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 87.258186][ T6049] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 87.266623][ T6049] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 87.274999][ T6049] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 87.284074][ T6049] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 87.292951][ T6049] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 87.301403][ T6049] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 87.309831][ T6049] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 87.318303][ T6049] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 87.369863][ T6044] kvm: pic: single mode not supported [ 87.369960][ T6044] kvm: pic: level sensitive irq not supported [ 87.406664][ T6044] kvm: pic: single mode not supported [ 87.412788][ T6044] kvm: pic: level sensitive irq not supported [ 87.438976][ T6044] kvm: pic: single mode not supported [ 87.445140][ T6044] kvm: pic: level sensitive irq not supported [ 87.499673][ T6044] kvm: pic: single mode not supported [ 87.505823][ T6044] kvm: pic: level sensitive irq not supported [ 88.619430][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 91.263889][ T5907] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.296234][ T6094] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.473626][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 91.557803][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 92.088815][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.107659][ T5907] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.123946][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.304470][ T5907] usb 1-1: Product: syz [ 92.337977][ T5907] usb 1-1: Manufacturer: syz [ 92.342589][ T5907] usb 1-1: SerialNumber: syz [ 92.415799][ T5907] usb 1-1: config 0 descriptor?? [ 92.451885][ T5907] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.473706][ T5907] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 92.610934][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 92.917653][ T6115] loop2: detected capacity change from 0 to 128 [ 92.935630][ T6115] ======================================================= [ 92.935630][ T6115] WARNING: The mand mount option has been deprecated and [ 92.935630][ T6115] and is ignored by this kernel. Remove the mand [ 92.935630][ T6115] option from the mount to silence this warning. [ 92.935630][ T6115] ======================================================= [ 93.167814][ T5907] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 93.175098][ T5907] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 93.270954][ T6121] overlay: ./file0 is not a directory [ 93.783741][ T6115] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.902099][ T6115] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.920003][ T5907] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 93.963674][ T5907] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 93.982487][ T5907] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 93.990939][ T5907] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 94.219867][ T5907] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 94.226794][ T5907] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 94.258870][ T5907] usb 1-1: USB disconnect, device number 2 [ 94.740640][ T5831] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.510965][ T6141] netlink: 'syz.0.53': attribute type 1 has an invalid length. [ 95.543356][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.53'. [ 95.570357][ T6141] veth0: entered allmulticast mode [ 97.110519][ T6151] syzkaller0: entered promiscuous mode [ 97.133106][ T6151] syzkaller0: entered allmulticast mode [ 97.309515][ T6156] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 97.858644][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.58'. [ 97.933447][ T6158] macvlan1: entered promiscuous mode [ 98.004149][ T6158] macvlan1: entered allmulticast mode [ 98.027091][ T6158] veth1_vlan: entered allmulticast mode [ 102.035082][ T6194] loop1: detected capacity change from 0 to 1764 [ 102.266526][ T6191] loop4: detected capacity change from 0 to 2048 [ 102.284356][ T6190] syzkaller0: entered promiscuous mode [ 102.289849][ T6190] syzkaller0: entered allmulticast mode [ 102.785160][ T6191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.160017][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.249048][ T5893] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.292647][ T6212] netlink: 'syz.1.70': attribute type 3 has an invalid length. [ 104.389984][ T6216] syzkaller0: entered promiscuous mode [ 104.406521][ T6216] syzkaller0: entered allmulticast mode [ 104.467562][ T5893] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 105.690591][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.717033][ T5893] usb 1-1: Product: syz [ 105.721237][ T5893] usb 1-1: Manufacturer: syz [ 105.741703][ T5893] usb 1-1: SerialNumber: syz [ 105.765270][ T5893] usb 1-1: config 0 descriptor?? [ 105.798083][ T5893] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 106.920649][ T6234] loop3: detected capacity change from 0 to 4096 [ 106.979046][ T6234] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 107.145126][ T6234] ntfs3(loop3): Failed to load $Bitmap (-2). [ 107.933586][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.020040][ T6246] loop1: detected capacity change from 0 to 256 [ 108.156196][ T6246] loop1: detected capacity change from 0 to 4096 [ 108.180781][ T6246] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.192941][ T6246] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002] [ 108.202161][ T6246] System zones: 0-5 [ 108.212489][ T6246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.223560][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 108.707062][ T5907] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 108.710488][ T5893] gspca_stk1135: reg_w 0x2ff err -71 [ 108.737084][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 108.747489][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.747912][ T5893] gspca_stk1135: Sensor write failed [ 108.762375][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 108.776167][ T5893] gspca_stk1135: Sensor write failed [ 108.782252][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 108.803055][ T5907] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.808937][ T5893] gspca_stk1135: Sensor read failed [ 108.814371][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.827351][ T5907] usb 4-1: Product: syz [ 108.831557][ T5907] usb 4-1: Manufacturer: syz [ 108.838616][ T5907] usb 4-1: SerialNumber: syz [ 108.863385][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 108.871475][ T5893] gspca_stk1135: Sensor read failed [ 108.876791][ T5893] gspca_stk1135: Detected sensor type unknown (0x0) [ 108.883555][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 108.892240][ T5893] gspca_stk1135: Sensor read failed [ 108.897807][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 108.904215][ T5893] gspca_stk1135: Sensor read failed [ 108.909558][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 108.962747][ T5893] gspca_stk1135: Sensor write failed [ 108.988270][ T5893] gspca_stk1135: serial bus timeout: status=0x00 [ 109.017228][ T5893] gspca_stk1135: Sensor write failed [ 109.036410][ T5893] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 109.070230][ T5893] usb 1-1: USB disconnect, device number 3 [ 109.167765][ T6266] netlink: 56 bytes leftover after parsing attributes in process `syz.2.84'. [ 109.208894][ T5907] usb 4-1: 0:2 : does not exist [ 109.477352][ T5907] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 109.929046][ T5907] usb 4-1: USB disconnect, device number 2 [ 110.051219][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.436074][ T6282] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 110.436074][ T6282] program syz.3.89 not setting count and/or reply_len properly [ 111.323596][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.077887][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.133233][ T5914] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 112.149029][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.243542][ T5914] usb 3-1: Product: syz [ 112.248954][ T5914] usb 3-1: Manufacturer: syz [ 112.258110][ T5914] usb 3-1: SerialNumber: syz [ 112.723857][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 112.753573][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 113.837016][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 114.371100][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 114.394537][ T5914] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 114.419165][ T5914] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 114.471093][ T30] audit: type=1800 audit(1769519318.157:3): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.91" name="bus" dev="ramfs" ino=9802 res=0 errno=0 [ 114.597809][ T5914] usb 3-1: USB disconnect, device number 2 [ 114.702617][ T6309] loop2: detected capacity change from 0 to 2048 [ 114.743350][ T6309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.900207][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.800772][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.854103][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.908417][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.947396][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.972031][ T6322] futex_wake_op: syz.4.99 tries to shift op by -1; fix this program [ 116.003742][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.032708][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.066585][ T10] usb 2-1: config 0 descriptor?? [ 116.969630][ T10] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 116.997772][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 117.323041][ T6336] kvm: kvm [6335]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1a1 [ 117.331641][ T6333] syzkaller0: entered promiscuous mode [ 117.342264][ T6333] syzkaller0: entered allmulticast mode [ 117.350570][ T6336] kvm: kvm [6335]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1a2 [ 117.395400][ T6349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.407907][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.439331][ T6349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.606704][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 117.632818][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.648470][ T29] usb 5-1: Product: syz [ 117.652919][ T29] usb 5-1: Manufacturer: syz [ 117.657900][ T29] usb 5-1: SerialNumber: syz [ 118.119586][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 118.139063][ T6345] usb 2-1: string descriptor 0 read error: -71 [ 118.155714][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 118.445664][ T6355] loop3: detected capacity change from 0 to 2048 [ 118.453329][ T6355] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.501048][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.653743][ T6355] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.108: bg 0: block 234: padding at end of block bitmap is not set [ 118.678830][ T6355] EXT4-fs (loop3): Remounting filesystem read-only [ 118.965642][ T5893] usb 2-1: USB disconnect, device number 2 [ 119.140542][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.091450][ T6376] tipc: Enabling of bearer rejected, failed to enable media [ 120.261653][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 120.297896][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 120.521087][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 120.568817][ T29] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 121.527530][ T29] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 121.814479][ T29] usb 5-1: USB disconnect, device number 2 [ 125.723835][ T6418] tipc: Started in network mode [ 125.743725][ T6418] tipc: Node identity ee5f0169b0ef, cluster identity 4711 [ 125.751119][ T6418] tipc: Enabled bearer , priority 0 [ 125.913233][ T6418] syzkaller0: entered promiscuous mode [ 125.934470][ T6418] syzkaller0: entered allmulticast mode [ 125.978540][ T6421] lec:lec_atm_send: lec0: Unknown message type 808525940 [ 126.021777][ T6418] tipc: Resetting bearer [ 126.064287][ T6417] tipc: Resetting bearer [ 126.115017][ T6417] tipc: Disabling bearer [ 126.214814][ T6408] lec:lec_atm_close: lec0: Shut down! [ 126.546489][ T6429] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.874297][ T6435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 127.584574][ T6449] netlink: 'syz.4.127': attribute type 1 has an invalid length. [ 128.399306][ T6449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.989642][ T6454] macvlan2: entered promiscuous mode [ 129.136101][ T6454] macvlan2: entered allmulticast mode [ 129.250726][ T6454] bond1: entered allmulticast mode [ 129.427153][ T6454] bond1: entered promiscuous mode [ 129.581051][ T6454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.735801][ T6454] team0: Port device macvlan2 added [ 130.286035][ T800] lec:lec_start_xmit: lec0:No lecd attached [ 132.684788][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.691507][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.327044][ T6528] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.632409][ T6534] binder: 6533:6534 ioctl c0306201 200000000180 returned -14 [ 134.793358][ T800] IPVS: starting estimator thread 0... [ 135.434159][ T6540] IPVS: using max 56 ests per chain, 134400 per kthread [ 135.873540][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 135.881948][ C1] lec:lec_tx_timeout: lec0 [ 135.893554][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 137.469983][ T6556] rdma_op ffff88807ac0d1f0 conn xmit_rdma 0000000000000000 [ 138.069731][ T6554] syzkaller0: entered promiscuous mode [ 138.142653][ T6554] syzkaller0: entered allmulticast mode [ 138.294993][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 138.302717][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 138.313224][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 138.430328][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 138.865277][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 138.871369][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 139.092129][ T6563] ceph: No mds server is up or the cluster is laggy [ 139.672001][ T6579] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 141.713537][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 141.721563][ C1] lec:lec_tx_timeout: lec0 [ 141.733596][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 145.763009][ T6614] evm: overlay not supported [ 146.743529][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 146.751537][ C1] lec:lec_tx_timeout: lec0 [ 146.763580][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 147.218807][ T6616] netlink: 'syz.3.165': attribute type 2 has an invalid length. [ 147.226661][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 148.342011][ T6624] tipc: Started in network mode [ 148.346995][ T6624] tipc: Node identity 4a9621de89d6, cluster identity 4711 [ 148.371178][ T6624] tipc: Enabled bearer , priority 0 [ 148.406268][ T6630] syzkaller0: entered promiscuous mode [ 148.411779][ T6630] syzkaller0: entered allmulticast mode [ 148.621992][ T6624] tipc: Resetting bearer [ 149.168146][ T6636] loop4: detected capacity change from 0 to 2048 [ 149.216462][ T6623] tipc: Resetting bearer [ 149.273176][ T6636] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.288682][ T6636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.830947][ T6623] tipc: Disabling bearer [ 151.544112][ T5893] tipc: Node number set to 3275760094 [ 151.773536][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 151.781579][ C1] lec:lec_tx_timeout: lec0 [ 151.786143][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 152.058568][ T6653] loop0: detected capacity change from 0 to 2048 [ 152.212745][ T6653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.233832][ T6653] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.434355][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 152.454852][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 152.890150][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.139108][ T6665] syzkaller0: entered promiscuous mode [ 153.144815][ T6665] syzkaller0: entered allmulticast mode [ 153.165513][ T6665] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 153.496974][ T6676] loop0: detected capacity change from 0 to 32768 [ 153.528118][ T6676] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.595647][ T6676] XFS (loop0): Ending clean mount [ 153.808039][ T6213] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 154.044826][ T6213] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 154.132492][ T6213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.170921][ T6656] loop2: detected capacity change from 0 to 40427 [ 154.209761][ T6213] usb 5-1: Product: syz [ 154.234664][ T6213] usb 5-1: Manufacturer: syz [ 154.239296][ T6213] usb 5-1: SerialNumber: syz [ 154.269852][ T6656] F2FS-fs (loop2): invalid crc value [ 154.307930][ T6213] usb 5-1: config 0 descriptor?? [ 154.391487][ T5832] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.621171][ T6213] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.334757][ T6656] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 155.422682][ T6656] F2FS-fs (loop2): Start checkpoint disabled! [ 155.437123][ T6656] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 155.445460][ T6656] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 156.568305][ T6213] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 156.793538][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 156.801575][ C1] lec:lec_tx_timeout: lec0 [ 156.811166][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 156.954272][ T6213] usb 5-1: USB disconnect, device number 3 [ 158.899694][ T6720] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 158.899694][ T6720] program syz.4.182 not setting count and/or reply_len properly [ 159.185808][ T6735] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 160.805891][ T6742] loop4: detected capacity change from 0 to 512 [ 160.880193][ T6744] loop2: detected capacity change from 0 to 32768 [ 160.888991][ T6742] EXT4-fs: Ignoring removed nobh option [ 161.823520][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 161.831574][ C1] lec:lec_tx_timeout: lec0 [ 161.838985][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 162.097819][ T6744] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.242668][ T6742] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.190: iget: bad i_size value: 38620345925642 [ 162.281015][ T6759] loop0: detected capacity change from 0 to 40427 [ 162.378954][ T6744] XFS (loop2): Ending clean mount [ 162.463944][ T6742] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.473562][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 162.489503][ C0] EXT4-fs (loop4): initial error at time 1769519366: ext4_orphan_get:1391: inode 15 [ 162.498949][ C0] EXT4-fs (loop4): last error at time 1769519366: ext4_orphan_get:1391: inode 15 [ 162.741621][ T6767] loop0: detected capacity change from 0 to 256 [ 165.510254][ T6767] exFAT-fs (loop0): error, The cluster chain has a loop [ 165.517831][ T6767] exFAT-fs (loop0): failed to count the number of clusters in root [ 165.527057][ T6767] exFAT-fs (loop0): failed to recognize exfat type [ 165.563030][ T6742] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.190: couldn't read orphan inode 15 (err -117) [ 165.918661][ T6742] loop4: lost filesystem error report for type 5 error -117 [ 165.945447][ T5831] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.034480][ T6742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.167951][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.526191][ T6776] loop4: detected capacity change from 0 to 1024 [ 166.613188][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 166.853510][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 166.861533][ C1] lec:lec_tx_timeout: lec0 [ 166.873562][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 167.494010][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 167.555768][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 167.566099][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 167.575497][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 169.929398][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.937402][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.092399][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.111301][ T6799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.303389][ T6799] bond1: left allmulticast mode [ 170.314642][ T6799] bond1: left promiscuous mode [ 170.402090][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.409852][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.500087][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.511431][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.646985][ T6801] veth1_vlan: left allmulticast mode [ 171.883603][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 171.891656][ C1] lec:lec_tx_timeout: lec0 [ 171.896481][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 172.141256][ T6817] loop0: detected capacity change from 0 to 128 [ 172.157738][ T6817] zonefs (loop0) ERROR: Not a zoned block device [ 174.040337][ T6828] loop1: detected capacity change from 0 to 40427 [ 174.236330][ T6831] loop1: detected capacity change from 0 to 256 [ 174.394590][ T6831] exFAT-fs (loop1): error, The cluster chain has a loop [ 174.401642][ T6831] exFAT-fs (loop1): failed to count the number of clusters in root [ 174.409734][ T6831] exFAT-fs (loop1): failed to recognize exfat type [ 174.451588][ T6164] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.646251][ T6825] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.733007][ T6825] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.804415][ T6825] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.813335][ T6825] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.007782][ T6825] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.204560][ T6825] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.240231][ T6825] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.512771][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'. [ 177.168094][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 177.713510][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 177.721536][ C1] lec:lec_tx_timeout: lec0 [ 177.733578][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 177.788117][ T5914] IPVS: starting estimator thread 0... [ 178.445887][ T6866] IPVS: using max 34 ests per chain, 81600 per kthread [ 179.564345][ T6875] loop2: detected capacity change from 0 to 8 [ 179.584032][ T6875] SQUASHFS error: Failed to read block 0x4de: -5 [ 179.590695][ T6875] SQUASHFS error: Failed to read block 0x4de: -5 [ 179.597261][ T30] audit: type=1800 audit(1769519383.287:4): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.215" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 179.600819][ T6875] SQUASHFS error: Failed to read block 0x6e6: -5 [ 179.623430][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.633631][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.640470][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.651157][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.658517][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.665422][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.671644][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.678960][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.685812][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.692063][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.699366][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.706234][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.712452][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.719777][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.726631][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.732878][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.740202][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.747049][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.753631][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.760916][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.767754][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.774033][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.781315][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.788152][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.794446][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.801725][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.808578][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.814849][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.822126][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.828984][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.835251][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.842531][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.849369][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.855964][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.863253][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.870134][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.872881][ T6879] loop1: detected capacity change from 0 to 32768 [ 179.876373][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.890034][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.896928][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.903819][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.911109][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.918218][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.924520][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.932161][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.939110][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.945354][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.952637][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.959820][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.966092][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.973378][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 179.977607][ T6879] JBD2: Ignoring recovery information on journal [ 179.980230][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 179.993553][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 179.994128][ T6880] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.000835][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.001706][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.021158][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.028503][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.035644][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.041904][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.049267][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.056602][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.062831][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.070137][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.077011][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.083250][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.088910][ T6879] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 180.090565][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.106314][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.112541][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.119931][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.126810][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.133037][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.139273][ T6880] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.140362][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.153935][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.160596][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.167967][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.174836][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.181059][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.188692][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.195558][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.201786][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.209131][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.215991][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.222228][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.229559][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.236402][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.242619][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.249920][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.256755][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.263309][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.270618][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.277458][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.283706][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.290989][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.297831][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.304094][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.311378][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.318224][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.324485][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.331763][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.338604][ T6875] SQUASHFS error: Failed to read block 0x0: -5 [ 180.427725][ T6886] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.495079][ T6886] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.502436][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.509788][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.516846][ T6875] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.524271][ T6875] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.532213][ T6880] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.547956][ T6880] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.555382][ T6880] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.562900][ T6880] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.572638][ T6886] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 180.580943][ T6886] SQUASHFS error: read_indexes: reading block [6e4:0] [ 180.603579][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 180.805162][ T6889] loop2: detected capacity change from 0 to 2048 [ 180.838773][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.883653][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.891688][ T9] usb 1-1: Product: syz [ 180.898477][ T9] usb 1-1: Manufacturer: syz [ 180.903591][ T9] usb 1-1: SerialNumber: syz [ 180.913085][ T9] usb 1-1: config 0 descriptor?? [ 180.956638][ T6889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.126411][ T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 182.055326][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.743522][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 182.751582][ C1] lec:lec_tx_timeout: lec0 [ 182.756381][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 182.826738][ T5828] ocfs2: Unmounting device (7,1) on (node local) [ 183.220998][ T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 183.248639][ T6914] tipc: Enabled bearer , priority 0 [ 183.275165][ T9] usb 1-1: USB disconnect, device number 4 [ 184.401078][ T6914] syzkaller0: entered promiscuous mode [ 184.424798][ T6914] syzkaller0: entered allmulticast mode [ 184.442358][ T5940] tipc: Node number set to 1588593001 [ 184.491262][ T6914] tipc: Resetting bearer [ 184.515861][ T6913] tipc: Resetting bearer [ 184.565820][ T6913] tipc: Disabling bearer [ 184.628707][ T6922] tipc: Started in network mode [ 184.644046][ T6922] tipc: Node identity eac743a1d324, cluster identity 4711 [ 184.661853][ T6922] tipc: Enabled bearer , priority 0 [ 184.694254][ T6922] syzkaller0: entered promiscuous mode [ 184.721274][ T6929] loop4: detected capacity change from 0 to 128 [ 184.722918][ T6922] syzkaller0: entered allmulticast mode [ 184.816303][ T6922] tipc: Resetting bearer [ 184.834134][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.851281][ T6921] tipc: Resetting bearer [ 184.957337][ T6921] tipc: Disabling bearer [ 185.050788][ T6931] loop2: detected capacity change from 0 to 32768 [ 185.265373][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.282535][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 185.896635][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.179207][ T9] usb 2-1: config 0 descriptor?? [ 186.207258][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 187.763514][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 187.771557][ C1] lec:lec_tx_timeout: lec0 [ 187.779672][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 187.782115][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 187.853835][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 188.326994][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 188.544564][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 188.641489][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 188.663832][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 188.703649][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 188.754605][ T30] audit: type=1804 audit(1769519392.437:5): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.234" name="/newroot/58/file1" dev="fuse" ino=1 res=1 errno=0 [ 188.870948][ T6954] sctp: [Deprecated]: syz.3.226 (pid 6954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.870948][ T6954] Use struct sctp_sack_info instead [ 188.989708][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 189.293608][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 189.519128][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 189.530246][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 189.537790][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 189.546063][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 189.950354][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 189.995937][ T9] pwc: Registered as video103. [ 190.020387][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 190.161839][ T9] usb 2-1: USB disconnect, device number 3 [ 190.270114][ T6969] loop4: detected capacity change from 0 to 128 [ 190.529166][ T6977] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 190.535973][ T6977] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 191.438228][ T6977] vhci_hcd vhci_hcd.0: Device attached [ 192.034901][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.242'. [ 192.374038][ T6978] vhci_hcd: connection closed [ 192.380517][ T6179] vhci_hcd vhci_hcd.2: stop threads [ 192.396623][ T6179] vhci_hcd vhci_hcd.2: release socket [ 192.404661][ T6179] vhci_hcd vhci_hcd.2: disconnect device [ 192.793540][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 192.801595][ C1] lec:lec_tx_timeout: lec0 [ 192.806420][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.286255][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.292798][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.361666][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 196.370846][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 196.377277][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 196.386480][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.594257][ T7008] syzkaller0: entered promiscuous mode [ 196.599761][ T7008] syzkaller0: entered allmulticast mode [ 197.813945][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 197.821984][ C1] lec:lec_tx_timeout: lec0 [ 197.827854][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 197.845421][ T7030] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.889868][ T30] audit: type=1804 audit(1769519402.547:6): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.253" name="/newroot/53/file1" dev="fuse" ino=1 res=1 errno=0 [ 202.843532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 202.851554][ C1] lec:lec_tx_timeout: lec0 [ 202.857279][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 207.517513][ T7090] loop2: detected capacity change from 0 to 1024 [ 207.863545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 207.871583][ C1] lec:lec_tx_timeout: lec0 [ 207.883619][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 208.143781][ T7090] EXT4-fs: Mount option(s) incompatible with ext2 [ 211.032510][ T7104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 211.208407][ T7104] kvm: pic: non byte read [ 211.213256][ T7104] kvm: pic: non byte read [ 211.218195][ T7104] kvm: pic: non byte read [ 211.223136][ T7104] kvm: pic: non byte read [ 212.255850][ T7125] loop0: detected capacity change from 0 to 8 [ 212.471920][ T7131] loop1: detected capacity change from 0 to 128 [ 212.893515][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 212.901542][ C1] lec:lec_tx_timeout: lec0 [ 212.913803][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 213.144697][ T7131] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.180113][ T7131] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.796226][ T7146] syz.1.266 (pid 7146) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 