last executing test programs: 23m48.226894755s ago: executing program 32 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x280440e, &(0x7f0000000140)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@noinit_itable}, {@nombcache}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@oldalloc}, {@nolazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040880", 0x58}], 0x1) r5 = socket$inet6(0xa, 0x802, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=@md5={0x1, "824b97d20b76941857bd320d0def0e19"}, 0x11, 0x3) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x40) chdir(&(0x7f0000000300)='./file0\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4402}, 0x0) capset(0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r6, 0x4b30, 0x7) 23m20.428688122s ago: executing program 33 (id=235): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x0, 0x80, 0x3, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "fd53a9075c52f353"}}, 0x48}, 0x1, 0x0, 0x0, 0x24008080}, 0x20000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x9, 0x400, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x0, 0x76a}) socket$kcm(0x10, 0x2, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 22m52.09349555s ago: executing program 34 (id=298): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, 0x0, 0x0, 0x140, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) getpgrp(0x0) 21m33.085192775s ago: executing program 35 (id=473): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbhid/remove_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200), 0x0) 18m48.453252387s ago: executing program 3 (id=844): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x14000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 18m39.590916321s ago: executing program 3 (id=863): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x4d) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x20000000, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x42, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18m36.537065235s ago: executing program 3 (id=870): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r6, 0x0, 0x0, 0x140, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) getpgrp(0x0) 18m35.274718177s ago: executing program 3 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 18m34.153727814s ago: executing program 3 (id=876): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000000140)="85cb7c0b3684a226c394c9c6b3d9f384192f756b8d2ae9270d5a503bc49aa28222848db24a64", 0x26}, {0x0}, {&(0x7f0000000340)="7560762b28700de3f6f724c5a55830535dd9540f20e0d2d76025ef1886a33a218d44587ccfd369b6d9f12505ab3b74e950573391cb3f7e08450b8edbeeeaf9ce308c621256462cc358ee6e66ed978e0cccabbdbeb3d3930c2677827e1e5920d7673be5330d777e3b7ea9a772d7eea8a63e74c4dbfd95698043aeb9bf1f", 0x7d}, {&(0x7f00000005c0)="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", 0xed1}], 0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 18m32.692308345s ago: executing program 3 (id=879): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x7ff, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 18m30.979508049s ago: executing program 7 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1d6b 0003 0\x00', 0xc) 18m26.930381343s ago: executing program 7 (id=891): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000000140)="85cb7c0b3684a226c394c9c6b3d9f384192f756b8d2ae9270d5a503bc49aa28222848db24a64", 0x26}, {0x0}, {&(0x7f0000000340)="7560762b28700de3f6f724c5a55830535dd9540f20e0d2d76025ef1886a33a218d44587ccfd369b6d9f12505ab3b74e950573391cb3f7e08450b8edbeeeaf9ce308c621256462cc358ee6e66ed978e0cccabbdbeb3d3930c2677827e1e5920d7673be5330d777e3b7ea9a772d7eea8a63e74c4dbfd95698043aeb9bf1f", 0x7d}, {&(0x7f00000005c0)="269cd01a67c01be96ac222af4dcc4a6b843f30453b3da7294b614c19c7da7743415a4c3c2da1969e3ba5e66aa09c811ba0902553cb6926ad0432254b68f6ca2680517517ab89586a2de0978ecf48c7357063f714572f2fd09d97662add29eca47bcc54806253db0b3b7eb030729d772bb2c847e7d301c3dab50d70c0c093001e5e38d15f9cfb07d8b690e38672670b446faa087b93c35cf6b0037c7cae36d1b6acb2db3654b7bec839d2770aad4bddc10241221a231890e56fbf4573c178aa12c9455d70c9a445680b8e684184abd7110240ca7516f6dfe02f251bce879ad149334e40eb9bc5fb3de7abc865626cdd129b8e395b221d4c605e240f61f6a0a7bff4dd2a3db77b3fe78cd7c510671f5095fb8888c24e68996997db24299d690237cd6ee967507e632cf5c76d829d69003bd80b20ff162025b0cdb01074948ac38e76f0cbeaee6deb483291e56fb0fd4f56ec1cd199412e244c7d9b9d32f1096ff52842288149ee18ede572eff7ffc1bcd2a232305f2f4ecf285441ec88d4b25a9ede52943014081e79285d2d7571c6a2483905914df62cc9e05800d37e71b5d16345b96654718aa2267f211b1398f47880080315e2d39f9d2f58f20ac81a4a65ce2b832e94cb9d748a3a09269698eb8d2830f68ed6b26c009e55c8409c98f8284c72786cf2e524d9d5d754eac127b8ee2f23885d61cb6d9c5b62d7c34e099d8e6a57f30b092e8bd426518329ba9c6b89f816286ff67c358385f21bb2b3fa60ed81225e9bdf087a2cf258054112c02b75cee28a2d9c3be38a8aa377468bdcbd416776bd3f2e76945ca4597523e7623d3101033acbc97f58ee2ff6eb5104e8d32675f2bd36395a5d188f0f9f4bebfe3b74f435598864bff118634f318cb7d27704fd2dee6e5d00c5ec0ace3bab8c2556cefa2f03a55f9a3ab623ab4ea8956b3bed229aaf1c3dd74f96f7c1ef8ea3c639eb41c73dcdbe84a15a40bde54cf83c8598f34c5c837835aeaad9ad09237c6592751897736b01958e782a98abcae62a980aeb6001562ad1b945b62f394eb303a33d98f77af4ffb6421a8ad853d198f7f86e9be2ffbeb1188a36d62ed9e27199e65e91ab790e2e21be7143e697f7eb33477d533e7498389ac19e8f135b5d375ed172f0c1ecd3b1d5e75a5b1774d4c8ad9275a91d2276c862362072356bdda8f8bad0dcf6b018614bc3f5bac868d61a870afd26df2e778344bf3f7a06bbfcb824396921fd7b7f84a2f3c7af6a33c9e954017242621ec1d8e2221e0d2bbcb42920d2b2dd094eee847e2675babbdeaf4017e8e545ebfbed94cd8683e8b591bd5993bb92da3e6c485e6cfc9b14925e227fad362e1383efbe17ad9c8f3fb3addd4bb9f8583a257dbbb2c604d7ff1b9992f82fc031536a2ba47f09b408a187c6203cadcde143f1f24f4c579b9a9db703b7c069d40682515ecf668a586899abf367698c6f78779ef8e19250b6b98fc939a2fcbbffb58a14d90dd9cc9649ac4d0c2d90d7c16fae4acc4a4ba59b5ff35754f7f530861ee4692edfb9d5afbc32b00235fb809bc199317a834136ff928249f9bae645862427cf01b947ed20e9473ef22373851102134e4e24f3b8c8443296b96ef71911ba8b80985a87ffcee620b5ab468914cad054cc8fbbfcbb6dacc185714891e7623a299a497c6418dacace2fdec6117e48eae97fb6c56dedbbb579d30695a52cb930859775a5a2bb848baab4de4a20bb222a636d0c537d08c500de713f64afc2bef6852994dabc77b30fa53ac726b74efeba6057108b3ebabfd8b4ef305b8c789bef7bf20e2f269bee925b8d46a67ef95416cec01e1c5408e598267ff7eca3ee2462c5d421701741fb8f6799ecb5088f31174cfe7fdaa36845c1e15718f35829e1add0afa0f71b05eb518f2da608fb996d1e165f5e2d95fcf0399585819b2cf3ef37a499f02b9ccb6cd6c15c2b6b54cda417d0a1dd30db055f64cfde35de57ba03644087e786bfb55657588df3f0cdc98b027c77544a306f5a2afe948974f31b8a73ed7743581d33dbdfe22d6319404bb83e31d9b3abc8280e94933706f94e1b7b6fc917f7390a2d2c36bb35d0beb9de96db2e0017fa48968333f5de7dc79e222d648c822ee436a026d32b9a26688582749b00d3171858e2ed6dca84ea083ea03343a65b45a458c43ea78d45ac8aef470a752ee73b6d9b22370325baafc654b428689abd7e36caf197244bd45c42a69c465f884290d4371c18fbab012be4e5c8c0848178a3ffe45871e748a77854a1250a259ec2feec4eb69f880992e46671d0a0f06f742fc5b7ee6589e589edeb289b6c66d59c7b827c5285fb9ffafe282653822e2ca9afb7fd724f0cb2dc0bc6b6182ab1ae0dd1322c5a154aafad84e92053e86f6baa570e20df2c8cdb01c984f58fdd24a567fb858e1dc65e29dce74a5fc76fe00e3393fa99e81255d2855b797f601e8fbd173ceaf2d2725fcd75a4c7d8cb99215bc75b9efa177da3e8a12407dc69f282311c3d2b9fa34de8599ce2b750e8bd9d3649507c3133acbc9da94afc86878a1cc35c20b391147ab77b93db52b7a878900da48dde2820ade1b70304d08176de8cd5a611fc3f90f176968b390b056493cc881c1d4c4bea2bbd367228e333e48320dc9203e1b9a43025d6790304cc3c148617adf125883d49fb164f396360c5e66eb08e9183cd9c878b08dc7591da4cfe313af70d92c478e2ec948cb006b7586bcf2dab84532043333163cacf64ef97c5fa614f04ed3717aca47755b57f828d72fecfc9d7ed0a1019c1125d9cf577e4c681bd95939751faf387ba55473c1704df3f81eb646f00f84de1330864b23482c45f17a49efba0492acaecc065719063cd1599af118c0e54417c377215182366dcdffa74745a5f7b832f16bcb623030826ee77eaf518a43fc740f4a3a2991802f65434ba962ae0be4b36ed4b5295314d83a691249ed575ab54a3c035caa3f2afda6b0e048b489c66631c10bdf3be8d7a0094a09f35752e3958f541207a66836627297c21365ca6f84cbd6b8303f24bd7b1436e531a8d48c0406eb5c5158d17892e812c2fc55c7464c1d360641f1b2e21ac8774cacb44aedc738dedc07096cf77dced47d0ab69ab912a7cd9db1e7089fabd63bc5f3c53a4d7a0b5375cbc264f227de273fe8e8fdb6f9afe4aff48c491e34a9c1d381810ead6f69382b87d6e909a330be931a362e15005ffbe3fce1aca5e33736ce8d7cb56b593da7771aa85c578d339bff1bd316b3ae01d7d01f60aa7008b8147f5f9037825d9ac0bfe0616ea73e835220be58e01b6959ac54f1c21fa3692b36b70a589fd521d18ab91132a60ca6fdf6dedc398edf24f3d44e43ca60ce4320b884b302aebea4fbcb8f37444a64a1836def01c66a9dbf5f59e8c1d01ed0e83ea869dd4c87021afc75146d6ba9bc367bfe7fb3142aef6a1f871ba959703f61504283d2b04ec66da585e99702580c1ee35a39116172fda99aa0015a3a37a5398b97f4ab2650ddcb701f5dcdfeaad9e80d510ae85c590edd2b60570c01dec36902e7105825c2b63fba2dbbf9023118f1585942acbdc89ccc28b1f33bf35c6fb6960b76e84c3a5158168c98ea3beb28f5994c371d60fe2025a0b2f2df12c133877a20396dec74285fcf37a19f66eef6e824917da8d4afe6bad9401533a1e1ac9b36a21867ae6874e98c8a22a0251a3be96a9580a6c45d2271d0ad91002a38d2edf088e7f79d1ed2e6e86af5afc5f0de9c42c7ffda68fa66f1965796f16784ccd399021d309c0a6701be99941263504e462b8a41dc8b587bb579d13a3dc07071f6af8e386d1a6ee0299612d3c5e8847dd612409b385c86b4f82eb155258fe9f80568ed5d806455187cfdbca7b7b270aa27d15dab5a6595d59992384f8cf2bc25fe1ee282a3ccd85d15c887c1afdd7a61ab8bc5d3661f7c1ed365b07fbdbbe44bd16894f5f6f79b8fc5aaf4c8fc98fada2e8b13062d73055cf915a44e7ff2db86ff316f4ffc47be683b79168ec53414f911aeaa19125ba37dc8446f2c3dd8752390a9f812feb7720f4fe304d7fc1cab94dd49c9bc4e85c368c4d56087144ccafd73202922fd5c2fa6601957c8396c81c60679efa4cb1e50cce4ceb88a665a460996a0b2279001eb5801b2564808500eb34025b9b06620b763b0be139b662206c9697ce294aa6c607a5d4022e26cd3cd177fed8e5a61fbe983e40de4669e36b6c79e8ea6f39de71b2ba0c3bde8a96ff48b7b7347ef13faf21477d6e67e77c69358e8c03b2af7e177a0c21ea6a5ab36bee291ec9e9596deac426c9ce4311b201cebb1ee0fa883b4d5d9c4594f478205b8032f2ba1a66779e5352a65bc5ef3343e2465c67fce3c7e40c0cd0863723d2accb384504c47ac45569b93abc0128094077dfbf8bf023ee511d327f5f0682e6ee1768bf9fca4c0c7443e3801d630cb587c622ad8c0b1f888e72b8f417e4ac30f75c096cf674683fb8c4547231c26db0a90093036a35d814f36a08c1c6057e145412e2e281e6afc3fe8a62141d799e9e9fca9e9e23e116ece9590f04ae0b3b0706df023ff0d8958f78ed24afad1231ca5b6bb17f8d575e770ced07c5ef3943c9f15430a668e716c984e0cc2086aaf502e2cc8248d80888b1e6203c3017af8d1d814d974631217b6505d3d1a9348e4662bb8a5922014fbb005ced5e88f70aa199f9df30df28948051a69ddf875ae64c76c0dbd6c1c89321abc826232d71d640163de55f5b361da33c243ea630557f074f940bac276d2e01484927c542b6d7ff00b05a309c1cc2511aaf3e538d865ae1412bac2df10efe39c6c5709e93ccad2c9b632aaed4deeee24fdd5e031339fee3d9e866501f60f538e3263c7ce6da1e16aeff3a1a7da5fc5b924bd0ee4eb389e206678e1d8163b1d126e4f38992619d3a6957ec9e3b3ae8ca732375a7650c205008b7dd1205d220ae578adfefba2c30a8f9e6bcd2507ad9094484da39f34d959ee7298abf3cc8e1e7357e04fcf2840630f5ee17cfdde3df6a9328212c1e6acd12ae8917e5666f7bc7416caaa7d3d85b5c823332883107a76e79999a2d3dce61ee0c0673c81a4f6173f10360aa1b66e47d4bbf78920b40b9d2d1cc0fa492955952aa4ccb72630ee69cbab6315f919ab033723ebe297511c79cec0c70f19385c88a00ce6b791197a4fd9f774b83e882ff7b3dc15e9fe80c7475d81a1717f958bce0707ea98616d0c1b6c75bea2e8a4b5cd190a421ab54e4dbba8e4cdf7639e703275626dff9a66ec8eaacaf7d4f4e553670d11dcf4dbc4cb0be456ac874a6f66e53c12f7a9a2b46597058e5dc6abe4ab8504765c04908793a5f671cdf51217c99e052f979c03d8552ed", 0xed1}], 0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 18m19.486199875s ago: executing program 7 (id=899): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x5, 0x80000100408b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0xee00, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) sched_setscheduler(0x0, 0x1, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x0, 0x0) 18m15.607419359s ago: executing program 36 (id=879): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x7ff, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 18m15.421461377s ago: executing program 7 (id=903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/lvs/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='2-0:1.0\x00', 0x7) 18m1.317656582s ago: executing program 7 (id=922): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17m57.567220303s ago: executing program 7 (id=925): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 17m42.092990707s ago: executing program 37 (id=925): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) 17m13.30304407s ago: executing program 9 (id=1017): unshare(0x6020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 17m12.768517224s ago: executing program 9 (id=1019): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="02042700ea0e", 0x6}], 0x1}, 0x40080) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208065000070501020002000705820200020009040001040806620007050102000200"], 0x0) 17m10.546895758s ago: executing program 9 (id=1025): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000440)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x40880) 17m9.288826228s ago: executing program 9 (id=1029): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r1, 0x186a0, 0x0) 17m8.010125112s ago: executing program 9 (id=1031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17m5.21049321s ago: executing program 9 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') pread64(r6, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="780000001600000426bd7000fddbdf250a801500", @ANYRES32=0x0, @ANYBLOB="14000200fc0000000000000000000000000000010000010000000000000000000000ffffac1e0001140006000800000004000000ad1e00000800000014000600d828e973000100000800000003000000f0ff09000000008008000a0000000000a079f6c37cdcc1308ab9fa6ff5f8c73a6d876b3c04f742d03be89c4eb6f72ad11a24075bc5cbe69002b44fcf5a5d5288216794a4c77241a10918f64dbfe6d7a4539915f3b9f5"], 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000340)) 16m49.10435686s ago: executing program 38 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8341, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x1, 0x8, 0x40, 0x42, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') pread64(r6, &(0x7f0000000f80)=""/212, 0xd4, 0xffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="780000001600000426bd7000fddbdf250a801500", @ANYRES32=0x0, @ANYBLOB="14000200fc0000000000000000000000000000010000010000000000000000000000ffffac1e0001140006000800000004000000ad1e00000800000014000600d828e973000100000800000003000000f0ff09000000008008000a0000000000a079f6c37cdcc1308ab9fa6ff5f8c73a6d876b3c04f742d03be89c4eb6f72ad11a24075bc5cbe69002b44fcf5a5d5288216794a4c77241a10918f64dbfe6d7a4539915f3b9f5"], 0x78}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) syz_usb_connect(0x3, 0x4a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x48}}, 0x440088c4) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000340)) 4m21.864342141s ago: executing program 4 (id=2892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x10, 0x0, &(0x7f0000000740)=[@clear_death], 0x0, 0x0, 0x0}) 4m21.581881402s ago: executing program 4 (id=2894): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000003840)={0x2020}, 0x2020) write$FUSE_INIT(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 4m20.297130655s ago: executing program 4 (id=2898): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4m19.13044084s ago: executing program 4 (id=2905): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0xf3) utimensat(r0, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x8000, 0x4) fsmount(r0, 0x1, 0x9) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='lzo-rle', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)="001122334455", 0x6) close(r6) lseek(r4, 0x851, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000040)={0xe, 0xee8f, 0x9, 0xb, 0x4, 0x0, 0x81}, 0xc) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0xa84eb75ab268c8ae) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r7, 0xc0106440, &(0x7f00000002c0)={0x2, 0x6, &(0x7f0000000280)}) process_madvise(r3, 0x0, 0x0, 0x19, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x680) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x30, r6, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) 