last executing test programs: 24m13.717965412s ago: executing program 32 (id=1626): syz_usb_connect$midi(0x5, 0x32, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x8, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x3, [], [{{0x9, 0x5, 0x6, 0x3, 0x200, 0x5, 0xc, 0x3, {0x5, 0x25, 0x1, 0x1, "82"}}}]}}}}}]}}, 0x0) 24m13.355818379s ago: executing program 33 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000060000000f00000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 23m1.91134425s ago: executing program 34 (id=1962): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000340)={[], [{@fowner_gt={'fowner>', r0}}, {@uid_eq={'uid', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r0}}]}, 0x1, 0x240, &(0x7f0000000500)="$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") r1 = socket$inet6(0xa, 0x2, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x20000000, @loopback}, 0x1c) listen(r5, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) accept4(r5, 0x0, 0x0, 0x80000) 22m25.825434995s ago: executing program 35 (id=2071): ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30008c6, &(0x7f0000000080), 0x1, 0x585, &(0x7f00000001c0)="$eJzs3U1rXFUfAPD/nSRt0/Z5kkIpKiIBF1ZqJ03iSwUXda3Fgu7rkExDyaRTMpPSxILtwq6luBEL4l5cuyx+ARd+hoIWqpSgC0FG7uTeydtMkrbTZOr8fnDD+d97Z849c+45OWfODBNA3xpL/xQiXoyIL5OIkYhIsmODkR0cWz1v5dGN6XRLotH4+I+keV4a58+VP+5IFrwQET99EXGqsDXf2tLyXKlSKS9k8Xh9/up4bWn59OX50mx5tnxlcmrq7FtTk+++83bXyvr6hb++/ujeQBYdu5PEuTiaRevL8RRurg/GYix7TYbi3KYTJ7qQWS9J2u79Yc+vg8czkLXzoUj7gJEYyFo98N/3eUQ0gD6VPHb7/2Xo2VwJsLfycUA+t+/SPPi58fD91QnQ1vIPrr43Eoeac6PDK8mGmVE63x3tQv5pHj/+dvdOusWG9yFGuvDsAJ3dvBURZwYHt/Z/Sdb/pX5/os7ozC7OGdsU99v/H9hP99Lxzxvtxj+F1vgn2ox/jrRpu09i5/ZfeNCFbDpKx3/vtR3/thatRgey6H/NMd9QculypZz2bf+PiJMxdDCNt1vPObtyv9FmdyNficrHf+mW5p+PBbPreDB4cOMDZ0r10lMVep2HtyJeajv+TVr1n7Sp//T1uLDLPE6U777S6djYjuV/thrfRbzWtv7XVrSS7dcnx5v3w3h+V2z15+0TP3fKf7/Ln9b/4e3LP5qsX6+tPX4e3x76uxyt9eSNNpQ/dn//H0g+aaYPZPuul+r1hYmIA8mHrf2FfP/k2mPzOD8/Lf/JV7fv/9rd/8MR8ekuy3/7+PcvdzrWC/U/07b+W7PbTfX/T/bOwdqenRL3P/jsm07571z+tP7fbKZOZnt20//t5rqe7G4GAAAAAACA3lWIiKORFIqtdKFQLK5+vuN4HC5UqrX6qUvVxSsz0fyu7GgMFfKV7pF1n4eYyFYM83hyUzwVEcci4quB4WZcnK5WZva78AAAAAAAAAAAAAAAAAAAANAjjnT4/n/q14H9vjrgmfOT39C/dmz/3filJ6An+f8P/Uv7h/6l/UP/0v6hf2n/0L+0f+hf2j/0L+0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAuurC+fPp1lh5dGM6jWeuLS3OVa+dninX5orzi9PF6erC1eGoVmcr5eJ0dX6n56tUq1cnJmPx+ni9XKuP15aWL85XF6/UL16eL82WL5aH9qRUAAAAAAAAAAAAAAAAAAAA8HypLS3PlSqV8oLEhsShPc90eLu6ONgjL0ubxGBvXIZElxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJp/AwAA///LMDdA") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x2000000, &(0x7f0000000780)={[], [{@dont_hash}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, '\xc0\x0e\x9c<\x16\xe8\xdb\b'}}]}, 0x1, 0x782, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619, r1}, 0xffffff6c) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) 19m15.293571214s ago: executing program 36 (id=2992): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x80) 19m2.607455079s ago: executing program 37 (id=3039): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) read$fb(r0, &(0x7f0000001f40)=""/4096, 0x1000) 18m48.633382175s ago: executing program 38 (id=3078): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@memory_low}, {@background_gc_off}, {@noquota}, {@inline_dentry}, {@data_flush}, {@discard_unit_segment}, {@noinline_xattr}, {@discard}, {@checkpoint_diasble}, {@user_xattr}, {@resgid}, {@resuid}, {@jqfmt_vfsv1}, {@usrjquota={'usrjquota', 0x3d, '-)$-.%\'*,'}}]}, 0xff, 0x5512, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x40) open_by_handle_at(r0, &(0x7f0000000080)=@ceph_nfs_fh={0x8, 0x1, {0x4}}, 0x200001) 18m3.058191624s ago: executing program 39 (id=3217): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x5, 0x6, "dfe7ea344090"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m49.972540254s ago: executing program 40 (id=3850): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) pivot_root(0x0, 0x0) 10m51.252427823s ago: executing program 41 (id=4710): openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x21a, &(0x7f0000000240)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 9m36.980391146s ago: executing program 42 (id=4877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 9m36.807712452s ago: executing program 43 (id=4879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8016}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m5.176544212s ago: executing program 44 (id=5006): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000840)={'binder1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x19f, &(0x7f0000000200)={[{@sysvgroups}, {@noblock_validity}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@minixdf}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@auto_da_alloc}]}, 0x80, 0x57e, &(0x7f00000002c0)="$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") 8m28.553025646s ago: executing program 1 (id=5126): syz_pidfd_open(0x0, 0x0) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(r3, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000f80), 0x80, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m27.206912263s ago: executing program 3 (id=5130): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) inotify_init1(0x80800) socketpair(0x4, 0x80807, 0x11, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="cc000f07ea01000076030000faffffff2b00000001000000000000000000000000000000000000000000000072000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ba985fc223034700"/1822], 0x720) 8m27.093286965s ago: executing program 1 (id=5131): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000084, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x5, 0x3}, {}, {0xb}}}, 0x24}}, 0x40004) 8m24.848840805s ago: executing program 3 (id=5132): symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 8m24.471493216s ago: executing program 3 (id=5133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x9b, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8m20.932152904s ago: executing program 1 (id=5138): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffffd) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) 8m16.776295181s ago: executing program 1 (id=5151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced7975dc3f0adf33c9f7cc86", 0x0, 0x40008004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m16.579882251s ago: executing program 3 (id=5152): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20000005, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="40c33b69ebc9e05e9bde800088a8", 0xe, 0x171346df250871c7, 0x0, 0x0) 8m15.663616719s ago: executing program 1 (id=5153): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {}]}) 8m15.409332891s ago: executing program 1 (id=5154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 8m15.087352357s ago: executing program 3 (id=5155): mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) 8m14.611699481s ago: executing program 3 (id=5158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 7m58.87693788s ago: executing program 45 (id=5158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 7m58.391775487s ago: executing program 46 (id=5154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 7m2.255591324s ago: executing program 6 (id=5299): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000050000", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x1) truncate(&(0x7f0000000140)='./file2\x00', 0xff) 7m0.360464849s ago: executing program 6 (id=5306): openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6m56.591157586s ago: executing program 6 (id=5314): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000200)={0xf1, 0x32f, 0x0, 0x0, 0x9}) 6m53.106616509s ago: executing program 6 (id=5318): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100000000000000000000000000000000009137b5275f7613a882bdb5fbc9c2520ac560a4efe9afb18433ead9ab2203c4706b672cbad619d15d941cb6627f5249848f833af2c0d268a3f1f4a3c6e2cbb8635263844174e8892648045c20b43a8368893c12826108d70d74a7f5b9a8a598b4f6c6c34f56c1fc4650d35033c4", @ANYRES32, @ANYBLOB='\x00'/25], 0x50) close(0x3) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@noauto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x5, 0x8, 0x2, 0xdc38}, 0x2, 0x1, 0x3, 0x80000000, 0x6, 0x8, 0x18, 0x8, 0x7, 0x9, {0x1, 0x4, 0x4, 0x6, 0x9, 0x9f4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_io_uring_setup(0x3364, &(0x7f00000016c0)={0x0, 0x0, 0x800, 0x7, 0x8000000}, &(0x7f0000000040)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 6m50.10130626s ago: executing program 6 (id=5324): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r2, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) 6m48.64446001s ago: executing program 6 (id=5327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m47.912530969s ago: executing program 47 (id=5327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.291745637s ago: executing program 7 (id=6233): add_key$user(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) 1m31.566965974s ago: executing program 7 (id=6238): r0 = syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7f, 0x4, 0x6, {0x7, 0x25, 0x1, 0x8, 0xcd, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc, 0x8, 0x0, {0x7, 0x25, 0x1, 0xc, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) 1m27.348179913s ago: executing program 7 (id=6242): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000141e01, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m26.100451215s ago: executing program 7 (id=6245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f0000"], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x12c00, 0x0, 0x7, 0x0, &(0x7f0000000080)=0x6}, {[0x7fffffff, 0x6, 0x1, 0x7fff]}, 0x5, 0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}}, 0x20000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/20, &(0x7f0000000600), &(0x7f0000000540), 0x3, r0}, 0x38) 1m25.796051473s ago: executing program 7 (id=6246): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x40006}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/54, 0x36}], 0x1, &(0x7f0000000400)=""/4, 0x4}, 0x2}, {{&(0x7f0000000440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f00000027c0)=""/4096, 0x1000}, 0xffffffff}], 0x3, 0x140, 0x0) 1m25.405389662s ago: executing program 7 (id=6251): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 1m7.680706494s ago: executing program 48 (id=6251): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 59.93574738s ago: executing program 4 (id=6334): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000001c0)="94", 0xffffff60}, {0x0}], 0x29) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 58.550689964s ago: executing program 4 (id=6335): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x48044) add_key(&(0x7f0000000500)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000006000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) set_mempolicy(0x3, &(0x7f0000000100)=0xfffffffffffffff7, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 57.484589391s ago: executing program 4 (id=6340): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x8a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x1, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) 56.059403565s ago: executing program 4 (id=6343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) ptrace$poke(0x5, r0, 0x0, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 46.29180486s ago: executing program 4 (id=6367): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 44.538727265s ago: executing program 4 (id=6372): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x4010, 0xffffffffffffffff, 0xafe7000) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110420000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ptrace(0x10, 0x0) close_range(r6, r6, 0x2) 27.984622469s ago: executing program 49 (id=6372): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x4010, 0xffffffffffffffff, 0xafe7000) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110420000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ptrace(0x10, 0x0) close_range(r6, r6, 0x2) 8.376489436s ago: executing program 2 (id=6477): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000280)=ANY=[@ANYBLOB='utf8=0,uni_xlate=0,shortname=winnt,rodir,codepage=862,shortname=lower,quiet,shortname=winnt,shortname=win95,iocharset=cp932,rodir,\x00ni_xlate=1,nonumtail=0,shortname=winnt,nonumtail=0,\x00'], 0x25, 0x365, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x82) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) creat(0x0, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 7.073013537s ago: executing program 2 (id=6481): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000081) 6.808572206s ago: executing program 8 (id=6482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x2, 0x800004000000000}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 6.224254807s ago: executing program 8 (id=6483): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r3, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000300)) 6.109311538s ago: executing program 8 (id=6485): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x8) 6.056148261s ago: executing program 5 (id=6486): r0 = socket$inet(0x2, 0xa, 0x10009) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) setsockopt$sock_timeval(r0, 0x1, 0x57, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002240), 0x0, 0x4004085, 0x0, 0x0) 5.770088349s ago: executing program 9 (id=6487): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x6, 0x0, 0x3, 0x7, 0xa, 0x1, 0x8001, 0xd, 0xff6b, 0x801, 0xfffffffe, 0xb4c, 0xffffffff, 0x0, 0x3, 0x40000001, 0x89, 0xcaa7, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x7, 0x6, 0x65c, 0x0, 0xffff]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xa443f000) 5.003882231s ago: executing program 2 (id=6489): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.715350334s ago: executing program 9 (id=6491): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x92, 0x0, 0x1, 0x10}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.65937849s ago: executing program 2 (id=6492): pipe(0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 4.616034922s ago: executing program 8 (id=6493): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) ptrace$poke(0x5, r0, 0x0, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 3.734351612s ago: executing program 9 (id=6494): bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x0, 0x1, 0xa7a8) gettid() futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 3.616195019s ago: executing program 2 (id=6495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0xb, 0x1}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x2, 0x800004000000000}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3.615886899s ago: executing program 0 (id=6496): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r3, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000300)) 3.514837977s ago: executing program 5 (id=6497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090000000000"], 0x184}}, 0x0) 3.32207096s ago: executing program 0 (id=6498): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000880)=ANY=[@ANYBLOB='S\'&'], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 3.31202409s ago: executing program 2 (id=6499): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x940, 0x0) userfaultfd(0x801) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x200000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c10}, 0x4000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.253510259s ago: executing program 5 (id=6500): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 3.080048961s ago: executing program 5 (id=6501): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 3.079200158s ago: executing program 0 (id=6502): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x1, r0, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r3, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) flock(0xffffffffffffffff, 0x2) 2.77629199s ago: executing program 5 (id=6503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x3) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d00000000000000009cf153dc0bf708", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, &(0x7f0000000200)=""/189, 0xbd) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}, {&(0x7f0000000540)=""/138, 0x8a}], 0x2, 0x4000, 0x0) 2.0601058s ago: executing program 9 (id=6504): syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.994706463s