last executing test programs: 3m27.31396337s ago: executing program 3 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x1, 0x45, '\x00', 0xfffffffffffffffb}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m26.947264129s ago: executing program 3 (id=37): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x7) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 3m26.723737014s ago: executing program 3 (id=41): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1100, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m26.423824782s ago: executing program 3 (id=42): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x80000, 0x4) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, 0x0, 0x7, 0x8, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d16c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9bbdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00000000000000e500", "f2837a00e6d6020000edff000000000000000100", [0x4, 0x7]}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000058000/0x400000)=nil) 3m25.256953272s ago: executing program 3 (id=47): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="a29c4cc9", 0x4}], 0x1) 3m24.680017617s ago: executing program 3 (id=50): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@fat=@debug}, {@rodir}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@fat=@errors_remount}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x7f, 0x2ed, &(0x7f0000001140)="$eJzs3TtrZGUYAOD3TGaSmVXMFFYieEALq7C7vyBBIiymUqbQRoM7CzJnWJjAgBecbGUvWPkf7PYH2NnYWNtY2IqdW4hH5lzmtjObCSTZZXmeZt6c93vPd8mXZBg4Xz57czi4//DswaNv/oh2O4nGYRzGkyS60YjaeQAAL5MneR5/56WL2u4ufdVsXOe4AIDrs/Xf/50bGxIAcM0++viTD45OTo4/TNN2xPC7cS+J8rXMHz2ILyKLftyO/fg3Ip8p41fvnRxHM03rDwPGnehFDD/9NfL5O4Zp/Z3Yj+5qff2JQlqId6Zx0f9k3GvFrSTiKE/KJndjP16PyFtR3aR8ef/eyfHdtK6f1k1HPpxEbzfeffvHavz/9eMg9uO3z+NhZHG/uMW8/ts7afpe/sM/X5cz6EUkk3Fvr2g3l3sHBAAAAAAAAAAAAAAAAAAAAADAlTlIZ7qL5+fUpwEeHKzmm72Iv4Z1/fx8oMMozgeqTviZLJyvcztN0/oYn3GvVZ3v04w3mtF8XvMGAAAAAAAAAAAAAAAAAACAF8nZl18NTrPHMSqDrF8EP+fToLPUpkptDJoLV+rH+i+uWghuRdTDGPwUsWXVJYPYqYaWJU91kdSp/qiz7Q0fb0jtbar6vepkdNaedlWkOmWny42jsWkNm1kkrYgYfH/5RXgr1vWVvVYEe9XYllKd2LKLbpy2qt1S767BaRKzlT+vVne5qr1+kyzsus5sxZJLbMh8zdLtbKzaveiGO9stwu4ra1K/bPPd6cS61HTGrWrW1ezP6zbtlcVsXfFPyorkCn7bAAAAAAAAAAAAAAAAAAAAzzJ/6Df+fCr56LkMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuXPH//ztZf1QE2TSIbhXMrqwGk6q4uNJ4duO90dmabrs3PE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecv8HAAD//3EJPOU=") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000ac0)="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", 0x2000, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 3m24.217264488s ago: executing program 32 (id=50): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@utf8}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@fat=@debug}, {@rodir}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@fat=@errors_remount}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x7f, 0x2ed, &(0x7f0000001140)="$eJzs3TtrZGUYAOD3TGaSmVXMFFYieEALq7C7vyBBIiymUqbQRoM7CzJnWJjAgBecbGUvWPkf7PYH2NnYWNtY2IqdW4hH5lzmtjObCSTZZXmeZt6c93vPd8mXZBg4Xz57czi4//DswaNv/oh2O4nGYRzGkyS60YjaeQAAL5MneR5/56WL2u4ufdVsXOe4AIDrs/Xf/50bGxIAcM0++viTD45OTo4/TNN2xPC7cS+J8rXMHz2ILyKLftyO/fg3Ip8p41fvnRxHM03rDwPGnehFDD/9NfL5O4Zp/Z3Yj+5qff2JQlqId6Zx0f9k3GvFrSTiKE/KJndjP16PyFtR3aR8ef/eyfHdtK6f1k1HPpxEbzfeffvHavz/9eMg9uO3z+NhZHG/uMW8/ts7afpe/sM/X5cz6EUkk3Fvr2g3l3sHBAAAAAAAAAAAAAAAAAAAAADAlTlIZ7qL5+fUpwEeHKzmm72Iv4Z1/fx8oMMozgeqTviZLJyvcztN0/oYn3GvVZ3v04w3mtF8XvMGAAAAAAAAAAAAAAAAAACAF8nZl18NTrPHMSqDrF8EP+fToLPUpkptDJoLV+rH+i+uWghuRdTDGPwUsWXVJYPYqYaWJU91kdSp/qiz7Q0fb0jtbar6vepkdNaedlWkOmWny42jsWkNm1kkrYgYfH/5RXgr1vWVvVYEe9XYllKd2LKLbpy2qt1S767BaRKzlT+vVne5qr1+kyzsus5sxZJLbMh8zdLtbKzaveiGO9stwu4ra1K/bPPd6cS61HTGrWrW1ezP6zbtlcVsXfFPyorkCn7bAAAAAAAAAAAAAAAAAAAAzzJ/6Df+fCr56LkMCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuXPH//ztZf1QE2TSIbhXMrqwGk6q4uNJ4duO90dmabrs3PE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecv8HAAD//3EJPOU=") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000ac0)="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", 0x2000, 0x0) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) 3m15.90447568s ago: executing program 1 (id=85): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000002c0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000580)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000300)={0x20, 0xb}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m12.852495078s ago: executing program 1 (id=101): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x24) write(r0, &(0x7f0000001100)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r1, 0x932, 0x0) 3m12.593349925s ago: executing program 1 (id=103): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "8e3f45b8aac77528", "7f523ae1420ff6b5108d24c3bc7d28a79751f206513205000000000000003962", "9f30931f", "10a1b6a68e38ec7b"}, 0x38) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="4008ba0000009b254b5b5a59820c2d6f57c06a28dd3f84ef3f8686179b893948714b6891ef9ed23e5ac467d2249c492d467e9999be1f1517ac89eb598263d6a51864587a93a70af15904a3d6ed3b66319cb88a0053bc17dcf89b917c4ac2f7983c51defbcf15d1542c0054699ee67997615a40219a177d97cf7d1ec5bd8da6c0548d7a910f469e44184642b5f0f01579b51f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) 3m9.701007578s ago: executing program 1 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x60400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 3m9.366077407s ago: executing program 1 (id=116): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x48}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc966", 0x27, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m8.719981043s ago: executing program 1 (id=118): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 3m8.284975384s ago: executing program 33 (id=118): socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 2m43.800013088s ago: executing program 0 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x101) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 2m43.639068602s ago: executing program 0 (id=214): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$nci(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x2400c042) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 2m43.284100831s ago: executing program 0 (id=215): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) 2m43.044906107s ago: executing program 0 (id=216): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) write$binfmt_script(r6, 0x0, 0x0) 2m40.930234761s ago: executing program 0 (id=224): sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4b, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x15, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0x1000}, {"f9"}}}}}}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2m40.524073691s ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='v4,tcp,port=2049\x00') 2m25.345810998s ago: executing program 34 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='v4,tcp,port=2049\x00') 2m22.003243213s ago: executing program 5 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='algo', 0x4) close(r2) 2m20.711936326s ago: executing program 5 (id=297): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000640)=ANY=[@ANYBLOB="4097b60000001f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0x4081e18194798f64, 0x2, 'hd'}, 0x0, 0x0, 0x0, 0x0}) 2m16.853760154s ago: executing program 5 (id=304): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000002c0)) 2m15.780255212s ago: executing program 5 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xd0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="02"], 0x24, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2m15.403604171s ago: executing program 5 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4\x00\x18\xad\x04', 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) 2m14.684801439s ago: executing program 5 (id=311): r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x2000000) 2m14.069276005s ago: executing program 35 (id=311): r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x2000000) 22.419753269s ago: executing program 6 (id=615): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000880)=""/240, 0xf0}, {0x0}], 0x2) close_range(r0, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000010000020000040900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000609"], 0x88}}, 0x20000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x14, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 21.291258238s ago: executing program 6 (id=616): close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 20.955902846s ago: executing program 6 (id=618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) socket(0x1, 0x803, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0xaf4, 0x0) shutdown(r0, 0x0) 19.387260426s ago: executing program 7 (id=619): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000900)="02d76710cc0d4cd8ee3cc6ecfba645e4cd7183703d9f04f54e", 0x19}], 0x1) 18.212077306s ago: executing program 7 (id=621): r0 = syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f00000002c0)=ANY=[], 0x1, 0x5fa3, &(0x7f0000007fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fcntl$getown(r0, 0x9) ptrace$peekuser(0x3, r4, 0x81) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2010014, 0x0) 18.04644731s ago: executing program 6 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$inet(r4, 0x0, 0x10) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) 15.995340443s ago: executing program 8 (id=626): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000280)={0x400, 0x1422, 0xa}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.588271513s ago: executing program 4 (id=627): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYBLOB=',group_id']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x9, 0x6d, "98a379", 0x1ff, 0x0, "2aa007b42bdc7bb50cdb1be7a7b32f731efbd799218e09c058525a91f19471369ad2f515454b9027ce679671cf8f6e2964dd5529356db7ebb48c3e1810dca6391b42d9986f6f219177ef13febb3d2fbcd994d09be7f1f251dbf6a8dd5660f864668e9eea9407d615a5b7ae3fe1d8a73bf8a789df50d5965a0fc3204f86787501d93670ec6f4665dc92317842f0463ec0edc384db49e1be8e1f5cd1b71e9b7089368ebe106bb108b365f4ded8d236489536af2bfb7f6b8cda234f34ddb4f5efc68ab1156163619e7c280ee7cbcec7eb38fdeef3269b344e8163d177f69a6ac7d4dd62af4b41ca3c62c290f63a27eb0894"}, {@any, 0x8, 0x6, "4a840b", 0x4, 0x7f, "936707405f44f3581900831872d1fba3def01763d6b96c7246eab135e28ea61f1f1ff15d2cdb6279bf8a858828b9ba2b81130c591f9ed2365c4ba8795a3b18a4bcb202297d979083bf521b61ba8e7121b1f7ee892ded6d5a2b271ae331dadd95756ed8b5ed328d37659740a0d83db2e7d63bab2670a7e8f9559f2650065a365c9dea6b2c887e47ea6be9fddf2abfda5742eb98bc6f97666a75a3dbf3a913ca247bbea3f9a8697eb271e800ddc507889e252c9324677eaf4dcd5e2a688646fc1e30f2b039300b252fd67fddf3bb84eec7116860071ebbfecf54c2451da8f33fe45788ca55842cab57c0fcf0c844cffef2"}]}}}, 0x200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa1", 0x15}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e", 0x82}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c175", 0xb2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.360053679s ago: executing program 8 (id=628): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) dup3(r1, r0, 0x80000) 14.13100505s ago: executing program 2 (id=629): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2a0935e, &(0x7f0000000000)={[{@abort}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5}}, {@dioread_nolock}, {@dioread_nolock}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x402, &(0x7f0000000240)={&(0x7f0000000180)=""/108, 0x6c}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000340)=0x2a) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) syz_clone(0x3000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.067745457s ago: executing program 6 (id=630): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000640)={0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.580087405s ago: executing program 2 (id=631): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000004080), 0x0, 0x40000121, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getrlimit(0xe, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 11.522424446s ago: executing program 4 (id=632): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) syz_usb_connect$uac1(0x5, 0xa5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r2, 0x1, 0x7}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001800)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x18c, 0x203, 0x300, 0x19030000, 0x3d0, 0x2e0, 0x2e0, 0x3d0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x1, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0xff, 0x4}, {0x0, 0x4, 0x0, 0x5}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x7}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04, 0xfe}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x6, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {0x4}, {0x8}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x6}, {0x4, 0x3, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3, 0x4}, {0x2, 0x2, 0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setns(0xc9, 0x0) r5 = socket(0x8, 0x5, 0x5) writev(r5, &(0x7f0000000680)=[{&(0x7f0000000180)='m\"', 0x2}], 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 10.623745459s ago: executing program 8 (id=633): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f00000002c0)='\xe9`\x06\x00\x00\x00\x91\x00\x00\x00\x00\x00\x00\x00j\x00\x00\x00\x00\x00n', 0x3) write$binfmt_elf32(r4, &(0x7f0000000840)=ANY=[], 0x38) splice(r3, 0x0, r5, 0x0, 0x200002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0xffffffff, 0x2, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a027578ff647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f2331000095ee62fcc346577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a9517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) 10.033899794s ago: executing program 2 (id=634): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={r3}, &(0x7f0000000240)=0x8) 9.880086428s ago: executing program 4 (id=635): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0xa}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3123, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1, 0x2000000000, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x80000000000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10004, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x3, 0x1, 0x42, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r6}, 0x38) 9.875446138s ago: executing program 7 (id=636): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x42200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) write$binfmt_script(r6, 0x0, 0x0) 9.342374052s ago: executing program 8 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x26aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 8.856090204s ago: executing program 4 (id=638): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000240)='./file2\x00', 0x1841c, &(0x7f0000000200)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=@tcp, 0x2}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x13, 0x400, 0x70bd2c}, 0x14}}, 0x200d4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="87000000000000003e1573d3951242"], 0x8) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_format(r0, 0x0, 0x0) 6.822853616s ago: executing program 7 (id=639): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0xffffffff, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 6.070180225s ago: executing program 8 (id=640): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10119, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000006380)={0x10, 0x140b, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) ioprio_get$uid(0x3, r3) capget(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x1, 0x8, 0x5, 0x1, 0x3}) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x1) 6.069381325s ago: executing program 4 (id=641): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) read$FUSE(r0, &(0x7f0000004e80)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x20, 0x10, 0x6, 0x4, {{0xc, 0x4, 0x3, 0x35, 0x30, 0x65, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@timestamp={0x44, 0x1c, 