4m17.650209676s ago: executing program 4 (id=2911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x10483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="03002cbd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="0800020000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 4m16.334881118s ago: executing program 4 (id=2916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4m1.093837891s ago: executing program 39 (id=2916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 56.063825669s ago: executing program 8 (id=3569): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x1, 0x1, 0x9, 0xe, 0x32, 0x5}) listen(r1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'hsr0\x00', 0x0}) 49.647612889s ago: executing program 8 (id=3588): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 49.20976218s ago: executing program 8 (id=3590): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4804) eventfd2(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000002200)=[0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 48.475489152s ago: executing program 8 (id=3594): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e20, 0x8}}}}}, 0x0) 48.136421053s ago: executing program 8 (id=3595): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="030000003300000007000000010000000100000001000000090400000000000000090400000000000000090400000000000000", 0x33) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x35, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x6, 0x6, 0x0, 0x5, 0x4, 0x30a429b, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x5, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x7fff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x5, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x40b, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x1, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0xa, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x1, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x4, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x4, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x9, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x808, 0x6, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xffffff80, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 47.793044294s ago: executing program 8 (id=3598): socket(0x400000000010, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"/895, @ANYBLOB="a8d21780adf9979b3c8b3471fb84b619a98a78d8744a4cd48064e74fb4f7965cf2c3ca917310902f6dbd0b19f756e4f3f0235ff472fe861a19f0aa52c589b4f73d3a6aa10c70f2027513f61625a63db51babed51b07ea16656d8405ff5de7b126f6c3d519528263122963463893decb36030e6b89623148f4bc0f4bef201847695959eb4567aa67451a77470e422d9da6f194843ad71879d6d46800a20c970", @ANYRESOCT], 0x1, 0x2b1, &(0x7f0000000100)="$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") ftruncate(0xffffffffffffffff, 0x5) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="041817aaee93183d38ea191735aaaaaa"], 0x1a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000002f40)=""/4079, 0x7c4) 22.040814672s ago: executing program 6 (id=3672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4442, &(0x7f0000004480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) write$P9_RRENAMEAT(r2, &(0x7f0000000240)={0x7, 0x4b, 0x1}, 0x7) lseek(r2, 0x0, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) fstat(r3, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000640)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000004,iocharset=cp949,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-3,fmask=00000000000000000000000,uid=', @ANYRESHEX, @ANYBLOB=',errors=remount-ro,errors=continue,allow_utime=00000000000000000200000,time_offset=0xfffffffffgffff05,\x00'], 0x4, 0x153b, &(0x7f0000001280)="$eJzs3AmcjlX7OPDrOufcY0h6mmQZzjnXzZMshyTJkiRLkiRJki0hSfJKQmLIljQkIVmGZBlCskxMGvu+LwlJ8k6SZMuWnP9nYv7qrff/9vu9vfn9f3N9P5/nM+ea81znvu655rmf+75n+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8exthf65Hkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/VjWL3///d0kvOfartSVv7AoQ80dTuP///8N/I5f7/79W8EeexP3P2rj/WVXs1S6A/Q/Ar/+sINs/neH+Z23cf8aysl/eC46Fq38/+q9+QOQ/+TMQ3+vSV/nq7+c/3X/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+wvcNZfoQAgc3y162KMMcYYY4wxxtifx2e72hUwxhhjjDHGGGPsPw9BgAQFAcRANoiF7JADBEBM5vz1EAc3QG64EfJAXsgH+SEeCkBB0GDAAkEIhaAwROEmKAI3Q1EoBsWhBDgoCaXgFigNt0IZuA3Kwu1QDu6A8lABKkIluBMqw11QBe6GqnAPVIPqUANqwr1QC+6D2nA/1IEHoC48CPXgIagPD0MDeAQawqPQCB6DxvA4NIGm0AyaQ4v/Vv5L0ANehp7QCxKgN/SBV6Av9IP+MAAGwqswCF6DwfA6JMIQGApvwDB4E4bDWzACRsIoeBtGwzswBsbCOBgPSTABJsK7MAneg8kwBabCNEiG6TAD3oeZMAtmwwcwBz6EuTAP5sMCSIGPYCEsglT4GBbDJ5AGS2ApSFgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A47YCd8CrvgM9gNe2AvfA774IvL+cv+YP6Zf8jvioCAAgUqVBiDMRiLsZgDc2BOzIm5MBdGMIJxGIe5MTfmwTyYD/NhPMZjQSyIBg0SEhbCQhjFKBbBIlgUi2JxLI4OHZbCUlgab8UyWAbLYlksh+WwPFbAClgJK2FlrIxVsApWxapYDathDayB9+K92BtrY22sg3WwLtbNvD2FDbABNsSG2AgbYWNsjE2wCTbDZtgCW2BLbImtsBW2wTbYFttiO2yH7bE9dsAO2BE7YifshJ2xM3bBLtgVu2G39JeyAb6ML2MvrCZ6Yx/sg30xMVt/HIAD8FUchK/ha/g6JuIQHIpv4Bv4Jg7H0zji4kgchaOwsngHx+BYJDEekzAJJ+JEnISTcDJOwSk4DZNxOs7AGTgTZ+Es/ADn4If4Ic7DebgAUzAFF+IiTMVUXIxnMA2X4FJchstxBS7HVbgaV+FaXIdrcQNuwE24CbfgFtyG23AH7sBPUQHgZ7gH92Ai7sN9uB/34wE8gAfxIKZjOh7CQ3gYD+MRPIJH8Sgew+N4Ao/jKTyFp/EMnsWzeB7P4wV8If7rhp8WW5MIIoMSSsSIGBErYkUOkUPkFDlFLpFLRERExIk4kVvkFnlEHpFP5BPxIl4UFAWFEUaQCDOOFCIqoqKIKCKKiqKiuCgunHCilCglSovSoowoI8qK20U5cYcoLyqI1q6SqCQqizauirhbVBVVRTVRXdQQNUVNUUvUErVFbVFH1BF1RV1RTzwk6ove2B8fERmdaSSGYGMxFJuIpkJePkK1FMOxlWgt2oinxEgcge1ES9dePCs6iDHYUfxNjMXnRWcxHruIF0VX0U10Fy+JHqKV6yl6icnYW/QR07Cv6Cf6iwFiJlYXH+Cc7DXE6yJRDBFDxRtiAb4phou3xAgxUowSb4vR4h0xRowV48R4kSQmiIniXTFJvCcmiyliqpgmksV0MUO8L2aKWWK2+EDMER+KuWKemC8WiBTxkVgoFolU8bFYLD4RaWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Vu8RnYrfYI/aKz8U+8YXYL74UB8RX4qD4u0gXX4tD4htxWHwrjojvxFHxvTgmjosT4qQ4JX4Qp8UZcVacE+fFj+KC+ElcFF6ARCmklEoGMkZmk7Eyu8whr5E5ZZB5/Jdx8gaZW94o88i8Mp/ML+NlAVlQammklSRDWUgWllF5kywib5ZFZTFZXJaQTpaUpeQtsrS8VZaRt8my8nZZTt4hy8sKsqKsJO+UleVdEiKXtlFNVpc1ZE15r0yA+2Rteb+sIx+QdeWDsp58SNaXD8sG8hHZUD4qG8nHZGP5uGwim8pmsrlsIZ+QLeWTspVsLdvIp2Rb+bRsJ5+R7eWzsoP0l79Fnped5Quyi3xRdpXdZHf5k7wovewpe0noDbKPfEX2lf1kfzlADpSvykHyNTlYvi4T5RA5VL4hh8k35XD5lhwhR8pR8m05Wr4jx8ixcpwcL5PkBDlRvisnyffkZDlFTpXTZLKcLvtfXmm2lP8y/93fyR/889Y3yc1yi9wqt8ntcofcKT+Vu+QuuVvulnvlXrlP7pP75X55QB6QB+VBmS7T5SF5SB6Wh+UReUQelUflMXlcnpMn5Sn5gzwtz8gz8pw8L8/LC5e/BqBQCSWVUoGKUdlUrMqucqhrVE51rcqlrlMRdb2KUzeo3OpGlUflVflUfhWvCqiCSiujrCIVqkKqsIqqm/DyN4wqrkoop0qqUuqW/0q+KqJuVkVVsV/lZ9aX8E/qa6FaqJaqpWqlWqk2qo1qq9qqdqqdaq/aqw6qg+qoOqpOqpPqrDqrLqqL6qq6qu6qu+qheqieqqdKUAmqj3pF9VX9VH81QA1Ur4qMfRisBqtElaiGKqGGqWFquBquRqgRapQapUar0WqMGqPGqXEqSSWpiWqikmqSmqwmq6lqqkpWyWqGmqFmqplqtpqt5qg5aq6aq+ar+SpFpaiFaqFKValqsVqs0tQStUQtU8vUCrVCrVKr1Bq1Rq1T69QGtUGlqc1qs9qqtqrtarvaqXaqXWqX2q12q71qr9qn9qn9ar86oA6og+qgSlfp6pA6pA6rw+qIOqKOqqPqmDqmTqgT6pQ6pU6r0+qsOqvOq/PqgrqgLqqLGad9gQhEoAIVxAQxQWwQG+QIcgQ5g5xBriBXEAkiQVwQF+QObgzyBHmDfEH+ID4oEBQMdGACG4jLTY8GNwVFgpuDokGxoHhQInBByaBUcEtQOrg1KBPcFpQNbg/KBXcE5YMKQcWgUnBnUDm4K6gS3B1UDe4JqgXVgxpBzeDeoFZwX1A7uD+oEzwQ1A0eDOoFDwX1g4eDBsEjQcPg0aBR8FjQOHg8aBI0DZoFzYMWf+r63p/O+6TrqXvpBN1b99Gv6L66n+6vB+iB+lU9SL+mB+vXdaIeoofqN/Qw/aYert/SI/RIPUq/rUfrd/QYPVaP0+N1kp6gJ+p39ST9np6sp+ipeppO1tP1DP2+nqln6dn6Az1Hf6jn6nl6vl6gU/RHeqFepFP1x3qx/kSn6SV6qV6ml+sVeqVepVfrNXqtXqfX6w16o96kN+steqveprfrHXqn/lTv0p/p3XqP3qs/1/v0F3q//lIf0F/pg/rvOl1/rQ/pb/Rh/a0+or/TR/X3+pg+rsvok/qU/kGf1mf0WX1On9c/6gv6J31R+4yT+4y3d6OMMjEmxsSaWJPD5DA5TU6Ty+QyERMxcSbO5Da5TR6Tx+Qz+Uy8iTcFTUGTgQyZQqaQiZqoKWKKmKKmqCluihtnnCllSpnSprQpY8qYsqasKWfKmfKmvKloKpo7zZ3mLnOXudvcbe4x95jqprqpaWqaWqaWqW1qmzqmjqlr6pp6pp6pb+qbBqaBaWgamkamkWlsGpsmpolpZpqZFqaFaWlamlamlWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPpYrqYrqar6W66mx6mh+lpepoEk2D6mD6mr+lr+pv+ZqAZaAaZQWawGWwSTaIZaoaaYWaYGW6GmxFmpBmVcaJq3jFjzFgzzow3SSbJTDQTzSQzyUw2k81UM9Ukm2Qzw8wwM81MM9vMNnPMHDPXzDXzzXyTYlLMQrPQpJpUs9gsNmkmzSw1S81ys9ysNCvNarParDVrzXpYbzaajWaz2Wy2mq1mu9ludpqdZpfZZXab3Wav2Wv2mX1mv9lvDpgD5qA5aNJNujlkDpnD5rA5Yo6Yo+aoOWaOmRPmhDllTpnT5rQ5a86a8ybv5fdLb2JtdpvDXmNz2mttLnud/cc4n81v420BW9Bqm8fm/VVsrLVFbTFbHEtYZ0vaUvaWS7G9Epe3FWxFW8neaSvbu2yVX8c5q9ha6j5b295v69gHbE17r61lr8R17YO2nn3M1kcEsE1tQ9vcNrKP2cb2cdvENrXNbHPb1j5t29lnbHv7rO1gn/tNvNAusqvtGrvWrrO77R571p6zh+239rz90fa0vexA+6odZF+zg+3rNtEO+U08yr5tR9t37Bg71o6z438TT7XTbLKdbmfY9+1MO+s3cYr9yM6xqXaunWfn2wU/xxk1pdqP7WL7iU2zASy1y+xyu8KutKv+b63L7Aa70W6yu+xndqvdZrfbHXZn5omw3WP32s/tPvuFPWS/sQfsV/agPWLT7dc/xxn7d8R+Z4/a7+0xe9yesCftKfuDyszO2PeT9id70XoLhAQkSVFAMZSNYik75aBrKCddS7noOorQ9RRHN1BuupHyUF7KR/kpngpQQdJkyBJRSIWoMEXpJsosrziVIEclqRTdQqXpVipDt1FZup3K0R1UnipQRapEd1Jluouq0N1Ule6halSdalBNupdq0X1Um+6nOvQA1aUHqR49RPXpYWpAj1BDepQa0WPUmB6nJtSUmlFzakFPUEt6klpRa2pDT1Fbepra0TPUnp6lDvQcdaS/USd6njrTC9SFXqSu1I2600vUg16mntSLEqg39aFXqC/1o/40gAbSqzSIXqPB9Dol0hAaSm/QMHqThtNbNIJG0ih6m0bTOzSGxtI4Gk9JNIEm0rs0id6jyTSFptI0SqbpNIPep5k0i2bTBzSHPqS5NI/m0wJKoY9oIS2iVPqYFtMnlEZLaCkto+W0glbSKlpNa2gtraP1tIE20ibaTFtoK22j7bSDdtKntIs+o920h/bS57SPvqD99CUdoK/oIP2d0ulrOkTf0GH6lo7Qd74XfU/H6DidoJN0in6g03SGztI5Ok8/0gX6iS6SJwgxFKEMVRiEMWG2MDbMHuYIrwlzhteGucLrwkh4fRgX3hDmDm8M84R5w3xh/jA+LBAWDHVoQhtSGIaFwsJhNLwpLBLeHBYNi4XFwxKhC0uGpcJbwtLhrWGZ8LawbHh7WC68IywfVggfe6BSeGdYObwrrBLeHVYN7wmrhdXDGmHN8N6wVnhfWDu8P6wTPhCWCR8M64UPhfXDh8MG4SNhw/DRsFH4WNg4fDxsEjYNm4XNwxbhE2HL8MmwVdg6bBNeE7YNnw7bhc+E7cNnww7hcz/PP7goc/6p38wnhL3DPuEr4Suh9/fL+dEF0ZToR9GF0UXR1OjH0cXRT6Jp0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3RjdFNUe9rZgOHTjjplAtcjMvmYl12l8Nd43K6a10ud52LuOtdnLvB5XY3ujwur8vn8rt4V8AVdNoZZx250BVyhV3U3eSKuJtdUVfMFXclnHMlXSnX3LVwLVxL96Rr5Vq7Nu4p95R72j3tnnHPuGddB/ec6+j+5jq5511n94J7wb3ourpurrt7yfVwE3Jdek0muD6uj+vr+rr+rr8b6Aa6QW6QG+wGu0SX6Ia6oW6YG+aGu+FuhBvhRrlRbrQb7ca4MW6cG+eSXJKb6Ca6SW6Sm+wmu6luqkt2yW6Gm+Fmupmu8qxLW5nr5rr5br5LcSluocs4Z0x1i91il+bS3FK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtd9vdTrfT7XK73G5/3aVF3T633+13B9wBd9D93aW7r90h94077L51R9x37qj73h1zx90Jd9Kdcj+40+6MO+vOufPuR3fB/eQuOu+SIhMiEyPvRiZF3otMjkyJTI1MiyRHpkdmRN6PzIzMisyOfBCZE/kwMjcyLzI/siCSEvkosjCyKJIa+TiyOPJJJC2yJLI0siyyPLIi4n2BraEv5Av7qL/JF/E3+6K+mC/uS3jnS/pS/hZf+lLdad7f7sv5O3x5X8FX9I/7Jr6pb+ab+xb+Cd/SP+lb+da+jX/Kt/VP+3b+Gd/eP+s7+Od8R/8338k/7zv7F3wX/6Lv6rv57v4l38O/7Hv6Xj7B9/Z9/Cu+r+/n+/sBfqB/1Q/yr/nB/nWf6If4of4NP8y/6Yf7t/wIP9KPinnbj868RIbxPslP8BP9u36Sf89P9lP8VD/NJ/vpfoZ/38/0s/xs/4Gf4z/0c/08P98v8Cn+I7/QL/Kp/mO/2H/i0/ySzJvGfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7HX6n/9Tv8p/53X6P3+s/9/v8F36//9IfuJj5F2hf+0P+G3/Yf+uP+O/8Uf+9P+aP+xP+pD/lf/Cn/Rl/1p/z5/2P/oL/yV/kv1ljjDHGGPtDJlwZil/PXLqd3/t3csQvntwHAK7dlj/9l/MZZ5Tr81wa9xPxsRkfn+3V5ZHMR7VqCQkJl5+bJiEoPA8g8ydBGX7+1YPL8RJoA09De2gNpX+3/n6i23n6F+tHbwfI8YucjIIy4yvrfwmACb+z/hNPjVpYLjwb9/9Yfx5A0cJXcrLDlXgJtPn5/kprKPNP6s/b8l/Un/2rJIBWv8jJCVfiK/WXgifhOWj/q2cyxhhjjDHGGGOX9BMVO2Vef2b+xufvXZ/Hqys52eBK/K+uzxljjDHGGGOMMXb1Pd+t+zNPtG/futN/fVDlv5X1hweN4T+1Mg9+d+A9QOZnFAD8mwsCZAzkX7kXW/6SbSVefun849Tycz6A/xmt/DMGV/nAxBhjjDHGGPvTXTnp//Xn1dUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+in8ndrX3kTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/k8AAAD//0Z4+eU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r4, 0x0, 0x9, 0x10001) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xf79c, 0x863, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x400030d, 0x2002, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000180)={0x7fff, 0x0, 0x3015, 0x7f, 0x7fff, 0x5, 0xfffffff9}) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r7, &(0x7f00000000c0)="9a", 0x1, 0x804, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 17.643608131s ago: executing program 6 (id=3684): syz_emit_vhci(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) 16.003363023s ago: executing program 0 (id=3692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x100, 0x4, 0x0, 0x3, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, r7, 0x2000) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="97fa9587e01e", @broadcast, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xdc, 0x3, 0x2}]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0xb, 0x0, 0x0, 0x5, 0x4, "5105a2", 0x8, 'iH9'}}}}}}, 0x0) 15.235242143s ago: executing program 1 (id=3693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x453, 0x2, 0x70bd29, 0x25dfdbfe, "66168b6c5007480e5d89807815bbf41eb5eeae400d", ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r5, 0x2, &(0x7f0000000840)=[0x0, 0x0]) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$ethtool(0x0, r4) 14.062243363s ago: executing program 0 (id=3697): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.827741138s ago: executing program 1 (id=3698): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000340)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 13.589058154s ago: executing program 0 (id=3699): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000280)={[{@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@acl}, {@stripe={'stripe', 0x3d, 0x2}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8e6e}}, {@debug}, {@auto_da_alloc}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9", 0x43, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 13.43210622s ago: executing program 1 (id=3701): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={0x0, 0x0, 0x4f, 0x0, 0x8}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) futex(&(0x7f0000000000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fbfffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x3], 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r7, 0x1d, 0x0, @void}, 0x10) 11.932560595s ago: executing program 0 (id=3703): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) 10.512405768s ago: executing program 1 (id=3706): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', 0x0, &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)="031b0000330000000700000001000000", 0x33) 10.511983391s ago: executing program 0 (id=3707): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$getregs(0xc, r0, 0xeb, &(0x7f0000000300)=""/180) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x60040000) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x3000084, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x22020400) move_mount(r4, 0x0, r5, 0x0, 0x46) 10.248328013s ago: executing program 2 (id=3709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x453, 0x2, 0x70bd29, 0x25dfdbfe, "66168b6c5007480e5d89807815bbf41eb5eeae400d", ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r5, 0x2, &(0x7f0000000840)=[0x0, 0x0]) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$ethtool(0x0, r4) 8.23886117s ago: executing program 1 (id=3710): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x121500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x3, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) 8.066619355s ago: executing program 5 (id=3711): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000500)="600000040014334000000000000000000000000000000001000000000000000000000200a52af834", 0x28, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 6.721109293s ago: executing program 5 (id=3712): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000340)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 6.558147029s ago: executing program 2 (id=3713): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) shmctl$SHM_UNLOCK(0x0, 0xc) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/202, 0xca, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r5}, 0x18) write$UHID_INPUT(r1, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) 5.860344497s ago: executing program 1 (id=3714): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'\x00', 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 5.776393047s ago: executing program 5 (id=3715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f00000001c0), &(0x7f0000000040), &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) timer_create(0x0, 0x0, &(0x7f00000004c0)) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000500)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000780)={r5, 0x100, 0x4, 0x0, 