ago: executing program 0 (id=6505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x17) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000040)={0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 933.123753ms ago: executing program 5 (id=6506): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@oldalloc}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") creat(0x0, 0xecf86c37d53049cc) inotify_init1(0x80800) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socketpair(0x4, 0x80807, 0x11, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write$binfmt_aout(r1, &(0x7f0000000d00)=ANY=[@ANYBLOB="cc000f07ea01000076030000faffffff2b0000000100000000000000000000000000000000000000000000007200"/904], 0x720) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 784.308329ms ago: executing program 9 (id=6507): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x27) 641.920652ms ago: executing program 0 (id=6508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x40006}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/54, 0x36}], 0x1, &(0x7f0000000400)=""/4, 0x4}, 0x2}, {{&(0x7f0000000440)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f00000027c0)=""/4096, 0x1000}, 0xffffffff}], 0x3, 0x140, 0x0) 440.850249ms ago: executing program 9 (id=6509): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x20000008}) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) getpid() r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x1, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xb, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) 359.472783ms ago: executing program 0 (id=6510): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r4}, 0x50) 132.617323ms ago: executing program 8 (id=6511): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r3, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) write$snddsp(r2, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0984124, &(0x7f0000000300)) 0s ago: executing program 8 (id=6512): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x1000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000278, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x6, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.533161][ T7231] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.570830][ T7231] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.376325][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.422954][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.504133][T24830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.533064][T24830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.802527][T26077] loop7: detected capacity change from 0 to 256 [ 1337.999874][T26077] FAT-fs (loop7): Directory bread(block 64) failed [ 1338.027533][T26077] FAT-fs (loop7): Directory bread(block 65) failed [ 1338.034298][T26077] FAT-fs (loop7): Directory bread(block 66) failed [ 1338.061523][T26077] FAT-fs (loop7): Directory bread(block 67) failed [ 1338.091691][T26077] FAT-fs (loop7): Directory bread(block 68) failed [ 1338.098252][T26077] FAT-fs (loop7): Directory bread(block 69) failed [ 1338.134753][T26077] FAT-fs (loop7): Directory bread(block 70) failed [ 1338.141518][T26077] FAT-fs (loop7): Directory bread(block 71) failed [ 1338.167044][T26077] FAT-fs (loop7): Directory bread(block 72) failed [ 1338.210083][T26077] FAT-fs (loop7): Directory bread(block 73) failed [ 1339.741895][T26097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1339.802167][T19126] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1340.250966][T19126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.288089][T19126] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1340.321184][T19126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.371099][T19126] usb 5-1: config 0 descriptor?? [ 1340.833122][T19126] usbhid 5-1:0.0: can't add hid device: -71 [ 1340.930644][T19126] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1341.129742][T19126] usb 5-1: USB disconnect, device number 31 [ 1341.265475][ T9] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1341.330677][ T5909] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1341.438629][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1341.451617][ T9] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 1341.469833][ T9] usb 9-1: config 0 has no interface number 0 [ 1341.489728][ T9] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1341.500639][ T5909] usb 8-1: Using ep0 maxpacket: 32 [ 1341.514101][ T5909] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.545905][ T9] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1341.571804][ T5909] usb 8-1: config 1 interface 1 altsetting 1 has an invalid endpoint descriptor of length 4, skipping [ 1341.591999][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.614207][T19126] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1341.621922][ T9] usb 9-1: Product: syz [ 1341.628232][ T5909] usb 8-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1341.653928][ T9] usb 9-1: Manufacturer: syz [ 1341.658549][ T9] usb 9-1: SerialNumber: syz [ 1341.829117][T26148] blkio.reset_stats is deprecated [ 1341.847139][ T5909] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.884056][ T5909] usb 8-1: Product: syz [ 1341.894735][ T9] usb 9-1: config 0 descriptor?? [ 1341.907194][ T5909] usb 8-1: Manufacturer: syz [ 1341.920505][T19126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.939954][T26127] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1341.960782][ T5909] usb 8-1: SerialNumber: syz [ 1341.960876][T19126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1342.029050][T19126] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1342.065089][T19126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.111968][T19126] usb 5-1: config 0 descriptor?? [ 1342.252122][T26127] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1342.326862][T26131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.382009][T26131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.459775][T26131] netlink: zone id is out of range [ 1342.483802][T26131] netlink: set zone limit has 4 unknown bytes [ 1343.008568][T19126] usbhid 5-1:0.0: can't add hid device: -71 [ 1343.031522][T19126] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1343.082984][T19126] usb 5-1: USB disconnect, device number 32 [ 1343.182381][ T9] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1343.229574][ T9] asix 9-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1343.287311][ T9] asix 9-1:0.188: probe with driver asix failed with error -61 [ 1343.880784][ T5909] snd-ua101 8-1:1.1: invalid bNumEndpoints [ 1343.915436][ T5909] snd-ua101 8-1:1.0: invalid num_altsetting [ 1344.023839][ T5909] usb 8-1: USB disconnect, device number 20 [ 1344.719923][T19126] usb 9-1: USB disconnect, device number 74 [ 1347.493842][T26213] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1349.107914][T26237] loop8: detected capacity change from 0 to 256 [ 1349.894612][T26237] FAT-fs (loop8): Directory bread(block 64) failed [ 1349.941762][T26237] FAT-fs (loop8): Directory bread(block 65) failed [ 1349.949100][T26237] FAT-fs (loop8): Directory bread(block 66) failed [ 1349.955713][T26237] FAT-fs (loop8): Directory bread(block 67) failed [ 1349.984432][T26237] FAT-fs (loop8): Directory bread(block 68) failed [ 1350.016688][T26237] FAT-fs (loop8): Directory bread(block 69) failed [ 1350.059997][T26237] FAT-fs (loop8): Directory bread(block 70) failed [ 1350.114044][T26237] FAT-fs (loop8): Directory bread(block 71) failed [ 1350.158826][T26237] FAT-fs (loop8): Directory bread(block 72) failed [ 1350.219797][T26237] FAT-fs (loop8): Directory bread(block 73) failed [ 1350.292771][T26254] loop5: detected capacity change from 0 to 1024 [ 1350.317646][T26254] EXT4-fs: Ignoring removed bh option [ 1350.332287][T26254] EXT4-fs: Ignoring removed oldalloc option [ 1350.567358][T26254] EXT4-fs: Ignoring removed nobh option [ 1350.626486][T26254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1350.756015][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1350.756039][ T30] audit: type=1804 audit(1772556576.206:211): pid=26254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5490" name="/newroot/26/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 1351.265700][T26279] No such timeout policy "syz1" [ 1352.225690][T26292] xt_l2tp: unknown flags: 10 [ 1352.246183][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.599996][T26295] binder: 26290:26295 ioctl c0306201 200000000540 returned -14 [ 1352.616537][ T30] audit: type=1326 audit(1772556577.899:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1353.242055][ T30] audit: type=1326 audit(1772556577.899:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1353.398444][ T30] audit: type=1326 audit(1772556577.918:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1353.586771][ T30] audit: type=1326 audit(1772556577.918:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1353.714842][ T30] audit: type=1326 audit(1772556577.918:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1354.035329][ T30] audit: type=1326 audit(1772556577.918:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1354.128363][T26297] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1354.283100][ T30] audit: type=1326 audit(1772556577.927:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1354.513686][ T30] audit: type=1326 audit(1772556577.927:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1354.597831][ T30] audit: type=1326 audit(1772556577.927:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26290 comm="syz.7.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1356.268387][T26335] ubi: mtd0 is already attached to ubi31 [ 1357.699173][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1358.709174][T26351] xt_l2tp: unknown flags: 10 [ 1359.090906][T26356] binder: 26349:26356 ioctl c0306201 200000000540 returned -14 [ 1359.108929][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1359.108972][ T30] audit: type=1326 audit(1772556583.970:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1359.449739][ T30] audit: type=1326 audit(1772556583.970:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1359.772441][ T30] audit: type=1326 audit(1772556583.979:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1359.803840][ T30] audit: type=1326 audit(1772556583.979:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1359.855473][ T30] audit: type=1326 audit(1772556583.979:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1360.066363][ T30] audit: type=1326 audit(1772556583.979:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1360.348404][ T30] audit: type=1326 audit(1772556583.998:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1361.380321][ T30] audit: type=1326 audit(1772556583.998:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1361.458229][ T30] audit: type=1326 audit(1772556583.998:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1361.537744][ T30] audit: type=1326 audit(1772556583.998:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26349 comm="syz.7.5511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9688d9c799 code=0x7ffc0000 [ 1362.038171][T26380] loop8: detected capacity change from 0 to 16 [ 1362.086311][T26380] erofs (device loop8): mounted with root inode @ nid 36. [ 1362.133907][T26380] syz.8.5517: attempt to access beyond end of device [ 1362.133907][T26380] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1362.208663][T26380] syz.8.5517: attempt to access beyond end of device [ 1362.208663][T26380] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1362.273292][T26380] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1362.318040][T26371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1362.428285][T26380] erofs (device loop8): read error -117 @ 1 of nid 89 [ 1362.512099][T26389] loop7: detected capacity change from 0 to 256 [ 1363.187202][T26402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1363.530259][T26389] FAT-fs (loop7): Directory bread(block 64) failed [ 1363.539000][T26389] FAT-fs (loop7): Directory bread(block 65) failed [ 1363.645099][T26400] hub 8-0:1.0: USB hub found [ 1363.707233][T26400] hub 8-0:1.0: 1 port detected [ 1363.707548][T26389] FAT-fs (loop7): Directory bread(block 66) failed [ 1363.766170][T26408] loop5: detected capacity change from 0 to 512 [ 1363.774845][T26389] FAT-fs (loop7): Directory bread(block 67) failed [ 1363.802064][T26408] EXT4-fs: quotafile must be on filesystem root [ 1363.818159][T26389] FAT-fs (loop7): Directory bread(block 68) failed [ 1363.826762][T26389] FAT-fs (loop7): Directory bread(block 69) failed [ 1363.834590][T26389] FAT-fs (loop7): Directory bread(block 70) failed [ 1363.841374][T26389] FAT-fs (loop7): Directory bread(block 71) failed [ 1363.850848][T26389] FAT-fs (loop7): Directory bread(block 72) failed [ 1363.875614][T26389] FAT-fs (loop7): Directory bread(block 73) failed [ 1364.352336][T26418] No such timeout policy "syz1" [ 1365.472781][T26426] xt_l2tp: unknown flags: 10 [ 1365.798553][T26430] binder: 26425:26430 ioctl c0306201 200000000540 returned -14 [ 1365.943223][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1365.943276][ T30] audit: type=1326 audit(1772556846.256:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.461670][ T30] audit: type=1326 audit(1772556846.256:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.484196][ T30] audit: type=1326 audit(1772556846.256:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.506656][ T30] audit: type=1326 audit(1772556846.265:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.529093][ T30] audit: type=1326 audit(1772556846.265:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.552734][ T30] audit: type=1326 audit(1772556846.265:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.575407][ T30] audit: type=1326 audit(1772556846.265:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.637263][ T30] audit: type=1326 audit(1772556846.265:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.899306][ T30] audit: type=1326 audit(1772556846.275:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1366.927609][ T30] audit: type=1326 audit(1772556846.275:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26425 comm="syz.9.