0x6, 0x0, 0x7, [0x0, 0x8, 0x6, 0x101, 0x5, 0x45]}]}}}}}) listen(r2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@buf) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x3c, r6, 0x211, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x804) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c}, 0x14}}, 0x0) 6.021230727s ago: executing program 2 (id=642): sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(0x0, 0x1f, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) tee(r3, r3, 0xcfce, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 5.881654s ago: executing program 7 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001380)={'#! ', './bus'}, 0x9) ptrace(0x10, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x14800) 3.840376562s ago: executing program 2 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(0x0, 0x206, 0x247c0) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) 3.821849733s ago: executing program 8 (id=645): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7ef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) r2 = dup(0xffffffffffffffff) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x4, 0x0, 0x4, 0x0, 0x80, 0x30, 0xb9}}}}}]}, 0x44}}, 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000f00)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ad6abb", 0xd4, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x81}, {[@routing={0x87, 0x6, 0x2, 0x80, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0xb}, @empty]}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "8a2e0b0ec46fadbd18834312e9385e5b91593453652ca34faa9af7e503cdd8a4", "c7d38cffe3874f77f421060f4ddfabe88f79f6a4c06e7f495ebd67c2b83bd11c9b2b5b6508ccf912ff63750351d69e6f", "a9b67a62f584fabf70acf4e004a87a4898ab17058c5d1c20e471b1ae", {"000000000097ce50cb00", "e760555695aaf81ffd8de70c81ecf313"}}}}}}}}, 0x0) recvfrom$inet(r0, &(0x7f00000000c0), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1404) 3.609111248s ago: executing program 4 (id=646): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103", @ANYRES8=0x0, @ANYBLOB="06", @ANYRESOCT], 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20b0, 0x0) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f00000002c0)=0x10001) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) recvmmsg(r6, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4080, 0xffffff16}], 0x3}, 0xfff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x10022, 0x0) 1.741433616s ago: executing program 7 (id=647): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) 1.616043359s ago: executing program 2 (id=648): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002bc0)={0xa0, 0x0, 0x0, {{0xffffffffffffffff, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299583d", 0xa}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x24044004) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x10) 0s ago: executing program 6 (id=649): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x4048810}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa13fd664a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d658ef286087e0", 0x60}, {&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 91.009290][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.034989][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.054432][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.147389][ T4394] capability: warning: `syz.3.9' uses 32-bit capabilities (legacy support in use) [ 91.558287][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.747056][ T26] cfg80211: failed to load regulatory.db [ 91.781781][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.834940][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.885470][ T7] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 91.909951][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.946777][ T7] usb 2-1: config 0 descriptor?? [ 91.978063][ T4419] loop4: detected capacity change from 0 to 512 [ 92.038831][ T4419] ======================================================= [ 92.038831][ T4419] WARNING: The mand mount option has been deprecated and [ 92.038831][ T4419] and is ignored by this kernel. Remove the mand [ 92.038831][ T4419] option from the mount to silence this warning. [ 92.038831][ T4419] ======================================================= [ 92.088280][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 92.146685][ T4419] EXT4-fs: Ignoring removed oldalloc option [ 92.199368][ T4419] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.274470][ T4419] EXT4-fs (loop4): 1 truncate cleaned up [ 92.308179][ T4419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.390339][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.423764][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.424809][ T4432] loop3: detected capacity change from 0 to 512 [ 92.444222][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.454717][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.463103][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.473742][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.483114][ T4432] EXT4-fs: Ignoring removed bh option [ 92.505832][ T7] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 92.545647][ T7] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 92.573799][ T4432] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.19: corrupted in-inode xattr [ 92.598087][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.601171][ T4432] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 92.621447][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 92.630991][ T4432] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 92.644704][ T7] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 92.717312][ T4434] loop2: detected capacity change from 0 to 8192 [ 92.735916][ T4434] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 92.751393][ T4434] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 92.760870][ T4432] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 92.789895][ T26] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.801212][ T4434] REISERFS (device loop2): using ordered data mode [ 92.804843][ T4432] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 92.822332][ T26] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 92.836130][ T26] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 92.847171][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.853504][ T4434] reiserfs: using flush barriers [ 92.855443][ T26] usb 1-1: Product: syz [ 92.864560][ T26] usb 1-1: Manufacturer: syz [ 92.869516][ T26] usb 1-1: SerialNumber: syz [ 92.881218][ T26] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 92.886790][ T4432] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.19: Unrecognised inode hash code 4 [ 92.905459][ T26] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 92.916130][ T4434] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.937650][ T26] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 92.949392][ T4434] REISERFS (device loop2): checking transaction log (loop2) [ 92.957397][ T4441] netlink: 'syz.4.20': attribute type 2 has an invalid length. [ 92.972115][ T4432] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.19: Corrupt directory, running e2fsck is recommended [ 93.121698][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 93.208299][ T4434] REISERFS (device loop2): Using rupasov hash to sort names [ 93.232547][ T4434] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 93.253215][ T4396] cp2112 0003:10C4:EA90.0001: Error starting transaction: -38 [ 93.288535][ T7] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 93.329218][ T7] usb 2-1: USB disconnect, device number 2 [ 93.662915][ T4458] loop3: detected capacity change from 0 to 128 [ 93.682033][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.780717][ T4458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.842796][ T4458] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.904790][ T4458] syz.3.23 (pid 4458) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 93.918859][ T4453] fido_id[4453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 93.934260][ T14] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 93.979594][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.018568][ T14] usb 5-1: config 0 descriptor?? [ 94.463277][ T4458] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 94.529402][ T4458] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 94.826592][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 95.480883][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.610463][ T4471] loop1: detected capacity change from 0 to 40427 [ 95.649091][ T4484] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 95.660133][ T4471] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.689127][ T126] usb 1-1: USB disconnect, device number 2 [ 95.691098][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.706578][ T4471] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.745058][ T126] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 95.748837][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.786476][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.798267][ T4471] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 95.827145][ T26] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.844590][ T126] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 95.859226][ T14] usb 5-1: Cannot set autoneg [ 95.864617][ T14] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 95.880752][ T4471] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.892327][ T14] usb 5-1: USB disconnect, device number 2 [ 95.909832][ T126] ti_usb_3410_5052 1-1:2.0: device disconnected [ 95.918173][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.988349][ T26] usb 3-1: config 0 descriptor?? [ 96.062779][ T4471] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 96.077590][ T4471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 96.407219][ T26] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 96.457368][ T26] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 96.542074][ T4518] overlayfs: missing 'workdir' [ 96.574948][ T4522] loop4: detected capacity change from 0 to 512 [ 96.722028][ T4522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.778184][ T4522] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.090741][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 97.785274][ T4539] process 'syz.4.35' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 98.076706][ T4559] tipc: Started in network mode [ 98.184108][ T4559] tipc: Node identity 2007ff, cluster identity 4711 [ 98.191795][ T4559] tipc: Node number set to 2099199 [ 98.398563][ T4563] loop3: detected capacity change from 0 to 128 [ 98.435838][ T4563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.484540][ T4563] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.612638][ T14] usb 3-1: USB disconnect, device number 2 [ 98.638521][ T4563] loop3: detected capacity change from 128 to 64 [ 98.690576][ T4569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 98.708175][ T4569] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.42: mark_inode_dirty error [ 98.739966][ T4569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 98.804274][ T4569] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.42: mark_inode_dirty error [ 98.844244][ T4569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 98.854426][ T4569] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.42: mark_inode_dirty error [ 98.898224][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 98.918078][ T4569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 98.939422][ T4569] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #12: comm syz.3.42: mark_inode_dirty error [ 98.960690][ T4569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Out of memory [ 98.985432][ T4569] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.42: mark_inode_dirty error [ 99.014321][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.038071][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.065480][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.085987][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.115716][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.148079][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.161901][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.193139][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.217430][ T4573] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 99.234404][ T4569] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.583127][ T4571] loop4: detected capacity change from 0 to 32768 [ 99.608857][ T4571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.44 (4571) [ 99.690244][ T4571] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.715532][ T4571] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 99.730970][ T4571] BTRFS info (device loop4): using free space tree [ 99.776850][ T4333] kworker/u4:7: attempt to access beyond end of device [ 99.776850][ T4333] loop3: rw=1, sector=98, nr_sectors = 8 limit=64 [ 99.824169][ T4333] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 12 starting block 49) [ 99.856708][ T4333] Buffer I/O error on device loop3, logical block 49 [ 99.863676][ T4333] Buffer I/O error on device loop3, logical block 50 [ 99.870383][ T4333] Buffer I/O error on device loop3, logical block 51 [ 99.877085][ T4333] Buffer I/O error on device loop3, logical block 52 [ 99.903911][ T4347] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.916073][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 100.024454][ T4571] BTRFS info (device loop4): enabling ssd optimizations [ 100.170493][ T4347] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.271193][ T27] audit: type=1800 audit(1785977493.347:2): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.44" name="control" dev="loop4" ino=263 res=0 errno=0 [ 100.341334][ T4347] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.491932][ T4347] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.752686][ T4605] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 100.829635][ T4281] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.942003][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.952740][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.996463][ T4290] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.004538][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.012230][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.019631][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.265281][ T4636] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET) [ 102.830742][ T4628] chnl_net:caif_netlink_parms(): no params data found [ 103.494151][ T4628] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.549604][ T4628] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.605849][ T4628] device bridge_slave_0 entered promiscuous mode [ 103.766707][ T4628] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.789474][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.873609][ T4628] device bridge_slave_1 entered promiscuous mode [ 103.910261][ T4347] device hsr_slave_0 left promiscuous mode [ 103.933958][ T4347] device hsr_slave_1 left promiscuous mode [ 103.947970][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.975869][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.998178][ T4347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.006875][ T4347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.025358][ T4347] device bridge_slave_1 left promiscuous mode [ 104.048049][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 104.066811][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.124862][ T4347] device bridge_slave_0 left promiscuous mode [ 104.148768][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.325155][ T4347] device veth1_macvtap left promiscuous mode [ 104.340767][ T4347] device veth0_macvtap left promiscuous mode [ 104.347747][ T4347] device veth1_vlan left promiscuous mode [ 104.382602][ T4347] device veth0_vlan left promiscuous mode [ 106.127970][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 106.395354][ T4714] loop1: detected