0x3, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x9, 0xfffffffc], [0x1, 0x0, 0x7]}) mmap(&(0x7f00009a9000/0x2000)=nil, 0x2000, 0x2000009, 0x13, 0xffffffffffffffff, 0x2000) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="97fa9587e01e", @broadcast, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x20, 0x28, 0x66, 0x0, 0x0, 0x21, 0x0, @private=0xa010101, @local, {[@timestamp_prespec={0x44, 0x4, 0xdc, 0x3, 0x2}]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0xb, 0x0, 0x0, 0x5, 0x4, "5105a2", 0x8, 'iH9'}}}}}}, 0x0) 4.754723379s ago: executing program 5 (id=3716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x40003}}, 0x5c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.744780423s ago: executing program 2 (id=3717): syz_read_part_table(0x5f6, &(0x7f0000000000)="$eJzs1L+LHGUYB/Dvu3Ozs4cXTySFGJH0gs1VFofkL0gQtLC3E4uAhdXukRR2IthYiI2iWHiNioViIzmxsBYrCcHWRhQkMPLO7OxuBEE8JUQ+H5aZ98ezz/vOvs9seKDNx1vJU9PI4ZMflyT9cpms9pJ2PX67W2SV9H3fjwOXk+c/eu4gn7c7+S6XgyFtTZHfp9jVONncu3aNqSvkrJm66+3k2W3EmKZ6570fS/pLf/UoNVMW2/6Ff/Bz8IA5Pb51eGPWdxfGg29rBT1Txoq80zfpl6W0m7JaO/pqW9bn1ExVWkq+3w7PulrWh2Onm0Z/qpss65chw7tR1jWeLIdrnWzb5GQT1O9sfsr06fiWcd8N9Xfz+nw6xXcv3i5llldqDWSW5Zvtb31/si6Su/3mP6nZrQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/wV6S+ab3bY72s3/pjdp+bBo8SreNb5J8l8XYeas79/qnx7cOb9y8vp+ujAPtvJ3mztpcvfZw3d4jSZ2eDZ+cJFm8MITMz70B7qvT4/W5v3b86/rgDzKedh794ev9Ke6X+WJ58dWhu8pQf0MNfrKT6v2HNs3u3sY00TfDtxQNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy/LbbNUua7M6vh2vdNHv/yxQ9f/ubK4uyl5Gr3WZK75c95rnXj/YtZujyRPL1Xe/PceT354O3abrYL1bRXfv7Pnom/748AAAD//59jXqk=") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ptrace(0x10, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 4.709323737s ago: executing program 6 (id=3718): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1c1, &(0x7f0000000440)="$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") 4.163405433s ago: executing program 0 (id=3719): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) 3.768650416s ago: executing program 6 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="680000001800050602000000000000000a400000fe040001000000001400010020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x68) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="6c0000001800050604000000000000000a400000fe040001000000001400010020010db800c0000000000000000000010c00080008000200dc05000008000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x6c) write(r0, &(0x7f0000000000)="7c0000001800050605000000000000000a400000fe040001000000001400010020010db800d0000000000000000000011c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000", 0x5c) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000000), 0x0) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800030000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800040000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800050000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800060000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800070000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800", 0x54) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000c00000000000000000001080004000100", 0x36) write(r0, &(0x7f0000000000), 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8000f0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001000000000000000000001080004000100", 0x36) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800130000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef050008000100000005000700020000", 0x5f) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800140000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800160000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800170000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800180000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800190000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001a0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001b0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef050008000100000005000700020000", 0x5f) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001c0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001d0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) write(r0, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db8001e0000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800010000000500070002000000", 0x60) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) 3.634836973s ago: executing program 5 (id=3721): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 3.465803074s ago: executing program 2 (id=3722): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24088000) r0 = io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bff, 0x1, 0x0, 0xc}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x93bdb000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/138, &(0x7f0000000340)=0xfffffffffffffeab) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.136872737s ago: executing program 6 (id=3723): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000500)="600000040014334000000000000000000000000000000001000000000000000000000200a52af834", 0x28, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 2.603427352s ago: executing program 2 (id=3724): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x453, 0x2, 0x70bd29, 0x25dfdbfe, "66168b6c5007480e5d89807815bbf41eb5eeae400d", ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r5, 0x2, &(0x7f0000000840)=[0x0, 0x0]) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000140)) syz_genetlink_get_family_id$ethtool(0x0, r4) 1.060254921s ago: executing program 6 (id=3725): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x401, 0x8, 0xaf2, 0x0, 0x8, 0xf, 0xfd, "d48283cf5eb388b31bed056da363b62d4288e03d", "a2f5baaa44d85db1c9041280676a36114716c0c9"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x5a3f6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x51}, 0x1c) socket(0x3, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320003000000000000000000000010003c00010000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 497.264043ms ago: executing program 2 (id=3726): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000340)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 0s ago: executing program 5 (id=3727): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x5, 0x100000001, 0x425}) kernel console output (not intermixed with test programs): al = 5 seconds, CP frequency < 30 seconds [ 1198.078765][T16624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2285'. [ 1198.206219][T16629] loop6: detected capacity change from 0 to 512 [ 1198.217774][T16629] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1198.237322][T16629] EXT4-fs (loop6): 1 truncate cleaned up [ 1198.257487][T16629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1199.511737][T16639] binder: 16635:16639 ioctl 4018620d 0 returned -22 [ 1199.532051][T16639] binder: 16635:16639 ioctl c0306201 0 returned -14 [ 1200.897533][ T8885] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1200.988336][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.187490][ T8885] usb 9-1: device descriptor read/all, error -71 [ 1201.668289][T16652] loop2: detected capacity change from 0 to 128 [ 1204.181080][T16679] binder: 16675:16679 ioctl 4018620d 0 returned -22 [ 1204.205464][T16679] binder: 16675:16679 ioctl c0306201 0 returned -14 [ 1207.531704][T16695] loop8: detected capacity change from 0 to 16 [ 1207.538785][T16695] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1207.970454][ T5765] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1209.000021][ T5765] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1209.156457][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.327643][ T5765] usb 3-1: Product: syz [ 1209.406442][ T5765] usb 3-1: Manufacturer: syz [ 1209.458675][ T5765] usb 3-1: SerialNumber: syz [ 1209.502795][ T5765] usb 3-1: config 0 descriptor?? [ 1209.562313][ T5765] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1209.572407][T16715] loop1: detected capacity change from 0 to 256 [ 1209.581492][T16715] exfat: Deprecated parameter 'namecase' [ 1210.196546][T16716] binder: 16712:16716 ioctl 4018620d 0 returned -22 [ 1210.208224][T16716] binder: 16712:16716 ioctl c0306201 0 returned -14 [ 1211.658976][ T5765] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1211.679450][ T5765] sq905c 3-1:0.0: Get version command failed [ 1211.698205][ T5765] sq905c 3-1:0.0: probe with driver sq905c failed with error -110 [ 1212.385700][T16715] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1212.473957][ T5765] usb 3-1: USB disconnect, device number 5 [ 1213.983907][ T5765] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1214.234829][ T5765] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1214.251190][ T5765] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1214.264671][ T5765] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1214.276699][ T5765] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1214.303167][ T5765] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1214.313993][ T5765] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.320503][T16742] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2304'. [ 1214.331338][ T5765] usb 9-1: Product: syz [ 1214.342814][ T5765] usb 9-1: Manufacturer: syz [ 1214.359143][ T5765] usb 9-1: SerialNumber: syz [ 1214.386346][ T5765] usb 9-1: config 0 descriptor?? [ 1214.415176][ T5765] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input12 [ 1214.857370][ T5765] usb 9-1: USB disconnect, device number 17 [ 1214.959837][ T24] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 1215.164111][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 8 [ 1215.181246][ T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1215.257317][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 1215.283160][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1216.271925][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 1216.650756][T16765] netlink: 'syz.1.2334': attribute type 1 has an invalid length. [ 1216.708448][T16765] netlink: 'syz.1.2334': attribute type 2 has an invalid length. [ 1216.784424][T16765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2334'. [ 1217.242447][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1217.259352][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1217.268437][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.282423][ T30] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1217.517068][T16781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1217.612619][ T24] usb 3-1: config 0 descriptor?? [ 1217.617858][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.626619][T16753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1217.635148][ T30] usb 6-1: Product: syz [ 1217.640546][ T30] usb 6-1: Manufacturer: syz [ 1217.647606][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 1217.659348][ T30] usb 6-1: SerialNumber: syz [ 1217.669343][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1217.710848][ T30] usb 6-1: config 0 descriptor?? [ 1217.750194][ T30] hub 6-1:0.0: bad descriptor, ignoring hub [ 1217.756144][ T30] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1217.795778][ T30] f81232 6-1:0.0: f81534a converter detected [ 1218.059510][ T8885] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1218.557733][ T8885] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1218.766754][ T8885] usb 7-1: config 12 has an invalid interface number: 72 but max is 0 [ 1218.877278][ T8885] usb 7-1: config 12 has no interface number 0 [ 1218.880615][ T24] usb 3-1: USB disconnect, device number 6 [ 1218.965363][ T8885] usb 7-1: config 12 interface 72 has no altsetting 0 [ 1219.218575][ T8885] usb 7-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=c8.14 [ 1219.285163][ T8885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.846740][ T30] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1219.855443][ T30] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1220.265652][ T8885] usb 7-1: Product: syz [ 1220.271570][ T8885] usb 7-1: Manufacturer: syz [ 1220.276342][ T8885] usb 7-1: SerialNumber: syz [ 1220.352231][ T30] usb 6-1: USB disconnect, device number 2 [ 1220.395522][ T30] f81232 6-1:0.0: device disconnected [ 1220.553781][ T8885] ftdi_sio 7-1:12.72: FTDI USB Serial Device converter detected [ 1220.578216][ T8885] ftdi_sio ttyUSB0: unknown device type: 0xc814 [ 1220.607441][ T8885] usb 7-1: USB disconnect, device number 12 [ 1220.650098][ T8885] ftdi_sio 7-1:12.72: device disconnected [ 1220.809479][T16805] loop1: detected capacity change from 0 to 256 [ 1220.817095][T16805] exfat: Deprecated parameter 'utf8' [ 1220.822640][T16805] exfat: Deprecated parameter 'namecase' [ 1220.840671][T16805] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d) [ 1221.327256][T16819] loop2: detected capacity change from 0 to 2048 [ 1221.501566][T16824] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1221.719066][T16827] netlink: 'syz.6.2359': attribute type 27 has an invalid length. [ 1221.759744][T16827] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2359'. [ 1221.980571][T16832] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1223.067485][T16839] loop6: detected capacity change from 0 to 32768 [ 1223.161537][T16839] JBD2: Ignoring recovery information on journal [ 1223.191099][T16824] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1223.249745][T16839] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1223.330638][T16824] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1223.354162][T16824] Remounting filesystem read-only [ 1224.440302][ T4935] Bluetooth: hci3: Malformed HCI Event [ 1224.611606][ T7773] ocfs2: Unmounting device (7,6) on (node local) [ 1224.744645][T16854] loop8: detected capacity change from 0 to 256 [ 1224.752104][T16854] exfat: Deprecated parameter 'utf8' [ 1224.757474][T16854] exfat: Deprecated parameter 'namecase' [ 1224.784491][T16854] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0x01ce8137, utbl_chksum : 0xe619d30d) [ 1225.449484][ T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1225.487519][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2374'. [ 1225.622826][ T30] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1225.661311][ T30] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1225.680807][T16885] loop6: detected capacity change from 0 to 2048 [ 1225.702994][ T30] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1225.716018][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1225.740811][T16887] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1225.751652][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1225.774514][ T30] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1225.791291][ T30] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1225.809319][ T30] usb 3-1: Product: syz [ 1225.814467][ T30] usb 3-1: Manufacturer: syz [ 1225.871238][ T30] cdc_wdm 3-1:1.0: skipping garbage [ 1226.140901][ T30] cdc_wdm 3-1:1.0: skipping garbage [ 1226.746990][T16894] loop8: detected capacity change from 0 to 32768 [ 1226.893550][T16894] JBD2: Ignoring recovery information on journal [ 1226.951873][T16894] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1226.958340][ T30] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1227.229991][T16885] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1227.242570][ T30] cdc_wdm 3-1:1.0: Unknown control protocol [ 1227.599141][ T7707] ocfs2: Unmounting device (7,8) on (node local) [ 1227.942316][ T4935] Bluetooth: hci0: Malformed HCI Event [ 1228.020774][T16908] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1228.082410][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 1228.121967][T16910] loop8: detected capacity change from 0 to 512 [ 1228.176486][T16910] EXT4-fs: Mount option(s) incompatible with ext2 [ 1228.195661][T16887] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1228.236095][T16887] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1228.269135][T16887] Remounting