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1369.302339][T26477] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1369.671940][T26458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1370.459308][T26491] No such timeout policy "syz1" [ 1372.110167][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.116828][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.872981][T26516] syzkaller0: entered promiscuous mode [ 1372.878499][T26516] syzkaller0: entered allmulticast mode [ 1373.133002][T26527] loop4: detected capacity change from 0 to 256 [ 1373.190867][T26527] FAT-fs (loop4): Directory bread(block 64) failed [ 1373.197432][T26527] FAT-fs (loop4): Directory bread(block 65) failed [ 1373.231923][T26527] FAT-fs (loop4): Directory bread(block 66) failed [ 1373.246883][T26527] FAT-fs (loop4): Directory bread(block 67) failed [ 1373.264636][T26527] FAT-fs (loop4): Directory bread(block 68) failed [ 1373.277410][T26527] FAT-fs (loop4): Directory bread(block 69) failed [ 1373.292768][T26527] FAT-fs (loop4): Directory bread(block 70) failed [ 1373.306693][T26527] FAT-fs (loop4): Directory bread(block 71) failed [ 1373.340437][T26527] FAT-fs (loop4): Directory bread(block 72) failed [ 1373.419148][T26527] FAT-fs (loop4): Directory bread(block 73) failed [ 1375.894901][T26562] No such timeout policy "syz1" [ 1377.025962][T26563] ubi: mtd0 is already attached to ubi31 [ 1379.129171][T26588] loop9: detected capacity change from 0 to 1024 [ 1379.360344][T26588] EXT4-fs: Ignoring removed bh option [ 1379.363055][T26596] loop8: detected capacity change from 0 to 256 [ 1379.365773][T26588] EXT4-fs: Ignoring removed oldalloc option [ 1379.391170][T26588] EXT4-fs: Ignoring removed nobh option [ 1380.550880][T26588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1380.670498][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1380.670518][ T30] audit: type=1804 audit(1772557372.178:255): pid=26588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5562" name="/newroot/22/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 1380.807635][T26596] FAT-fs (loop8): Directory bread(block 64) failed [ 1380.836109][T26596] FAT-fs (loop8): Directory bread(block 65) failed [ 1380.874994][T26596] FAT-fs (loop8): Directory bread(block 66) failed [ 1380.900117][T26596] FAT-fs (loop8): Directory bread(block 67) failed [ 1380.918333][T26596] FAT-fs (loop8): Directory bread(block 68) failed [ 1380.933537][T26596] FAT-fs (loop8): Directory bread(block 69) failed [ 1380.950186][T26596] FAT-fs (loop8): Directory bread(block 70) failed [ 1380.964700][T26596] FAT-fs (loop8): Directory bread(block 71) failed [ 1381.014337][T26596] FAT-fs (loop8): Directory bread(block 72) failed [ 1381.064160][T26596] FAT-fs (loop8): Directory bread(block 73) failed [ 1381.103250][T26614] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #18: comm syz.9.5562: ES cache extent failed: add [82,1,211,0x2] conflict with existing [24,-25,576460752303423487,0x18] [ 1381.103250][T26614] [ 1381.191572][T26588] EXT4-fs (loop9): pa ffff888076db3658: logic 80, phys. 209, len 3 [ 1381.199702][T26588] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5465: group 0, free 2, pa_free 1 [ 1381.395242][T26603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1382.180091][T26623] syzkaller0: entered promiscuous mode [ 1382.185604][T26623] syzkaller0: entered allmulticast mode [ 1382.315496][T25403] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.293636][T26634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5573'. [ 1383.667464][T26639] No such timeout policy "syz1" [ 1386.653786][T26662] loop8: detected capacity change from 0 to 16 [ 1386.753509][T26662] erofs (device loop8): mounted with root inode @ nid 36. [ 1386.820371][T26662] syz.8.5575: attempt to access beyond end of device [ 1386.820371][T26662] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1387.249790][T26662] syz.8.5575: attempt to access beyond end of device [ 1387.249790][T26662] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1387.334951][T26662] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1387.399426][T26662] erofs (device loop8): read error -117 @ 1 of nid 89 [ 1387.445848][ T30] audit: type=1800 audit(1772557378.520:256): pid=26662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5575" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1387.494152][T26678] loop5: detected capacity change from 0 to 512 [ 1387.513152][T26678] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1387.535635][T26678] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1387.621160][T26678] EXT4-fs (loop5): 1 truncate cleaned up [ 1387.661688][T26678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.799638][T26684] loop9: detected capacity change from 0 to 1024 [ 1387.836529][T26684] EXT4-fs: Ignoring removed bh option [ 1387.841942][T26684] EXT4-fs: Ignoring removed oldalloc option [ 1387.878162][T26684] EXT4-fs: Ignoring removed nobh option [ 1388.492778][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.494773][T26684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1388.647741][ T30] audit: type=1804 audit(1772557379.642:257): pid=26697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5583" name="/newroot/28/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 1388.820542][T26684] EXT4-fs (loop9): pa ffff888036520e80: logic 64, phys. 193, len 4 [ 1388.828517][T26684] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5465: group 0, free 2, pa_free 3 [ 1388.846700][T24830] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 18: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 1389.489690][T26706] loop7: detected capacity change from 0 to 256 [ 1389.703142][T26706] FAT-fs (loop7): Directory bread(block 64) failed [ 1389.734373][T26706] FAT-fs (loop7): Directory bread(block 65) failed [ 1389.754190][T26706] FAT-fs (loop7): Directory bread(block 66) failed [ 1389.808339][T25403] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1389.824661][T26706] FAT-fs (loop7): Directory bread(block 67) failed [ 1389.855716][T26706] FAT-fs (loop7): Directory bread(block 68) failed [ 1389.881049][T26706] FAT-fs (loop7): Directory bread(block 69) failed [ 1389.992539][T26706] FAT-fs (loop7): Directory bread(block 70) failed [ 1390.023575][T26706] FAT-fs (loop7): Directory bread(block 71) failed [ 1390.062490][T26706] FAT-fs (loop7): Directory bread(block 72) failed [ 1390.107358][T26706] FAT-fs (loop7): Directory bread(block 73) failed [ 1394.126215][T26747] syzkaller0: entered promiscuous mode [ 1394.189190][T26747] syzkaller0: entered allmulticast mode [ 1394.426850][T26759] loop5: detected capacity change from 0 to 512 [ 1394.477012][T26759] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1394.506332][T26759] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1394.527370][ T5909] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1394.605001][T26759] EXT4-fs (loop5): 1 truncate cleaned up [ 1394.674804][T26759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.738456][ T5909] usb 9-1: Using ep0 maxpacket: 16 [ 1394.752177][ T5909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.776217][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1394.811402][ T5909] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1394.837062][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.890193][ T5909] usb 9-1: config 0 descriptor?? [ 1394.931305][ T5909] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1394.992873][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1396.130231][T26783] loop8: detected capacity change from 0 to 256 [ 1396.280439][T26784] Bluetooth: MGMT ver 1.23 [ 1396.630494][T26786] loop9: detected capacity change from 0 to 256 [ 1397.109125][T26786] FAT-fs (loop9): Directory bread(block 64) failed [ 1397.146485][T26786] FAT-fs (loop9): Directory bread(block 65) failed [ 1397.153166][T26786] FAT-fs (loop9): Directory bread(block 66) failed [ 1397.215049][T26786] FAT-fs (loop9): Directory bread(block 67) failed [ 1397.245435][T26786] FAT-fs (loop9): Directory bread(block 68) failed [ 1397.292924][T26786] FAT-fs (loop9): Directory bread(block 69) failed [ 1397.313611][T26786] FAT-fs (loop9): Directory bread(block 70) failed [ 1397.343892][T26786] FAT-fs (loop9): Directory bread(block 71) failed [ 1397.364964][T26786] FAT-fs (loop9): Directory bread(block 72) failed [ 1397.403529][T26786] FAT-fs (loop9): Directory bread(block 73) failed [ 1398.251682][T19126] usb 9-1: USB disconnect, device number 75 [ 1399.511647][T26821] loop8: detected capacity change from 0 to 256 [ 1399.817638][T26817] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1399.828062][T26817] FAT-fs (loop8): Filesystem has been set read-only [ 1399.835146][T26817] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1399.845373][T26817] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1399.855945][T26817] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 1399.874680][T26817] bridge1: entered allmulticast mode [ 1399.885036][ T30] audit: type=1800 audit(1772557390.137:258): pid=26817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5613" name="file1" dev="loop8" ino=1048888 res=0 errno=0 [ 1401.254658][ T5909] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1401.497772][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 1401.548194][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.607613][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1401.723779][ T5909] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1401.758779][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.836385][ T5909] usb 6-1: config 0 descriptor?? [ 1401.909910][ T5909] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1402.457772][T26864] loop5: detected capacity change from 0 to 256 [ 1403.721820][T26869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1404.265113][T26882] loop9: detected capacity change from 0 to 256 [ 1404.339464][T26882] FAT-fs (loop9): Directory bread(block 64) failed [ 1404.351065][T26882] FAT-fs (loop9): Directory bread(block 65) failed [ 1404.387161][T26882] FAT-fs (loop9): Directory bread(block 66) failed [ 1404.407234][T26882] FAT-fs (loop9): Directory bread(block 67) failed [ 1404.434256][T26882] FAT-fs (loop9): Directory bread(block 68) failed [ 1404.466424][T26882] FAT-fs (loop9): Directory bread(block 69) failed [ 1404.486664][T26882] FAT-fs (loop9): Directory bread(block 70) failed [ 1404.502759][T26882] FAT-fs (loop9): Directory bread(block 71) failed [ 1404.517967][T23697] usb 6-1: USB disconnect, device number 36 [ 1404.531292][T26882] FAT-fs (loop9): Directory bread(block 72) failed [ 1404.565708][T26882] FAT-fs (loop9): Directory bread(block 73) failed [ 1405.566468][T26869] 8021q: adding VLAN 0 to HW filter on device team1 [ 1406.679957][T26907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1410.492992][T26951] loop4: detected capacity change from 0 to 256 [ 1410.591480][T26951] FAT-fs (loop4): Directory bread(block 64) failed [ 1410.640817][T26951] FAT-fs (loop4): Directory bread(block 65) failed [ 1410.780889][T26955] loop9: detected capacity change from 0 to 256 [ 1410.923163][T26955] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1410.933385][T26955] FAT-fs (loop9): Filesystem has been set read-only [ 1410.940833][T26955] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1410.951392][T26955] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1410.967399][T26955] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 1411.119986][T26955] bridge1: entered allmulticast mode [ 1411.183572][ T30] audit: type=1800 audit(1772557400.530:259): pid=26955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5641" name="file1" dev="loop9" ino=1048890 res=0 errno=0 [ 1411.229912][T26951] FAT-fs (loop4): Directory bread(block 66) failed [ 1411.236563][T26951] FAT-fs (loop4): Directory bread(block 67) failed [ 1411.243256][T26951] FAT-fs (loop4): Directory bread(block 68) failed [ 1411.249952][T26951] FAT-fs (loop4): Directory bread(block 69) failed [ 1411.256591][T26951] FAT-fs (loop4): Directory bread(block 70) failed [ 1411.283617][T26951] FAT-fs (loop4): Directory bread(block 71) failed [ 1411.303646][T26951] FAT-fs (loop4): Directory bread(block 72) failed [ 1411.318163][T26951] FAT-fs (loop4): Directory bread(block 73) failed [ 1412.378232][T26964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1415.583855][ T5909] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1415.788018][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.833439][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1415.865844][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1415.880790][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1415.903220][ T5909] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1415.913173][ T5909] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1415.926176][ T5909] usb 6-1: Manufacturer: syz [ 1415.963914][ T5909] usb 6-1: config 0 descriptor?? [ 1416.444471][T27033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1417.736520][ T5909] rc_core: IR keymap rc-hauppauge not found [ 1417.764756][ T5909] Registered IR keymap rc-empty [ 1417.791622][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1417.846272][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1418.245213][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1418.918395][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input33 [ 1418.980124][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.020515][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.074065][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.182136][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.220040][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.288098][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.335200][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.405389][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.465609][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.534286][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.627898][ T5909] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1419.693772][ T5909] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1419.730503][ T5909] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1419.772365][T27071] loop9: detected capacity change from 0 to 256 [ 1419.793254][ T5909] usb 6-1: USB disconnect, device number 37 [ 1419.895240][T27078] hub 8-0:1.0: USB hub found [ 1419.900337][T27078] hub 8-0:1.0: 1 port detected [ 1419.914892][T27078] loop7: detected capacity change from 0 to 512 [ 1419.922105][T27078] EXT4-fs: quotafile must be on filesystem root [ 1420.356965][T27083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1420.958725][T27071] FAT-fs (loop9): Directory bread(block 64) failed [ 1421.007825][T27071] FAT-fs (loop9): Directory bread(block 65) failed [ 1421.052255][T27071] FAT-fs (loop9): Directory bread(block 66) failed [ 1421.101207][T27071] FAT-fs (loop9): Directory bread(block 67) failed [ 1421.141536][T27071] FAT-fs (loop9): Directory bread(block 68) failed [ 1421.171902][T27071] FAT-fs (loop9): Directory bread(block 69) failed [ 1421.206590][T27071] FAT-fs (loop9): Directory bread(block 70) failed [ 1421.243901][T27071] FAT-fs (loop9): Directory bread(block 71) failed [ 1421.283413][T27071] FAT-fs (loop9): Directory bread(block 72) failed [ 1421.301725][T27071] FAT-fs (loop9): Directory bread(block 73) failed [ 1421.317895][ T5909] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1421.695702][ T5909] usb 8-1: Using ep0 maxpacket: 16 [ 1421.712268][ T5909] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.754423][ T5909] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1421.874809][ T5909] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1421.884111][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.909554][ T5909] usb 8-1: config 0 descriptor?? [ 1421.951739][ T5909] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1423.566189][T27089] loop7: detected capacity change from 0 to 256 [ 1424.851582][T19126] usb 8-1: USB disconnect, device number 22 [ 1426.614738][T27140] ubi: mtd0 is already attached to ubi31 [ 1427.705755][T27162] netlink: 'syz.5.5693': attribute type 2 has an invalid length. [ 1428.339435][T27179] loop5: detected capacity change from 0 to 512 [ 1428.364850][ T10] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1428.388856][T27179] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1428.424026][T27179] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1428.493657][T27179] EXT4-fs (loop5): 1 truncate cleaned up [ 1428.531544][T27179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1428.577531][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1428.600264][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.617084][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1428.666740][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1428.699226][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.724955][ T10] usb 10-1: config 0 descriptor?? [ 1429.041051][ T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1429.861865][T27202] loop9: detected capacity change from 0 to 256 [ 1430.481186][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.604909][ T29] usb 10-1: USB disconnect, device number 24 [ 1431.958910][T27224] loop7: detected capacity change from 0 to 256 [ 1432.167310][T27224] FAT-fs (loop7): Directory bread(block 64) failed [ 1432.239472][T27224] FAT-fs (loop7): Directory bread(block 65) failed [ 1432.339488][T27224] FAT-fs (loop7): Directory bread(block 66) failed [ 1432.960023][T27224] FAT-fs (loop7): Directory bread(block 67) failed [ 1432.966725][T27224] FAT-fs (loop7): Directory bread(block 68) failed [ 1433.048262][T27224] FAT-fs (loop7): Directory bread(block 69) failed [ 1433.055634][T27224] FAT-fs (loop7): Directory bread(block 70) failed [ 1433.175378][T27224] FAT-fs (loop7): Directory bread(block 71) failed [ 1433.227322][T27224] FAT-fs (loop7): Directory bread(block 72) failed [ 1433.254403][T27224] FAT-fs (loop7): Directory bread(block 73) failed [ 1433.270573][T17262] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1433.476182][T17262] usb 10-1: Using ep0 maxpacket: 16 [ 1433.489089][T17262] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1433.547023][T17262] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1433.581122][T27240] loop5: detected capacity change from 0 to 512 [ 1433.612179][T17262] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 