capacity change from 0 to 32768 [ 106.527605][ T4714] XFS (loop1): Mounting V5 Filesystem [ 106.606538][ T4347] team0 (unregistering): Port device team_slave_1 removed [ 106.712273][ T4347] team0 (unregistering): Port device team_slave_0 removed [ 106.734460][ T4714] XFS (loop1): Ending clean mount [ 106.798583][ T4714] XFS (loop1): Quotacheck needed: Please wait. [ 106.885747][ T4347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.934788][ T4714] XFS (loop1): Quotacheck: Done. [ 107.081596][ T4347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.136721][ T4720] loop0: detected capacity change from 0 to 32768 [ 107.236387][ T4720] XFS (loop0): Mounting V5 Filesystem [ 107.339360][ T4720] XFS (loop0): Ending clean mount [ 107.438606][ T4273] XFS (loop1): Unmounting Filesystem [ 107.913364][ T4347] bond0 (unregistering): Released all slaves [ 107.942874][ T4286] XFS (loop0): Unmounting Filesystem [ 108.072233][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053ca1800: rx timeout, send abort [ 108.107444][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 108.126020][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 108.218767][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 108.294848][ T4628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.371794][ T4628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.524466][ T4628] team0: Port device team_slave_0 added [ 108.561252][ T4628] team0: Port device team_slave_1 added [ 108.639040][ T4628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.658098][ T4628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.747991][ T4628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.820179][ T4628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.836604][ T4764] sd 0:0:1:0: PR command failed: 1026 [ 108.861348][ T4764] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 108.876640][ T4628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.902929][ T4764] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 108.964024][ T4628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.156413][ T4628] device hsr_slave_0 entered promiscuous mode [ 109.174600][ T4628] device hsr_slave_1 entered promiscuous mode [ 109.228986][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.428038][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 109.440381][ T7] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 109.474095][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.501867][ T7] usb 2-1: Product: syz [ 109.515845][ T7] usb 2-1: Manufacturer: syz [ 109.529211][ T7] usb 2-1: SerialNumber: syz [ 109.550853][ T7] usb 2-1: config 0 descriptor?? [ 109.621453][ T4628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.668709][ T4628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.689701][ T4628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.716072][ T27] audit: type=1800 audit(1785977502.787:3): pid=4776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.84" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 109.789160][ T4628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.980047][ T7] airspy 2-1:0.0: Board ID: 00 [ 109.984915][ T7] airspy 2-1:0.0: Firmware version: [ 110.084699][ T4628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.143501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.153316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.175919][ T4628] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.211254][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.224614][ T4800] loop2: detected capacity change from 0 to 2048 [ 110.238903][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.276828][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.284079][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.292252][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 110.319373][ T4800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.409428][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.470732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.500340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.533959][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.541194][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.610913][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.629594][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.657159][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.688760][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.727001][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.765861][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.799342][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.809306][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.834847][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.867083][ T4628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.904178][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.930901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.941335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.995347][ T7] airspy 2-1:0.0: Registered as swradio24 [ 111.014081][ T7] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 111.217215][ T7] usb 2-1: USB disconnect, device number 3 [ 111.641490][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.661939][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.691902][ T4628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.941280][ T4838] tipc: Enabled bearer , priority 0 [ 111.979245][ T4838] syzkaller0: MTU too low for tipc bearer [ 111.999542][ T4838] tipc: Disabling bearer [ 112.311611][ T4853] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 112.348422][ T4853] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 112.568249][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.728549][ T4863] loop4: detected capacity change from 0 to 1024 [ 112.771355][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.798725][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.823127][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.831892][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.875638][ T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.879800][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.932284][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.945502][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.977004][ T7] usb 2-1: config 0 descriptor?? [ 113.018648][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.072220][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.098737][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.134771][ T4628] device veth0_vlan entered promiscuous mode [ 113.203754][ T4628] device veth1_vlan entered promiscuous mode [ 113.315942][ T4847] loop0: detected capacity change from 0 to 32768 [ 113.332753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.371999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.413010][ T7] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 113.431690][ T4628] device veth0_macvtap entered promiscuous mode [ 113.449150][ T7] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 113.490904][ T4628] device veth1_macvtap entered promiscuous mode [ 113.553142][ T4847] JBD2: Ignoring recovery information on journal [ 113.574416][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.585115][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.595463][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.606286][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.616832][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.627608][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.638384][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.651726][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.663513][ T4628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.678926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.691513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.710446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.725708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.735926][ T4333] hfsplus: b-tree write err: -5, ino 25 [ 113.753440][ T4333] hfsplus: b-tree write err: -5, ino 4 [ 113.768578][ T4333] hfsplus: b-tree write err: -5, ino 2 [ 113.787034][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.833360][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.847376][ T4847] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.896055][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.965089][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.014480][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.045516][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.057004][ T4628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.073575][ T4628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.096421][ T4628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.116479][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.136192][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.155823][ T27] audit: type=1800 audit(1785977507.227:4): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.102" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 114.186232][ T4628] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.196545][ C0] plantronics 0003:047F:FFFF.0003: Event data for report 0 was too short (4043 vs 186) [ 114.206482][ T4628] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.227041][ T4628] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.247327][ T4628] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.276171][ T27] audit: type=1804 audit(1785977507.347:5): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.102" name="/newroot/24/file1/bus" dev="loop0" ino=17059 res=1 errno=0 [ 114.363623][ T27] audit: type=1800 audit(1785977507.377:6): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.102" name="bus" dev="loop0" ino=17059 res=0 errno=0 [ 114.415248][ T4346] usb 2-1: USB disconnect, device number 4 [ 114.490571][ T4892] loop2: detected capacity change from 0 to 128 [ 114.566292][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.584759][ T4883] (syz.0.102,4883,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 114.613702][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.661106][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.701049][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.709735][ T4847] syz.0.102 (4847) used greatest stack depth: 19360 bytes left [ 114.729748][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.758028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.887964][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.004261][ T4286] ocfs2: Unmounting device (7,0) on (node local) [ 115.108043][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 115.115227][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.155647][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.175052][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 115.211705][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 115.236692][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.280501][ T7] usb 5-1: config 0 descriptor?? [ 115.333188][ T4317] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.527965][ T4317] usb 6-1: Using ep0 maxpacket: 32 [ 115.535986][ T4317] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 115.568290][ T4317] usb 6-1: config 0 has no interface number 0 [ 115.590032][ T4317] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 115.614911][ T4912] loop0: detected capacity change from 0 to 1024 [ 115.654791][ T4317] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 115.674317][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.705964][ T4317] usb 6-1: Product: syz [ 115.711575][ T7] microsoft 0003:045E:07DA.0004: unbalanced delimiter at end of report description [ 115.722018][ T4317] usb 6-1: Manufacturer: syz [ 115.734552][ T4317] usb 6-1: SerialNumber: syz [ 115.762589][ T4317] usb 6-1: config 0 descriptor?? [ 115.785345][ T4317] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 115.788167][ T7] microsoft 0003:045E:07DA.0004: parse failed [ 115.828290][ T7] microsoft: probe of 0003:045E:07DA.0004 failed with error -22 [ 115.837146][ T4317] em28xx 6-1:0.132: Video interface 132 found: [ 115.940889][ T7] usb 5-1: USB disconnect, device number 3 [ 116.122210][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.203648][ T4317] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 116.334173][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.502251][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.536850][ T4925] loop0: detected capacity change from 0 to 256 [ 116.697289][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.857959][ T4317] em28xx 6-1:0.132: failed to read eeprom (err=-110) [ 116.872692][ T4317] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 117.114909][ T4317] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 117.137885][ T4317] em28xx 6-1:0.132: analog set to bulk mode. [ 117.174743][ T129] em28xx 6-1:0.132: Registering V4L2 extension [ 117.198277][ T4317] usb 6-1: USB disconnect, device number 2 [ 117.232393][ T4317] em28xx 6-1:0.132: Disconnecting em28xx [ 117.722132][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.733803][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.760390][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.784761][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.793614][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.801231][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.926795][ T129] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 117.950468][ T4927] loop2: detected capacity change from 0 to 32768 [ 117.962745][ T129] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 117.983470][ T129] em28xx 6-1:0.132: No AC97 audio processor [ 118.142835][ T4961] loop5: detected capacity change from 0 to 128 [ 118.154860][ T129] usb 6-1: Decoder not found [ 118.186163][ T129] em28xx 6-1:0.132: failed to create media graph [ 118.214028][ T4961] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 118.233367][ T4961] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.235574][ T129] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 118.431386][ T129] em28xx 6-1:0.132: Remote control support is not available for this card. [ 118.475197][ T4317] em28xx 6-1:0.132: Closing input extension [ 118.518561][ T4927] XFS (loop2): Mounting V5 Filesystem [ 118.542399][ T4628] EXT4-fs (loop5): unmounting filesystem. [ 118.642312][ T4317] em28xx 6-1:0.132: Freeing device [ 118.643441][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 118.696945][ T4927] XFS (loop2): Ending clean mount [ 118.756502][ T4983] loop5: detected capacity change from 0 to 64 [ 119.621770][ T4274] XFS (loop2): Unmounting Filesystem [ 119.899208][ T4288] Bluetooth: hci0: command 0x0409 tx timeout [ 120.345236][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 120.539052][ T5008] loop4: detected capacity change from 0 to 512 [ 120.602717][ T5008] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.652998][ T5008] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.682625][ T11] device hsr_slave_0 left promiscuous mode [ 120.699322][ T11] device hsr_slave_1 left promiscuous mode [ 120.723457][ T5008] EXT4-fs (loop4): 1 truncate cleaned up [ 120.748222][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.755729][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.779306][ T5008] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 120.868767][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.876344][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.995106][ T11] device bridge_slave_1 left promiscuous mode [ 121.026115][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.053341][ T11] device bridge_slave_0 left promiscuous mode [ 121.087705][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.211159][ T11] device veth1_macvtap left promiscuous mode [ 121.217270][ T11] device veth0_macvtap left promiscuous mode [ 121.248245][ T11] device veth1_vlan left promiscuous mode [ 121.254165][ T11] device veth0_vlan left promiscuous mode [ 121.325706][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 121.985608][ T4288] Bluetooth: hci0: command 0x041b tx timeout [ 123.777030][ T11] team0 (unregistering): Port device team_slave_1 removed [ 123.895155][ T11] team0 (unregistering): Port device team_slave_0 removed [ 123.898508][ T5070] loop4: detected capacity change from 0 to 32768 [ 124.048106][ T4288] Bluetooth: hci0: command 0x040f tx timeout [ 124.083192][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.265181][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.527417][ T11] bond0 (unregistering): Released all slaves [ 125.917837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 125.937842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.947842][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.957846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.967836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.977839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.987847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.997838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.007848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.017843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 126.029273][ T5039] netlink: 'syz.5.141': attribute type 12 has an invalid length. [ 126.113780][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.121444][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.128929][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 126.137031][ T4947] device bridge_slave_0 entered promiscuous mode [ 126.148941][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.156171][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.169012][ T4947] device bridge_slave_1 entered promiscuous mode [ 126.203913][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.216403][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.267665][ T4947] team0: Port device team_slave_0 added [ 126.310516][ T4947] team0: Port device team_slave_1 added [ 126.413698][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.438633][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.536590][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.609306][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.616368][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.642287][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.736966][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.882548][ T4947] device hsr_slave_0 entered promiscuous mode [ 127.998886][ T4947] device hsr_slave_1 entered promiscuous mode [ 128.011285][ T4947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.030471][ T4947] Cannot create hsr debugfs directory [ 128.629859][ T4947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.659413][ T4947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.691958][ T4947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.733269][ T4947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.028584][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.094455][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.117357][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.161469][ T4947] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.215846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.244115][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.283555][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.290828][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.319685][ T5125] overlayfs: failed to resolve './bus': -2 [ 129.328006][ T5115] syz.5.162 (5115): drop_caches: 2 [ 129.356533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.400204][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.466599][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.498079][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.505306][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.594610][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.618640][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.677001][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.690717][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.714858][ T5138] loop4: detected capacity change from 0 to 32768 [ 129.728637][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.758642][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.779101][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.797964][ T4346] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 129.808408][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.852310][ T5138] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 129.852310][ T5138] [ 129.869563][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.898591][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.902413][ T5138] ERROR: (device loop4): remounting filesystem as read-only [ 129.929531][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.952100][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 130.023046][ T4346] usb 6-1: New USB device found, idVendor=2001, idProduct=f112, bcdDevice= 1.00 [ 130.048704][ T4346] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.087220][ T4346] usb 6-1: Product: syz [ 130.093189][ T4346] usb 6-1: Manufacturer: syz [ 130.119078][ T4346] usb 6-1: SerialNumber: syz [ 130.160317][ T4346] em28xx 6-1:1.0: New device syz syz @ 480 Mbps (2001:f112, interface 0, class 0) [ 130.193270][ T4346] em28xx 6-1:1.0: Video interface 0 found: bulk [ 130.313253][ T5142] loop2: detected capacity change from 0 to 40427 [ 130.399110][ T5142] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 130.432108][ T5142] F2FS-fs (loop2): invalid crc value [ 130.456370][ T5142] F2FS-fs (loop2): invalid crc value [ 130.480442][ T5142] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 130.920234][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.969489][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.985842][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.325479][ T4346] em28xx 6-1:1.0: unknown em28xx chip ID (0) [ 131.428774][ T4346] em28xx 6-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 131.454577][ T4346] em28xx 6-1:1.0: board has no eeprom [ 131.557884][ T4346] em28xx 6-1:1.0: Identified as D-Link DUB-T210 TV Tuner (card=24) [ 131.580724][ T4346] em28xx 6-1:1.0: [ 131.580724][ T4346] [ 131.580724][ T4346] The support for this board weren't valid yet. [ 131.580724][ T4346] Please send a report of having this working [ 131.580724][ T4346] not to V4L mailing list (and/or to other addresses) [ 131.580724][ T4346] [ 131.650580][ T4346] em28xx 6-1:1.0: analog set to bulk mode. [ 131.713188][ T4346] em28xx 6-1:1.0: Registering V4L2 extension [ 131.767439][ T126] usb 6-1: USB disconnect, device number 3 [ 131.788848][ T126] em28xx 6-1:1.0: Disconnecting em28xx [ 131.959107][ T5163] loop2: detected capacity change from 0 to 32768 [ 132.008312][ T5163] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.174 (5163) [ 132.126594][ T5163] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.186370][ T5163] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 132.232166][ T5163] BTRFS info (device loop2): using free space tree [ 132.491309][ T5214] loop5: detected capacity change from 0 to 2048 [ 132.614229][ T5214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.655954][ T5163] BTRFS info (device loop2): enabling ssd optimizations [ 132.692723][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.699519][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.797932][ T4346] em28xx 6-1:1.0: Config register raw data: 0xffffffed [ 132.804892][ T4346] em28xx 6-1:1.0: AC97 chip type couldn't be determined [ 132.870452][ T4346] em28xx 6-1:1.0: No AC97 audio processor [ 132.936124][ T4346] usb 6-1: Decoder not found [ 132.970184][ T4274] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 132.970580][ T4346] em28xx 6-1:1.0: failed to create media graph [ 133.049217][ T4346] em28xx 6-1:1.0: V4L2 device video103 deregistered [ 133.118453][ T4346] em28xx 6-1:1.0: Remote control support is not available for this card. [ 133.164536][ T126] em28xx 6-1:1.0: Closing input extension [ 133.211098][ T126] em28xx 6-1:1.0: Freeing device [ 133.317297][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.378953][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.486969][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.558714][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.597160][ T4947] device veth0_vlan entered promiscuous mode [ 133.639883][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.648041][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.723382][ T4947] device veth1_vlan entered promiscuous mode [ 133.864339][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.880214][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.912290][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.932636][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.965075][ T4947] device veth0_macvtap entered promiscuous mode [ 134.009412][ T4947] device veth1_macvtap entered promiscuous mode [ 134.073390][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.124901][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.157509][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.182937][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.223540][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.240036][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.254702][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.273343][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.287530][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.306801][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.338832][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.378510][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.428353][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.460951][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.483814][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.495530][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.512125][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.524257][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.549245][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.567414][ T5262] loop5: detected capacity change from 0 to 1024 [ 134.575117][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.592574][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.629392][ T5262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.642561][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.659923][ T5262] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 134.668238][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.699366][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.724501][ T5262] EXT4-fs (loop5): orphan cleanup on readonly fs [ 134.761894][ T5262] EXT4-fs error (device loop5): ext4_free_blocks:6220: comm syz.5.187: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.816328][ T4947] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.826211][ T4947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.835349][ T4947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.845288][ T4947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.881729][ T5262] EXT4-fs (loop5): Remounting filesystem read-only [ 134.890143][ T5262] EXT4-fs (loop5): 1 orphan inode deleted [ 134.896148][ T5262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 135.074564][ T4988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.106459][ T4988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.171815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.241733][ T4988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.274687][ T4628] EXT4-fs (loop5): unmounting filesystem. [ 135.278695][ T4988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.308131][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.625834][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.119'. [ 136.095366][ T5260] loop4: detected capacity change from 0 to 32768 [ 136.483416][ T5260] XFS (loop4): Mounting V5 Filesystem [ 136.638198][ T5260] XFS (loop4): Ending clean mount [ 136.706490][ T5299] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.722905][ T5303] netlink: 'syz.0.194': attribute type 12 has an invalid length. [ 137.832978][ T5320] netlink: 'syz.5.199': attribute type 21 has an invalid length. [ 137.847619][ T5320] netlink: 'syz.5.199': attribute type 7 has an invalid length. [ 137.892923][ T5321] binder: BINDER_SET_CONTEXT_MGR already set [ 137.934660][ T5321] binder: 5319:5321 ioctl 4018620d 200000000040 returned -16 [ 138.100609][ T4281] XFS (loop4): Unmounting Filesystem [ 138.395766][ T5330] loop2: detected capacity change from 0 to 512 [ 138.476221][ T5330] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.204: iget: bad i_size value: 38620345925642 [ 138.510211][ T5330] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.204: couldn't read orphan inode 15 (err -117) [ 138.533535][ T5330] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.738824][ T5338] loop5: detected capacity change from 0 to 512 [ 138.805821][ T5338] EXT4-fs: Ignoring removed i_version option [ 138.934505][ T5338] EXT4-fs: Ignoring removed oldalloc option [ 139.275919][ T5338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.458172][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 139.661409][ T5354] loop2: detected capacity change from 0 to 512 [ 139.728754][ T5354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 139.799435][ T5354] EXT4-fs (loop2): 1 truncate cleaned up [ 139.835676][ T5354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.880899][ T4628] EXT4-fs (loop5): unmounting filesystem. [ 139.990134][ T5364] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.206: Invalid block bitmap block 3 in block_group 0 [ 140.062832][ T5364] EXT4-fs error (device loop2): ext4_discard_preallocations:5132: comm syz.2.206: Error -117 reading block bitmap for 0 [ 140.098107][ T5364] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #15: comm syz.2.206: invalid indirect mapped block 38 (level 1) [ 140.150482][ T5364] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 140.178829][ T5327] loop6: detected capacity change from 0 to 40427 [ 140.206844][ T5327] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 140.232350][ T5327] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 140.258639][ T5364] EXT4-fs error (device loop2): ext4_truncate:4325: inode #15: comm syz.2.206: mark_inode_dirty error [ 140.298443][ T5364] EXT4-fs error (device loop2) in ext4_setattr:5695: Corrupt filesystem [ 140.345773][ T5327] F2FS-fs (loop6): Found nat_bits in checkpoint [ 140.531272][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 140.631222][ T5327] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 140.662467][ T5327] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 140.798097][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 141.003718][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 141.025196][ T7] usb 6-1: config 0 has no interfaces? [ 141.051761][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.072053][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.107791][ T7] usb 6-1: config 0 descriptor?? [ 141.605803][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.213'. [ 141.673835][ T5406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.213'. [ 141.733718][ T5408] loop0: detected capacity change from 0 to 512 [ 141.781301][ T5408] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.216: iget: bad i_size value: 38620345925642 [ 141.811709][ T5408] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.216: couldn't read orphan inode 15 (err -117) [ 141.833082][ T5408] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.575989][ T5423] netlink: 'syz.6.217': attribute type 4 has an invalid length. [ 142.659190][ T5427] netlink: 'syz.6.217': attribute type 4 has an invalid length. [ 142.980917][ T5432] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 143.539066][ T4276] usb 6-1: USB disconnect, device number 4 [ 143.727759][ T5444] loop7: detected capacity change from 0 to 16384 [ 143.772575][ T4286] EXT4-fs (loop0): unmounting filesystem. [ 143.939344][ T5447] loop7: detected capacity change from 16384 to 16320 [ 146.246727][ T5472] loop5: detected capacity