filesystem read-only [ 1228.607367][ T9] usb 3-1: USB disconnect, device number 7 [ 1229.022150][ T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1229.224312][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1229.275097][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.338505][ T30] usb 7-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1229.360461][T16935] loop8: detected capacity change from 0 to 32768 [ 1229.397792][T16935] JBD2: Ignoring recovery information on journal [ 1229.401268][ T30] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1229.425408][ T30] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1229.435314][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.450977][ T30] usb 7-1: Product: syz [ 1229.455252][ T30] usb 7-1: Manufacturer: syz [ 1229.460646][ T30] usb 7-1: SerialNumber: syz [ 1229.478611][T16935] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1229.726893][ T30] cdc_ether 7-1:1.0: missing cdc ether descriptor [ 1229.758162][ T30] usb 7-1: USB disconnect, device number 13 [ 1229.855662][ T7707] ocfs2: Unmounting device (7,8) on (node local) [ 1230.144262][T16949] loop1: detected capacity change from 0 to 128 [ 1230.177258][T16944] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.290316][T16949] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1230.304361][T16949] hpfs: filesystem error: improperly stopped [ 1230.310459][T16949] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1230.320636][T16949] hpfs: You really don't want any checks? You are crazy... [ 1230.327849][T16949] hpfs: Code page index out of array [ 1230.333178][T16949] hpfs: code page support is disabled [ 1230.563601][T16949] hpfs: hpfs_map_4sectors(): unaligned read [ 1230.569728][T16949] hpfs: hpfs_map_4sectors(): unaligned read [ 1230.576997][T16949] hpfs: filesystem error: unable to find root dir [ 1231.296777][ T4935] Bluetooth: hci3: Malformed HCI Event [ 1231.604498][T16963] loop2: detected capacity change from 0 to 32768 [ 1231.727429][T16963] JBD2: Ignoring recovery information on journal [ 1231.742557][T16966] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1231.854110][T16963] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1232.243623][T14269] ocfs2: Unmounting device (7,2) on (node local) [ 1232.323485][ T5783] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1232.511823][ T5783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.557404][ T5783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.598336][ T5783] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1232.638470][ T5783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.678936][ T5783] usb 9-1: config 0 descriptor?? [ 1232.958879][T16990] loop6: detected capacity change from 0 to 2048 [ 1233.088038][T16992] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1233.136179][ T5783] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 1233.195832][T16990] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1233.271842][T16992] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1233.323062][ T5783] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0005/input/input13 [ 1233.355253][T16992] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1233.411071][T16992] Remounting filesystem read-only [ 1233.923876][ T5783] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1233.989428][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1234.097865][ T5783] usb 9-1: USB disconnect, device number 18 [ 1234.189404][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1234.233267][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.335742][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.391556][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1234.473716][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1234.557709][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.593127][T17002] fido_id[17002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1234.648404][ T24] usb 7-1: config 0 descriptor?? [ 1234.908583][ T4935] Bluetooth: hci1: Malformed HCI Event [ 1235.066070][T17014] loop1: detected capacity change from 0 to 512 [ 1235.184515][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1235.196635][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1235.203945][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1235.207218][T17014] EXT4-fs: Mount option(s) incompatible with ext2 [ 1235.219049][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1235.238795][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1235.292458][ T24] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 1235.553071][ T24] microsoft 0003:045E:07DA.0006: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1235.564589][ T24] microsoft 0003:045E:07DA.0006: no inputs found [ 1235.571387][ T24] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 1235.635151][ T24] usb 7-1: USB disconnect, device number 14 [ 1236.581935][T17033] loop2: detected capacity change from 0 to 2048 [ 1236.812641][T17040] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1238.131822][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.553129][T17048] fido_id[17048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1238.956574][T17053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1239.319858][T17054] vivid-007: kernel_thread() failed [ 1240.634952][ T4935] Bluetooth: hci2: Malformed HCI Event [ 1240.826993][T17076] loop6: detected capacity change from 0 to 512 [ 1241.137353][T17076] EXT4-fs: Mount option(s) incompatible with ext2 [ 1242.750470][T17040] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1242.834494][T17040] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1242.871855][T17040] Remounting filesystem read-only [ 1243.155774][T13288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1243.193767][T13288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1243.205273][T13288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1243.217468][T13288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1243.225771][T13288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1244.789595][T13288] Bluetooth: hci6: Malformed HCI Event [ 1245.350954][T13288] Bluetooth: hci5: command tx timeout [ 1246.656520][T17159] Invalid argument reading file caps for ./file0 [ 1247.120527][T17167] loop6: detected capacity change from 0 to 2048 [ 1247.240369][ T4935] Bluetooth: hci4: Malformed HCI Event [ 1247.401142][T17179] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1247.468693][T17178] loop2: detected capacity change from 0 to 512 [ 1247.475328][ T4935] Bluetooth: hci5: command tx timeout [ 1247.888194][T17178] EXT4-fs: Mount option(s) incompatible with ext2 [ 1248.191977][T17189] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1249.093618][ T3273] bridge_slave_1: left allmulticast mode [ 1249.097525][T17213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2477'. [ 1249.116514][ T3273] bridge_slave_1: left promiscuous mode [ 1249.141244][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.177779][ T3273] bridge_slave_0: left allmulticast mode [ 1249.194920][ T3273] bridge_slave_0: left promiscuous mode [ 1249.215437][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.490123][ T4935] Bluetooth: hci5: command tx timeout [ 1250.034287][ T4935] Bluetooth: hci6: Malformed HCI Event [ 1250.356101][ T3273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.397800][ T3273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.415784][ T3273] bond0 (unregistering): Released all slaves [ 1250.543754][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.578506][T17105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.633885][T17105] bridge_slave_0: entered allmulticast mode [ 1250.845170][T17105] bridge_slave_0: entered promiscuous mode [ 1250.893225][T17105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.933404][T17105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.989567][T17105] bridge_slave_1: entered allmulticast mode [ 1251.015171][T17105] bridge_slave_1: entered promiscuous mode [ 1251.449620][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1251.570021][ T4935] Bluetooth: hci5: command tx timeout [ 1251.618990][T17105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.719535][T17105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.787517][T17253] loop2: detected capacity change from 0 to 32768 [ 1251.837145][T17179] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1251.856968][T17253] JBD2: Ignoring recovery information on journal [ 1251.898710][T17253] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1251.956246][T17179] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1252.009047][T17179] Remounting filesystem read-only [ 1252.533716][T17105] team0: Port device team_slave_0 added [ 1252.724677][T14269] ocfs2: Unmounting device (7,2) on (node local) [ 1252.759460][T17105] team0: Port device team_slave_1 added [ 1253.164452][T17105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.184932][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.196644][ T4935] Bluetooth: hci0: Malformed HCI Event [ 1253.330507][T17105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.391958][T17278] loop8: detected capacity change from 0 to 512 [ 1253.422264][T17278] EXT4-fs: Mount option(s) incompatible with ext2 [ 1253.455754][T17105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.511569][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.632520][T17105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.772414][ T3273] hsr_slave_0: left promiscuous mode [ 1253.824255][ T3273] hsr_slave_1: left promiscuous mode [ 1253.860416][ T24] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1254.258982][T17304] loop8: detected capacity change from 0 to 2048 [ 1254.266737][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.314256][ T3273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.321499][ T24] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1254.321547][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.337246][ T24] usb 7-1: config 0 descriptor?? [ 1254.487053][T17307] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1255.118170][T17325] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1255.754406][T17333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2507'. [ 1256.232345][ T24] usb 7-1: Cannot set autoneg [ 1256.262545][ T24] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1256.303990][ T3273] team0 (unregistering): Port device team_slave_1 removed [ 1256.323405][ T24] usb 7-1: USB disconnect, device number 15 [ 1256.358321][ T3273] team0 (unregistering): Port device team_slave_0 removed [ 1256.832263][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1256.937141][T17307] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1256.979873][T17307] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1257.034031][T17307] Remounting filesystem read-only [ 1257.186091][T17105] hsr_slave_0: entered promiscuous mode [ 1257.220828][T17105] hsr_slave_1: entered promiscuous mode [ 1257.253047][T17105] debugfs: 'hsr0' already exists in 'hsr' [ 1257.282326][T17105] Cannot create hsr debugfs directory [ 1257.334583][ T4935] Bluetooth: hci0: Malformed HCI Event [ 1257.506820][T17353] loop8: detected capacity change from 0 to 512 [ 1257.563959][T17353] EXT4-fs: Mount option(s) incompatible with ext2 [ 1259.209032][T17394] loop6: detected capacity change from 0 to 2048 [ 1259.432839][T17399] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1259.513763][T17398] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1259.930801][T17410] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1260.607698][ T4935] Bluetooth: hci6: Malformed HCI Event [ 1263.266483][T17105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1264.412459][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1264.481526][T17105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1264.528945][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1264.549965][T17105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1264.585594][T17399] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1265.447762][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.481851][T17399] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1265.505764][T17105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1265.523081][T17399] Remounting filesystem read-only [ 1265.558985][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.734281][ T4935] Bluetooth: hci1: Malformed HCI Event [ 1265.877872][T17482] loop1: detected capacity change from 0 to 512 [ 1265.923829][T17482] EXT4-fs: Mount option(s) incompatible with ext2 [ 1266.130843][T17105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.260643][T17105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.611911][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.619157][ T9893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.598759][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.606040][ T9893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.924559][T17515] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1268.160944][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1268.222689][T17515] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2555'. [ 1269.295465][T17520] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2554'. [ 1270.127986][T17532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1271.445215][ T4935] Bluetooth: hci4: Malformed HCI Event [ 1271.654800][T17569] loop2: detected capacity change from 0 to 512 [ 1271.712766][T17569] EXT4-fs: Mount option(s) incompatible with ext2 [ 1271.726410][T17105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.981140][T17602] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2571'. [ 1274.065328][T17604] loop2: detected capacity change from 0 to 2048 [ 1274.120624][T17612] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1274.427978][T17604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1274.512716][T17105] veth0_vlan: entered promiscuous mode [ 1274.623428][T17105] veth1_vlan: entered promiscuous mode [ 1274.853981][T17612] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1274.876783][T17612] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1274.911130][T17612] Remounting filesystem read-only [ 1274.988364][T17105] veth0_macvtap: entered promiscuous mode [ 1275.062673][T17105] veth1_macvtap: entered promiscuous mode [ 1275.154826][T17105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.224324][T17105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.465702][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.508560][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.080610][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.120181][ T9893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.840878][ T9893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.862918][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.116218][T17651] loop1: detected capacity change from 0 to 2048 [ 1278.139069][ T5825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.558177][ T5825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.562786][T17661] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1279.190434][T17666] loop6: detected capacity change from 0 to 512 [ 1279.639830][T17666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.653125][T17666] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.121100][ T31] audit: type=1800 audit(2000000129.620:381): pid=17671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2586" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1280.773248][T17678] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1281.070562][T17682] loop4: detected capacity change from 0 to 512 [ 1281.086913][T17682] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1281.152098][T17682] EXT4-fs (loop4): 1 truncate cleaned up [ 1281.158509][T17685] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2588'. [ 