1433.663525][T27240] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1433.700790][T17262] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.730018][T27240] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1433.771046][T17262] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1433.818521][T17262] usb 10-1: SerialNumber: syz [ 1433.823199][T27240] EXT4-fs (loop5): 1 truncate cleaned up [ 1433.854984][T27230] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1433.875532][T17262] cdc_acm 10-1:1.0: skipping garbage [ 1433.903077][T17262] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -12 [ 1433.917398][T27240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1434.162552][T23697] usb 10-1: USB disconnect, device number 25 [ 1434.178066][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.087676][T17262] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1436.381839][T17262] usb 6-1: Using ep0 maxpacket: 16 [ 1436.388437][ T790] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1436.409684][T17262] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.459928][ T790] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1436.469919][T17262] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1436.523335][T17262] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1436.552081][T17262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.583536][T17262] usb 6-1: config 0 descriptor?? [ 1436.634877][T17262] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1437.747765][T27304] loop5: detected capacity change from 0 to 256 [ 1437.772201][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1437.778590][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.833527][ T10] usb 6-1: USB disconnect, device number 38 [ 1440.750560][T27325] loop5: detected capacity change from 0 to 512 [ 1440.800796][T27325] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1440.838531][T27325] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1441.120666][T27325] EXT4-fs (loop5): 1 truncate cleaned up [ 1441.877912][T27325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1442.027723][T27336] syzkaller0: entered promiscuous mode [ 1442.068430][T27336] syzkaller0: entered allmulticast mode [ 1442.144948][T27349] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5738'. [ 1443.845731][T27349] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5738'. [ 1444.586073][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.876069][T27372] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5743'. [ 1447.678432][T27384] loop8: detected capacity change from 0 to 16 [ 1447.763341][T27384] erofs (device loop8): mounted with root inode @ nid 36. [ 1447.824063][T27384] syz.8.5746: attempt to access beyond end of device [ 1447.824063][T27384] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1447.931613][T27384] syz.8.5746: attempt to access beyond end of device [ 1447.931613][T27384] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1448.047351][T27384] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1448.305490][T27384] erofs (device loop8): read error -117 @ 1 of nid 89 [ 1448.343716][ T30] audit: type=1800 audit(1772557435.485:260): pid=27384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5746" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1451.385128][T27418] loop7: detected capacity change from 0 to 512 [ 1451.668248][T27418] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1451.886714][T27418] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1452.700369][T27418] EXT4-fs (loop7): 1 truncate cleaned up [ 1452.715600][T27418] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1452.817557][T27431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1452.827395][T27431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5754'. [ 1452.872402][T15868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.251270][T27438] syzkaller0: entered promiscuous mode [ 1453.272955][T27438] syzkaller0: entered allmulticast mode [ 1456.581389][T27477] loop9: detected capacity change from 0 to 512 [ 1456.682955][T27477] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1456.733321][T27477] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1456.899634][T27477] EXT4-fs (loop9): 1 truncate cleaned up [ 1457.068994][T27477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.175612][T25403] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.219818][T27511] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5777'. [ 1459.654426][ T5914] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1459.849676][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 1459.883982][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.930617][ T5914] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1459.970542][T27534] loop5: detected capacity change from 0 to 512 [ 1459.998673][ T5914] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1460.009978][T27534] EXT4-fs: Ignoring removed nobh option [ 1460.041040][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.087135][T27534] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.5783: iget: bad i_size value: 38620345925642 [ 1460.111356][ T5914] usb 8-1: config 0 descriptor?? [ 1460.137385][ T5914] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1460.171349][T27534] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1460.171888][T27534] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5783: couldn't read orphan inode 15 (err -117) [ 1460.181122][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1460.181156][ C0] EXT4-fs (loop5): initial error at time 1772557446: ext4_orphan_get:1391: inode 15 [ 1460.181197][ C0] EXT4-fs (loop5): last error at time 1772557446: ext4_orphan_get:1391: inode 15 [ 1460.539561][T27534] loop5: lost filesystem error report for type 5 error -117 [ 1460.542160][T27534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1461.555002][T27548] loop7: detected capacity change from 0 to 256 [ 1462.411432][T27570] erofs (device nbd4): cannot find valid erofs superblock [ 1462.952010][ T5914] usb 8-1: USB disconnect, device number 23 [ 1462.976171][T27586] loop4: detected capacity change from 0 to 512 [ 1463.011444][T27586] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1463.018265][T27586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1463.073054][T27586] EXT4-fs (loop4): 1 truncate cleaned up [ 1463.100333][T27586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.274090][T27597] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5793'. [ 1463.866938][T27608] bridge1: entered allmulticast mode [ 1464.123181][T27536] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1464.230275][T27616] random: crng reseeded on system resumption [ 1465.004629][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.022016][T27622] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5798'. [ 1466.549712][T23791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1466.657043][ T29] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1466.694253][ T30] audit: type=1800 audit(1772557452.641:261): pid=27646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5805" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1466.838945][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 1466.879476][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.002866][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1467.039764][T27649] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5806'. [ 1467.229910][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1467.298880][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.354117][ T29] usb 8-1: config 0 descriptor?? [ 1467.593090][ T29] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1468.696186][T27669] loop7: detected capacity change from 0 to 256 [ 1469.023788][T27673] loop8: detected capacity change from 0 to 512 [ 1469.052548][T27673] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1469.083673][T27673] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1469.270787][T27673] EXT4-fs (loop8): 1 truncate cleaned up [ 1469.310137][T27673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.196015][T23945] usb 8-1: USB disconnect, device number 24 [ 1470.381942][T25345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.599876][T27709] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5822'. [ 1470.633789][T27709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.641171][T27709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.080911][ T30] audit: type=1800 audit(1772557457.636:262): pid=27728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5827" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1474.981119][T27761] syz_tun: entered allmulticast mode [ 1475.047869][T27760] syz_tun: left allmulticast mode [ 1475.580990][T27772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1478.592004][ T30] audit: type=1800 audit(1772557463.781:263): pid=27806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5852" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1480.722689][T27841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.675232][ T30] audit: type=1326 audit(1772557466.662:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1481.780008][ T30] audit: type=1326 audit(1772557466.690:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1481.904096][ T30] audit: type=1326 audit(1772557466.709:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1482.030837][ T30] audit: type=1326 audit(1772557466.709:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1482.117940][T27855] netdevsim netdevsim5: Direct firmware load for .. failed with error -2 [ 1482.135878][T27855] netdevsim netdevsim5: Falling back to sysfs fallback for: .. [ 1482.209102][ T30] audit: type=1326 audit(1772557466.709:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1482.357489][ T30] audit: type=1326 audit(1772557466.709:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1483.030778][ T30] audit: type=1326 audit(1772557466.709:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1483.251800][ T30] audit: type=1326 audit(1772557466.709:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1483.414967][ T30] audit: type=1326 audit(1772557466.709:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27846 comm="syz.9.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f4f4b39c799 code=0x7ffc0000 [ 1483.620017][T27882] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5876'. [ 1483.817512][T27889] tipc: Started in network mode [ 1483.861355][T27889] tipc: Node identity 9a7b2c38d96c, cluster identity 4711 [ 1483.971264][T27894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.524381][T27889] tipc: Enabled bearer , priority 0 [ 1484.566297][T27893] syzkaller0: entered promiscuous mode [ 1484.590701][T27893] syzkaller0: entered allmulticast mode [ 1484.649127][T27893] tipc: Resetting bearer [ 1484.694443][T27888] tipc: Resetting bearer [ 1484.889202][T27888] tipc: Disabling bearer [ 1485.748012][T27915] random: crng reseeded on system resumption [ 1487.336977][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1487.337002][ T30] audit: type=1800 audit(1772557471.966:283): pid=27931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5888" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1491.784219][ T30] audit: type=1800 audit(1772557476.110:284): pid=27988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5905" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 1491.889595][T27985] syzkaller0: entered promiscuous mode [ 1491.930357][T27985] syzkaller0: entered allmulticast mode [ 1492.828243][T28002] overlayfs: failed to clone lowerpath [ 1493.477204][T28007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.046291][ T29] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 1494.371895][ T29] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.614905][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1494.780530][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.854068][ T29] usb 8-1: Product: syz [ 1494.868484][T28031] loop4: detected capacity change from 0 to 1024 [ 1494.886359][T28031] EXT4-fs: Ignoring removed bh option [ 1494.901352][T28031] EXT4-fs: Ignoring removed oldalloc option [ 1494.914968][T28031] EXT4-fs: Ignoring removed nobh option [ 1495.009172][ T29] usb 8-1: Manufacturer: syz [ 1495.036609][T28031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1495.061512][ T29] usb 8-1: SerialNumber: syz [ 1495.209656][ T30] audit: type=1804 audit(1772557479.309:285): pid=28031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5918" name="/newroot/157/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 1495.507673][T28006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.094880][T28006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.232195][T28006] xt_hashlimit: size too large, truncated to 1048576 [ 1496.879825][T23791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.156848][T28083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1498.873661][ T30] audit: type=1804 audit(1772557482.545:286): pid=28085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5929" name="/newroot/102/file0" dev="tmpfs" ino=555 res=1 errno=0 [ 1499.231935][T28084] uprobe: syz.5.5929:28084 failed to unregister, leaking uprobe [ 1499.555567][ T29] usb 8-1: USB disconnect, device number 25 [ 1501.002843][T28114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5940'. [ 1501.402734][T28106] ubi: mtd0 is already attached to ubi31 [ 1501.426995][T28105] loop9: detected capacity change from 0 to 1024 [ 1501.457038][T28117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5940'. [ 1501.516857][T28105] EXT4-fs: Ignoring removed bh option [ 1501.529540][T28105] EXT4-fs: Ignoring removed oldalloc option [ 1501.576706][T28105] EXT4-fs: Ignoring removed nobh option [ 1501.623667][T28105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1501.722852][ T5914] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1501.804813][ T30] audit: type=1804 audit(1772557485.492:287): pid=28105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.5937" name="/newroot/90/file1/bus" dev="loop9" ino=18 res=1 errno=0 [ 1501.931883][ T5914] usb 9-1: Using ep0 maxpacket: 16 [ 1501.973138][ T5914] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1501.983734][T28134] random: crng reseeded on system resumption [ 1502.020761][ T5914] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1502.095641][ T5914] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1502.140607][ T5914] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1502.174075][ T5914] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1502.242577][ T5914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1502.283016][ T5914] usb 9-1: SerialNumber: syz [ 1502.290723][T28105] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #15: comm syz.9.5937: ES cache extent failed: add [28,-29,18446744073709551615,0x8] conflict with existing [36,1,149,0x2] [ 1502.290723][T28105] [ 1502.343054][ T5914] cdc_acm 9-1:1.0: skipping garbage [ 1502.354482][ T5914] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 1502.362636][T28105] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #15: comm syz.9.5937: ES cache extent failed: add [0,1,177,0x1] conflict with existing [0,1,113,0x2] [ 1502.362636][T28105] [ 1502.420736][T28105] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #15: comm syz.9.5937: ES cache extent failed: add [1,15,177,0x1] conflict with existing [1,27,576460752303423487,0x18] [ 1502.420736][T28105] [ 1502.447865][T28105] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #15: comm syz.9.5937: ES cache extent failed: add [16,1,177,0x1] conflict with existing [1,27,576460752303423487,0x18] [ 1502.447865][T28105] [ 1502.714288][T28105] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #15: comm syz.9.5937: ES cache extent failed: add [17,12,177,0x1] conflict with existing [1,27,576460752303423487,0x18] [ 1502.714288][T28105] [ 1503.114090][T28105] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 15: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 1503.311757][ T5951] usb 9-1: USB disconnect, device number 76 [ 1503.358305][T28105] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 1503.393182][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1503.399794][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1503.432079][T28105] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1503.432079][T28105] [ 1503.501067][T28105] EXT4-fs (loop9): Total free blocks count 0 [ 1503.507111][T28105] EXT4-fs (loop9): Free/Dirty block details [ 1503.554249][T28105] EXT4-fs (loop9): free_blocks=16 [ 1503.559699][T28105] EXT4-fs (loop9): dirty_blocks=0 [ 1503.597241][T28105] EXT4-fs (loop9): Block reservation details [ 1503.603282][T28105] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 1503.777474][T25403] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.661931][ T10] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1504.854341][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1504.876531][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.926773][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1504.993746][ T10] usb 6-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1505.002872][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.113942][ T10] usb 6-1: config 0 descriptor?? [ 1505.168193][ T10] usb 6-1: bad CDC descriptors [ 1505.201021][ T10] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 1505.252627][ T10] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 1505.259141][ T10] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 1507.388445][ T29] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1507.796097][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 1507.963317][T13789] usb 6-1: USB disconnect, device number 39 [ 1507.977216][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1508.046718][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1508.076430][ T29] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1508.115045][ T29] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1508.135294][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1508.160400][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1508.202309][ T29] usb 10-1: SerialNumber: syz [ 1508.233807][ T29] cdc_acm 10-1:1.0: skipping garbage [ 1508.239411][ T29] cdc_acm 10-1:1.0: probe with driver cdc_acm failed with error -12 [ 1508.468015][T13789] usb 10-1: USB disconnect, device number 26 [ 1509.503950][T28250] random: crng reseeded on system resumption [ 1511.042101][T13789] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1511.525377][T13789] usb 10-1: Using ep0 maxpacket: 32 [ 1511.726900][T13789] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1511.739492][T13789] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1511.746217][T13789] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1511.822068][T13789] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.825814][T28277] ubi: mtd0 is already attached to ubi31 [ 1511.895204][T13789] usb 10-1: config 0 descriptor?? [ 1512.063389][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5981'. [ 1512.073958][T28288] bridge_slave_1: left allmulticast mode [ 1512.079748][T28288] bridge_slave_1: left promiscuous mode [ 1512.088446][T28288] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.751991][T28288] bridge_slave_0: left allmulticast mode [ 1512.758159][T28288] bridge_slave_0: left promiscuous mode [ 1512.849603][T28288] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.239390][T13789] corsair-psu 0003:1B1C:1C09.002B: unknown main item tag 0x0 [ 1513.656589][T13789] corsair-psu 0003:1B1C:1C09.002B: unknown main item tag 0x0 [ 1513.666854][T13789] corsair-psu 0003:1B1C:1C09.002B: unknown main item tag 0x0 [ 1513.819848][T13789] corsair-psu 0003:1B1C:1C09.002B: unknown main item tag 0x0 [ 1513.864970][T13789] corsair-psu 0003:1B1C:1C09.002B: unknown main item tag 0x0 [ 1513.939501][T13789] corsair-psu 0003:1B1C:1C09.002B: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.9-1/input0 [ 1514.712096][T13789] corsair-psu 0003:1B1C:1C09.002B: unable to initialize device (-110) [ 1515.057362][T13789] corsair-psu 0003:1B1C:1C09.002B: probe with driver corsair-psu failed with error -110 [ 1515.197058][T13789] usb 10-1: USB disconnect, device number 27 [ 1515.683650][T28319] random: crng reseeded on system resumption [ 1516.343340][T28308] fido_id[28308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1518.720813][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1518.923259][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 1519.063893][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 1519.160104][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 35185, setting to 64 [ 1519.283758][ T10] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1519.350568][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.404360][ T10] usb 10-1: Product: syz [ 1519.433653][ T10] usb 10-1: Manufacturer: syz [ 1519.476552][ T10] usb 10-1: SerialNumber: syz [ 1519.541173][ T10] usb 10-1: config 0 descriptor?? [ 1519.588813][ T10] streamzap 10-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0284 [ 1519.655565][T28366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6004'. [ 1519.730288][T28366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6004'. [ 1519.932302][ T29] usb 10-1: USB disconnect, device number 28 [ 1521.613390][ T30] audit: type=1800 audit(1772557503.994:288): pid=28387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6010" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1522.590374][ T10] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1522.812861][T28399] ubi: mtd0 is already attached to ubi31 [ 1522.996489][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1523.027109][ T10] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1523.050337][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.149366][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1523.918236][ T10] pvrusb2: ********** [ 1523.937595][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1523.996257][ T10] pvrusb2: Important functionality might not be entirely working. [ 1524.043935][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1524.092299][T28415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1524.119477][T28415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6019'. [ 1524.247157][ T10] pvrusb2: ********** [ 1524.278158][ T2341] pvrusb2: Invalid write control endpoint [ 1524.478974][ T10] usb 8-1: USB disconnect, device number 26 [ 1525.585640][ T2341] pvrusb2: Invalid write control endpoint [ 1525.617795][T28434] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6024'. [ 1525.626984][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1525.691134][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1525.727423][T28439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.918135][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1525.972623][ T2341] pvrusb2: Device being rendered inoperable [ 1526.032689][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1526.609747][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1526.626689][T28445] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6027'. [ 1526.786789][ T2341] pvrusb2: Attached sub-driver cx25840 [ 1526.802226][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1526.832791][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1527.122910][T23945] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1527.332548][T23945] usb 6-1: Using ep0 maxpacket: 32 [ 1527.375077][T23945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.421758][T23945] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1527.527497][T23945] usb 6-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 1527.606051][T23945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.696237][T23945] usb 6-1: config 0 descriptor?? [ 1528.254720][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6035'. [ 1528.267274][T28474] ubi: mtd0 is already attached to ubi31 [ 1528.510589][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6035'. [ 1528.546610][T28450] bridge_slave_0: left allmulticast mode [ 1529.377331][T28450] bridge_slave_0: left promiscuous mode [ 1529.395000][T28450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.015298][T28450] bridge_slave_1: left allmulticast mode [ 1530.076763][T28450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.188800][T28490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1530.393252][T28450] bond0: (slave bond_slave_0): Releasing backup interface [ 1532.142155][T28450] bond0: (slave bond_slave_1): Releasing backup interface [ 1533.142966][T28450] team0: Port device team_slave_0 removed [ 1533.273493][T28450] team0: Port device team_slave_1 removed [ 1533.280328][T28450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1533.371458][T28450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1533.515021][T28450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1533.557264][T28450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1533.673778][T28450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1533.829806][ T29] usb 6-1: USB disconnect, device number 40 [ 1534.339413][T28520] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 1539.336734][T28562] lo speed is unknown, defaulting to 1000 [ 1539.343606][T28562] lo speed is unknown, defaulting to 1000 [ 1539.368782][T28562] lo speed is unknown, defaulting to 1000 [ 1539.421113][T28562] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1539.578110][T28562] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1539.775737][T28563] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1539.860478][T28562] lo speed is unknown, defaulting to 1000 [ 1539.868548][T28562] lo speed is unknown, defaulting to 1000 [ 1539.876214][T28562] lo speed is unknown, defaulting to 1000 [ 1539.883673][T28562] lo speed is unknown, defaulting to 1000 [ 1539.891094][T28562] lo speed is unknown, defaulting to 1000 [ 1539.898501][T28562] lo speed is unknown, defaulting to 1000 [ 1542.786892][T28584] lo speed is unknown, defaulting to 1000 [ 1543.844307][T28596] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1544.560357][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6069'. [ 1546.878076][T28628] sock: sock_timestamping_bind_phc: sock not bind to device [ 1549.315871][T23807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1549.362294][T23807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1549.381048][T23807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1549.395404][T23807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1549.403221][T23807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1549.689480][T28648] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6082'. [ 1549.707028][ T9803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.174976][ T9803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.303067][T28641] lo speed is unknown, defaulting to 1000 [ 1550.513463][ T9803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.912393][ T9803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.040685][ T30] audit: type=1804 audit(1772558811.556:289): pid=28670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.6086" name="/newroot/115/file0" dev="tmpfs" ino=609 res=1 errno=0 [ 1551.257373][T17262] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1551.468189][T17262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.505969][T17262] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1551.529616][T17262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.548168][T17262] usb 6-1: config 0 descriptor?? [ 1551.618364][T23343] Bluetooth: hci0: command tx timeout [ 1551.814664][T28641] chnl_net:caif_netlink_parms(): no params data found [ 1552.190444][T17262] usbhid 6-1:0.0: can't add hid device: -71 [ 1552.277432][T17262] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1552.594877][T17262] usb 6-1: USB disconnect, device number 41 [ 1552.998682][T17262] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 1553.075729][T28698] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6094'. [ 1553.175913][T17262] usb 6-1: device descriptor read/64, error -71 [ 1553.909270][T23343] Bluetooth: hci0: command tx timeout [ 1554.122939][T17262] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 1556.100798][T23343] Bluetooth: hci0: command tx timeout [ 1556.104717][T28743] netlink: zone id is out of range [ 1556.111477][T28743] netlink: zone id is out of range [ 1556.116816][T28743] netlink: zone id is out of range [ 1556.122057][T28743] netlink: zone id is out of range [ 1556.127330][T28743] netlink: zone id is out of range [ 1557.327514][T28754] loop8: detected capacity change from 0 to 1024 [ 1557.532483][T28754] EXT4-fs: Ignoring removed bh option [ 1557.568277][T28754] EXT4-fs: Ignoring removed oldalloc option [ 1557.592160][ T9803] bond0 (unregistering): Released all slaves [ 1557.770345][T28754] EXT4-fs: Ignoring removed nobh option [ 1557.776582][ T9803] bond1 (unregistering): Released all slaves [ 1557.798978][ T9803] bond2 (unregistering): Released all slaves [ 1558.529596][T23807] Bluetooth: hci0: command tx timeout [ 1558.561216][T28754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1558.575129][ T9803] bond3 (unregistering): Released all slaves [ 1559.210176][ T9803] bond4 (unregistering): Released all slaves [ 1559.415587][ T9803] bond5 (unregistering): Released all slaves [ 1560.432300][T25345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.525102][ T9803] tipc: Left network mode [ 1560.748488][T28641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.798709][T28641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.830774][T28641] bridge_slave_0: entered allmulticast mode [ 1560.956808][T28786] Bluetooth: MGMT ver 1.23 [ 1560.987963][T28641] bridge_slave_0: entered promiscuous mode [ 1561.193738][T28641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.249860][T28641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.269341][T28641] bridge_slave_1: entered allmulticast mode [ 1561.323412][T28641] bridge_slave_1: entered promiscuous mode [ 1561.546853][ T5951] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1561.664964][T28641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.718386][ T5951] usb 9-1: Using ep0 maxpacket: 16 [ 1561.732838][T28641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.765229][ T5951] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1561.795639][ T5951] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1561.829905][ T5951] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1561.858760][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.898500][T28814] loop5: detected capacity change from 0 to 1024 [ 1561.909262][T28814] EXT4-fs: Ignoring removed bh option [ 1561.916131][T28814] EXT4-fs: Ignoring removed oldalloc option [ 1561.922561][T28814] EXT4-fs: Ignoring removed nobh option [ 1562.038187][T28814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.060487][T28641] team0: Port device team_slave_0 added [ 1562.163702][ T9803] hsr_slave_0: left promiscuous mode [ 1562.199221][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1562.220777][ T9803] hsr_slave_1: left promiscuous mode [ 1562.251702][ T9803] veth0_macvtap: left promiscuous mode [ 1562.258530][ T9803] veth1_vlan: left promiscuous mode [ 1562.264635][ T9803] veth0_vlan: left promiscuous mode [ 1562.367529][T28814] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 1562.401652][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1562.404943][ T5951] mcp2221 0003:04D8:00DD.002C: item fetching failed at offset 4/5 [ 1562.446681][ T5951] mcp2221 0003:04D8:00DD.002C: can't parse reports [ 1562.453704][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1562.471221][ T5951] mcp2221 0003:04D8:00DD.002C: probe with driver mcp2221 failed with error -22 [ 1562.497647][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1562.541213][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.584129][T28815] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1562.617877][ T5951] usb 9-1: USB disconnect, device number 77 [ 1563.093939][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1563.101267][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.610986][ T9] usb 8-1: USB disconnect, device number 27 [ 1565.296817][T28866] kAFS: unable to lookup cell '' [ 1566.830465][T28641] team0: Port device team_slave_1 added [ 1566.959185][T28878] loop7: detected capacity change from 0 to 16 [ 1567.007285][T28878] erofs (device loop7): mounted with root inode @ nid 36. [ 1567.027921][T28878] syz.7.6138: attempt to access beyond end of device [ 1567.027921][T28878] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1567.069361][T28878] syz.7.6138: attempt to access beyond end of device [ 1567.069361][T28878] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1567.085512][T28878] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1567.096967][T28878] erofs (device loop7): read error -117 @ 