213.802233][ T7146] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 213.803025][ T7146] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes) [ 215.629132][ T5828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.707704][ T7150] loop0: detected capacity change from 0 to 512 [ 216.949804][ T7150] EXT4-fs (loop0): Test dummy encryption mode enabled [ 216.976176][ T7150] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 216.996021][ T7150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.098093][ T7157] loop1: detected capacity change from 0 to 128 [ 217.145596][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.281870][ T7155] syzkaller0: entered promiscuous mode [ 217.588310][ T7159] syz.1.282: attempt to access beyond end of device [ 217.588310][ T7159] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 217.830316][ T7155] syzkaller0: entered allmulticast mode [ 218.965703][ T7166] tipc: Failed to remove unknown binding: 66,0,0/3275760094:2186825853/2186825854 [ 219.000476][ T7166] tipc: Failed to remove unknown binding: 66,0,0/3275760094:2186825853/2186825854 [ 219.073514][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6160 ms [ 219.081572][ C1] lec:lec_tx_timeout: lec0 [ 219.086596][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.398083][ T7178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.288'. [ 220.433694][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.288'. [ 220.480695][ T7178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.288'. [ 220.536604][ T7178] netlink: 36 bytes leftover after parsing attributes in process `syz.4.288'. [ 220.703573][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 222.053587][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 222.065697][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.100283][ T5914] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 222.123556][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.208772][ T5914] usb 3-1: config 0 descriptor?? [ 222.652890][ T5914] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 222.847342][ T5914] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 222.978144][ T5914] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 222.986230][ T5914] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 222.993388][ T5914] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 223.018050][ T5914] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 223.059545][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.084313][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.250260][ T5914] usb 3-1: USB disconnect, device number 3 [ 224.834153][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 224.842194][ C1] lec:lec_tx_timeout: lec0 [ 224.846782][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 224.863868][ T7207] fuse: Unknown parameter '0x0000000000000005' [ 225.157398][ T7208] loop2: detected capacity change from 0 to 40427 [ 225.182510][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 225.292467][ T7208] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 225.300423][ T7208] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 225.344517][ T7208] F2FS-fs (loop2): invalid crc value [ 225.859356][ T7208] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.875198][ T7208] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 225.882318][ T7208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.935567][ T7222] loop4: detected capacity change from 0 to 16 [ 226.977893][ T7222] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 227.033807][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 227.310703][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.413051][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.502994][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 227.549333][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 227.615232][ T9] usb 2-1: SerialNumber: syz [ 227.766728][ T7225] binder_alloc: 7224: binder_alloc_buf size 4096 failed, no address space [ 227.803764][ T7225] binder_alloc: allocated: 8192 (num: 2 largest: 4096), free: 0 (num: 0 largest: 0) [ 227.894455][ T9] usb 2-1: 0:2 : does not exist [ 227.913420][ T9] usb 2-1: unit 255 not found! [ 227.944140][ T9] usb 2-1: 5:0: cannot get min/max values for control 6 (id 5) [ 228.000870][ T9] usb 2-1: 5:0: cannot get min/max values for control 13 (id 5) [ 228.080301][ T9] usb 2-1: 5:0: cannot get min/max values for control 17 (id 5) [ 228.727996][ T30] audit: type=1326 audit(6060921729.361:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 228.734455][ T7229] syzkaller0: entered promiscuous mode [ 228.750270][ T30] audit: type=1326 audit(6060921729.361:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 228.777911][ T30] audit: type=1326 audit(6060921729.361:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 228.794521][ T9] usb 2-1: USB disconnect, device number 4 [ 228.801064][ T30] audit: type=1326 audit(6060921729.361:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 228.900864][ T5999] Bluetooth: hci5: Frame reassembly failed (-84) [ 228.947839][ T7229] syzkaller0: entered allmulticast mode [ 228.948960][ T7234] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 228.972896][ T30] audit: type=1326 audit(6060921729.361:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 229.109931][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.129869][ T30] audit: type=1326 audit(6060921729.361:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 229.172568][ T30] audit: type=1326 audit(6060921729.361:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 229.742461][ T30] audit: type=1326 audit(6060921729.361:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 229.781901][ T30] audit: type=1326 audit(6060921729.361:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 229.852323][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.860382][ C1] lec:lec_tx_timeout: lec0 [ 229.872290][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 229.895647][ T7247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.917805][ T7247] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 230.028743][ T30] audit: type=1326 audit(6060921729.361:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7231 comm="syz.3.304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0def9aeb9 code=0x7ffc0000 [ 230.085742][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.137484][ T7247] bond0: (slave team0): Enslaving as an active interface with an up link [ 230.962632][ T5153] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 232.867038][ T7270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.311'. [ 234.879795][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 234.887895][ C1] lec:lec_tx_timeout: lec0 [ 234.892643][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 235.636176][ T7282] random: crng reseeded on system resumption [ 238.165221][ T7300] syzkaller0: entered promiscuous mode [ 238.181403][ T7300] syzkaller0: entered allmulticast mode [ 240.676830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 240.684870][ C1] lec:lec_tx_timeout: lec0 [ 240.689480][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.332832][ T7330] syzkaller0: entered promiscuous mode [ 242.353245][ T7330] syzkaller0: entered allmulticast mode [ 243.041129][ T7343] loop2: detected capacity change from 0 to 8 [ 243.141756][ T7343] SQUASHFS error: xz decompression failed, data probably corrupt [ 243.177102][ T7343] SQUASHFS error: Failed to read block 0x108: -5 [ 243.184535][ T7343] SQUASHFS error: Unable to read metadata cache entry [106] [ 243.192056][ T7343] SQUASHFS error: Unable to read inode 0x11f [ 243.219354][ T7343] cgroup: noprefix used incorrectly [ 245.704572][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 245.712598][ C1] lec:lec_tx_timeout: lec0 [ 245.717298][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 245.975624][ T7353] loop3: detected capacity change from 0 to 512 [ 246.000798][ T7355] loop0: detected capacity change from 0 to 2048 [ 246.008892][ T7353] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 246.032234][ T7355] EXT4-fs: Ignoring removed bh option [ 246.074345][ T7353] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 246.142216][ T7355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.333250][ T7365] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 247.566065][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.803924][ T7372] loop0: detected capacity change from 0 to 65536 [ 248.971735][ T7372] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 249.060628][ T7372] XFS (loop0): Ending clean mount [ 249.073040][ T7372] XFS (loop0): Quotacheck needed: Please wait. [ 249.340286][ T7372] XFS (loop0): Quotacheck: Done. [ 250.446451][ T5832] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 250.469212][ T7404] loop4: detected capacity change from 0 to 2048 [ 250.488094][ T7405] Zero length message leads to an empty skb [ 250.575685][ T7404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.706523][ T7404] warning: `syz.4.341' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 250.731814][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 250.739840][ C1] lec:lec_tx_timeout: lec0 [ 250.744655][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 251.763862][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.344'. [ 255.728246][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.735117][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.749294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 255.757308][ C1] lec:lec_tx_timeout: lec0 [ 255.767835][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 255.936587][ T7439] loop4: detected capacity change from 0 to 32768 [ 255.948129][ T7439] workqueue: name exceeds WQ_NAME_LEN. Truncating to: gfs2-glock/__Š°"_½z#²˱1Ä [ 255.997455][ T7439] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 256.013210][ T7439] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 256.080278][ T7439] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 256.097922][ T7439] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6 [ 256.110024][ T7439] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 256.122369][ T7439] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 256.134162][ T7439] CPU: 1 UID: 0 PID: 7439 Comm: syz.4.350 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.134185][ T7439] Tainted: [L]=SOFTLOCKUP [ 256.134189][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 256.134198][ T7439] Call Trace: [ 256.134203][ T7439] [ 256.134207][ T7439] dump_stack_lvl+0xe8/0x150 [ 256.134227][ T7439] gfs2_withdraw+0xc3/0x1b0 [ 256.134243][ T7439] gfs2_jdesc_check+0x17d/0x2f0 [ 256.134261][ T7439] init_journal+0xc7e/0x2260 [ 256.134281][ T7439] ? init_inodes+0xdb/0x320 [ 256.134296][ T7439] ? __pfx_init_journal+0x10/0x10 [ 256.134309][ T7439] ? vsnprintf+0xdf1/0xee0 [ 256.134334][ T7439] ? snprintf+0xe8/0x140 [ 256.134350][ T7439] ? init_inodes+0xdb/0x320 [ 256.134363][ T7439] ? __pfx_snprintf+0x10/0x10 [ 256.134378][ T7439] ? gfs2_glock_nq_num+0x13d/0x170 [ 256.134395][ T7439] init_inodes+0xdb/0x320 [ 256.134409][ T7439] gfs2_fill_super+0x1a38/0x21d0 [ 256.134431][ T7439] ? __pfx_gfs2_fill_super+0x10/0x10 [ 256.134445][ T7439] ? init_locking+0xb8/0x210 [ 256.134458][ T7439] ? sb_set_blocksize+0x155/0x240 [ 256.134472][ T7439] ? setup_bdev_super+0x4c1/0x5b0 [ 256.134488][ T7439] get_tree_bdev_flags+0x431/0x4f0 [ 256.134503][ T7439] ? __pfx_gfs2_fill_super+0x10/0x10 [ 256.134516][ T7439] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 256.134529][ T7439] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 256.134548][ T7439] gfs2_get_tree+0x51/0x1e0 [ 256.134562][ T7439] vfs_get_tree+0x92/0x2a0 [ 256.134579][ T7439] do_new_mount+0x341/0xd30 [ 256.134590][ T7439] ? apparmor_capable+0x137/0x1a0 [ 256.134605][ T7439] ? __pfx_do_new_mount+0x10/0x10 [ 256.134616][ T7439] ? ns_capable+0x89/0xe0 [ 256.134634][ T7439] ? user_path_at+0xd4/0x160 [ 256.134654][ T7439] __se_sys_mount+0x31d/0x420 [ 256.134679][ T7439] ? __pfx___se_sys_mount+0x10/0x10 [ 256.134704][ T7439] ? __x64_sys_mount+0x20/0xc0 [ 256.134727][ T7439] do_syscall_64+0xe2/0xf80 [ 256.134747][ T7439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.134762][ T7439] ? trace_irq_disable+0x37/0x100 [ 256.134776][ T7439] ? clear_bhb_loop+0x40/0x90 [ 256.134789][ T7439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.134800][ T7439] RIP: 0033:0x7f4c8159c14a [ 