1281.252030][T17682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1282.279088][T17692] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1282.366907][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.525313][T17105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.603160][T17688] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1282.709241][T17699] loop8: detected capacity change from 0 to 512 [ 1282.871126][T17699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1283.023419][T17699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1283.121182][T17699] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.060041][T17661] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1284.087339][T17661] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1284.154693][T17661] Remounting filesystem read-only [ 1284.308142][T17712] loop4: detected capacity change from 0 to 4096 [ 1284.441645][T17712] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1284.469399][T17712] NILFS (loop4): trying rollback from an earlier position [ 1284.675099][T17712] NILFS (loop4): recovery complete [ 1285.000207][T17733] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1285.173438][T17699] overlayfs: failed index dir cleanup (-512) [ 1285.205580][T17699] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1285.493416][T17740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2601'. [ 1285.523124][ T7707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.234991][T17753] ip_tables: iptables: counters copy to user failed while replacing table [ 1286.625302][T17751] loop2: detected capacity change from 0 to 32768 [ 1287.122845][T17751] JBD2: Ignoring recovery information on journal [ 1287.346466][T17751] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1287.442747][T17762] tipc: Started in network mode [ 1287.481619][T17762] tipc: Node identity ac1414aa, cluster identity 4711 [ 1287.565341][T17762] tipc: Enabled bearer , priority 10 [ 1287.763049][T17783] loop6: detected capacity change from 0 to 4096 [ 1287.828867][T17783] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1287.870652][T17783] NILFS (loop6): trying rollback from an earlier position [ 1288.412365][T17783] NILFS (loop6): recovery complete [ 1288.487653][T17794] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1288.569807][ T30] tipc: Node number set to 2886997162 [ 1288.797957][T14269] ocfs2: Unmounting device (7,2) on (node local) [ 1289.228863][T17811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2620'. [ 1290.588008][T17828] sock: sock_timestamping_bind_phc: sock not bind to device [ 1291.279209][ T12] netdevsim netdevsim0 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.392433][ T12] netdevsim netdevsim0 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1291.661467][ T12] netdevsim netdevsim0 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.289730][ T12] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.449361][ T12] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.499589][ T12] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.546818][ T12] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.984493][ T12] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.999638][ T37] netdevsim netdevsim7 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.032676][ T37] netdevsim netdevsim7 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.058567][ T37] netdevsim netdevsim7 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.099052][ T37] netdevsim netdevsim7 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.140703][ T37] netdevsim netdevsim9 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.151533][T17854] loop2: detected capacity change from 0 to 128 [ 1293.184531][ T37] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.196496][T17854] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1293.218029][ T37] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.256753][ T37] netdevsim netdevsim9 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.268915][T17854] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1293.425942][T17854] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1294.867484][T14269] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1295.987471][T17890] loop4: detected capacity change from 0 to 2048 [ 1296.130230][T17890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1296.197757][T17890] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.290580][T17907] loop8: detected capacity change from 0 to 256 [ 1298.546306][T17920] loop6: detected capacity change from 0 to 512 [ 1298.557613][T17920] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1298.588971][T17920] EXT4-fs (loop6): 1 truncate cleaned up [ 1298.596729][T17920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.572928][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.713925][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.811442][T17867] svc: failed to register lockdv1 RPC service (errno 111). [ 1299.894175][T17867] lockd_up: makesock failed, error=-111 [ 1300.904525][T17953] netlink: 'syz.5.2656': attribute type 39 has an invalid length. [ 1301.538897][T17867] svc: failed to register nfsdv3 RPC service (errno 512). [ 1301.584389][T17867] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1301.629303][T17867] failed to unregister tcp with rpcbind [ 1301.712918][T17867] svc: failed to register nfsdv3 RPC service (errno 97). [ 1301.813744][T17867] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1301.867035][T17867] failed to unregister tcp with rpcbind [ 1303.770484][T17985] pimreg: entered allmulticast mode [ 1304.190122][T17982] loop6: detected capacity change from 0 to 32768 [ 1304.333257][T17982] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1304.333338][T17982] (syz.6.2655,17982,1):ocfs2_initialize_super:2226 ERROR: status = -12 [ 1304.350984][T17982] (syz.6.2655,17982,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 1304.500229][T17105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.698393][T17990] ip_tables: iptables: counters copy to user failed while replacing table [ 1304.812116][T17994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2662'. [ 1305.347364][T18006] ªªªªªª: renamed from vlan0 [ 1307.867633][T18028] sock: sock_timestamping_bind_phc: sock not bind to device [ 1308.032162][T18031] sock: sock_timestamping_bind_phc: sock not bind to device [ 1308.106520][T18028] zram0: detected capacity change from 0 to 8 [ 1308.169483][T18031] zram: Cannot change disksize for initialized device [ 1309.542967][T18057] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2689'. [ 1309.656738][T18052] 0: reclassify loop, rule prio 0, protocol 03 [ 1311.136851][T18085] loop6: detected capacity change from 0 to 128 [ 1311.163402][T18086] sock: sock_timestamping_bind_phc: sock not bind to device [ 1311.401113][T18085] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1311.433108][T18085] ext4 filesystem being mounted at /465/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1312.120128][T18085] EXT4-fs warning (device loop6): verify_group_input:136: Cannot add at group 2 (only 1 groups) [ 1312.505884][ T7773] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1314.175475][T18140] loop8: detected capacity change from 0 to 2048 [ 1314.262465][T18144] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1314.371106][T18135] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1314.723662][T18150] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1315.081543][T18156] sock: sock_timestamping_bind_phc: sock not bind to device [ 1317.805829][T18191] binder: 18189:18191 ioctl c0306201 0 returned -14 [ 1319.353508][T18144] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1319.418921][T18144] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1319.454656][T18200] loop2: detected capacity change from 0 to 512 [ 1319.513344][T18200] EXT4-fs: Ignoring removed nobh option [ 1319.532134][T18144] Remounting filesystem read-only [ 1320.620626][T18200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1320.803454][T18200] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.074181][T18250] loop6: detected capacity change from 0 to 512 [ 1322.118649][T18250] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1322.228309][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.879548][ T30] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1323.081432][ T30] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1323.128147][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.188205][ T30] usb 3-1: config 0 descriptor?? [ 1326.124955][T18278] binder: 18268:18278 ioctl c0306201 0 returned -14 [ 1327.085699][ T30] usb 3-1: Cannot read MAC address [ 1327.110934][ T30] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1327.231891][ T30] usb 3-1: USB disconnect, device number 8 [ 1327.743830][T18289] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2748'. [ 1328.004461][T18296] faux_driver vkms: [drm] Unknown color mode 256; guessing buffer size. [ 1330.787443][ T31] audit: type=1326 audit(2000000179.690:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18287 comm="syz.2.2747" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89ed39de99 code=0x0 [ 1331.463419][T18307] loop8: detected capacity change from 0 to 2048 [ 1331.555343][T18313] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1332.465575][T18321] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1333.345797][T18342] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2763'. [ 1334.737112][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2766'. [ 1335.306391][T18365] loop2: detected capacity change from 0 to 2048 [ 1335.967046][T18365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.082006][T18365] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.396201][T18313] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1336.467195][T18313] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1336.753091][T18379] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2776'. [ 1336.795491][T18313] Remounting filesystem read-only [ 1336.808166][ T4935] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 1337.157400][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.253170][T18389] sock: sock_timestamping_bind_phc: sock not bind to device [ 1337.328601][T18389] zram: Cannot change disksize for initialized device [ 1337.523791][T18392] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 1337.684057][T18392] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 1337.731869][T18392] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 1338.015006][T18412] loop4: detected capacity change from 0 to 2048 [ 1338.074196][T18415] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1338.675131][T18425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1339.948431][T18443] sock: sock_timestamping_bind_phc: sock not bind to device [ 1340.054377][T18443] zram: Cannot change disksize for initialized device [ 1340.885225][ T4935] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1340.900073][ T4935] Bluetooth: hci2: Injecting HCI hardware error event [ 1340.916076][T13288] Bluetooth: hci2: hardware error 0x00 [ 1341.699630][T18473] read descriptors [ 1341.788393][T14311] ffs_data_put(): freeing [ 1342.141714][T18483] sock: sock_timestamping_bind_phc: sock not bind to device [ 1342.185847][T18483] zram: Cannot change disksize for initialized device [ 1342.592936][T18415] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1342.633498][T18415] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1342.675371][T18415] Remounting filesystem read-only [ 1342.742717][T18499] binder: BINDER_SET_CONTEXT_MGR already set [ 1342.787739][T18499] binder: 18498:18499 ioctl 4018620d 200000004a80 returned -16 [ 1342.931376][T18505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2827'. [ 1343.062918][ T30] IPVS: starting estimator thread 0... [ 1343.170495][T13288] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1343.240054][T18510] IPVS: using max 22 ests per chain, 52800 per kthread [ 1343.774503][T18517] loop4: detected capacity change from 0 to 512 [ 1344.053210][T18517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1344.066473][T18517] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.466357][ T31] audit: type=1800 audit(2000000194.000:383): pid=18522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2829" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1345.166606][T18525] loop6: detected capacity change from 0 to 2048 [ 1345.293395][T18525] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.406394][T18525] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.717086][T18535] sock: sock_timestamping_bind_phc: sock not bind to device [ 1345.865680][T18535] zram: Cannot change disksize for initialized device [ 1345.904102][T18538] loop8: detected capacity change from 0 to 2048 [ 1346.030483][T17105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.051663][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1346.080943][T18542] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1347.203442][T18550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1347.547323][T18557] binder: BINDER_SET_CONTEXT_MGR already set [ 1347.584058][T18557] binder: 18556:18557 ioctl 4018620d 200000004a80 returned -16 [ 1347.636203][T18561] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2843'. [ 1348.132305][T18542] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1348.169963][T18542] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1348.204904][T18542] Remounting filesystem read-only [ 1348.604191][T18582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'. [ 1348.701043][T18584] warning: `syz.1.2850' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1348.807885][T18587] sock: sock_timestamping_bind_phc: sock not bind to device [ 1348.865132][T18587] zram: Cannot change disksize for initialized device [ 1348.954734][T18589] loop6: detected capacity change from 0 to 2048 [ 1349.031207][T18589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1349.117010][T18589] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.360486][T18603] binder: BINDER_SET_CONTEXT_MGR already set [ 1349.454159][T18603] binder: 18600:18603 ioctl 4018620d 200000004a80 returned -16 [ 1350.160664][ T31] audit: type=1800 audit(2000000199.770:384): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2851" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 1351.873026][T18624] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1352.157794][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1352.195350][T18635] sock: sock_timestamping_bind_phc: sock not bind to device [ 1353.751611][T18649] sock: sock_timestamping_bind_phc: sock not bind to device [ 1353.875993][T18649] zram: Cannot change disksize for initialized device [ 1354.784374][T18654] loop1: detected capacity change from 0 to 512 [ 1354.784771][T18650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2871'. [ 1354.898492][T18654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1355.465513][T18654] EXT4-fs (loop1): 1 truncate cleaned up [ 1355.474149][T18654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1357.237679][T14311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.568264][T18688] sock: sock_timestamping_bind_phc: sock not bind to device [ 1361.578610][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.221447][T18691] loop1: detected capacity change from 0 to 2048 [ 1362.340026][T18691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1362.439860][T18691] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.496053][T18711] random: crng reseeded on system resumption [ 1363.707640][T18714] sock: sock_timestamping_bind_phc: sock not bind to device [ 1364.184627][T18718] mmap: syz.6.2889 (18718): VmData 164511744 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 1364.267138][T18712] fs-verity (loop1, inode 13): Error -4 building Merkle tree [ 1364.413449][T18714] zram: Cannot change disksize for initialized