1 of nid 89 [ 1567.116977][T28878] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1567.128492][T28878] erofs (device loop7): read error -117 @ 1 of nid 89 [ 1567.183328][ T30] audit: type=1800 audit(1772559338.574:290): pid=28878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6138" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 1568.011638][T28641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.040216][T28641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.162724][T28889] netlink: zone id is out of range [ 1568.168028][T28889] netlink: zone id is out of range [ 1568.173201][T28889] netlink: zone id is out of range [ 1568.178425][T28889] netlink: zone id is out of range [ 1568.183598][T28889] netlink: zone id is out of range [ 1568.645864][T28641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.920783][T28641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.936473][T28641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.046695][T28641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.072004][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1569.085952][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1569.156244][T28641] hsr_slave_0: entered promiscuous mode [ 1569.164227][T28641] hsr_slave_1: entered promiscuous mode [ 1569.171001][T28641] debugfs: 'hsr0' already exists in 'hsr' [ 1569.177231][T28641] Cannot create hsr debugfs directory [ 1569.431822][T28901] syzkaller0: entered promiscuous mode [ 1569.451716][T28901] syzkaller0: entered allmulticast mode [ 1570.868851][T28924] overlayfs: missing 'lowerdir' [ 1574.122039][T28952] netlink: zone id is out of range [ 1574.127697][T28952] netlink: zone id is out of range [ 1574.132935][T28952] netlink: zone id is out of range [ 1574.138084][T28952] netlink: zone id is out of range [ 1574.143760][T28952] netlink: zone id is out of range [ 1575.249678][T13789] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1575.484323][T28966] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1575.495243][T28966] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1575.503848][T28966] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1575.639569][T13789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.844654][T13789] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1575.990285][T13789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.191846][T13789] usb 6-1: config 0 descriptor?? [ 1576.483993][T13789] usbhid 6-1:0.0: can't add hid device: -71 [ 1576.509984][T13789] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1576.591017][T13789] usb 6-1: USB disconnect, device number 44 [ 1576.664745][T28641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1576.700359][T28641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1576.706028][T17262] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1576.762788][T28641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1576.821814][T28641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1576.888843][T17262] usb 8-1: Using ep0 maxpacket: 32 [ 1576.918135][T17262] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1576.972627][T17262] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1577.016936][T17262] usb 8-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1577.037426][T13789] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1577.069219][T17262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.138245][T17262] usb 8-1: config 0 descriptor?? [ 1577.163091][T17262] usb 8-1: bad CDC descriptors [ 1577.186477][T17262] cdc_acm 8-1:0.0: Control and data interfaces are not separated! [ 1577.203342][T28641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.235833][T17262] cdc_acm 8-1:0.0: This needs exactly 3 endpoints [ 1577.271248][T28992] tipc: Started in network mode [ 1577.275910][T17262] cdc_acm 8-1:0.0: probe with driver cdc_acm failed with error -22 [ 1577.278566][T13789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1577.319052][T28992] tipc: Node identity ae4c561c3606, cluster identity 4711 [ 1577.337931][T28992] tipc: Enabled bearer , priority 0 [ 1577.361813][T28994] syzkaller0: entered promiscuous mode [ 1577.369775][T13789] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1577.390124][T28994] syzkaller0: entered allmulticast mode [ 1577.409382][T28641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.425025][T13789] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1577.635853][T13789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.344309][T13789] usb 6-1: config 0 descriptor?? [ 1578.365600][T28999] tipc: Resetting bearer [ 1578.397647][T28991] tipc: Resetting bearer [ 1578.455437][T28991] tipc: Disabling bearer [ 1578.500609][T13789] usb 6-1: can't set config #0, error -71 [ 1578.537735][T25615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.544929][T25615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1578.556789][T13789] usb 6-1: USB disconnect, device number 45 [ 1578.629045][T25615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.636294][T25615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.824521][ T9] usb 8-1: USB disconnect, device number 28 [ 1580.473954][T29028] netlink: zone id is out of range [ 1580.479168][T29028] netlink: zone id is out of range [ 1580.484484][T29028] netlink: zone id is out of range [ 1580.489675][T29028] netlink: zone id is out of range [ 1580.494986][T29028] netlink: zone id is out of range [ 1581.818168][T29031] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1581.827710][T29031] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1583.412188][T28641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.706530][T28641] veth0_vlan: entered promiscuous mode [ 1583.797297][T28641] veth1_vlan: entered promiscuous mode [ 1583.984923][T28641] veth0_macvtap: entered promiscuous mode [ 1584.070480][T28641] veth1_macvtap: entered promiscuous mode [ 1584.270460][T17262] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1584.360983][T28641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.407009][T28641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.467502][T17262] usb 6-1: Using ep0 maxpacket: 32 [ 1584.480024][T17262] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.543754][T25615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.569204][T17262] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1584.604149][T25615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.647652][T17262] usb 6-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1584.703170][T17262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.938201][T25615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.938316][T17262] usb 6-1: config 0 descriptor?? [ 1585.575896][T17262] usb 6-1: bad CDC descriptors [ 1585.701051][T25615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.839195][T17262] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 1586.071011][T17262] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 1586.804979][T17262] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 1586.947756][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.988305][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.107500][T25615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.156448][T25615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.947018][ T10] usb 6-1: USB disconnect, device number 46 [ 1590.841370][T29141] binder: 29140:29141 ioctl c0306201 200000000080 returned -14 [ 1590.988660][T23697] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1591.109794][T17262] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1591.320338][T17262] usb 10-1: Using ep0 maxpacket: 16 [ 1591.330718][T23697] usb 5-1: Using ep0 maxpacket: 32 [ 1591.343853][T23697] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.385314][T23697] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1591.398490][T17262] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.398548][T17262] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1591.406307][T17262] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1591.511891][T17262] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1591.532492][T23697] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1591.568954][T17262] usb 10-1: SerialNumber: syz [ 1591.623219][T23697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.634063][T17262] cdc_acm 10-1:1.0: skipping garbage [ 1591.685632][T17262] cdc_acm 10-1:1.0: skipping garbage [ 1591.718612][T23697] usb 5-1: config 0 descriptor?? [ 1591.767714][T23697] usb 5-1: bad CDC descriptors [ 1591.803767][T23697] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 1591.869082][T17262] usb 10-1: USB disconnect, device number 29 [ 1591.884749][T23697] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 1591.956431][T23697] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 1594.119811][T17262] usb 5-1: USB disconnect, device number 33 [ 1594.914815][T29200] binder: 29199:29200 ioctl c0306201 200000000080 returned -14 [ 1594.987140][T17262] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 1595.292411][T29205] lo speed is unknown, defaulting to 1000 [ 1595.982945][T17262] usb 5-1: string descriptor 0 read error: -22 [ 1596.024046][T17262] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1596.033133][T17262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.112408][T17262] usb 5-1: config 0 descriptor?? [ 1596.158169][T17262] usbtest 5-1:0.0: FX2 device [ 1596.220775][T17262] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1596.470082][T13789] usb 5-1: USB disconnect, device number 34 [ 1596.815470][ T790] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1597.045296][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 1597.073987][ T790] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.132638][ T790] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1597.225449][ T790] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1597.301006][ T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.400573][ T790] usb 3-1: config 0 descriptor?? [ 1597.460286][ T790] usb 3-1: bad CDC descriptors [ 1597.538667][ T790] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 1597.587928][ T790] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 1597.627530][ T790] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 1598.226376][T17262] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 1598.867081][T17262] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 1598.899528][T17262] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 1598.985230][T17262] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 1599.038630][T17262] usb 8-1: string descriptor 0 read error: -22 [ 1599.117911][T17262] usb 8-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1599.155124][T17262] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.236237][T17262] usb 8-1: low speed audio streaming not supported [ 1599.250477][T17262] usb 8-1: low speed audio streaming not supported [ 1599.545968][T29264] lo speed is unknown, defaulting to 1000 [ 1599.847301][ T9] usb 3-1: USB disconnect, device number 55 [ 1599.859128][T17262] usb 8-1: us122l: couldn't allocate write buffer [ 1599.883676][T17262] snd-usb-us122l 8-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1599.998903][T17262] usb 8-1: USB disconnect, device number 29 [ 1610.709300][T29389] kAFS: unable to lookup cell '' [ 1612.171560][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6278'. [ 1612.218641][T29412] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6278'. [ 1616.643841][T29458] kAFS: unable to lookup cell '' [ 1623.262782][T23343] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1623.277596][T23343] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1623.289491][T23343] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1623.304160][T23343] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1623.317270][T23343] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1623.918369][T29520] lo speed is unknown, defaulting to 1000 [ 1625.596476][T23343] Bluetooth: hci6: command tx timeout [ 1626.639987][T17262] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1627.439777][T17262] usb 9-1: Using ep0 maxpacket: 16 [ 1627.502570][T17262] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1627.538608][T17262] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1627.571010][T29520] chnl_net:caif_netlink_parms(): no params data found [ 1627.602082][T17262] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1627.687493][T17262] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1627.720591][T17262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1627.759466][T17262] usb 9-1: SerialNumber: syz [ 1627.818158][T23343] Bluetooth: hci6: command tx timeout [ 1627.845659][T17262] cdc_acm 9-1:1.0: skipping garbage [ 1628.058863][T17262] usb 9-1: USB disconnect, device number 78 [ 1628.249163][T29520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.289186][T29520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.308529][T29520] bridge_slave_0: entered allmulticast mode [ 1628.345940][T29520] bridge_slave_0: entered promiscuous mode [ 1628.378916][T29520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.400044][T29520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.419860][T29520] bridge_slave_1: entered allmulticast mode [ 1628.525273][T29520] bridge_slave_1: entered promiscuous mode [ 1629.333865][T29520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.438443][T29520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.449177][T29625] loop5: detected capacity change from 0 to 512 [ 1629.499035][T29625] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1629.731740][T29625] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1630.052781][T23343] Bluetooth: hci6: command tx timeout [ 1630.544021][T29625] EXT4-fs (loop5): 1 truncate cleaned up [ 1630.775468][T29625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1630.858002][T29520] team0: Port device team_slave_0 added [ 1630.922213][T29520] team0: Port device team_slave_1 added [ 1631.193172][T29657] loop8: detected capacity change from 0 to 16 [ 1631.282313][T29657] erofs (device loop8): mounted with root inode @ nid 36. [ 1631.306789][T29657] syz.8.6337: attempt to access beyond end of device [ 1631.306789][T29657] loop8: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1631.354469][T29657] syz.8.6337: attempt to access beyond end of device [ 1631.354469][T29657] loop8: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1631.369380][T29657] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1631.381166][T29657] erofs (device loop8): read error -117 @ 1 of nid 89 [ 1631.409405][T29657] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1631.420892][T29657] erofs (device loop8): read error -117 @ 1 of nid 89 [ 1631.471761][ T30] audit: type=1800 audit(1772561446.716:291): pid=29657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6337" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 1631.575036][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1631.988786][T29520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.009056][T29520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.111908][T29520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.350675][T23343] Bluetooth: hci6: command tx timeout [ 1632.361582][T17262] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1632.507294][T29675] usb usb9: usbfs: process 29675 (syz.4.6340) did not claim interface 3 before use [ 1632.628876][T17262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.834779][T17262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1633.120111][T17262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1633.133517][T17262] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1633.148168][T17262] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1633.195105][T17262] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1633.203286][T17262] usb 3-1: Manufacturer: syz [ 1633.253527][T17262] usb 3-1: config 0 descriptor?? [ 1633.636808][T29688] binder: 29683:29688 ioctl c0306201 200000000080 returned -14 [ 1633.711199][T29688] binder_alloc: 29683: binder_alloc_buf, no vma [ 1633.940217][T17262] rc_core: IR keymap rc-hauppauge not found [ 1633.950781][T17262] Registered IR keymap rc-empty [ 