change from 0 to 512 [ 146.307667][ T5472] EXT4-fs: Ignoring removed i_version option [ 146.336624][ T5472] EXT4-fs: Ignoring removed oldalloc option [ 146.425363][ T5472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.647802][ C0] sched: RT throttling activated [ 146.852762][ T4628] EXT4-fs (loop5): unmounting filesystem. [ 147.053438][ T27] audit: type=1804 audit(1785977540.127:7): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.231" name="bus" dev="ramfs" ino=39968 res=1 errno=0 [ 147.167142][ T27] audit: type=1804 audit(1785977540.227:8): pid=5484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.231" name="bus" dev="ramfs" ino=39968 res=1 errno=0 [ 147.365521][ T5486] loop5: detected capacity change from 0 to 512 [ 147.411147][ T5486] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.456046][ T5486] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 147.503503][ T5486] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.233: bg 0: block 248: padding at end of block bitmap is not set [ 147.533247][ T5486] Quota error (device loop5): write_blk: dquota write failed [ 147.543111][ T5486] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 147.558329][ T5486] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.233: Failed to acquire dquot type 1 [ 147.585321][ T5486] EXT4-fs (loop5): 1 truncate cleaned up [ 147.599246][ T5486] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 147.685728][ T5486] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 147.711414][ T5486] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 147.734673][ T5486] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 147.749429][ T5486] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 147.771571][ T5486] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 147.791848][ T5486] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 147.802048][ T5486] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.233: Failed to acquire dquot type 1 [ 147.820592][ T5486] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.233: deleted inode referenced: 12 [ 147.918617][ T4628] EXT4-fs (loop5): unmounting filesystem. [ 148.318895][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.511497][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 148.533859][ T7] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 148.550931][ T7] usb 6-1: config 0 has no interface number 0 [ 148.563770][ T7] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.573957][ T7] usb 6-1: config 0 interface 89 has no altsetting 0 [ 148.612087][ T7] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 148.634585][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.647863][ T7] usb 6-1: Product: syz [ 148.652921][ T7] usb 6-1: Manufacturer: syz [ 148.657577][ T7] usb 6-1: SerialNumber: syz [ 148.679438][ T7] usb 6-1: config 0 descriptor?? [ 148.702386][ T7] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 148.712283][ T7] em28xx 6-1:0.89: Video interface 89 found: [ 149.208344][ T5496] Bluetooth: (null): Invalid header checksum [ 149.246565][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.257766][ T5499] device batadv_slave_1 entered promiscuous mode [ 149.295934][ T7] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 149.308915][ T5498] loop6: detected capacity change from 0 to 736 [ 150.864873][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 151.024290][ T7] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 151.037144][ T7] em28xx 6-1:0.89: board has no eeprom [ 151.127904][ T7] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 151.157900][ T7] em28xx 6-1:0.89: analog set to bulk mode. [ 151.206409][ T7] usb 6-1: USB disconnect, device number 5 [ 151.219140][ T7] em28xx 6-1:0.89: Disconnecting em28xx [ 151.283535][ T126] em28xx 6-1:0.89: Registering V4L2 extension [ 151.291995][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.244'. [ 151.482767][ T5536] loop4: detected capacity change from 0 to 128 [ 151.543053][ T5536] FAT-fs (loop4): Directory bread(block 524322) failed [ 151.592011][ T5536] FAT-fs (loop4): Directory bread(block 524323) failed [ 151.599270][ T5536] FAT-fs (loop4): Directory bread(block 524324) failed [ 151.606197][ T5536] FAT-fs (loop4): Directory bread(block 524325) failed [ 151.647865][ T5536] FAT-fs (loop4): Directory bread(block 524326) failed [ 151.655256][ T5536] FAT-fs (loop4): Directory bread(block 524327) failed [ 151.682465][ T126] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 151.696260][ T126] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 151.728452][ T5536] FAT-fs (loop4): Directory bread(block 524328) failed [ 151.735448][ T5536] FAT-fs (loop4): Directory bread(block 524329) failed [ 151.754910][ T126] em28xx 6-1:0.89: No AC97 audio processor [ 151.776513][ T126] usb 6-1: Decoder not found [ 151.808108][ T126] em28xx 6-1:0.89: failed to create media graph [ 151.814445][ T126] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 151.840297][ T5541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.249'. [ 151.869591][ T5536] FAT-fs (loop4): Directory bread(block 524322) failed [ 151.902388][ T5536] FAT-fs (loop4): Directory bread(block 524323) failed [ 151.913027][ T126] em28xx 6-1:0.89: Registering snapshot button... [ 151.984771][ T126] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input5 [ 152.057363][ T126] em28xx 6-1:0.89: Remote control support is not available for this card. [ 152.101055][ T7] em28xx 6-1:0.89: Closing input extension [ 152.114812][ T7] em28xx 6-1:0.89: Deregistering snapshot button [ 152.246756][ T7] em28xx 6-1:0.89: Freeing device [ 152.277735][ T5555] loop4: detected capacity change from 0 to 512 [ 152.316718][ T5555] EXT4-fs: Ignoring removed oldalloc option [ 152.343820][ T5555] EXT4-fs: inline encryption not supported [ 152.373827][ T5555] EXT4-fs: Mount option(s) incompatible with ext2 [ 154.703254][ T5603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 154.917972][ T126] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 155.124765][ T126] usb 6-1: not running at top speed; connect to a high speed hub [ 155.138455][ T126] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 0.00 [ 155.178811][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.303080][ T126] usb 6-1: Direct firmware load for f2255usb.bin failed with error -2 [ 155.327384][ T126] usb 6-1: Falling back to sysfs fallback for: f2255usb.bin [ 155.441393][ T5627] loop6: detected capacity change from 0 to 512 [ 155.511248][ T5627] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.266: bg 0: block 5: invalid block bitmap [ 155.528854][ T5627] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 155.556756][ T126] s2255 6-1:1.0: Firmware invalid. [ 155.591889][ T126] Sensoray 2255 driver load failed: 0xffffffed [ 155.602353][ T5627] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.266: invalid indirect mapped block 3 (level 2) [ 155.720490][ T5627] EXT4-fs (loop6): 1 orphan inode deleted [ 155.740459][ T5627] EXT4-fs (loop6): 1 truncate cleaned up [ 155.758160][ T5627] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 155.827386][ T5627] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 155.943768][ T4947] EXT4-fs (loop6): unmounting filesystem. [ 156.076467][ T5234] usb 6-1: USB disconnect, device number 6 [ 156.090128][ T5640] device syzkaller0 entered promiscuous mode [ 156.460270][ T5646] loop2: detected capacity change from 0 to 512 [ 156.472900][ T5644] loop6: detected capacity change from 0 to 2048 [ 156.509539][ T5646] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.269: iget: bad i_size value: 38620345925642 [ 156.543396][ T5646] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.269: couldn't read orphan inode 15 (err -117) [ 156.599267][ T5646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.675693][ T5644] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.836948][ T27] audit: type=1800 audit(1785977549.907:9): pid=5644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.268" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 157.940170][ T5631] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 158.755202][ T5668] binder: 5667:5668 ioctl c0306201 200000000080 returned -14 [ 158.775104][ T5668] binder: 5667:5668 ioctl c0306201 2000000003c0 returned -14 [ 160.152923][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.156229][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.157257][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.162748][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.164379][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.165257][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.682856][ T5714] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 160.738968][ T5719] Bluetooth: MGMT ver 1.22 [ 160.748366][ T4288] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 160.933282][ T5708] chnl_net:caif_netlink_parms(): no params data found [ 161.003566][ T5726] loop5: detected capacity change from 0 to 256 [ 161.146565][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 161.234391][ T5708] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.241812][ T5708] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.251156][ T5708] device bridge_slave_0 entered promiscuous mode [ 161.260489][ T5708] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.268237][ T5708] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.276643][ T5708] device bridge_slave_1 entered promiscuous mode [ 161.316465][ T5708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.351826][ T5708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.497593][ T5740] loop5: detected capacity change from 0 to 512 [ 161.499727][ T5708] team0: Port device team_slave_0 added [ 161.560435][ T5740] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.288: iget: bad i_size value: 38620345925642 [ 161.583499][ T5708] team0: Port device team_slave_1 added [ 161.697128][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.710057][ T5740] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.288: couldn't read orphan inode 15 (err -117) [ 161.789130][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.816889][ T5740] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 161.881900][ T5708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.893771][ T5746] netlink: 24 bytes leftover after parsing attributes in process `syz.6.289'. [ 162.038229][ T5708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.091959][ T5708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.219497][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 162.522200][ T5708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.711804][ T4628] EXT4-fs (loop5): unmounting filesystem. [ 162.813118][ T5769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 162.872662][ T5708] device hsr_slave_0 entered promiscuous mode [ 163.001733][ T5708] device hsr_slave_1 entered promiscuous mode [ 163.136074][ T5708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.262668][ T5708] Cannot create hsr debugfs directory [ 164.014340][ T5778] loop2: detected capacity change from 0 to 512 [ 164.119931][ T5778] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.296: iget: bad i_size value: 38620345925642 [ 164.208299][ T5778] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.296: couldn't read orphan inode 15 (err -117) [ 164.266665][ T5778] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.297986][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 164.307587][ T5708] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 164.381666][ T5708] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 164.398208][ T4276] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 164.401605][ T5708] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 164.423282][ T5708] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 164.468091][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 164.608081][ T4276] usb 6-1: Using ep0 maxpacket: 32 [ 164.616257][ T4276] usb 6-1: config index 0 descriptor too short (expected 3659, got 75) [ 164.643003][ T4276] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.669095][ T5708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.670622][ T7] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.696640][ T4276] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 164.718328][ T7] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 164.729285][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.737345][ T4276] usb 6-1: Product: syz [ 164.754429][ T7] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.759399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.771785][ T4276] usb 6-1: Manufacturer: syz [ 164.789104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.796934][ T4276] usb 6-1: SerialNumber: syz [ 164.801803][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.816952][ T5708] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.828843][ T4276] usb 6-1: config 0 descriptor?? [ 164.835954][ T7] usb 7-1: Product: syz [ 164.845750][ T4276] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 164.852504][ T7] usb 7-1: Manufacturer: syz [ 164.862572][ T7] usb 7-1: SerialNumber: syz [ 164.878978][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.889585][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.901441][ T7] cdc_mbim 7-1:1.0: skipping garbage [ 164.923380][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.930598][ T5322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.986009][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.003468][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.017434][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.036870][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.044081][ T5322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.065017][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.097136][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.113315][ T5788] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 165.116356][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.142876][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.157350][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.177301][ T5782] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 165.191953][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.198434][ T4362] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 165.211130][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.229101][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.248940][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.274536][ T5708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.318522][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.340934][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.361734][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.408160][ T4362] usb 5-1: Using ep0 maxpacket: 16 [ 165.426995][ T4362] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.462392][ T4362] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.494970][ T4362] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 165.516843][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.538034][ T4362] usb 5-1: Product: syz [ 165.548151][ T4362] usb 5-1: Manufacturer: syz [ 165.557969][ T4362] usb 5-1: SerialNumber: syz [ 165.586871][ T4362] usb 5-1: config 0 descriptor?? [ 165.754269][ T5788] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 165.768706][ T7] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 165.801191][ T7] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 165.825528][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 165.910689][ T4362] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 165.945604][ T7] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, c2:c8:a5:f4:28:17 [ 166.002914][ T4362] imon:send_packet: packet tx failed (-71) [ 166.048777][ T7] usb 7-1: USB disconnect, device number 2 [ 166.055597][ T7] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 166.073500][ T4362] imon 5-1:0.0: panel buttons/knobs setup failed [ 166.230117][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.248133][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.272190][ T5708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.368083][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 166.428108][ T4362] rc_core: IR keymap rc-imon-pad not found [ 166.434036][ T4362] Registered IR keymap rc-empty [ 166.446435][ T4362] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 166.489051][ T4362] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 166.547952][ T4362] imon:send_packet: packet tx failed (-71) [ 166.578082][ T4362] imon 5-1:0.0: remote input dev register failed [ 166.584756][ T4362] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 166.698849][ T4362] imon 5-1:0.0: unable to initialize intf0, err 0 [ 166.706082][ T4362] imon:imon_probe: failed to initialize context! [ 166.728024][ T4362] imon 5-1:0.0: unable to register, err -19 [ 166.808048][ T4362] usb 5-1: USB disconnect, device number 4 [ 167.103917][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 167.134324][ T4276] usb 6-1: USB disconnect, device number 7 [ 167.208050][ T4362] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.345908][ T7] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 167.408275][ T4362] usb 5-1: Using ep0 maxpacket: 16 [ 167.420179][ T4362] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.451070][ T7] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.481286][ T4362] usb 5-1: config 0 interface 0 has no altsetting 0 [ 167.505821][ T4362] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 167.534041][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.558348][ T4362] usb 5-1: Product: syz [ 167.571794][ T4362] usb 5-1: Manufacturer: syz [ 167.591397][ T4362] usb 5-1: SerialNumber: syz [ 167.623248][ T4362] usb 5-1: config 0 descriptor?? [ 167.783191][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 167.792818][ T4362] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 167.833385][ T4362] imon:send_packet: packet tx failed (-71) [ 167.867999][ T4362] imon 5-1:0.0: panel buttons/knobs setup failed [ 167.908838][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.930338][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.020792][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.040976][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.065804][ T5847] loop4: detected capacity change from 0 to 512 [ 168.081579][ T5708] device veth0_vlan entered promiscuous mode [ 168.101942][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.126172][ T5322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.162447][ T5708] device veth1_vlan entered promiscuous mode [ 168.218854][ T5847] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.303: iget: bad i_size value: 38620345925642 [ 168.277455][ T5847] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.303: couldn't read orphan inode 15 (err -117) [ 168.305042][ T5847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 168.328057][ T4362] rc_core: IR keymap rc-imon-pad not found [ 168.339968][ T4362] Registered IR keymap rc-empty [ 168.378011][ T4362] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 168.393834][ T5708] device veth0_macvtap entered promiscuous mode [ 168.437842][ T4362] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 168.449283][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 168.454041][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.468500][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.476810][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.534328][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.548214][ T4362] imon:send_packet: packet tx failed (-71) [ 168.566481][ T5708] device veth1_macvtap entered promiscuous mode [ 168.577996][ T4362] imon 5-1:0.0: remote input dev register failed [ 168.584489][ T4362] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 168.601864][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.618819][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.665998][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.678402][ T4362] imon 5-1:0.0: unable to initialize intf0, err 0 [ 168.684891][ T4362] imon:imon_probe: failed to initialize context! [ 168.727294][ T4362] imon 5-1:0.0: unable to register, err -19 [ 168.767825][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.784939][ T4362] usb 5-1: USB disconnect, device number 5 [ 168.838162][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.883521][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.919855][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.947421][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.965557][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.976714][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.994269][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.038722][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.056596][ T5864] dummy_hcd dummy_hcd.0: remove, state 1 [ 169.065783][ T5864] usb usb1: USB disconnect, device number 1 [ 169.092106][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.116637][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.133703][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.175464][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.204906][ T5864] dummy_hcd dummy_hcd.0: stopped [ 169.210257][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.227058][ T5864] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 169.234719][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.275635][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.301314][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.334593][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.363616][ T5708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.417904][ T5708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.484856][ T5708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.516595][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.544003][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.595058][ T5873] loop2: detected capacity change from 0 to 512 [ 169.622121][ T5873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 169.634347][ T5873] System zones: 1-12 [ 169.645085][ T5873] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.309: Directory hole found for htree index block 0 [ 169.663323][ T5873] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 169.672921][ T5873] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.309: Directory hole found for htree index block 0 [ 169.686389][ T5873] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 169.694788][ T5873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.713199][ T5873] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 169.854421][ T5708] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.882820][ T5708] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.922584][ T5708] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.959387][ T5708] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.998562][ T5882] input: syz0 as /devices/virtual/input/input12 [ 170.245371][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.273852][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.347336][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.380834][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 170.406557][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.455796][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.512171][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.998426][ T5902] loop7: detected capacity change from 0 to 1024 [ 171.008048][ T5851] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 171.035075][ T5902] EXT4-fs: Ignoring removed bh option [ 171.099726][ T5902] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.177946][ T5902] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 171.177946][ T5902] [ 171.531436][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.541973][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.551215][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.559354][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.566970][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 171.574920][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.298012][ T4276] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 172.323642][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 172.356674][ T5912] loop6: detected capacity change from 0 to 32768 [ 172.384750][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 172.411758][ T5912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.316 (5912) [ 172.468929][ T5912] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.497357][ T5912] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 172.552039][ T4276] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.572908][ T5912] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.604409][ T4276] usb 8-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 172.625945][ T4276] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.628298][ T5912] BTRFS info (device loop6): trying to use backup root at mount time [ 172.644024][ T4276] usb 8-1: config 0 descriptor?? [ 172.662624][ T4276] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 172.687984][ T5912] BTRFS info (device loop6): using free space tree [ 172.712192][ T5323] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 172.729346][ T5912] BTRFS warning (device loop6): couldn't read tree root [ 172.736361][ T5912] BTRFS warning (device loop6): try to load backup roots slot 1 [ 172.753373][ T5912] BTRFS info (device loop6): enabling ssd optimizations [ 172.770249][ T5912] BTRFS info (device loop6): rebuilding free space tree [ 172.840940][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.890365][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.950663][ T5910] device bridge_slave_0 entered promiscuous mode [ 172.967060][ T7] usb 8-1: USB disconnect, device number 2 [ 172.989855][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.997007][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.057762][ T5910] device bridge_slave_1 entered promiscuous mode [ 173.105753][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.171363][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.296846][ T5910] team0: Port device team_slave_0 added [ 173.359379][ T5910] team0: Port device team_slave_1 added [ 173.370117][ T5974] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 173.370117][ T5974] program syz.2.323 not setting count and/or reply_len properly [ 173.416857][ T5912] BTRFS info (device loop6): balance: start -d -m [ 173.440197][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.447334][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.494062][ T5912] BTRFS info (device loop6): relocating block group 8519680 flags data|metadata [ 173.569034][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.630224][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.650769][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 173.699534][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.781914][ T5912] BTRFS info (device loop6): balance: canceled [ 173.850124][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.783624][ T5910] device hsr_slave_0 entered promiscuous mode [ 174.798815][ T5910] device hsr_slave_1 entered promiscuous mode [ 174.859130][ T5910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.895519][ T5910] Cannot create hsr debugfs directory [ 175.727960][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 175.740993][ T5994] loop7: detected capacity change from 0 to 512 [ 175.859396][ T5994] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.329: iget: bad i_size value: 38620345925642 [ 175.890085][ T4947] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.928526][ T5994] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.329: couldn't read orphan inode 15 (err -117) [ 176.025262][ T5994] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 177.191205][ T5910] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 177.239802][ T5910] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 177.292496][ T5910] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 177.325015][ T5910] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 177.562097][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.597380][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.622571][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.642280][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.662495][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.674225][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.683396][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.690711][ T5323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.717239][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.732541][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.761841][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.787176][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.794418][ T5323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.809221][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 178.010262][ T6031] loop2: detected capacity change from 0 to 512 [ 178.096182][ T6031] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.336: iget: bad i_size value: 38620345925642 [ 178.117126][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.151856][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.159742][ T6031] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.336: couldn't read orphan inode 15 (err -117) [ 178.197392][ T6031] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.375727][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.402078][ T6037] loop4: detected capacity change from 0 to 512 [ 178.420038][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.466281][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.477555][ T6037] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.337: iget: bad i_size value: 38620345925642 [ 178.517476][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.541192][ T6037] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.337: couldn't read orphan inode 15 (err -117) [ 178.584119][ T5910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.600126][ T6037] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.611287][ T5910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.647511][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.672017][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.697746][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.726611][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.756509][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.800766][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.168048][ T6000] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 179.838199][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.845820][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.882960][ T6063] loop6: detected capacity change from 0 to 128 [ 179.917955][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 179.938786][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.064415][ T27] audit: type=1800 audit(1785977573.137:10): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.340" name="bus" dev="loop6" ino=1048622 res=0 errno=0 [ 180.098541][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 180.218059][ T27] audit: type=1804 audit(1785977573.187:11): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.340" name="/newroot/37/file1/bus" dev="loop6" ino=1048622 res=1 errno=0 [ 180.335348][ T27] audit: type=1804 audit(1785977573.247:12): pid=6063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.340" name="/newroot/37/file1/bus" dev="loop6" ino=1048622 res=1 errno=0 [ 180.395416][ T5708] EXT4-fs (loop7): unmounting filesystem. [ 180.489513][ T6063] syz.6.340: attempt to access beyond end of device [ 180.489513][ T6063] loop6: rw=0, sector=97, nr_sectors = 128 limit=128 [ 180.734118][ T27] audit: type=1800 audit(1785977573.807:13): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.342" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 180.837032][ T76] kworker/u4:4: attempt to access beyond end of device [ 180.837032][ T76] loop6: rw=1, sector=225, nr_sectors = 816 limit=128 [ 181.533547][ T6099] loop4: detected capacity change from 0 to 2048 [ 181.541253][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.561241][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.616666][ T6099] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 181.654758][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 181.662864][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.682336][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.729996][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.758615][ T6099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.778972][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.810544][ T5910] device veth0_vlan entered promiscuous mode [ 181.871941][ T5910] device veth1_vlan entered promiscuous mode [ 182.293427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.328960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.356712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.428938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.443125][ T5910] device veth0_macvtap entered promiscuous mode [ 182.482673][ T5910] device veth1_macvtap entered promiscuous mode [ 182.528461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.550147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.603417][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.665019][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.693176][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.724255][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.771226][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.815792][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.856241][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.899968][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.955977][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.992447][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.033446][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.097121][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.138880][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.169335][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.199274][ T6134] binder: BINDER_SET_CONTEXT_MGR already set [ 183.205330][ T6134] binder: 6133:6134 ioctl 4018620d 200000000040 returned -16 [ 183.209135][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.266089][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.317738][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.345114][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.377890][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.403386][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.414124][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.424329][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.436294][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.457258][ T5910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.482450][ T5910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.509985][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.581627][ T6141] bridge0: port 3(vxlan0) entered blocking state [ 183.600179][ T6141] bridge0: port 3(vxlan0) entered disabled state [ 183.621615][ T6141] device vxlan0 entered promiscuous mode [ 183.643952][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.666374][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.711382][ T5910] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.766458][ T5910] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.803150][ T5910] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.834945][ T5910] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.886629][ T6152] loop6: detected capacity change from 0 to 512 [ 184.078169][ T5323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.086884][ T5323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.113171][ T6134] syz.2.355 (6134): drop_caches: 2 [ 184.136187][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.165992][ T6152] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.358: iget: bad i_size value: 38620345925642 [ 184.234899][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.243471][ T6152] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.358: couldn't read orphan inode 15 (err -117) [ 184.256388][ T6152] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 184.319388][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.327057][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.513807][ T6166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.504857][ T27] audit: type=1326 audit(1785977578.577:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.7.363" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f902a39e0d9 code=0x0 [ 186.040195][ T126] smpboot: CPU 1 is now offline [ 187.376575][ T6219] loop8: detected capacity change from 0 to 128 [ 187.384579][ T6213] loop2: detected capacity change from 0 to 128 [ 187.468321][ T6213] UDF-fs: bad mount option "'> [ 187.468321][ T6213] =JXɟόR8oĽ-y zy2JQ9<ɖحC9~@C-ˌ*?B44Fs;EDCb@—`l 0!" or missing value [ 187.974289][ T6213] loop2: detected capacity change from 0 to 256 [ 188.399070][ T6213] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d) [ 188.538004][ T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 188.632851][ T6213] exFAT-fs (loop2): failed to load alloc-bitmap [ 188.725268][ T6213] exFAT-fs (loop2): failed to recognize exfat type [ 188.769874][ T7] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.846935][ T7] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 188.919289][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.979126][ T7] usb 9-1: Product: syz [ 189.008031][ T6158] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 189.022874][ T7] usb 9-1: Manufacturer: syz [ 189.067907][ T7] usb 9-1: SerialNumber: syz [ 189.129884][ T7] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 189.453635][ T4947] EXT4-fs (loop6): unmounting filesystem. [ 190.165220][ T7] gspca_mr97310a: reg write [19] error -71 [ 190.198030][ T7] mr97310a: probe of 9-1:1.0 failed with error -71 [ 190.208276][ T4362] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.267976][ T7] usb 9-1: USB disconnect, device number 2 [ 190.433395][ T4362] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 190.505530][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.696768][ T6255] loop6: detected capacity change from 0 to 8 [ 190.850505][ T6255] SQUASHFS error: lzo decompression failed, data probably corrupt [ 190.912145][ T6255] SQUASHFS error: Failed to read block 0x144: -5 [ 190.954752][ T6255] SQUASHFS error: Unable to read metadata cache entry [142] [ 190.965708][ T4362] r8152-cfgselector 3-1: reset high-speed USB device number 3 using dummy_hcd [ 191.010418][ T6255] SQUASHFS error: Unable to read inode 0x11f [ 191.187869][ T4362] r8152-cfgselector 3-1: device descriptor read/64, error -32 [ 191.458067][ T4362] r8152-cfgselector 3-1: reset high-speed USB device number 3 using dummy_hcd [ 191.603226][ T6273] loop6: detected capacity change from 0 to 512 [ 191.645552][ T6272] loop7: detected capacity change from 0 to 2048 [ 191.687987][ T4362] r8152-cfgselector 3-1: device descriptor read/64, error -32 [ 191.702879][ T6273] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.384: iget: bad i_size value: 38620345925642 [ 191.784689][ T6272] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 191.806272][ T6273] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.384: couldn't read orphan inode 15 (err -117) [ 191.883601][ T6273] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 191.946417][ T6272] EXT4-fs (loop7): shut down requested (1) [ 191.998848][ T4362] r8152-cfgselector 3-1: reset high-speed USB device number 3 using dummy_hcd [ 192.091594][ T4362] r8152-cfgselector 3-1: device descriptor read/8, error -32 [ 192.191812][ T6287] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.384: bg 0: block 5: invalid block bitmap [ 192.245919][ T5708] EXT4-fs (loop7): unmounting filesystem. [ 192.347187][ T6287] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 228 with error 28 [ 192.397968][ T4362] r8152-cfgselector 3-1: reset high-speed USB device number 3 using dummy_hcd [ 192.434912][ T6287] EXT4-fs (loop6): This should not happen!! Data will be lost [ 192.434912][ T6287] [ 192.458423][ T4362] r8152-cfgselector 3-1: device descriptor read/8, error -32 [ 192.473897][ T6294] loop8: detected capacity change from 0 to 512 [ 192.506458][ T6287] EXT4-fs (loop6): Total free blocks count 0 [ 192.676437][ T6287] EXT4-fs (loop6): Free/Dirty block details [ 192.702251][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 192.956583][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.963175][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.974992][ T4362] r8152 3-1:1.0: USB reset failed, errno=-19 [ 192.995767][ T6287] EXT4-fs (loop6): free_blocks=0 [ 193.001410][ T6294] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.386: iget: bad i_size value: 38620345925642 [ 193.032654][ T4362] r8152-cfgselector 3-1: Unknown version 0x0000 [ 193.042327][ T6287] EXT4-fs (loop6): dirty_blocks=232 [ 193.072741][ T6287] EXT4-fs (loop6): Block reservation details [ 193.099901][ T4362] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 193.129088][ T6287] EXT4-fs (loop6): i_reserved_data_blocks=232 [ 193.178684][ T6294] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.386: couldn't read orphan inode 15 (err -117) [ 193.236660][ T4347] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 228 with max blocks 4 with error 28 [ 193.269400][ T6294] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 193.329411][ T4362] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 193.598046][ T4362] usb 3-1: device descriptor read/64, error -32 [ 193.668202][ T6304] loop7: detected capacity change from 0 to 256 [ 193.907896][ T4362] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.907993][ T4362] usb 3-1: device descriptor read/64, error -32 [ 196.028281][ T4362] usb usb3-port1: attempt power cycle [ 196.203661][ T5910] EXT4-fs (loop8): unmounting filesystem. [ 196.838364][ T6324] jffs2: notice: (6324) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.510408][ T6339] loop6: detected capacity change from 0 to 136 [ 197.602299][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.6.397'. [ 197.711917][ T6347] netlink: 32 bytes leftover after parsing attributes in process `syz.6.397'. [ 198.922000][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.8.402'. [ 199.057012][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 199.501891][ T6372] kvm: pic: non byte write [ 199.617830][ T4276] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 199.762400][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 199.867886][ T4276] usb 9-1: Using ep0 maxpacket: 8 [ 199.925802][ T4276] usb 9-1: unable to get BOS descriptor or descriptor too short [ 200.042866][ T4276] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 200.059472][ T6378] loop2: detected capacity change from 0 to 512 [ 200.082209][ T4276] usb 9-1: can't read configurations, error -71 [ 200.556685][ T6378] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.405: iget: bad i_size value: 38620345925642 [ 200.754278][ T6378] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.405: couldn't read orphan inode 15 (err -117) [ 200.852590][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.7.407'. [ 200.867657][ T6378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.363700][ T6400] loop8: detected capacity change from 0 to 128 [ 201.534156][ T6400] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 202.159184][ T6399] ceph: No mds server is up or the cluster is laggy [ 202.168675][ T4276] libceph: mon0 (1)127.0.0.1:8080 socket closed (con state V1_BANNER) [ 202.189453][ T6421] loop7: detected capacity change from 0 to 164 [ 202.325004][ T4455] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.555079][ T4276] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 203.231758][ T6434] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 203.410890][ T6438] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 203.799749][ T6422] loop6: detected capacity change from 0 to 32768 [ 203.890564][ T4277] Bluetooth: hci4: command 0x0406 tx timeout [ 203.916093][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.420'. [ 203.946761][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 205.327957][ T4276] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 205.557943][ T4276] usb 8-1: Using ep0 maxpacket: 8 [ 205.629314][ T4276] usb 8-1: unable to get BOS descriptor or descriptor too short [ 205.767173][ T4276] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 205.814391][ T4276] usb 8-1: can't read configurations, error -71 [ 206.728023][ T126] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 207.329554][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 207.335889][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 207.383413][ T126] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.447938][ T126] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 207.510202][ T126] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 207.560581][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.611872][ T126] usb 7-1: Product: syz [ 207.637917][ T126] usb 7-1: Manufacturer: syz [ 207.667903][ T126] usb 7-1: SerialNumber: syz [ 207.712561][ T126] port100 7-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 208.526929][ T6497] digital: digital_start_poll: Unknown protocol [ 209.787585][ T4276] usb 7-1: USB disconnect, device number 3 [ 209.879291][ T6524] loop2: detected capacity change from 0 to 256 [ 210.037637][ T6524] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 210.442776][ T6532] device syzkaller0 entered promiscuous mode [ 210.594428][ T27] audit: type=1804 audit(1785977603.667:15): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.436" name="/newroot/99/file0/bus" dev="loop2" ino=1048626 res=1 errno=0 [ 210.701742][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.439'. [ 210.786812][ T27] audit: type=1804 audit(1785977603.747:16): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.436" name="/newroot/99/file0/bus" dev="loop2" ino=1048626 res=1 errno=0 [ 213.478846][ T6561] device syzkaller0 entered promiscuous mode [ 215.339007][ T6575] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 215.348418][ T6575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 215.358124][ T6575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 215.457999][ T6575] syz.6.447 (6575) used greatest stack depth: 18176 bytes left [ 215.477897][ T27] audit: type=1800 audit(1785977608.407:17): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.447" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 217.565368][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.454'. [ 218.042093][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.7.456'. [ 218.200954][ T126] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 218.589634][ T126] usb 7-1: Using ep0 maxpacket: 8 [ 218.631022][ T126] usb 7-1: unable to get BOS descriptor or descriptor too short [ 218.673196][ T126] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 218.724304][ T126] usb 7-1: can't read configurations, error -71 [ 219.284899][ T6634] device syzkaller0 entered promiscuous mode [ 219.517252][ T6636] device syzkaller0 entered promiscuous mode [ 219.630648][ T6636] tipc: Started in network mode [ 219.702800][ T6636] tipc: Node identity 36f67edcafd4, cluster identity 4711 [ 219.784442][ T6636] tipc: Enabled bearer , priority 0 [ 219.876389][ T6635] tipc: Resetting bearer [ 221.244215][ T6635] tipc: Disabling bearer [ 221.361062][ T14] tipc: Node number set to 2569174748 [ 221.766603][ T6672] loop6: detected capacity change from 0 to 512 [ 221.972865][ T6672] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.470: iget: bad i_size value: 38620345925642 [ 222.071020][ T6672] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.470: couldn't read orphan inode 15 (err -117) [ 222.162399][ T6672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 222.193822][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 222.867909][ T4947] EXT4-fs (loop6): unmounting filesystem. [ 223.331202][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 225.765769][ T6704] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.857824][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 226.058297][ T14] usb 3-1: device descriptor read/all, error -71 [ 229.445723][ T6739] loop2: detected capacity change from 0 to 512 [ 229.555705][ T6739] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.486: iget: bad i_size value: 38620345925642 [ 229.854955][ T6739] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.486: couldn't read orphan inode 15 (err -117) [ 230.007368][ T6739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 230.588444][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 231.457673][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.6.491'. [ 231.493227][ T6775] jffs2: notice: (6775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.869184][ T4362] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 232.137907][ T4362] usb 7-1: Using ep0 maxpacket: 8 [ 232.344623][ T4362] usb 7-1: unable to get BOS descriptor or descriptor too short [ 232.372860][ T4362] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 232.693061][ T4362] usb 7-1: can't read configurations, error -71 [ 234.046866][ T6811] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 234.217951][ T6811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.469183][ T6812] bond1: (slave geneve2): making interface the new active one [ 234.552745][ T6812] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 234.646476][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 235.353538][ T6820] loop2: detected capacity change from 0 to 512 [ 235.473724][ T6820] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.504: iget: bad i_size value: 38620345925642 [ 235.678367][ T6820] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.504: couldn't read orphan inode 15 (err -117) [ 235.815492][ T6820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 236.582159][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 236.865785][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 240.725188][ T4346] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 240.988101][ T4346] usb 7-1: Using ep0 maxpacket: 16 [ 241.016631][ T4346] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.053661][ T4346] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.110062][ T4346] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.164724][ T4346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.196788][ T4346] usb 7-1: Product: syz [ 241.206951][ T4346] usb 7-1: Manufacturer: syz [ 241.230667][ T4346] usb 7-1: SerialNumber: syz [ 242.746855][ T4346] usb 7-1: can't set config #1, error -71 [ 242.766861][ T4346] usb 7-1: USB disconnect, device number 8 [ 242.773886][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 242.917656][ T6878] loop7: detected capacity change from 0 to 8 [ 243.118849][ T6878] SQUASHFS error: Unable to read inode 0x11f [ 244.902581][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 245.608513][ T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 245.847831][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 245.931488][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.969534][ T126] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 246.026616][ T126] usb 3-1: can't read configurations, error -71 [ 247.030855][ T6916] jffs2: notice: (6916) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 248.871955][ T27] audit: type=1800 audit(1785977641.947:18): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.533" name="bus" dev="ramfs" ino=45948 res=0 errno=0 [ 249.115452][ T6937] overlayfs: failed to clone upperpath [ 249.471054][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.540'. [ 249.869458][ T6945] device syzkaller0 entered promiscuous mode [ 250.026419][ T126] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 250.299149][ T126] usb 7-1: Using ep0 maxpacket: 8 [ 250.611645][ T126] usb 7-1: unable to get BOS descriptor or descriptor too short [ 250.640790][ T126] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 250.666645][ T126] usb 7-1: can't read configurations, error -71 [ 253.185031][ T6975] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 253.531212][ T6980] jffs2: notice: (6980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.572151][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.579120][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.813419][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.559'. [ 258.773170][ T6998] syz.2.558 (6998): drop_caches: 2 [ 259.027933][ T4362] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 259.252972][ T4362] usb 7-1: Using ep0 maxpacket: 8 [ 259.282934][ T4362] usb 7-1: unable to get BOS descriptor or descriptor too short [ 260.645453][ T4362] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 260.681137][ T4362] usb 7-1: can't read configurations, error -71 [ 265.869267][ T7059] device syzkaller0 entered promiscuous mode [ 266.186661][ T7059] TC_ACT_REPEAT abuse ? [ 266.829557][ T7066] device syzkaller0 entered promiscuous mode [ 267.707505][ T7068] tipc: Enabled bearer , priority 0 [ 268.044263][ T7066] tipc: Resetting bearer [ 268.168270][ T7064] tipc: Resetting bearer [ 270.021340][ T7064] tipc: Disabling bearer [ 270.321757][ T27] audit: type=1800 audit(1785977663.397:19): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.585" name="idVendor" dev="configfs" ino=46472 res=0 errno=0 [ 270.450336][ T27] audit: type=1800 audit(1785977663.487:20): pid=7094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.585" name="UDC" dev="configfs" ino=46475 res=0 errno=0 [ 271.202018][ T7104] netlink: 'syz.6.589': attribute type 1 has an invalid length. [ 271.327557][ T7104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.470100][ T7107] bond1: (slave vlan2): making interface the new active one [ 271.632607][ T7107] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 271.698014][ T5116] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 279.029101][ T7164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.121531][ T7167] loop2: detected capacity change from 0 to 512 [ 279.292834][ T7167] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.603: iget: bad i_size value: 38620345925642 [ 279.478269][ T7167] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.603: couldn't read orphan inode 15 (err -117) [ 279.596045][ T7167] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 280.420870][ T7191] loop6: detected capacity change from 0 to 2048 [ 280.468454][ T7191] EXT4-fs: Ignoring removed i_version option [ 280.531451][ T7191] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 280.697368][ T7191] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.767926][ T7173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 281.126238][ T4947] EXT4-fs (loop6): unmounting filesystem. [ 281.135617][ T7198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 281.524207][ T7203] loop6: detected capacity change from 0 to 32768 [ 281.531730][ T7203] xfs: Unknown parameter 'barrier' [ 282.056584][ T4455] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.699635][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.6.615'. [ 283.248018][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 287.485901][ T7237] o2cb: This node has not been configured. [ 287.492384][ T7237] o2cb: Cluster check failed. Fix errors before retrying. [ 287.499596][ T7237] (syz.4.620,7237,0):user_dlm_register:674 ERROR: status = -22 [ 287.508002][ T7237] (syz.4.620,7237,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 288.143849][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 288.648210][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 290.755472][ T4277] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 291.158631][ T7273] loop2: detected capacity change from 0 to 512 [ 293.455103][ T7286] Cannot find del_set index 4 as target [ 295.687772][ T7302] syz.4.635 (7302) used greatest stack depth: 16944 bytes left [ 298.608118][ T4277] Bluetooth: hci2: command 0x0406 tx timeout [ 301.325979][ T7334] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5708] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7334] [ 302.917406][ T7346] netlink: 'syz.8.645': attribute type 1 has an invalid length. [ 303.148364][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.156147][ T7346] IPv6: NLM_F_CREATE should be set when creating new route [ 304.605601][ T28] INFO: task syz.0.226:5456 blocked for more than 145 seconds. [ 304.642343][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.7.647'. [ 304.688003][ T28] Not tainted syzkaller #0 [ 304.747221][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.886291][ T28] task:syz.0.226 state:D stack:27088 pid:5456 ppid:4286 flags:0x00004004 [ 306.861319][ T28] Call Trace: [ 306.868744][ T28] [ 306.910098][ T28] __schedule+0x107f/0x4030 [ 306.943632][ T4362] libceph: connect (1)[c::]:6789 error -101 [ 306.958732][ T28] ? __sched_text_start+0x8/0x8 [ 306.973717][ T4362] libceph: mon0 (1)[c::]:6789 connect error [ 306.979994][ T7359] ceph: No mds server is up or the cluster is laggy [ 306.992483][ T28] ? __mutex_trylock_common+0x86/0x260 [ 307.023900][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 307.041663][ T28] schedule+0xb9/0x180 [ 307.053568][ T28] schedule_preempt_disabled+0xf/0x20 [ 307.075422][ T28] __mutex_lock+0x548/0xae0 [ 307.104364][ T28] ? __mutex_lock+0x3ba/0xae0 [ 307.133446][ T28] ? nfsd_svc+0x61/0xab0 [ 307.150094][ T28] ? mutex_lock_nested+0x10/0x10 [ 307.173306][ T28] ? net_generic+0x1e/0x240 [ 307.192333][ T28] ? net_generic+0x1e/0x240 [ 307.213321][ T28] nfsd_svc+0x61/0xab0 [ 307.233365][ T28] ? qword_get+0x5a5/0x640 [ 307.253713][ T28] write_threads+0x2ea/0x350 [ 307.272546][ T28] ? write_unlock_fs+0x1f0/0x1f0 [ 307.282350][ T28] ? __might_fault+0xc2/0x120 [ 307.287112][ T28] ? _copy_from_user+0x10b/0x170 [ 307.296021][ T4362] libceph: connect (1)[c::]:6789 error -101 [ 307.305620][ T28] ? simple_transaction_get+0x119/0x140 [ 307.313341][ T4362] libceph: mon0 (1)[c::]:6789 connect error [ 307.323713][ T28] nfsctl_transaction_write+0x105/0x150 [ 307.331033][ T28] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 307.336739][ T28] vfs_write+0x2dc/0x9a0 [ 307.347004][ T28] ? file_end_write+0x250/0x250 [ 307.355236][ T28] ? __fget_files+0x28/0x460 [ 307.363611][ T28] ? __fget_files+0x3fc/0x460 [ 307.371490][ T28] ? __fdget_pos+0x2ae/0x360 [ 307.376229][ T28] ? ksys_write+0x70/0x260 [ 307.384265][ T28] ksys_write+0x14d/0x260 [ 307.390263][ T28] ? __ia32_sys_read+0x80/0x80 [ 307.395098][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 307.403894][ T28] do_syscall_64+0x4c/0xa0 [ 307.410243][ T28] ? clear_bhb_loop+0x60/0xb0 [ 307.415088][ T28] ? clear_bhb_loop+0x60/0xb0 [ 307.423311][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.431819][ T28] RIP: 0033:0x7fb56239e0d9 [ 307.436330][ T28] RSP: 002b:00007fb5631af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.451379][ T28] RAX: ffffffffffffffda RBX: 00007fb562626090 RCX: 00007fb56239e0d9 [ 307.464897][ T28] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000005 [ 307.476495][ T28] RBP: 00007fb562435024 R08: 0000000000000000 R09: 0000000000000000 [ 307.488564][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.501255][ T28] R13: 00007fb562626128 R14: 00007fb562626090 R15: 00007ffef03a8a88 [ 307.510906][ T28] [ 307.552995][ T28] [ 307.552995][ T28] Showing all locks held in the system: [ 307.621595][ T28] 1 lock held by rcu_tasks_kthre/12: [ 307.644827][ T28] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 307.686815][ T28] 1 lock held by rcu_tasks_trace/13: [ 307.703236][ T28] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 307.727216][ T28] 1 lock held by khungtaskd/28: [ 307.733871][ T28] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 307.747399][ T28] 3 locks held by kworker/0:2/126: [ 307.754144][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 307.770001][ T28] #1: ffffc90002de7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 307.793009][ T28] #2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 307.805446][ T28] 2 locks held by getty/4029: [ 307.814261][ T28] #0: ffff8880302da098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 307.826054][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 307.840037][ T28] 2 locks held by kworker/0:6/4346: [ 307.846669][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 307.862083][ T28] #1: ffffc90004097d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 307.873809][ T28] 3 locks held by syz.0.226/5454: [ 307.883910][ T28] #0: ffff8880249a6ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 307.909253][ T28] #1: ffff888065746460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 307.922101][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb3/0xb80 [ 307.932598][ T28] 3 locks held by syz.0.226/5456: [ 307.941323][ T28] #0: ffff88801df00fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 307.952243][ T28] #1: ffff888065746460 (sb_writers#29){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 307.964917][ T28] #2: ffffffff8cdcce08 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_svc+0x61/0xab0 [ 307.977961][ T28] 3 locks held by kvm-nx-lpage-re/7363: [ 307.993526][ T28] #0: ffffffff8cb56648 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 308.004941][ T28] #1: ffffffff8c9ca530 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 308.023119][ T28] #2: ffffffff8cb56830 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2c/0xe0 [ 308.036273][ T28] [ 308.061206][ T28] ============================================= [ 308.061206][ T28] [ 308.080857][ T28] NMI backtrace for cpu 0 [ 308.085238][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 308.092437][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.102582][ T28] Call Trace: [ 308.105864][ T28] [ 308.108816][ T28] dump_stack_lvl+0x188/0x24e [ 308.113524][ T28] ? irq_work_queue+0xb8/0x140 [ 308.118303][ T28] ? show_regs_print_info+0x12/0x12 [ 308.123526][ T28] ? load_image+0x410/0x410 [ 308.128047][ T28] ? vprintk_emit+0x59f/0x6a0 [ 308.132733][ T28] ? printk_sprint+0x460/0x460 [ 308.137511][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 308.142460][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 308.148621][ T28] ? _printk+0xda/0x130 [ 308.152797][ T28] ? load_image+0x410/0x410 [ 308.157324][ T28] ? load_image+0x410/0x410 [ 308.161844][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 308.167935][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 308.174013][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 308.180009][ T28] watchdog+0xf0e/0xf50 [ 308.184188][ T28] ? watchdog+0x1ed/0xf50 [ 308.188543][ T28] kthread+0x29d/0x330 [ 308.192620][ T28] ? hungtask_pm_notify+0x40/0x40 [ 308.197646][ T28] ? kthread_blkcg+0xd0/0xd0 [ 308.202243][ T28] ret_from_fork+0x1f/0x30 [ 308.206677][ T28] [ 308.209774][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.230006][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 308.236873][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 308.244066][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 308.254119][ T28] Call Trace: [ 308.257400][ T28] [ 308.260331][ T28] dump_stack_lvl+0x188/0x24e [ 308.265026][ T28] ? memcpy+0x3c/0x60 [ 308.269014][ T28] ? show_regs_print_info+0x12/0x12 [ 308.274238][ T28] ? load_image+0x410/0x410 [ 308.278751][ T28] panic+0x2d3/0x710 [ 308.282694][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 308.288333][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 308.292838][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 308.298415][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 308.304575][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 308.310829][ T28] watchdog+0xf4d/0xf50 [ 308.314999][ T28] ? watchdog+0x1ed/0xf50 [ 308.319346][ T28] kthread+0x29d/0x330 [ 308.323440][ T28] ? hungtask_pm_notify+0x40/0x40 [ 308.328490][ T28] ? kthread_blkcg+0xd0/0xd0 [ 308.333103][ T28] ret_from_fork+0x1f/0x30 [ 308.337540][ T28] [ 308.340644][ T28] Kernel Offset: disabled [ 308.344974][ T28] Rebooting in 86400 seconds..