device [ 1364.735186][T18727] binder: 18725:18727 ioctl c0306201 0 returned -14 [ 1365.975233][T14311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.541305][T18745] sock: sock_timestamping_bind_phc: sock not bind to device [ 1367.086748][T18756] batman_adv: batadv0: Adding interface: dummy0 [ 1367.109407][T18756] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1367.167086][T18756] batman_adv: batadv0: Interface activated: dummy0 [ 1367.451380][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1368.554993][T18772] binder: 18770:18772 ioctl c0306201 0 returned -14 [ 1368.630591][T18773] sock: sock_timestamping_bind_phc: sock not bind to device [ 1368.655982][T18773] zram: Cannot change disksize for initialized device [ 1370.062162][T18786] loop6: detected capacity change from 0 to 2048 [ 1370.222457][T18795] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1370.247656][T18796] loop2: detected capacity change from 0 to 512 [ 1370.276359][T18796] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1370.329644][T18796] EXT4-fs error (device loop2): ext4_iget_extra_inode:5179: inode #15: comm syz.2.2915: corrupted in-inode xattr: e_value size too large [ 1370.354492][T18796] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1370.359314][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1370.375132][ C1] EXT4-fs (loop2): initial error at time 2000000219: ext4_iget_extra_inode:5179: inode 15 [ 1370.385130][ C1] EXT4-fs (loop2): last error at time 2000000219: ext4_iget_extra_inode:5179: inode 15 [ 1370.411846][T18796] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2915: couldn't read orphan inode 15 (err -117) [ 1370.435471][T18796] loop2: lost filesystem error report for type 5 error -117 [ 1370.438825][T18796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.947249][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.673842][T18813] loop8: detected capacity change from 0 to 32768 [ 1373.310123][T18813] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1373.310209][T18813] (syz.8.2913,18813,1):ocfs2_initialize_super:2226 ERROR: status = -12 [ 1373.328365][T18813] (syz.8.2913,18813,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 1375.374415][T18795] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1375.473602][T18795] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1375.583778][T18795] Remounting filesystem read-only [ 1375.604640][ T7773] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1376.214890][T18841] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1377.857540][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1378.196104][T18858] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2932'. [ 1378.559810][ T31] audit: type=1800 audit(2000000228.150:385): pid=18850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.2932" name="/" dev="sockfs" ino=61078 res=0 errno=0 [ 1378.747754][ T24] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1378.841191][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.940356][ T24] usb 7-1: config 0 descriptor?? [ 1379.125928][T14269] ffs_data_put(): freeing [ 1379.378080][T18876] sock: sock_timestamping_bind_phc: sock not bind to device [ 1379.421064][T18872] loop1: detected capacity change from 0 to 2048 [ 1380.503051][T18886] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1381.041622][ T24] usb 7-1: Cannot set autoneg [ 1381.064105][ T24] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1381.086788][T18891] sock: sock_timestamping_bind_phc: sock not bind to device [ 1381.151637][ T24] usb 7-1: USB disconnect, device number 16 [ 1382.376970][T18903] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1382.385244][ T5847] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1382.658986][T18886] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1382.688735][T18886] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1383.039872][T18886] Remounting filesystem read-only [ 1383.061259][T14311] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1383.875275][T18914] »»»»»»: renamed from vlan0 (while UP) [ 1385.802080][T18924] sock: sock_timestamping_bind_phc: sock not bind to device [ 1386.757914][T14311] ffs_data_put(): freeing [ 1387.159580][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1387.184511][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1387.195422][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1387.248811][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1387.279151][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1387.339649][ T30] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1388.043837][ T30] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1388.156690][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.225955][ T30] usb 9-1: config 0 descriptor?? [ 1388.312472][T18946] sock: sock_timestamping_bind_phc: sock not bind to device [ 1388.394625][T18946] zram: Cannot change disksize for initialized device [ 1388.982807][T18954] loop1: detected capacity change from 0 to 2048 [ 1389.110249][T18959] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1389.284440][ T30] usb 9-1: Cannot set autoneg [ 1389.301902][ T30] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1389.730778][T13288] Bluetooth: hci3: command tx timeout [ 1390.350540][T18974] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1390.359244][ T8885] usb 9-1: USB disconnect, device number 19 [ 1390.872513][T18984] loop8: detected capacity change from 0 to 1024 [ 1390.895741][T18984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1390.970264][T18984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1391.065904][T18984] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.099466][T18989] EXT4-fs error (device loop8): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1391.167622][ T7773] ffs_data_put(): freeing [ 1391.190364][T18984] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.2970: lblock 0 mapped to illegal pblock 0 (length 1) [ 1391.586342][T18984] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.2970: lblock 0 mapped to illegal pblock 0 (length 1) [ 1391.636987][T18935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.657639][T18935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.674767][T18935] bridge_slave_0: entered allmulticast mode [ 1391.699226][T18984] EXT4-fs error (device loop8): ext4_ext_remove_space:2969: inode #15: comm syz.8.2970: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1391.699959][T18935] bridge_slave_0: entered promiscuous mode [ 1391.741680][T18935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.750972][T18935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.758456][T18935] bridge_slave_1: entered allmulticast mode [ 1391.809478][T13288] Bluetooth: hci3: command tx timeout [ 1391.829926][T18935] bridge_slave_1: entered promiscuous mode [ 1392.027039][ T7707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1393.157300][T18935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.172475][T18935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.863237][T18935] team0: Port device team_slave_0 added [ 1393.884106][T18935] team0: Port device team_slave_1 added [ 1393.900930][T13288] Bluetooth: hci3: command tx timeout [ 1393.956722][T19012] sock: sock_timestamping_bind_phc: sock not bind to device [ 1394.991968][T18959] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1395.164908][T18959] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1395.256408][T18959] Remounting filesystem read-only [ 1395.271801][T18935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.286194][T14311] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1395.314384][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.991372][T13288] Bluetooth: hci3: command tx timeout [ 1396.288092][T18935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.369870][T18935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.410158][T18935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.491638][T18800] Set syz1 is full, maxelem 65536 reached [ 1396.556416][T18935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.880408][T18935] hsr_slave_0: entered promiscuous mode [ 1396.904299][T18935] hsr_slave_1: entered promiscuous mode [ 1396.935905][T18935] debugfs: 'hsr0' already exists in 'hsr' [ 1396.965472][T18935] Cannot create hsr debugfs directory [ 1398.802027][T19058] loop2: detected capacity change from 0 to 2048 [ 1398.859602][T19059] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1399.153434][T18935] netdevsim netdevsim0 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.533504][T19074] sock: sock_timestamping_bind_phc: sock not bind to device [ 1400.627698][T19074] zram: Cannot change disksize for initialized device [ 1400.752419][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.505087][T19086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1402.013361][T19089] loop1: detected capacity change from 0 to 512 [ 1402.015413][T18935] netdevsim netdevsim0 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1402.464518][T19089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.575893][T19089] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.720457][T19089] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.2995: corrupted xattr block 33: invalid header [ 1402.742305][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.052751][ T31] audit: type=1800 audit(2000000252.650:386): pid=19089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2995" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1403.052949][T18935] netdevsim netdevsim0 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.239382][T14311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.557766][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.675501][T19110] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1403.925628][T18935] netdevsim netdevsim0 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.971750][T19059] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1404.230405][T19059] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1404.248472][T19059] Remounting filesystem read-only [ 1404.439955][T12636] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1404.807934][T12636] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1404.845486][T19132] sock: sock_timestamping_bind_phc: sock not bind to device [ 1404.870146][T12636] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.913174][T19132] zram: Cannot change disksize for initialized device [ 1404.990938][T12636] usb 9-1: config 0 descriptor?? [ 1405.084851][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.296723][T19137] loop6: detected capacity change from 0 to 128 [ 1406.231525][T12636] usb 9-1: Cannot set autoneg [ 1406.326119][T12636] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1406.681667][ T3273] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.827682][ T3273] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.066108][ T1102] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.263650][ T1102] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 1407.315581][ T37] bridge_slave_1: left allmulticast mode [ 1407.328923][ T37] bridge_slave_1: left promiscuous mode [ 1407.339723][ T5847] usb 9-1: USB disconnect, device number 20 [ 1407.347554][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.443305][ T37] bridge_slave_0: left allmulticast mode [ 1407.483196][ T37] bridge_slave_0: left promiscuous mode [ 1407.510982][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.207753][T19178] loop2: detected capacity change from 0 to 128 [ 1408.216224][T19178] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1408.926548][T19166] loop8: detected capacity change from 0 to 8192 [ 1409.035521][T19178] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1410.026809][T18228] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1410.052303][T19166] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1410.888490][T19185] sock: sock_timestamping_bind_phc: sock not bind to device [ 1411.583910][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.627573][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.660294][ T37] bond0 (unregistering): Released all slaves [ 1412.452157][T19159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3013'. [ 1412.833695][T19209] loop1: detected capacity change from 0 to 256 [ 1412.995615][T18935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1413.042586][T18935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1413.061098][T18935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1413.093002][T18935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1413.139498][ T30] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1413.159785][T18935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1413.230001][T18935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1413.318432][ T30] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1413.342162][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.385448][T18935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1413.414358][ T30] usb 3-1: config 0 descriptor?? [ 1413.437196][T18935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1413.577963][ T37] hsr_slave_0: left promiscuous mode [ 1413.605035][ T37] hsr_slave_1: left promiscuous mode [ 1413.635266][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.683068][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.721461][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.748185][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.148343][ T37] veth1_macvtap: left promiscuous mode [ 1414.251453][ T37] veth0_macvtap: left promiscuous mode [ 1414.361337][ T37] veth1_vlan: left promiscuous mode [ 1414.419133][ T37] veth0_vlan: left promiscuous mode [ 1415.038272][ T30] usb 3-1: Cannot set autoneg [ 1415.071953][ T30] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 1415.089461][T19246] sock: sock_timestamping_bind_phc: sock not bind to device [ 1415.108981][T19240] loop6: detected capacity change from 0 to 32768 [ 1415.166569][T19240] JBD2: Ignoring recovery information on journal [ 1415.240808][T19240] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1415.593342][ T7773] ocfs2: Unmounting device (7,6) on (node local) [ 1416.811930][T12922] usb 3-1: USB disconnect, device number 9 [ 1416.908369][T19266] loop2: detected capacity change from 0 to 256 [ 1418.235052][ T37] team0 (unregistering): Port device team_slave_1 removed [ 1418.342269][ T37] team0 (unregistering): Port device team_slave_0 removed [ 1419.099493][T19288] loop2: detected capacity change from 0 to 128 [ 1419.122588][T19288] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1419.825630][T19288] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1419.849900][ T153] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1421.283166][T19263] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3036'. [ 1421.584924][T19298] sock: sock_timestamping_bind_phc: sock not bind to device [ 1421.772429][T18935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.987577][T19303] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3050'. [ 1422.016400][T18935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.082167][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3050'. [ 1422.191204][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.198654][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.216512][T19303] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3050'. [ 1422.265813][T19306] loop1: detected capacity change from 0 to 32768 [ 1422.304795][T19306] JBD2: Ignoring recovery information on journal [ 1422.352026][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.359314][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.377824][T19306] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1422.591015][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.603625][T14311] ocfs2: Unmounting device (7,1) on (node local) [ 