256.134818][ T7439] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.134826][ T7439] RSP: 002b:00007f4c823aae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.134838][ T7439] RAX: ffffffffffffffda RBX: 00007f4c823aaee0 RCX: 00007f4c8159c14a [ 256.134846][ T7439] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00007f4c823aaea0 [ 256.134853][ T7439] RBP: 0000200000000000 R08: 00007f4c823aaee0 R09: 000000000000881d [ 256.134860][ T7439] R10: 000000000000881d R11: 0000000000000246 R12: 0000200000000040 [ 256.134866][ T7439] R13: 00007f4c823aaea0 R14: 000000000001272b R15: 00002000000001c0 [ 256.134883][ T7439] [ 256.134891][ T7439] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.0: my journal (0) is bad: -5 [ 257.188158][ T7452] syzkaller0: entered promiscuous mode [ 257.224206][ T7452] syzkaller0: entered allmulticast mode [ 257.496721][ T7455] loop1: detected capacity change from 0 to 4096 [ 257.749229][ T7455] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.783151][ T7455] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 257.856184][ T7455] System zones: 0-5 [ 257.869462][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 257.877008][ T7455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.425420][ T7471] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 258.564817][ T7464] Bluetooth: MGMT ver 1.23 [ 258.578554][ T7464] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 260.759700][ T7483] loop3: detected capacity change from 0 to 2048 [ 260.768290][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.776854][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 260.785259][ C1] lec:lec_tx_timeout: lec0 [ 260.789911][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 260.949576][ T7483] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 261.726996][ T7490] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.849433][ T7492] loop2: detected capacity change from 0 to 64 [ 262.925929][ T7497] loop1: detected capacity change from 0 to 256 [ 264.641108][ T7497] FAT-fs (loop1): Directory bread(block 64) failed [ 264.648171][ T7497] FAT-fs (loop1): Directory bread(block 65) failed [ 264.655494][ T7497] FAT-fs (loop1): Directory bread(block 66) failed [ 264.662200][ T7497] FAT-fs (loop1): Directory bread(block 67) failed [ 264.669645][ T7497] FAT-fs (loop1): Directory bread(block 68) failed [ 264.676453][ T7497] FAT-fs (loop1): Directory bread(block 69) failed [ 264.684059][ T7497] FAT-fs (loop1): Directory bread(block 70) failed [ 264.690958][ T7497] FAT-fs (loop1): Directory bread(block 71) failed [ 264.698152][ T7497] FAT-fs (loop1): Directory bread(block 72) failed [ 264.704926][ T7497] FAT-fs (loop1): Directory bread(block 73) failed [ 264.775372][ T7497] vfat filesystem being mounted at /63/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 265.794312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 265.802365][ C1] lec:lec_tx_timeout: lec0 [ 265.808369][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 265.835890][ T7506] tipc: Enabled bearer , priority 0 [ 265.847486][ T7506] syzkaller0: entered promiscuous mode [ 265.853683][ T7506] syzkaller0: entered allmulticast mode [ 265.934594][ T7506] tipc: Resetting bearer [ 265.976591][ T7505] tipc: Resetting bearer [ 266.054956][ T7505] tipc: Disabling bearer [ 266.132227][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 266.230382][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 266.452283][ T7526] process 'syz.0.370' launched './file2' with NULL argv: empty string added [ 266.530950][ T7528] syzkaller0: entered promiscuous mode [ 266.537049][ T7528] syzkaller0: entered allmulticast mode [ 267.455626][ T7534] loop2: detected capacity change from 0 to 40427 [ 267.468002][ T7534] F2FS-fs (loop2): Image doesn't support compression [ 267.474718][ T7534] F2FS-fs (loop2): build fault injection rate: 690 [ 267.481990][ T7534] F2FS-fs (loop2): invalid crc value [ 267.521015][ T7534] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 267.530405][ T7534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.638251][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 267.638268][ T30] audit: type=1800 audit(6060921768.351:28): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.374" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 268.439392][ T5831] syz-executor: attempt to access beyond end of device [ 268.439392][ T5831] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.645503][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 268.645523][ T5831] Tainted: [L]=SOFTLOCKUP [ 268.645527][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 268.645533][ T5831] Call Trace: [ 268.645538][ T5831] [ 268.645543][ T5831] dump_stack_lvl+0xe8/0x150 [ 268.645563][ T5831] f2fs_handle_critical_error+0x37c/0x540 [ 268.645584][ T5831] f2fs_write_end_io+0xcdb/0xff0 [ 268.645605][ T5831] __submit_merged_bio+0x256/0x650 [ 268.645624][ T5831] __submit_merged_write_cond+0x3c3/0x4e0 [ 268.645644][ T5831] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 268.645671][ T5831] f2fs_write_data_pages+0x2970/0x35e0 [ 268.645682][ T5831] ? __lock_acquire+0x6b5/0x2cf0 [ 268.645711][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 268.645729][ T5831] ? css_rstat_updated+0x23a/0x530 [ 268.645761][ T5831] ? lockdep_unlock+0x5d/0xd0 [ 268.645771][ T5831] ? __lock_acquire+0x146e/0x2cf0 [ 268.645796][ T5831] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.645817][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 268.645833][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 268.645844][ T5831] do_writepages+0x32e/0x550 [ 268.645863][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 268.645881][ T5831] filemap_fdatawrite+0x1e9/0x2f0 [ 268.645899][ T5831] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 268.645934][ T5831] ? do_raw_spin_unlock+0xf5/0x210 [ 268.645951][ T5831] f2fs_sync_dirty_inodes+0x30e/0x810 [ 268.645970][ T5831] f2fs_write_checkpoint+0x9cf/0x2680 [ 268.646001][ T5831] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 268.646040][ T5831] kill_f2fs_super+0x314/0x720 [ 268.646055][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 268.646072][ T5831] ? lockdep_hardirqs_on+0x7a/0x110 [ 268.646091][ T5831] deactivate_locked_super+0xbc/0x130 [ 268.646106][ T5831] cleanup_mnt+0x437/0x4d0 [ 268.646120][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.646138][ T5831] task_work_run+0x1d9/0x270 [ 268.646150][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 268.646165][ T5831] exit_to_user_mode_loop+0xed/0x480 [ 268.646177][ T5831] ? rcu_is_watching+0x15/0xb0 [ 268.646191][ T5831] do_syscall_64+0x2b7/0xf80 [ 268.646203][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.646212][ T5831] ? trace_irq_disable+0x37/0x100 [ 268.646225][ T5831] ? clear_bhb_loop+0x40/0x90 [ 268.646238][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.646247][ T5831] RIP: 0033:0x7f1c5c59c117 [ 268.646258][ T5831] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 268.646266][ T5831] RSP: 002b:00007fff4c611c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 268.646278][ T5831] RAX: 0000000000000000 RBX: 00007f1c5c60471f RCX: 00007f1c5c59c117 [ 268.646285][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4c611d20 [ 268.646291][ T5831] RBP: 00007fff4c611d20 R08: 00007fff4c612d20 R09: 00000000ffffffff [ 268.646297][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4c612db0 [ 268.646303][ T5831] R13: 00007f1c5c60471f R14: 000000000004160d R15: 00007fff4c612df0 [ 268.646320][ T5831] [ 268.646324][ T5831] F2FS-fs (loop2): Remounting filesystem read-only [ 269.010746][ T7547] netlink: 'syz.1.378': attribute type 13 has an invalid length. [ 269.263906][ T7549] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 269.288046][ T7549] syzkaller0: entered promiscuous mode [ 269.307423][ T7549] syzkaller0: entered allmulticast mode [ 269.765852][ T7559] loop2: detected capacity change from 0 to 512 [ 269.917027][ T7559] EXT4-fs: Ignoring removed orlov option [ 270.821769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 270.829805][ C1] lec:lec_tx_timeout: lec0 [ 270.841816][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 271.371762][ T7559] EXT4-fs error (device loop2): ext4_iget_extra_inode:5052: inode #15: comm syz.2.377: corrupted in-inode xattr: bad e_name length [ 271.441595][ T7559] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.442184][ T7559] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.377: couldn't read orphan inode 15 (err -117) [ 271.463116][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 271.463158][ C0] EXT4-fs (loop2): initial error at time 6060921772: ext4_iget_extra_inode:5052: inode 15 [ 271.463189][ C0] EXT4-fs (loop2): last error at time 6060921772: ext4_iget_extra_inode:5052: inode 15 [ 271.499125][ T7570] loop1: detected capacity change from 0 to 128 [ 271.532403][ T7570] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.550277][ T7559] loop2: lost filesystem error report for type 5 error -117 [ 271.567320][ T7559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.762385][ T7570] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.313575][ T7570] vfat filesystem being mounted at /67/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 273.123322][ T7581] loop0: detected capacity change from 0 to 2048 [ 274.018649][ T7581] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 274.033587][ T7581] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.046700][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.079079][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.685947][ T7588] loop2: detected capacity change from 0 to 1024 [ 275.849259][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 275.857294][ C1] lec:lec_tx_timeout: lec0 [ 275.869285][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 276.131641][ T7593] loop0: detected capacity change from 0 to 512 [ 276.335119][ T7593] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 276.385395][ T58] hfsplus: b-tree write err: -5, ino 4 [ 278.041622][ T7611] loop2: detected capacity change from 0 to 8 [ 278.052246][ T7611] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 278.783615][ T5836] udevd[5836]: incorrect cramfs checksum on /dev/loop2 [ 279.340937][ T5836] udevd[5836]: incorrect cramfs checksum on /dev/loop2 [ 280.873599][ T5836] udevd[5836]: incorrect cramfs checksum on /dev/loop2 [ 281.027825][ T5836] udevd[5836]: incorrect cramfs checksum on /dev/loop2 [ 281.135893][ T7633] loop4: detected capacity change from 0 to 1024 [ 281.216061][ T7633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.686329][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 281.694383][ C1] lec:lec_tx_timeout: lec0 [ 281.699399][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 282.920031][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.928008][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.178834][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.233406][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.249637][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.625104][ T6825] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.634243][ T6825] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.655856][ T6825] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.665419][ T6825] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.973426][ T7676] input: syz0 as /devices/virtual/input/input8 [ 286.703818][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 286.711844][ C1] lec:lec_tx_timeout: lec0 [ 286.721001][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.985907][ T7700] loop3: detected capacity change from 0 to 8 [ 290.996566][ T7700] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 291.026356][ T7700] cramfs: Error -3 while decompressing! [ 291.032603][ T7700] cramfs: ffffffff9a356088(26)->ffff888051cd4000(4096) [ 291.040586][ T7700] cramfs: bad data blocksize 3489655184 [ 291.046555][ T7700] cramfs: Error -3 while decompressing! [ 291.052161][ T7700] cramfs: ffffffff9a356088(26)->ffff888051cd4000(4096) [ 291.587424][ T5836] udevd[5836]: incorrect cramfs checksum on /dev/loop3 [ 291.635168][ T5836] udevd[5836]: incorrect cramfs checksum on /dev/loop3 [ 291.731316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 291.739379][ C1] lec:lec_tx_timeout: lec0 [ 291.744075][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 292.275452][ T7705] loop3: detected capacity change from 0 to 1024 [ 296.749028][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 296.757070][ C1] lec:lec_tx_timeout: lec0 [ 296.761647][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 297.220329][ T7740] loop3: detected capacity change from 0 to 64 [ 297.232562][ T7740] hfs: Bad value for 'gid' [ 298.463948][ T7747] loop3: detected capacity change from 0 to 764 [ 298.738715][ T7749] infiniband: Added to hash: ib_dev=ffff888034974000 (0)() ndev=ffff888059402000 (16)(virt_wifi0) [ 298.750676][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.757442][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.766746][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.778831][ T7749] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.795866][ T7749] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 298.867389][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.877047][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.885603][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.894137][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.902831][ T7749] virt_wifi0 speed is unknown, defaulting to 1000 [ 299.043483][ T7747] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 301.766286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 301.774335][ C1] lec:lec_tx_timeout: lec0 [ 301.780353][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 301.989403][ T7770] loop1: detected capacity change from 0 to 40427 [ 302.615233][ T7772] fuse: Bad value for 'fd' [ 302.672192][ T7772] loop1: detected capacity change from 0 to 256 [ 302.826876][ T7772] exFAT-fs (loop1): error, The cluster chain has a loop [ 302.833964][ T7772] exFAT-fs (loop1): failed to count the number of clusters in root [ 302.841984][ T7772] exFAT-fs (loop1): failed to recognize exfat type [ 306.449193][ T7796] delete_channel: no stack [ 306.467064][ T7796] loop0: detected capacity change from 0 to 22 [ 306.477287][ T7796] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 306.560546][ T7796] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 306.793777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 306.801803][ C1] lec:lec_tx_timeout: lec0 [ 306.813831][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.821257][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 311.829293][ C1] lec:lec_tx_timeout: lec0 [ 311.841307][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.501880][ T7807] syz.0.439 (7807): drop_caches: 2 [ 314.359341][ T7833] loop0: detected capacity change from 0 to 8192 [ 314.397116][ T7833] vfat filesystem being mounted at /90/bus supports timestamps until 2107-12-31 (0x10391447e) [ 315.929165][ T7845] loop1: detected capacity change from 0 to 2048 [ 315.991244][ T7845] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 316.013412][ T7845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.848807][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 316.856862][ C1] lec:lec_tx_timeout: lec0 [ 316.861534][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.966834][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.973708][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.545215][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.557173][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.568799][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.589519][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.599999][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.832437][ T7856] virt_wifi0 speed is unknown, defaulting to 1000 [ 319.487026][ T7856] chnl_net:caif_netlink_parms(): no params data found [ 319.747412][ T5153] Bluetooth: hci5: command tx timeout [ 320.412695][ T7877] Sensor B: ================= START STATUS ================= [ 320.420511][ T7877] Sensor B: Test Pattern: 75% Colorbar [ 320.426312][ T7877] Sensor B: Show Information: All [ 320.431512][ T7877] Sensor B: Vertical Flip: false [ 320.436599][ T7877] Sensor B: Horizontal Flip: false [ 320.441921][ T7877] Sensor B: Brightness: 128 [ 320.446560][ T7877] Sensor B: Contrast: 128 [ 320.451134][ T7877] Sensor B: Hue: 0 [ 320.454994][ T7877] Sensor B: Saturation: 128 [ 320.459779][ T7877] Sensor B: ================== END STATUS ================== [ 321.127378][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.134695][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.142172][ T7856] bridge_slave_0: entered allmulticast mode [ 321.150311][ T7856] bridge_slave_0: entered promiscuous mode [ 321.163880][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.171324][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.181074][ T7856] bridge_slave_1: entered allmulticast mode [ 321.198294][ T7856] bridge_slave_1: entered promiscuous mode [ 321.459774][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.500311][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.748281][ T7856] team0: Port device team_slave_0 added [ 321.766017][ T7856] team0: Port device team_slave_1 added [ 321.836664][ T5153] Bluetooth: hci5: command tx timeout [ 322.705828][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 322.713881][ C1] lec:lec_tx_timeout: lec0 [ 322.718570][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.773537][ T7892] loop1: detected capacity change from 0 to 2048 [ 322.790455][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.802116][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.832228][ T7892] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 322.843972][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.876732][ T7896] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.890901][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.906104][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.369823][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.905306][ T5153] Bluetooth: hci5: command tx timeout [ 324.245914][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 324.376455][ T7909] loop1: detected capacity change from 0 to 2048 [ 324.745113][ T7909] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 324.760076][ T7909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.103051][ T7913] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 325.449450][ T7913] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 325.461588][ T7913] overlayfs: failed to look up (tracing) for ino (-66) [ 325.991935][ T5153] Bluetooth: hci5: command tx timeout [ 326.035693][ T7908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.451598][ T7920] can: request_module (can-proto-4) failed. [ 326.521933][ T7856] hsr_slave_0: entered promiscuous mode [ 326.664184][ T7856] hsr_slave_1: entered promiscuous mode [ 326.670574][ T7856] debugfs: 'hsr0' already exists in 'hsr' [ 326.676714][ T7856] Cannot create hsr debugfs directory [ 327.545392][ T7928] loop2: detected capacity change from 0 to 512 [ 327.552556][ T7928] EXT4-fs: quotafile must be on filesystem root [ 327.733298][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 327.741331][ C1] lec:lec_tx_timeout: lec0 [ 327.753357][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.095765][ T7937] No such timeout policy "syz1" [ 329.578677][ T13] bridge_slave_1: left allmulticast mode [ 329.592445][ T13] bridge_slave_1: left promiscuous mode [ 329.600394][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.716631][ T13] bridge_slave_0: left allmulticast mode [ 329.733846][ T13] bridge_slave_0: left promiscuous mode [ 329.824732][ T7945] xt_cgroup: invalid path, errno=-2 [ 330.282087][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.831284][ T7959] loop1: detected capacity change from 0 to 2048 [ 331.893306][ T7959] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 331.905587][ T7959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 332.770799][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 332.778879][ C1] lec:lec_tx_timeout: lec0 [ 332.790843][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 332.838146][ T7971] loop2: detected capacity change from 0 to 256 [ 332.863851][ T7971] vfat filesystem being mounted at /103/bus supports timestamps until 2107-12-31 (0x10391447e) [ 333.626063][ T7984] netlink: 'syz.2.468': attribute type 3 has an invalid length. [ 333.633990][ T7984] netlink: 'syz.2.468': attribute type 1 has an invalid length. [ 334.957478][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.994270][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.003620][ T13] bond0 (unregistering): Released all slaves [ 335.013459][ T7939] tipc: Enabled bearer , priority 0 [ 335.021181][ T7932] syzkaller0: entered promiscuous mode [ 335.026636][ T7932] syzkaller0: entered allmulticast mode [ 335.140640][ T7947] tipc: Resetting bearer [ 335.154626][ T7930] tipc: Resetting bearer [ 335.252174][ T7930] tipc: Disabling bearer [ 335.611131][ T7996] loop2: detected capacity change from 0 to 32768 [ 335.675177][ T5836] loop2: p9 p11 p16 [ 335.763256][ T7996] loop2: p9 p11 p16 [ 335.854169][ T8002] loop0: detected capacity change from 0 to 256 [ 335.865133][ T8002] exfat: Deprecated parameter 'namecase' [ 335.871101][ T8002] exfat: Deprecated parameter 'namecase' [ 335.904532][ T8002] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 335.923618][ T8002] exfat filesystem being mounted at /100/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 337.662255][ T8002] virt_wifi0 speed is unknown, defaulting to 1000 [ 337.798644][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 337.806691][ C1] lec:lec_tx_timeout: lec0 [ 337.811706][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.511341][ T8019] overlay: Unknown parameter 'subj_user' [ 338.564849][ T13] hsr_slave_0: left promiscuous mode [ 338.603111][ T13] hsr_slave_1: left promiscuous mode [ 338.624156][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.691215][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.789366][ T5830] udevd[5830]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 338.899468][ T6268] udevd[6268]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 338.910152][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 338.998892][ T6268] udevd[6268]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 339.006394][ T5830] udevd[5830]: inotify_add_watch(7, /dev/loop2p16, 10) failed: No such file or directory [ 339.032134][ T5836] udevd[5836]: inotify_add_watch(7, /dev/loop2p9, 10) failed: No such file or directory [ 342.819138][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 342.827165][ C1] lec:lec_tx_timeout: lec0 [ 342.831852][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.958070][ T13] team0 (unregistering): Port device team_slave_1 removed [ 344.090661][ T13] team0 (unregistering): Port device team_slave_0 removed [ 347.626483][ T7856] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 347.691237][ T7856] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.725997][ T7856] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.958674][ T7856] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 348.517064][ T30] audit: type=1326 audit(6060921849.061:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8066 comm="syz.4.489" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c8159aeb9 code=0x0 [ 348.612856][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 348.620967][ C1] lec:lec_tx_timeout: lec0 [ 348.626293][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.074315][ T8087] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 350.396570][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.978689][ T7856] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.992173][ T8100] loop0: detected capacity change from 0 to 512 [ 351.034913][ T8100] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 351.085589][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.092814][ T5999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.108455][ T8100] EXT4-fs (loop0): invalid journal inode [ 351.141931][ T8100] EXT4-fs (loop0): can't get journal size [ 352.314665][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.321796][ T5999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.415164][ T8100] EXT4-fs (loop0): 1 truncate cleaned up [ 352.473607][ T8100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.524743][ T7856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.917329][ T8122] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 353.344406][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.447681][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.650446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 