1633.968593][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1633.985248][T29520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.997415][T29520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1634.042241][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1634.256782][T17262] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1634.926744][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1634.933804][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1635.006063][T29520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.032963][T17262] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input35 [ 1635.289584][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1635.487681][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1635.777810][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1635.851305][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1635.900972][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1635.914722][ T1156] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.952161][T29716] loop5: detected capacity change from 0 to 512 [ 1635.964036][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1635.992297][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1636.014685][T29716] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1636.043149][T29716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1636.058682][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1636.115166][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1636.143378][T29716] EXT4-fs (loop5): 1 truncate cleaned up [ 1636.178793][T17262] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 1636.192376][T29716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1636.375858][ T10] IPVS: starting estimator thread 0... [ 1636.472474][T17262] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1636.548229][T29520] hsr_slave_0: entered promiscuous mode [ 1636.637896][T29729] IPVS: using max 26 ests per chain, 62400 per kthread [ 1636.665379][T17262] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1636.749923][T29520] hsr_slave_1: entered promiscuous mode [ 1636.880688][T29520] debugfs: 'hsr0' already exists in 'hsr' [ 1636.899560][T17262] usb 3-1: USB disconnect, device number 56 [ 1636.910205][T29520] Cannot create hsr debugfs directory [ 1637.078465][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1637.488021][T29736] usb usb9: usbfs: process 29736 (syz.8.6355) did not claim interface 3 before use [ 1638.350357][ T1156] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.199010][ T1156] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.317207][T29763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1641.448581][ T29] usb 9-1: new full-speed USB device number 79 using dummy_hcd [ 1642.045649][ T1156] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.254970][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.292899][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1642.333760][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1642.345523][ T29] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1642.361685][ T29] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1642.401110][ T29] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1642.427853][ T29] usb 9-1: Manufacturer: syz [ 1642.438533][T29779] loop9: detected capacity change from 0 to 256 [ 1642.470475][ T29] usb 9-1: config 0 descriptor?? [ 1642.520324][T29779] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1642.566711][T29779] FAT-fs (loop9): Filesystem has been set read-only [ 1642.605564][T29779] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1642.680562][T29779] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1642.753512][T29779] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 1642.761521][ T30] audit: type=1800 audit(1772561713.342:292): pid=29779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6356" name="file1" dev="loop9" ino=1048899 res=0 errno=0 [ 1642.812559][T29780] bridge2: entered allmulticast mode [ 1643.182937][T29787] loop5: detected capacity change from 0 to 512 [ 1643.201604][ T29] rc_core: IR keymap rc-hauppauge not found [ 1643.207547][ T29] Registered IR keymap rc-empty [ 1643.220317][T29787] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1643.228550][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1643.235672][T29787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1643.267166][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1643.721542][T29787] EXT4-fs (loop5): 1 truncate cleaned up [ 1643.909248][T29787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.973499][ T1156] bridge_slave_1: left allmulticast mode [ 1643.997651][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1644.016283][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input36 [ 1644.056777][ T1156] bridge_slave_1: left promiscuous mode [ 1644.071184][ T1156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.076108][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.143517][ T1156] bridge_slave_0: left allmulticast mode [ 1644.160985][T24541] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.167609][ T1156] bridge_slave_0: left promiscuous mode [ 1644.173232][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.196010][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.203527][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.249391][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.299400][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.388818][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.409971][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.437519][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.645140][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.676708][ T29] mceusb 9-1:0.0: Error: mce write urb status = -71 [ 1644.731109][ T29] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 1644.761176][ T29] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1644.855126][ T29] usb 9-1: USB disconnect, device number 79 [ 1646.013895][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1646.222539][T29832] usb usb7: usbfs: process 29832 (syz.8.6371) did not claim interface 5 before use [ 1646.340504][ T1156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1646.372177][ T1156] bond0 (unregistering): Released all slaves [ 1647.863033][ T1156] hsr_slave_0: left promiscuous mode [ 1647.888198][ T1156] hsr_slave_1: left promiscuous mode [ 1647.906467][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.949076][ T1156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1647.956517][ T1156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.002468][ T1156] veth0_macvtap: left promiscuous mode [ 1648.008079][ T1156] veth1_vlan: left promiscuous mode [ 1648.023178][ T1156] veth0_vlan: left promiscuous mode [ 1648.617654][ T30] audit: type=1800 audit(1772561718.824:293): pid=29860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6379" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1648.747752][T29857] loop8: detected capacity change from 0 to 512 [ 1648.768139][T29857] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1648.809706][T29857] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1649.022437][T29857] EXT4-fs (loop8): 1 truncate cleaned up [ 1649.030421][T29857] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1649.261746][T25345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.881868][ T1156] team0 (unregistering): Port device team_slave_1 removed [ 1649.979568][ T1156] team0 (unregistering): Port device team_slave_0 removed [ 1653.533463][ T5914] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1653.694777][T29928] usb usb7: usbfs: process 29928 (syz.2.6391) did not claim interface 5 before use [ 1653.786791][ T5914] usb 9-1: Using ep0 maxpacket: 8 [ 1653.825053][ T5914] usb 9-1: config index 0 descriptor too short (expected 30, got 18) [ 1653.871616][ T5914] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1653.885131][ T5914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.926132][ T5914] usb 9-1: Product: syz [ 1653.931095][ T5914] usb 9-1: Manufacturer: syz [ 1653.939897][ T5914] usb 9-1: SerialNumber: syz [ 1654.060975][ T5914] usb 9-1: config 0 descriptor?? [ 1654.078890][ T5914] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1654.099209][ T5914] usb 9-1: setting power ON [ 1654.247129][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 1654.546012][ T5914] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1654.685350][ T5914] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1654.869584][ T5914] usb 9-1: media controller created [ 1654.901057][T29937] dvb-usb: bulk message failed: -22 (3/0) [ 1654.907756][T29937] dvb-usb: bulk message failed: -22 (4/0) [ 1654.925919][T29937] cxusb: i2c read failed [ 1655.338715][ T30] audit: type=1800 audit(1772561981.095:294): pid=29939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6394" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1655.421673][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1655.825092][T29520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1655.907908][ T5914] usb 9-1: selecting invalid altsetting 6 [ 1655.922599][T29520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1655.946644][ T5914] usb 9-1: digital interface selection failed (-22) [ 1655.953298][ T5914] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1655.979141][ T5914] usb 9-1: setting power OFF [ 1655.984209][ T5914] dvb-usb: bulk message failed: -22 (2/0) [ 1655.992599][ T5914] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1656.009315][T29520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1656.047888][ T5914] (NULL device *): no alternate interface [ 1656.073697][T29520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1656.188472][ T5914] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1656.219557][ T5914] usb 9-1: USB disconnect, device number 80 [ 1656.430382][T29520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.535945][T29520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.574100][ T9803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.581324][ T9803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.646303][T24830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.653522][T24830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1657.894285][T29520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.783903][T29520] veth0_vlan: entered promiscuous mode [ 1658.835012][T29520] veth1_vlan: entered promiscuous mode [ 1658.962834][T29520] veth0_macvtap: entered promiscuous mode [ 1658.990922][T29520] veth1_macvtap: entered promiscuous mode [ 1659.096686][T29520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1659.255127][T29520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1659.356708][ T7231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.397965][ T7231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.443711][ T7231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.487023][ T7231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1660.156493][T30034] usb usb7: usbfs: process 30034 (syz.8.6409) did not claim interface 5 before use [ 1660.545945][ T7251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.600293][ T7251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.754891][ T7252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1660.788954][T30045] netlink: 348 bytes leftover after parsing attributes in process `syz.2.6413'. [ 1660.807378][ T7252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.162122][ T1617] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1661.545014][ T1617] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1661.554422][ T1617] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.428246][ T1617] usb 10-1: config 0 descriptor?? [ 1662.452847][T30067] ptrace attach of "./syz-executor exec"[28641] was attempted by " [ 1662.488537][ T1617] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1662.854762][T23807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1662.868531][T23807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1662.878317][T23807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1662.889712][T23807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1662.897507][T23807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1662.980464][ T1617] gp8psk: usb in 128 operation failed. [ 1663.020839][ T1617] gp8psk: usb in 137 operation failed. [ 1663.071152][ T1617] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1663.160526][ T1617] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1663.209008][ T1617] usb 10-1: media controller created [ 1663.239755][T30071] lo speed is unknown, defaulting to 1000 [ 1663.326242][ T1617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1663.410438][ T1617] gp8psk_fe: Frontend attached [ 1663.415290][ T1617] usb 10-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1663.471254][ T1617] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1663.735522][ T1617] gp8psk: usb in 138 operation failed. [ 1663.748980][ T1617] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1663.770146][ T1617] gp8psk: found Genpix USB device pID = 203 (hex) [ 1663.779902][ T1617] usb 10-1: USB disconnect, device number 30 [ 1663.977612][ T1617] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1664.263832][T30071] chnl_net:caif_netlink_parms(): no params data found [ 1664.569672][T30080] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1665.425161][T23807] Bluetooth: hci1: command tx timeout [ 1665.818054][T30121] usb usb7: usbfs: process 30121 (syz.5.6428) did not claim interface 5 before use [ 1666.694137][T30122] netlink: 348 bytes leftover after parsing attributes in process `syz.9.6429'. [ 1667.592844][T23807] Bluetooth: hci1: command tx timeout [ 1668.151662][T30071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.241608][T30071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.257770][T30071] bridge_slave_0: entered allmulticast mode [ 1668.293361][T30071] bridge_slave_0: entered promiscuous mode [ 1668.327195][T30071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.356271][T30071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.409690][T30071] bridge_slave_1: entered allmulticast mode [ 1668.482020][T30071] bridge_slave_1: entered promiscuous mode [ 1668.591469][T29742] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.432892][T30147] ptrace attach of "./syz-executor exec"[30148] was attempted by "./syz-executor exec"[30147] [ 1670.432230][T23343] Bluetooth: hci1: command tx timeout [ 1670.448616][T30071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.583904][T30071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1670.844836][T29742] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.215906][T30156] kAFS: unable to lookup cell '' [ 1671.307447][T30159] usb usb7: usbfs: process 30159 (syz.5.6441) did not claim interface 5 before use [ 1672.633214][T23343] Bluetooth: hci1: command tx timeout [ 1673.892568][T29742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.934162][T30071] team0: Port device team_slave_0 added [ 1673.955196][T30071] team0: Port device team_slave_1 added [ 1674.407663][T29742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.960338][T30071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.976300][T30071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.086373][T30071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.123611][T30179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6450'. [ 1675.160043][T30179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6450'. [ 1675.180301][T30071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.180324][T30071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.180358][T30071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.477624][T30071] hsr_slave_0: entered promiscuous mode [ 1675.510036][T30071] hsr_slave_1: entered promiscuous mode [ 1675.531122][T30071] debugfs: 'hsr0' already exists in 'hsr' [ 1675.536911][T30071] Cannot create hsr debugfs directory [ 1676.746473][ T790] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 1677.636460][ T790] usb 1-1: no configurations [ 1677.641431][ T790] usb 1-1: can't read configurations, error -22 [ 1677.786063][ T790] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 1677.996005][T29742] bridge_slave_1: left allmulticast mode [ 1678.005511][T29742] bridge_slave_1: left promiscuous mode [ 1678.016457][ T790] usb 1-1: no configurations [ 1678.021949][ T790] usb 1-1: can't read configurations, error -22 [ 1678.034564][T29742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.042398][ T790] usb usb1-port1: attempt power cycle [ 1678.086483][T29742] bridge_slave_0: left allmulticast mode [ 1678.107068][ T5914] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 1678.108298][T29742] bridge_slave_0: left promiscuous mode [ 1678.126305][T29742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.438014][ T790] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 1678.482858][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1678.491782][ T5914] usb 6-1: not running at top speed; connect to a high speed hub [ 1678.493476][ T790] usb 1-1: no configurations [ 1678.500983][ T5914] usb 6-1: config 47 has an invalid interface number: 153 but max is 0 [ 1678.512479][ T5914] usb 6-1: config 47 has no interface number 0 [ 1678.551938][ T790] usb 1-1: can't read configurations, error -22 [ 1678.984171][ T790] usb 1-1: new low-speed USB device number 62 using dummy_hcd [ 1679.130328][ T5914] usb 6-1: config 47 interface 153 has no altsetting 0 [ 1679.140906][ T5914] usb 6-1: language id specifier not provided by device, defaulting to English [ 1679.152059][ T5914] usb 6-1: New USB device found, idVendor=22b8, idProduct=2e0a, bcdDevice=41.26 [ 1679.161203][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.169305][ T5914] usb 6-1: Product: syz [ 1679.173478][ T5914] usb 6-1: Manufacturer: 簀笑↊꯭ﲬ✹᳃෩ꏅ㫗য় [ 1679.181035][ T5914] usb 6-1: SerialNumber: syz [ 1679.315331][T29742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.342209][T29742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1679.378371][T29742] bond0 (unregistering): Released all slaves [ 1679.541976][T30247] netlink: 336 bytes leftover after parsing attributes in process `syz.2.6472'. [ 1679.617882][ T790] usb 1-1: device not accepting address 62, error -71 [ 1679.645131][ T790] usb usb1-port1: unable to enumerate USB device [ 1679.705784][ T5914] option 6-1:47.153: GSM modem (1-port) converter detected [ 1680.715503][ T5914] usb 6-1: USB disconnect, device number 47 [ 1680.734974][ T5914] option 6-1:47.153: device disconnected [ 1680.842019][T29742] tipc: Left network mode [ 1680.854359][T23807] Bluetooth: hci0: command 0x0406 tx timeout [ 1680.940621][T30262] loop2: detected capacity change from 0 to 256 [ 1680.964845][T30262] FAT-fs (loop2): Directory bread(block 64) failed [ 1680.976281][T30262] FAT-fs (loop2): Directory bread(block 65) failed [ 1680.983455][T30262] FAT-fs (loop2): Directory bread(block 66) failed [ 1680.990211][T30262] FAT-fs (loop2): Directory bread(block 67) failed [ 1680.998830][T30262] FAT-fs (loop2): Directory bread(block 68) failed [ 1681.005803][T30262] FAT-fs (loop2): Directory bread(block 69) failed [ 1681.012444][T30262] FAT-fs (loop2): Directory bread(block 70) failed [ 1681.057241][T30262] FAT-fs (loop2): Directory bread(block 71) failed [ 1681.099968][T30262] FAT-fs (loop2): Directory bread(block 72) failed [ 1681.140824][T30262] FAT-fs (loop2): Directory bread(block 73) failed [ 1683.086535][T30287] netlink: 328 bytes leftover after parsing attributes in process `syz.5.6484'. [ 1683.582546][ T30] audit: type=1326 audit(1772562519.527:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.093013][ T30] audit: type=1326 audit(1772562519.527:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.233698][ T30] audit: type=1326 audit(1772562519.527:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.389933][ T30] audit: type=1326 audit(1772562519.527:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.469822][ T30] audit: type=1326 audit(1772562519.527:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.507201][ T30] audit: type=1326 audit(1772562519.527:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.708742][T29742] hsr_slave_0: left promiscuous mode [ 1684.742751][ T30] audit: type=1326 audit(1772562519.527:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.766620][ T30] audit: type=1326 audit(1772562519.527:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.789604][T29742] hsr_slave_1: left promiscuous mode [ 1684.797018][T29742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1684.814080][ T30] audit: type=1326 audit(1772562519.527:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1684.837379][T29742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1684.851893][ T30] audit: type=1326 audit(1772562519.527:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30291 comm="syz.5.6486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ccf9c799 code=0x7ffc0000 [ 1685.595573][T29742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1685.624429][T29742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.757360][T29742] veth1_macvtap: left promiscuous mode [ 1685.765174][T30322] binder: 30320:30322 ioctl c0306201 2000000003c0 returned -14 [ 1685.791861][T29742] veth0_macvtap: left promiscuous mode [ 1685.825197][T29742] veth1_vlan: left promiscuous mode [ 1685.849785][T29742] veth0_vlan: left promiscuous mode [ 1685.850439][T30325] netlink: 328 bytes leftover after parsing attributes in process `syz.5.6497'. [ 1687.366560][T30346] loop5: detected capacity change from 0 to 16 [ 1687.387988][T30346] erofs (device loop5): mounted with root inode @ nid 36. [ 1687.411968][T30346] syz.5.6503: attempt to access beyond end of device [ 1687.411968][T30346] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1687.462101][T30346] syz.5.6503: attempt to access beyond end of device [ 1687.462101][T30346] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1687.478241][T30346] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1687.489628][T30346] erofs (device loop5): read error -117 @ 1 of nid 89 [ 1687.516620][T30346] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 1687.528129][T30346] erofs (device loop5): read error -117 @ 1 of nid 89 [ 1688.431689][T30352] loop5: detected capacity change from 0 to 1024 [ 1688.443192][T30352] EXT4-fs: Ignoring removed bh option [ 1688.452615][T30352] EXT4-fs: Ignoring removed oldalloc option [ 1688.461349][T30352] EXT4-fs: Ignoring removed nobh option [ 1688.676911][T30352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1688.990891][T30364] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #18: comm syz.5.6506: ES cache extent failed: add [106,1,379,0x2] conflict with existing [25,-26,576460752303423487,0x18] [ 1688.990891][T30364] [ 1689.047569][T30364] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #18: comm syz.5.6506: ES cache extent failed: add [107,5,379,0x2] conflict with existing [25,-26,576460752303423487,0x18] [ 1689.047569][T30364] [ 1689.105829][T30364] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #18: comm syz.5.6506: ES cache extent failed: add [112,1,193,0x2] conflict with existing [25,-26,576460752303423487,0x18] [ 1689.105829][T30364] [ 1689.172995][T30364] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #18: comm syz.5.6506: ES cache extent failed: add [113,15,193,0x2] conflict with existing [25,-26,576460752303423487,0x18] [ 1689.172995][T30364] [ 1689.228069][T30363] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #18: comm syz.5.6506: ES cache extent failed: add [106,1,379,0x2] conflict with existing [27,-28,576460752303423487,0x18] [ 1689.228069][T30363] [ 1689.295985][T30363] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #18: comm syz.5.6506: ES cache extent failed: add [107,5,379,0x2] conflict with existing [27,-28,576460752303423487,0x18] [ 1689.295985][T30363] [ 1689.324429][T30352] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.6506: Allocating blocks 497-513 which overlap fs metadata [ 1689.339432][T30363] ------------[ cut here ]------------ [ 1689.344973][T30363] kernel BUG at fs/ext4/extents_status.c:1044! [ 1689.353634][T29742] team0 (unregistering): Port device team_slave_1 removed [ 1689.362048][T30352] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 1 with error 117 [ 1689.379506][T30363] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1689.385950][T30363] CPU: 0 UID: 0 PID: 30363 Comm: syz.5.6506 Tainted: G L syzkaller #0 PREEMPT(full) [ 1689.396902][T30363] Tainted: [L]=SOFTLOCKUP [ 1689.401221][T30363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1689.411275][T30363] RIP: 0010:ext4_es_cache_extent+0x875/0x9e0 [ 1689.417284][T30363] Code: e1 07 80 c1 03 38 c1 0f 8c 5c fe ff ff 48 8b 7c 24 18 e8 fe ac ad ff e9 4d fe ff ff e8 a4 6e 43 ff 90 0f 0b e8 9c 6e 43 ff 90 <0f> 0b 65 8b 1d e6 98 99 10 bf 07 00 00 00 89 de e8 c6 72 43 ff 83 [ 1689.436937][T30363] RSP: 0018:ffffc900053968a0 EFLAGS: 00010287 [ 1689.443013][T30363] RAX: ffffffff82822744 RBX: 0000000000000069 RCX: 0000000000080000 [ 1689.451062][T30363] RDX: ffffc900137ed000 RSI: 0000000000020ac8 RDI: 0000000000020ac9 [ 1689.459113][T30363] RBP: ffffc900053969e8 R08: ffffc90005396957 R09: ffffc90005396940 [ 1689.467091][T30363] R10: dffffc0000000000 R11: fffff52000a72d2b R12: ffffc90005396940 [ 1689.475059][T30363] R13: 0000000000000070 R14: 000000000000000f R15: dffffc0000000000 [ 1689.483026][T30363] FS: 00007f82cde646c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 1689.491954][T30363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1689.498547][T30363] CR2: 00007ffca544a0f8 CR3: 0000000076b29000 CR4: 0000000000350ef0 [ 1689.506517][T30363] Call Trace: [ 1689.509789][T30363] [ 1689.512719][T30363] ? __pfx_ext4_es_cache_extent+0x10/0x10 [ 1689.518464][T30363] __read_extent_tree_block+0x4b4/0x890 [ 1689.524018][T30363] ext4_find_extent+0x76f/0xcc0 [ 1689.528879][T30363] ext4_ext_map_blocks+0x283/0x58b0 [ 1689.534084][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.539720][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.545351][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.550976][T30363] ? __lock_acquire+0x6b5/0x2cf0 [ 1689.555913][T30363] ? finish_task_switch+0x240/0x920 [ 1689.561106][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.566738][T30363] ? lockdep_hardirqs_on+0x7a/0x110 [ 1689.571949][T30363] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 1689.577584][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.583212][T30363] ? rcu_is_watching+0x15/0xb0 [ 1689.587974][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.593600][T30363] ? trace_sched_exit_tp+0x3a/0x150 [ 1689.598804][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.604442][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.610071][T30363] ext4_map_create_blocks+0x11d/0x540 [ 1689.615453][T30363] ext4_map_blocks+0x7cd/0x11d0 [ 1689.620308][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.626032][T30363] ? __pfx_ext4_map_blocks+0x10/0x10 [ 1689.631326][T30363] _ext4_get_block+0x1e3/0x470 [ 1689.636098][T30363] ? __pfx__ext4_get_block+0x10/0x10 [ 1689.641390][T30363] ? filemap_get_entry+0xca/0x320 [ 1689.646412][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.652133][T30363] ext4_get_block_unwritten+0x2e/0x100 [ 1689.657609][T30363] ext4_block_write_begin+0xb14/0x1950 [ 1689.663085][T30363] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 1689.669162][T30363] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 1689.675049][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.680683][T30363] ? ext4_inode_journal_mode+0x193/0x470 [ 1689.686316][T30363] ext4_write_begin+0xb40/0x18c0 [ 1689.691268][T30363] ? __pfx_ext4_write_begin+0x10/0x10 [ 1689.696638][T30363] ? is_bpf_text_address+0x292/0x2b0 [ 1689.701916][T30363] ? is_bpf_text_address+0x26/0x2b0 [ 1689.707126][T30363] ext4_da_write_begin+0x355/0xd80 [ 1689.712379][T30363] ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0 [ 1689.718533][T30363] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 1689.724173][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.729805][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.735447][T30363] generic_perform_write+0x2e2/0x8f0 [ 1689.740753][T30363] ? __pfx_generic_perform_write+0x10/0x10 [ 1689.746646][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.752274][T30363] ? file_update_time_flags+0x3b3/0x4a0 [ 1689.757822][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.763455][T30363] ? ext4_write_checks+0x24b/0x2c0 [ 1689.768567][T30363] ext4_buffered_write_iter+0xce/0x3a0 [ 1689.774027][T30363] ext4_file_write_iter+0x298/0x1bf0 [ 1689.779327][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.784955][T30363] ? splice_from_pipe_next+0x61c/0x670 [ 1689.790420][T30363] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1689.796131][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.801765][T30363] ? __asan_memset+0x22/0x50 [ 1689.806365][T30363] iter_file_splice_write+0x9a1/0x10f0 [ 1689.811848][T30363] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1689.817775][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.823413][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.829061][T30363] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1689.834985][T30363] direct_splice_actor+0x101/0x160 [ 1689.840110][T30363] splice_direct_to_actor+0x53a/0xc70 [ 1689.845508][T30363] ? __pfx_direct_splice_actor+0x10/0x10 [ 1689.851159][T30363] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1689.857071][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.862713][T30363] do_splice_direct+0x195/0x290 [ 1689.867580][T30363] ? __pfx_do_splice_direct+0x10/0x10 [ 1689.872962][T30363] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1689.878864][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.884495][T30363] ? rw_verify_area+0x255/0x4d0 [ 1689.889337][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.894970][T30363] do_sendfile+0x535/0x7d0 [ 1689.899392][T30363] ? __pfx_do_sendfile+0x10/0x10 [ 1689.904347][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.909974][T30363] ? __se_sys_futex+0x3a8/0x450 [ 1689.914829][T30363] __se_sys_sendfile64+0x144/0x1a0 [ 1689.919939][T30363] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1689.925570][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.931213][T30363] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1689.936843][T30363] do_syscall_64+0x14d/0xf80 [ 1689.941429][T30363] ? trace_irq_disable+0x3b/0x150 [ 1689.946459][T30363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.952520][T30363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.958404][T30363] RIP: 0033:0x7f82ccf9c799 [ 1689.962809][T30363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.982411][T30363] RSP: 002b:00007f82cde64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1689.990824][T30363] RAX: ffffffffffffffda RBX: 00007f82cd216090 RCX: 00007f82ccf9c799 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1689.998879][T30363] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1690.006840][T30363] RBP: 00007f82cd032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1690.014799][T30363] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000000 [ 1690.022757][T30363] R13: 00007f82cd216128 R14: 00007f82cd216090 R15: 00007ffd6f6ec488 [ 1690.030750][T30363] [ 1690.033757][T30363] Modules linked in: [ 1690.039507][T30363] ---[ end trace 0000000000000000 ]--- [ 1690.074472][T30352] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1690.074472][T30352] [ 1690.172514][T30371] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1690.295253][T29742] team0 (unregistering): Port device team_slave_0 removed [ 1690.369635][T30363] RIP: 0010:ext4_es_cache_extent+0x875/0x9e0 [ 1690.375692][T30363] Code: e1 07 80 c1 03 38 c1 0f 8c 5c fe ff ff 48 8b 7c 24 18 e8 fe ac ad ff e9 4d fe ff ff e8 a4 6e 43 ff 90 0f 0b e8 9c 6e 43 ff 90 <0f> 0b 65 8b 1d e6 98 99 10 bf 07 00 00 00 89 de e8 c6 72 43 ff 83 [ 1690.396791][T30363] RSP: 0018:ffffc900053968a0 EFLAGS: 00010287 [ 1690.402950][T30363] RAX: ffffffff82822744 RBX: 0000000000000069 RCX: 0000000000080000 [ 1690.410936][T30363] RDX: ffffc900137ed000 RSI: 0000000000020ac8 RDI: 0000000000020ac9 [ 1690.436660][T30363] RBP: ffffc900053969e8 R08: ffffc90005396957 R09: ffffc90005396940 [ 1690.446017][T30363] R10: dffffc0000000000 R11: fffff52000a72d2b R12: ffffc90005396940 [ 1690.454755][T30363] R13: 0000000000000070 R14: 000000000000000f R15: dffffc0000000000 [ 1690.462736][T30363] FS: 00007f82cde646c0(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 1690.471817][T30363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1690.478894][T30363] CR2: 00005555758e64e8 CR3: 0000000076b29000 CR4: 0000000000350ef0 [ 1690.487304][T30363] Kernel panic - not syncing: Fatal exception [ 1690.493464][T30363] Kernel Offset: disabled [ 1690.497777][T30363] Rebooting in 86400 seconds..