1424.688292][T19341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3059'. [ 1426.192977][T19359] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3062'. [ 1426.353263][T19362] sock: sock_timestamping_bind_phc: sock not bind to device [ 1426.470932][T19362] zram: Cannot change disksize for initialized device [ 1427.879777][T19369] loop8: detected capacity change from 0 to 4096 [ 1428.285976][T19369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.722852][ T31] audit: type=1800 audit(2000000279.070:387): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3066" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1430.153531][T18935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.407168][ T7707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.425806][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3074'. [ 1430.498780][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3073'. [ 1430.887731][T18935] veth0_vlan: entered promiscuous mode [ 1431.018851][T18935] veth1_vlan: entered promiscuous mode [ 1431.717964][T18935] veth0_macvtap: entered promiscuous mode [ 1431.778541][T18935] veth1_macvtap: entered promiscuous mode [ 1431.847157][T19428] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1431.872059][T19431] sock: sock_timestamping_bind_phc: sock not bind to device [ 1431.882922][T18935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.343000][T19433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3079'. [ 1432.791075][T18935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.051565][ T9172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.925236][T18228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.024245][T18228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.090526][T18228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.376080][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.464909][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.492959][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.505509][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3089'. [ 1435.532801][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.385451][T19484] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3094'. [ 1438.633516][T19486] loop1: detected capacity change from 0 to 8 [ 1438.706085][T19488] sock: sock_timestamping_bind_phc: sock not bind to device [ 1438.790180][T19488] zram: Cannot change disksize for initialized device [ 1441.771016][T19536] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3106'. [ 1441.896402][T19542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3109'. [ 1442.419918][T19551] loop8: detected capacity change from 0 to 512 [ 1442.431852][T19551] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1443.155712][T19555] sock: sock_timestamping_bind_phc: sock not bind to device [ 1443.253480][T19551] EXT4-fs (loop8): 1 truncate cleaned up [ 1443.288091][T19555] zram: Cannot change disksize for initialized device [ 1443.326728][T19551] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1444.396833][T19594] loop6: detected capacity change from 0 to 1024 [ 1444.540275][T19594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1444.790483][T19604] overlayfs: failed to clone upperpath [ 1444.805345][T19607] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1444.891843][ T7707] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.057460][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.191389][T19618] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3129'. [ 1445.954902][T19620] loop0: detected capacity change from 0 to 1024 [ 1445.976989][T19631] sock: sock_timestamping_bind_phc: sock not bind to device [ 1445.996837][T19620] EXT4-fs: Ignoring removed bh option [ 1446.048423][T19620] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1446.188198][T19620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1447.386249][T18935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.633284][T19657] loop2: detected capacity change from 0 to 8 [ 1448.869786][T19669] netlink: 'syz.6.3140': attribute type 12 has an invalid length. [ 1449.901594][T19657] SQUASHFS error: Failed to read block 0x4de: -5 [ 1450.093462][T19657] SQUASHFS error: Failed to read block 0x4de: -5 [ 1450.171249][ T31] audit: type=1800 audit(2000000299.770:388): pid=19657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3141" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1450.657795][T19686] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3150'. [ 1450.668239][T19687] sock: sock_timestamping_bind_phc: sock not bind to device [ 1450.727969][T19687] zram: Cannot change disksize for initialized device [ 1450.998438][T19695] loop1: detected capacity change from 0 to 512 [ 1451.228994][T19688] loop6: detected capacity change from 0 to 2048 [ 1451.792022][T19695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.806596][T19688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.925770][T19688] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.947952][T19695] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1453.241123][T19721] loop0: detected capacity change from 0 to 1024 [ 1453.258429][T14311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.335100][T19721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1453.435695][T19721] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.682229][T18935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1455.041509][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.212948][T19748] sock: sock_timestamping_bind_phc: sock not bind to device [ 1455.289557][T19748] zram: Cannot change disksize for initialized device [ 1456.316199][T19763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3170'. [ 1456.372016][T19757] loop6: detected capacity change from 0 to 2048 [ 1456.794872][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1456.803610][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1456.813297][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1456.824892][T19776] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1456.839677][T19776] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1456.859492][T19776] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1456.885373][T19776] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1457.003154][T19776] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1457.513785][T19773] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1457.639990][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1457.667896][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1457.691511][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1457.712070][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1457.736207][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1457.758814][T19776] wlan0 speed is unknown, defaulting to 1000 [ 1458.393198][T19778] smbdirect: ib_dev[syz0] removed [ 1458.892433][T19790] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1459.535549][T19773] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1459.633306][T19801] loop8: detected capacity change from 0 to 128 [ 1459.798235][T19773] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1459.823977][T19773] Remounting filesystem read-only [ 1460.459560][T19784] Bluetooth: hci3: command 0x0405 tx timeout [ 1461.186750][T19814] loop2: detected capacity change from 0 to 2048 [ 1461.348169][T19814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1461.461205][T19814] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.856114][T19839] sock: sock_timestamping_bind_phc: sock not bind to device [ 1462.902265][ T31] audit: type=1804 audit(2000000312.510:389): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3181" name="/newroot/250/file0/file0/file0" dev="loop2" ino=13 res=1 errno=0 [ 1462.987441][T19839] zram: Cannot change disksize for initialized device [ 1463.105142][T19844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1463.181365][ T31] audit: type=1800 audit(2000000312.610:390): pid=19814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3181" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 1463.495807][T19850] loop0: detected capacity change from 0 to 32768 [ 1463.526356][T19850] JBD2: Ignoring recovery information on journal [ 1463.642377][T19850] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1463.916537][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.004288][T19861] loop6: detected capacity change from 0 to 2048 [ 1464.073620][T18935] ocfs2: Unmounting device (7,0) on (node local) [ 1464.115509][T19867] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1464.690575][T19878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1465.458895][T19867] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1465.553984][T19867] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1465.631748][T19867] Remounting filesystem read-only [ 1467.637828][T19913] loop0: detected capacity change from 0 to 32768 [ 1467.675588][T19913] JBD2: Ignoring recovery information on journal [ 1467.793299][T19913] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1469.248899][T18935] ocfs2: Unmounting device (7,0) on (node local) [ 1469.678505][T19941] loop0: detected capacity change from 0 to 2048 [ 1469.817525][T19950] loop6: detected capacity change from 0 to 8 [ 1469.840680][T19951] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1470.259037][T19956] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1470.820080][T19950] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1470.835536][T19951] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1470.862177][T19950] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1470.872450][T19951] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1470.907580][ T31] audit: type=1800 audit(2000000320.510:391): pid=19950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3221" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 1470.926166][T19951] Remounting filesystem read-only [ 1471.335229][T19970] read descriptors [ 1471.832392][T19975] loop8: detected capacity change from 0 to 32768 [ 1471.843048][T18935] ffs_data_put(): freeing [ 1471.925616][T19975] JBD2: Ignoring recovery information on journal [ 1472.008636][T19975] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1472.456114][T19986] loop2: detected capacity change from 0 to 1024 [ 1472.489682][ T7707] ocfs2: Unmounting device (7,8) on (node local) [ 1472.576205][T19986] EXT4-fs: Ignoring removed bh option [ 1472.663856][T19986] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1472.819888][T19986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.990251][T20000] loop8: detected capacity change from 0 to 8 [ 1472.997539][T19995] loop0: detected capacity change from 0 to 32768 [ 1473.047849][T19995] JBD2: Ignoring recovery information on journal [ 1473.118613][T20000] SQUASHFS error: Failed to read block 0x4de: -5 [ 1473.138495][T19995] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1473.251140][T20000] SQUASHFS error: Failed to read block 0x4de: -5 [ 1473.370421][ T31] audit: type=1800 audit(2000000322.920:392): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3234" name="file1" dev="loop8" ino=5 res=0 errno=0 [ 1473.632819][T20010] loop1: detected capacity change from 0 to 2048 [ 1473.722475][T20014] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1473.762944][T18935] ocfs2: Unmounting device (7,0) on (node local) [ 1474.082288][T20021] read descriptors [ 1474.181153][T20010] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1474.721591][ T7773] ffs_data_put(): freeing [ 1474.731041][T20014] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1474.768696][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.831931][T20014] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1474.860825][T20014] Remounting filesystem read-only [ 1474.877050][T14311] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1474.997156][T20033] bond0: entered promiscuous mode [ 1475.038315][T20033] bond_slave_0: entered promiscuous mode [ 1475.056684][T20039] netlink: 'syz.8.3246': attribute type 10 has an invalid length. [ 1475.070876][T20033] bond_slave_1: entered promiscuous mode [ 1475.179957][T20033] batadv0: entered promiscuous mode [ 1475.351541][T20033] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1475.405928][T20039] syz_tun: entered promiscuous mode [ 1475.523971][T20039] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1476.056441][T20064] loop1: detected capacity change from 0 to 256 [ 1476.269781][T20070] loop0: detected capacity change from 0 to 1024 [ 1476.336424][T20070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1476.461685][T20070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.474482][T20079] read descriptors [ 1476.519955][T20070] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1477.503187][ T7773] ffs_data_put(): freeing [ 1477.641483][T20087] loop8: detected capacity change from 0 to 2048 [ 1477.796513][T20090] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1477.836082][T18935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1478.145506][T20097] loop2: detected capacity change from 0 to 512 [ 1478.265064][T20102] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1478.388115][T20097] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3263: inode has both inline data and extents flags [ 1478.411232][T20097] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1478.418681][T20097] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3263: couldn't read orphan inode 15 (err -117) [ 1478.428086][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 1478.428134][ C0] EXT4-fs (loop2): initial error at time 2000000328: ext4_orphan_get:1399: inode 15 [ 1478.428192][ C0] EXT4-fs (loop2): last error at time 2000000328: ext4_orphan_get:1399: inode 15 [ 1478.466590][T20097] loop2: lost filesystem error report for type 5 error -117 [ 1478.507070][T20097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1479.058912][T20090] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1479.100276][T20090] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1479.796433][T20090] Remounting filesystem read-only [ 1479.952837][ T7707] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1480.045596][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.568344][T20140] binder: 20139:20140 ioctl c0306201 0 returned -14 [ 1482.711972][T20154] loop6: detected capacity change from 0 to 2048 [ 1482.831608][T20158] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1483.701702][T20163] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1483.910420][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.265401][T20169] netlink: 'syz.0.3281': attribute type 6 has an invalid length. [ 1484.374277][T20158] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1484.417114][T20158] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1484.468400][T20158] Remounting filesystem read-only [ 1484.497036][ T7773] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1488.212227][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1489.962246][T20210] loop2: detected capacity change from 0 to 2048 [ 1489.989575][T20218] loop0: detected capacity change from 0 to 512 [ 1490.001682][T20218] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1490.002081][T20218] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 1490.288042][T20222] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1491.176807][T20232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1491.769046][T20222] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1491.823658][T20222] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1491.902126][T20222] Remounting filesystem read-only [ 1491.946703][T14269] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1492.276220][T20245] fuse: fd is not a fuse device [ 1494.663103][T20275] loop0: detected capacity change from 0 to 512 [ 