353.658468][ C1] lec:lec_tx_timeout: lec0 [ 353.670402][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.203802][ T7856] veth0_vlan: entered promiscuous mode [ 355.268526][ T7856] veth1_vlan: entered promiscuous mode [ 355.308269][ T7856] veth0_macvtap: entered promiscuous mode [ 355.428073][ T7856] veth1_macvtap: entered promiscuous mode [ 356.035658][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.161784][ T8157] loop1: detected capacity change from 0 to 40427 [ 357.207064][ T8157] F2FS-fs (loop1): build fault injection rate: 771 [ 358.132755][ T8157] F2FS-fs (loop1): invalid crc value [ 358.433378][ T8157] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 358.463196][ T8157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 358.687826][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 358.695860][ C1] lec:lec_tx_timeout: lec0 [ 358.702223][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 359.386507][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.794520][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.805659][ T5828] syz-executor: attempt to access beyond end of device [ 360.805659][ T5828] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 360.837199][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 360.837235][ T5828] Tainted: [L]=SOFTLOCKUP [ 360.837242][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 360.837261][ T5828] Call Trace: [ 360.837268][ T5828] [ 360.837276][ T5828] dump_stack_lvl+0xe8/0x150 [ 360.837307][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 360.837342][ T5828] f2fs_write_end_io+0xcdb/0xff0 [ 360.837379][ T5828] __submit_merged_bio+0x256/0x650 [ 360.837412][ T5828] __submit_merged_write_cond+0x3c3/0x4e0 [ 360.837447][ T5828] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 360.837497][ T5828] f2fs_write_data_pages+0x2970/0x35e0 [ 360.837515][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 360.837571][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.837602][ T5828] ? unwind_next_frame+0xa5/0x23c0 [ 360.837627][ T5828] ? css_rstat_updated+0x23a/0x530 [ 360.837681][ T5828] ? rcu_is_watching+0x15/0xb0 [ 360.837707][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 360.837743][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 360.837774][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.837811][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 360.837839][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 360.837860][ T5828] do_writepages+0x32e/0x550 [ 360.837892][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 360.837923][ T5828] filemap_fdatawrite+0x1e9/0x2f0 [ 360.837949][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 360.838015][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 360.838047][ T5828] f2fs_sync_dirty_inodes+0x30e/0x810 [ 360.838083][ T5828] f2fs_write_checkpoint+0x9cf/0x2680 [ 360.838137][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 360.838197][ T5828] ? kfree+0x1c1/0x610 [ 360.838223][ T5828] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 360.838254][ T5828] kill_f2fs_super+0x314/0x720 [ 360.838281][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 360.838314][ T5828] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.838350][ T5828] deactivate_locked_super+0xbc/0x130 [ 360.838375][ T5828] cleanup_mnt+0x437/0x4d0 [ 360.838399][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.838422][ T5828] task_work_run+0x1d9/0x270 [ 360.838443][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 360.838471][ T5828] exit_to_user_mode_loop+0xed/0x480 [ 360.838491][ T5828] ? rcu_is_watching+0x15/0xb0 [ 360.838515][ T5828] do_syscall_64+0x2b7/0xf80 [ 360.838536][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.838554][ T5828] ? trace_irq_disable+0x37/0x100 [ 360.838577][ T5828] ? clear_bhb_loop+0x40/0x90 [ 360.838599][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.838617][ T5828] RIP: 0033:0x7f998419c117 [ 360.838634][ T5828] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 360.838648][ T5828] RSP: 002b:00007ffeb03ed408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 360.838667][ T5828] RAX: 0000000000000000 RBX: 00007f998420471f RCX: 00007f998419c117 [ 360.838680][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb03ed4c0 [ 360.838691][ T5828] RBP: 00007ffeb03ed4c0 R08: 00007ffeb03ee4c0 R09: 00000000ffffffff [ 360.838703][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb03ee550 [ 360.838714][ T5828] R13: 00007f998420471f R14: 0000000000057bf8 R15: 00007ffeb03ee590 [ 360.838745][ T5828] [ 360.838752][ T5828] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 360.919294][ T5999] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.076746][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 361.076773][ T5828] Tainted: [L]=SOFTLOCKUP [ 361.076779][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 361.076789][ T5828] Call Trace: [ 361.076796][ T5828] [ 361.076803][ T5828] dump_stack_lvl+0xe8/0x150 [ 361.076833][ T5828] f2fs_handle_critical_error+0x37c/0x540 [ 361.076866][ T5828] f2fs_write_end_io+0xcdb/0xff0 [ 361.076903][ T5828] __submit_merged_bio+0x256/0x650 [ 361.076934][ T5828] __submit_merged_write_cond+0x3c3/0x4e0 [ 361.076968][ T5828] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 361.077015][ T5828] f2fs_write_data_pages+0x2970/0x35e0 [ 361.077033][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 361.077087][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 361.077116][ T5828] ? unwind_next_frame+0xa5/0x23c0 [ 361.077140][ T5828] ? css_rstat_updated+0x23a/0x530 [ 361.077198][ T5828] ? rcu_is_watching+0x15/0xb0 [ 361.077224][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 361.077259][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 361.077288][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 361.077323][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 361.077349][ T5828] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 361.077369][ T5828] do_writepages+0x32e/0x550 [ 361.077400][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 361.077430][ T5828] filemap_fdatawrite+0x1e9/0x2f0 [ 361.077455][ T5828] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 361.077520][ T5828] ? do_raw_spin_unlock+0xf5/0x210 [ 361.077549][ T5828] f2fs_sync_dirty_inodes+0x30e/0x810 [ 361.077583][ T5828] f2fs_write_checkpoint+0x9cf/0x2680 [ 361.077634][ T5828] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 361.077691][ T5828] ? kfree+0x1c1/0x610 [ 361.077712][ T5828] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 361.077742][ T5828] kill_f2fs_super+0x314/0x720 [ 361.077767][ T5828] ? __pfx_kill_f2fs_super+0x10/0x10 [ 361.077799][ T5828] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.077832][ T5828] deactivate_locked_super+0xbc/0x130 [ 361.077857][ T5828] cleanup_mnt+0x437/0x4d0 [ 361.077881][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 361.077902][ T5828] task_work_run+0x1d9/0x270 [ 361.077923][ T5828] ? __pfx_task_work_run+0x10/0x10 [ 361.077950][ T5828] exit_to_user_mode_loop+0xed/0x480 [ 361.077969][ T5828] ? rcu_is_watching+0x15/0xb0 [ 361.077993][ T5828] do_syscall_64+0x2b7/0xf80 [ 361.078013][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.078030][ T5828] ? trace_irq_disable+0x37/0x100 [ 361.078052][ T5828] ? clear_bhb_loop+0x40/0x90 [ 361.078074][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.078091][ T5828] RIP: 0033:0x7f998419c117 [ 361.078108][ T5828] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 361.078122][ T5828] RSP: 002b:00007ffeb03ed408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 361.078141][ T5828] RAX: 0000000000000000 RBX: 00007f998420471f RCX: 00007f998419c117 [ 361.078153][ T5828] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb03ed4c0 [ 361.078163][ T5828] RBP: 00007ffeb03ed4c0 R08: 00007ffeb03ee4c0 R09: 00000000ffffffff [ 361.078175][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb03ee550 [ 361.078191][ T5828] R13: 00007f998420471f R14: 0000000000057bf8 R15: 00007ffeb03ee590 [ 361.078221][ T5828] [ 361.078228][ T5828] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 361.778188][ T5999] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.858714][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.687019][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.738515][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.817140][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.855832][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.108064][ T8192] loop0: detected capacity change from 0 to 4096 [ 363.200039][ T8192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.715314][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 363.723387][ C1] lec:lec_tx_timeout: lec0 [ 363.740939][ T8192] overlayfs: missing 'lowerdir' [ 364.868453][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.320270][ T8285] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.506'. [ 370.784437][ T8283] loop0: detected capacity change from 0 to 4096 [ 370.885580][ T8294] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 370.963255][ T30] audit: type=1800 audit(6060921871.732:30): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.514" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 372.745705][ T8306] loop0: detected capacity change from 0 to 256 [ 372.784771][ T8306] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 372.802894][ T8306] exfat filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447f) [ 373.064303][ T8308] loop1: detected capacity change from 0 to 32768 [ 373.322998][ T8308] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 373.944041][ T8308] XFS (loop1): Ending clean mount [ 373.964850][ T8308] XFS (loop1): Quotacheck needed: Please wait. [ 374.016907][ T8320] loop4: detected capacity change from 0 to 4096 [ 374.053916][ T8308] XFS (loop1): Quotacheck: Done. [ 374.067203][ T8320] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 374.180268][ T30] audit: type=1804 audit(6060921874.914:31): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.522" name="/newroot/96/file0/bus" dev="loop1" ino=9291 res=1 errno=0 [ 374.613743][ T8320] ntfs3(loop4): $AttrDef is corrupted. [ 375.070782][ T8320] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 375.116671][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 378.363872][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.371145][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.382395][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 378.964496][ T8365] loop1: detected capacity change from 0 to 4096 [ 380.261837][ T8377] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 380.310794][ T8377] loop5: detected capacity change from 0 to 256 [ 380.323076][ T8377] exfat: Deprecated parameter 'namecase' [ 380.387854][ T8377] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5cb490d, utbl_chksum : 0xe619d30d) [ 380.404606][ T8377] exfat filesystem being mounted at /4/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 381.285629][ T8383] loop0: detected capacity change from 0 to 2048 [ 381.542892][ T8383] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 381.577635][ T8383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.635398][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 383.643439][ C1] lec:lec_tx_timeout: lec0 [ 385.111264][ T8406] loop5: detected capacity change from 0 to 32768 [ 385.132948][ T8406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.538 (8406) [ 385.158340][ T8406] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 385.168669][ T8406] BTRFS info (device loop5): using crc32c checksum algorithm [ 385.538572][ T8407] loop4: detected capacity change from 0 to 4096 [ 385.592683][ T8406] BTRFS info (device loop5): setting nodatasum [ 385.599289][ T8406] BTRFS info (device loop5): setting nodatacow [ 385.605500][ T8406] BTRFS info (device loop5): turning on async discard [ 385.612244][ T8406] BTRFS info (device loop5): enabling free space tree [ 385.619021][ T8406] BTRFS info (device loop5): enabling auto defrag [ 385.625487][ T8406] BTRFS info (device loop5): max_inline set to 0 [ 385.646631][ T8407] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 387.544826][ T8429] loop1: detected capacity change from 0 to 128 [ 387.552479][ T8429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 387.563964][ T8429] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 387.574101][ T8429] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 387.584274][ T8429] UDF-fs: Scanning with blocksize 512 failed [ 387.591520][ T8429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 387.602109][ T8429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 387.611697][ T8429] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 387.619365][ T8429] UDF-fs: Scanning with blocksize 1024 failed [ 387.630993][ T8429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 387.642296][ T8429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 387.651917][ T8429] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 387.659644][ T8429] UDF-fs: Scanning with blocksize 2048 failed [ 387.670958][ T8429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 387.682389][ T8429] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 387.691963][ T8429] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 387.699611][ T8429] UDF-fs: Scanning with blocksize 4096 failed [ 387.705675][ T8429] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 388.827072][ T36] ntfs3(loop4): ino=1e, ni_find_attr [ 389.371002][ T8449] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 390.708019][ T7856] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.103424][ T8489] loop5: detected capacity change from 0 to 512 [ 393.174988][ T8489] EXT4-fs: Ignoring removed oldalloc option [ 393.285892][ T8489] EXT4-fs (loop5): 1 truncate cleaned up [ 393.841550][ T8489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.341539][ T8505] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.550: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 395.412097][ T8504] loop2: detected capacity change from 0 to 764 [ 395.433162][ T8505] EXT4-fs (loop5): Remounting filesystem read-only [ 395.457383][ T8504] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 399.475126][ T8539] loop0: detected capacity change from 0 to 8 [ 399.567949][ T8539] SQUASHFS error: lzo decompression failed, data probably corrupt [ 399.575828][ T8539] SQUASHFS error: Failed to read block 0x91: -5 [ 399.745994][ T8539] SQUASHFS error: Unable to read metadata cache entry [8f] [ 399.766823][ T8539] SQUASHFS error: Unable to read inode 0x11f [ 400.131628][ T8547] netlink: 'syz.1.553': attribute type 10 has an invalid length. [ 400.139455][ T8547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.553'. [ 400.563950][ T8547] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 400.599680][ T8547] batman_adv: batadv0: Adding interface: virt_wifi0 [ 400.606337][ T8547] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.632227][ T8547] batman_adv: batadv0: Interface activated: virt_wifi0 [ 400.795867][ T7856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.837119][ T8539] loop0: detected capacity change from 0 to 512 [ 400.939783][ T8539] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 401.391188][ T8539] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 401.439086][ T8539] EXT4-fs (loop0): 1 truncate cleaned up [ 401.447642][ T8539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.732824][ T8568] netem: incorrect ge model size [ 402.760283][ T6547] lec:lec_start_xmit: lec0:No lecd attached [ 402.805413][ T8567] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 402.814975][ T8567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 402.824630][ T8567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 402.883971][ T8567] syz.0.558 (8567) used greatest stack depth: 17144 bytes left [ 402.995869][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.167349][ T8578] netlink: 104 bytes leftover after parsing attributes in process `syz.1.564'. [ 407.773307][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 407.781351][ C1] lec:lec_tx_timeout: lec0 [ 408.591791][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 411.623785][ T5153] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 411.809180][ T8629] loop5: detected capacity change from 0 to 512 [ 411.831366][ T8629] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 411.963255][ T8629] EXT4-fs (loop5): 1 truncate cleaned up [ 411.978452][ T8629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.959558][ T8638] loop4: detected capacity change from 0 to 512 [ 413.022240][ T8638] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 413.058557][ T7856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.089998][ T8638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 413.103149][ T8638] System zones: 1-12 [ 413.122515][ T8638] EXT4-fs error (device loop4): ext4_iget_extra_inode:5052: inode #15: comm syz.4.578: corrupted in-inode xattr: e_value size too large [ 413.312045][ T8638] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.313458][ C1] EXT4-fs (loop4): initial error at time 6060921921: ext4_iget_extra_inode:5052: inode 15 [ 413.332565][ C1] EXT4-fs (loop4): last error at time 6060921921: ext4_iget_extra_inode:5052: inode 15 [ 413.550267][ T8638] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.578: couldn't read orphan inode 15 (err -117) [ 413.872781][ T8638] loop4: lost filesystem error report for type 5 error -117 [ 413.874080][ T8638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.633195][ T8646] loop5: detected capacity change from 0 to 4096 [ 414.659743][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.703997][ T8646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.743473][ T8646] overlayfs: missing 'lowerdir' [ 416.530530][ T7856] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.617636][ T8661] fuseblk: Invalid rootmode [ 416.785649][ T8661] block device autoloading is deprecated and will be removed. [ 417.831461][ T8665] kAFS: No cell specified [ 418.222503][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 418.332040][ T8667] loop1: detected capacity change from 0 to 2048 [ 418.540812][ T8667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.872617][ T8673] loop4: detected capacity change from 0 to 128 [ 418.973410][ T8673] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 418.985824][ T8673] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 419.437614][ T8679] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh [ 420.001971][ T8683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.158415][ T5839] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.392507][ T8686] loop4: detected capacity change from 0 to 4096 [ 421.193575][ T8699] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 421.205501][ T8699] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 421.213925][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.0.591 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.224702][ T8699] Tainted: [L]=SOFTLOCKUP [ 421.229016][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 421.239071][ T8699] RIP: 0010:__queue_work+0xa2/0xf90 [ 421.244270][ T8699] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 421.263865][ T8699] RSP: 0018:ffffc9000b71f318 EFLAGS: 00010002 [ 421.269921][ T8699] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 421.277873][ T8699] RDX: ffffc900115f2000 RSI: 00000000000004ab RDI: 00000000000004ac [ 421.285835][ T8699] RBP: 0000000000000000 R08: ffff88802902a017 R09: 1ffff11005205402 [ 421.293805][ T8699] R10: dffffc0000000000 R11: ffffed1005205403 R12: dffffc0000000000 [ 421.301776][ T8699] R13: ffff88802902a010 R14: 00000000000001c0 R15: 0000000000000000 [ 421.309738][ T8699] FS: 00007fc3f4a246c0(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 421.318657][ T8699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.325230][ T8699] CR2: 0000001b3111dff8 CR3: 0000000052f34000 CR4: 00000000003526f0 [ 421.333196][ T8699] Call Trace: [ 421.336460][ T8699] [ 421.339378][ T8699] ? __asan_memcpy+0x40/0x70 [ 421.343961][ T8699] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 421.350205][ T8699] queue_work_on+0x106/0x1d0 [ 421.354805][ T8699] to_utf8+0x872/0x1ad0 [ 421.358956][ T8699] ? unwind_next_frame+0xa5/0x23c0 [ 421.364063][ T8699] ? rcu_is_watching+0x15/0xb0 [ 421.368819][ T8699] ? __kasan_check_byte+0x12/0x40 [ 421.373831][ T8699] ? __pfx_to_utf8+0x10/0x10 [ 421.378412][ T8699] ? unwind_next_frame+0xa5/0x23c0 [ 421.383513][ T8699] ? rcu_is_watching+0x15/0xb0 [ 421.388266][ T8699] ? __lock_acquire+0x6b5/0x2cf0 [ 421.393193][ T8699] ? rcu_is_watching+0x15/0xb0 [ 421.397947][ T8699] ? lock_release+0x4b/0x3a0 [ 421.402521][ T8699] ? lock_release+0x4b/0x3a0 [ 421.407097][ T8699] ? atomic_notifier_call_chain+0x26/0x180 [ 421.412891][ T8699] ? lock_acquire+0x106/0x330 [ 421.417553][ T8699] k_self+0x326/0x7e0 [ 421.421522][ T8699] ? __pfx_k_self+0x10/0x10 [ 421.426014][ T8699] ? atomic_notifier_call_chain+0x26/0x180 [ 421.431812][ T8699] ? atomic_notifier_call_chain+0x26/0x180 [ 421.437608][ T8699] kbd_event+0x2ec1/0x40d0 [ 421.442016][ T8699] ? __pfx_kbd_event+0x10/0x10 [ 421.446766][ T8699] ? add_lock_to_list+0xc7/0x100 [ 421.451690][ T8699] ? lockdep_unlock+0x5d/0xd0 [ 421.456350][ T8699] ? __lock_acquire+0x146e/0x2cf0 [ 421.461370][ T8699] ? __lock_acquire+0x6b5/0x2cf0 [ 421.466305][ T8699] ? __lock_acquire+0x6b5/0x2cf0 [ 421.471230][ T8699] ? __lock_acquire+0x6b5/0x2cf0 [ 421.476152][ T8699] ? input_pass_values+0x8d/0x890 [ 421.481167][ T8699] ? lock_acquire+0x106/0x330 [ 421.485832][ T8699] ? input_pass_values+0x8d/0x890 [ 421.490839][ T8699] input_handle_events_default+0xd4/0x1a0 [ 421.496547][ T8699] ? input_pass_values+0x8d/0x890 [ 421.501554][ T8699] input_pass_values+0x288/0x890 [ 421.506478][ T8699] ? input_handle_event+0x70c/0xf30 [ 421.511663][ T8699] input_event_dispose+0x330/0x6b0 [ 421.516765][ T8699] input_inject_event+0x1dd/0x340 [ 421.521781][ T8699] ? input_inject_event+0xb6/0x340 [ 421.526884][ T8699] evdev_write+0x325/0x4c0 [ 421.531287][ T8699] ? __lock_acquire+0x6b5/0x2cf0 [ 421.536214][ T8699] ? __pfx_evdev_write+0x10/0x10 [ 421.541135][ T8699] ? bpf_lsm_file_permission+0x9/0x20 [ 421.546497][ T8699] ? security_file_permission+0x75/0x260 [ 421.552120][ T8699] ? rw_verify_area+0x255/0x4d0 [ 421.556959][ T8699] ? __pfx_evdev_write+0x10/0x10 [ 421.561878][ T8699] vfs_write+0x29a/0xb90 [ 421.566109][ T8699] ? __pfx_vfs_write+0x10/0x10 [ 421.570866][ T8699] ? __fget_files+0x2a/0x420 [ 421.575444][ T8699] ? __fget_files+0x2a/0x420 [ 421.580015][ T8699] ? __fget_files+0x3a0/0x420 [ 421.584673][ T8699] ? __fget_files+0x2a/0x420 [ 421.589277][ T8699] ksys_write+0x150/0x270 [ 421.593602][ T8699] ? __pfx_ksys_write+0x10/0x10 [ 421.598455][ T8699] do_syscall_64+0xe2/0xf80 [ 421.602943][ T8699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.608993][ T8699] ? trace_irq_disable+0x37/0x100 [ 421.614009][ T8699] ? clear_bhb_loop+0x40/0x90 [ 421.618672][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.624549][ T8699] RIP: 0033:0x7fc3f3b9aeb9 [ 421.628951][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.648547][ T8699] RSP: 002b:00007fc3f4a24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.656947][ T8699] RAX: ffffffffffffffda RBX: 00007fc3f3e16270 RCX: 00007fc3f3b9aeb9 [ 421.664903][ T8699] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000007 [ 421.672858][ T8699] RBP: 00007fc3f3c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 421.680825][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.688791][ T8699] R13: 00007fc3f3e16308 R14: 00007fc3f3e16270 R15: 00007ffc057e29e8 [ 421.696758][ T8699] [ 421.699774][ T8699] Modules linked in: [ 421.703665][ T8699] ---[ end trace 0000000000000000 ]--- [ 421.709099][ T8699] RIP: 0010:__queue_work+0xa2/0xf90 [ 421.714293][ T8699] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 421.733884][ T8699] RSP: 0018:ffffc9000b71f318 EFLAGS: 00010002 [ 421.739939][ T8699] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000080000 [ 421.747889][ T8699] RDX: ffffc900115f2000 RSI: 00000000000004ab RDI: 00000000000004ac [ 421.755930][ T8699] RBP: 0000000000000000 R08: ffff88802902a017 R09: 1ffff11005205402 [ 421.763889][ T8699] R10: dffffc0000000000 R11: ffffed1005205403 R12: dffffc0000000000 [ 421.771844][ T8699] R13: ffff88802902a010 R14: 00000000000001c0 R15: 0000000000000000 [ 421.779801][ T8699] FS: 00007fc3f4a246c0(0000) GS:ffff8881253b4000(0000) knlGS:0000000000000000 [ 421.788711][ T8699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.795283][ T8699] CR2: 0000001b3111dff8 CR3: 0000000052f34000 CR4: 00000000003526f0 [ 421.803255][ T8699] Kernel panic - not syncing: Fatal exception [ 421.809642][ T8699] Kernel Offset: disabled [ 421.813948][ T8699] Rebooting in 86400 seconds..