1494.838069][T20275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1494.861415][T20275] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1496.273793][T18935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.503903][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1497.851697][T20318] syzkaller0: entered promiscuous mode [ 1497.886743][T20318] syzkaller0: entered allmulticast mode [ 1498.394452][T20333] loop8: detected capacity change from 0 to 512 [ 1498.403478][T20333] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1499.513291][T20344] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1499.529379][T20344] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1499.614029][T20345] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1499.980172][T20343] loop1: detected capacity change from 0 to 2048 [ 1500.575501][T20352] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1501.351933][T20361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1501.900128][T20352] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1501.936755][T20352] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1502.027064][T20352] Remounting filesystem read-only [ 1502.082790][T14311] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1504.743503][T20415] loop6: detected capacity change from 0 to 8 [ 1505.159070][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1505.954796][T20421] syzkaller0: entered promiscuous mode [ 1505.981036][T20426] sock: sock_timestamping_bind_phc: sock not bind to device [ 1506.012040][T20421] syzkaller0: entered allmulticast mode [ 1506.243550][T20435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1510.766990][T20471] udevd[20471]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1511.164135][T20482] binder: BINDER_SET_CONTEXT_MGR already set [ 1511.225493][T20482] binder: 20477:20482 ioctl 4018620d 200000004a80 returned -16 [ 1511.388279][T20491] sock: sock_timestamping_bind_phc: sock not bind to device [ 1511.466701][T20489] loop6: detected capacity change from 0 to 512 [ 1511.574184][T13288] Bluetooth: hci3: command 0x0405 tx timeout [ 1511.585685][T20489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.608421][ T5847] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1511.686111][T20489] ext4 filesystem being mounted at /593/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1513.073236][T20502] loop8: detected capacity change from 0 to 2048 [ 1513.391205][T20509] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1514.084145][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1514.131572][ T7773] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.537323][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1514.859453][ T5847] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1514.868183][ T5847] usb 3-1: can't read configurations, error -71 [ 1518.200510][T20555] sock: sock_timestamping_bind_phc: sock not bind to device [ 1518.689655][T20564] loop2: detected capacity change from 0 to 1024 [ 1518.746985][T20564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.291592][T18228] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1519.438698][T18228] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1519.533074][T18228] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1519.533074][T18228] [ 1519.596557][T18228] EXT4-fs (loop2): Total free blocks count 0 [ 1519.625165][T18228] EXT4-fs (loop2): Free/Dirty block details [ 1519.656505][T18228] EXT4-fs (loop2): free_blocks=20480 [ 1519.668749][T18228] EXT4-fs (loop2): dirty_blocks=10752 [ 1519.679157][T18228] EXT4-fs (loop2): Block reservation details [ 1519.707262][T18228] EXT4-fs (loop2): i_reserved_data_blocks=672 [ 1520.726958][T20591] loop1: detected capacity change from 0 to 2048 [ 1520.857112][T20593] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1521.951298][T20606] loop8: detected capacity change from 0 to 32768 [ 1522.038192][T20606] JBD2: Ignoring recovery information on journal [ 1522.091423][T20606] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1522.620472][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 6152 with max blocks 2048 with error 28 [ 1522.809484][T20618] sock: sock_timestamping_bind_phc: sock not bind to device [ 1522.879931][T13288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1522.903153][T13288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1522.910218][T20618] zram: Cannot change disksize for initialized device [ 1522.932233][T13288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1522.944278][T13288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1522.962028][T13288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1523.190796][T20627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1523.786566][ T7707] ocfs2: Unmounting device (7,8) on (node local) [ 1523.787947][T14269] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1524.278067][T14269] EXT4-fs: 15 callbacks suppressed [ 1524.278092][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.415030][T20640] ffs_data_put(): freeing [ 1525.009394][T13288] Bluetooth: hci5: command tx timeout [ 1525.590660][T20656] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3413'. [ 1525.996945][T20656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1526.059712][T20660] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1526.252713][T20672] i2c i2c-0: Invalid 7-bit I2C address 0x102 [ 1526.397336][T20677] sock: sock_timestamping_bind_phc: sock not bind to device [ 1526.416033][T20677] zram: Cannot change disksize for initialized device [ 1526.538221][T18228] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.097261][T13288] Bluetooth: hci5: command tx timeout [ 1527.760523][T20689] loop8: detected capacity change from 0 to 2048 [ 1527.839955][T20690] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1528.496323][T18228] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.015443][T20702] loop1: detected capacity change from 0 to 32768 [ 1529.157252][T18228] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.214334][T13288] Bluetooth: hci5: command tx timeout [ 1529.258856][T20710] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1529.323761][T20702] JBD2: Ignoring recovery information on journal [ 1529.623680][T20702] JBD2: journal reset failed [ 1529.628589][T20702] (syz.1.3424,20702,0):ocfs2_journal_load:1163 ERROR: Failed to load journal! [ 1529.637841][T20702] (syz.1.3424,20702,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 1530.076217][T20709] loop2: detected capacity change from 0 to 1024 [ 1530.185179][T20709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.231650][T20709] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.532075][T20709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.3433: bg 0: block 112: padding at end of block bitmap is not set [ 1530.654420][T20709] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 1530.699464][T20709] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1530.699464][T20709] [ 1530.742355][T20709] EXT4-fs (loop2): Total free blocks count 0 [ 1530.771259][T18228] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.790152][T20709] EXT4-fs (loop2): Free/Dirty block details [ 1530.799504][T20709] EXT4-fs (loop2): free_blocks=0 [ 1530.817743][T20709] EXT4-fs (loop2): dirty_blocks=64 [ 1530.838155][T20709] EXT4-fs (loop2): Block reservation details [ 1530.862571][T20709] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 1531.161386][T14269] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1531.251027][T13288] Bluetooth: hci5: command tx timeout [ 1531.297008][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1531.475177][ T12] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.783887][T20744] sock: sock_timestamping_bind_phc: sock not bind to device [ 1531.831763][T18224] netdevsim netdevsim6 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.398432][T20744] zram: Cannot change disksize for initialized device [ 1532.647011][ T58] netdevsim netdevsim6 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.016866][ T5825] netdevsim netdevsim6 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.185213][T18228] bridge_slave_1: left allmulticast mode [ 1533.232469][T18228] bridge_slave_1: left promiscuous mode [ 1533.269693][T18228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.354219][T18228] bridge_slave_0: left allmulticast mode [ 1533.391924][T18228] bridge_slave_0: left promiscuous mode [ 1533.429148][T18228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.266730][T18228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.347654][T18228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.432180][T18228] bond0 (unregistering): Released all slaves [ 1537.526584][T20793] loop8: detected capacity change from 0 to 128 [ 1538.562407][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1539.182134][T20619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.218740][T20619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.244254][T20619] bridge_slave_0: entered allmulticast mode [ 1539.261938][T20619] bridge_slave_0: entered promiscuous mode [ 1539.274526][T20817] loop8: detected capacity change from 0 to 2048 [ 1539.367233][T20822] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1539.584069][T20619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.603510][T20619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.656584][T20619] bridge_slave_1: entered allmulticast mode [ 1539.665100][T20619] bridge_slave_1: entered promiscuous mode [ 1539.711563][T20619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.725952][T20619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.769644][T20619] team0: Port device team_slave_0 added [ 1539.778744][T20619] team0: Port device team_slave_1 added [ 1539.798287][T20824] loop1: detected capacity change from 0 to 256 [ 1539.991296][T20828] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1540.346873][T20619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.365620][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.474276][T20619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.541618][T20619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.591357][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.683182][T20619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.667853][T20845] loop2: detected capacity change from 0 to 128 [ 1541.699553][T20847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3470'. [ 1542.033351][T18228] hsr_slave_0: left promiscuous mode [ 1542.285395][T18228] hsr_slave_1: left promiscuous mode [ 1542.487231][T18228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.567115][T18228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1542.664936][T18228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.732714][T18228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.834502][T18935] ffs_data_put(): freeing [ 1542.846199][T18228] veth1_macvtap: left promiscuous mode [ 1542.859429][T18228] veth0_macvtap: left promiscuous mode [ 1542.872595][T18228] veth1_vlan: left promiscuous mode [ 1542.889556][T18228] veth0_vlan: left promiscuous mode [ 1544.934429][T20880] binder: 20879:20880 ioctl c0306201 0 returned -14 [ 1544.986555][T20882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1545.337648][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.475845][T20888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1545.749816][T20895] loop8: detected capacity change from 0 to 256 [ 1545.788341][T14269] ffs_data_put(): freeing [ 1546.916429][T20891] gadgetfs: bound to dummy_udc driver [ 1548.186327][T20920] loop8: detected capacity change from 0 to 8 [ 1548.282141][T18228] team0 (unregistering): Port device team_slave_1 removed [ 1548.443741][T18228] team0 (unregistering): Port device team_slave_0 removed [ 1548.604491][T20925] binder: 20923:20925 ioctl c0306201 0 returned -14 [ 1550.450798][T18935] ffs_data_put(): freeing [ 1550.709516][T20938] loop8: detected capacity change from 0 to 128 [ 1551.664734][T20619] hsr_slave_0: entered promiscuous mode [ 1551.736076][T20619] hsr_slave_1: entered promiscuous mode [ 1551.791750][T20619] debugfs: 'hsr0' already exists in 'hsr' [ 1551.828473][T20619] Cannot create hsr debugfs directory [ 1551.950062][ T5280] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1554.224062][T20619] netdevsim netdevsim6 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.297325][T20964] binder: 20963:20964 ioctl c0306201 0 returned -14 [ 1554.395865][T20967] loop8: detected capacity change from 0 to 128 [ 1556.376543][T20984] loop2: detected capacity change from 0 to 128 [ 1556.553366][T20987] loop1: detected capacity change from 0 to 32768 [ 1556.736257][T20987] JBD2: Ignoring recovery information on journal [ 1557.397288][T20987] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1557.425464][T20619] netdevsim netdevsim6 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.937682][T14311] ocfs2: Unmounting device (7,1) on (node local) [ 1558.196943][T20619] netdevsim netdevsim6 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.477667][T20619] netdevsim netdevsim6 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.531168][T21051] loop8: detected capacity change from 0 to 128 [ 1562.302611][T20619] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1562.344535][T20619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1562.390192][T20619] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1562.432737][T20619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1562.467022][T20619] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1562.786911][T20619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1563.528801][T20619] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1563.595552][T20619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1564.002726][T20619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.084899][T20619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.146247][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.153630][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.206677][T21116] loop2: detected capacity change from 0 to 128 [ 1564.274834][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.282181][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.318701][T21123] loop1: detected capacity change from 0 to 128 [ 1564.343271][T21123] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1564.620541][T21123] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1564.632904][T21116] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1564.646457][T21116] hpfs: filesystem error: improperly stopped [ 1565.189584][T21116] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1565.249793][T21116] hpfs: You really don't want any checks? You are crazy... [ 1565.281921][T20619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1565.355914][T20619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1565.367472][T21123] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1565.414888][T21116] hpfs: Code page index out of array [ 1565.463256][T21116] hpfs: code page support is disabled [ 1565.544624][T21116] hpfs: hpfs_map_4sectors(): unaligned read [ 1565.638386][T21116] hpfs: hpfs_map_4sectors(): unaligned read [ 1565.724727][T21116] hpfs: filesystem error: unable to find root dir [ 1566.561834][T14311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1567.838834][T21163] Driver unsupported XDP return value 0 on prog (id 104) dev N/A, expect packet loss! [ 1567.957439][T21172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3555'. [ 1570.192060][T21203] binder: BINDER_SET_CONTEXT_MGR already set [ 1570.235860][T21203] binder: 21195:21203 ioctl 4018620d 200000004a80 returned -16 [ 1571.627537][T20619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1571.707952][T21214] loop1: detected capacity change from 0 to 2048 [ 1572.326318][T21214] loop1: p2 < > p3 < p5 > p4 [ 1572.411595][T21214] loop1: partition table partially beyond EOD, truncated [ 1572.487159][T21214] loop1: p2 start 4278190080 is beyond EOD, truncated [ 1572.607112][T21214] loop1: p4 size 8192 extends beyond EOD, truncated [ 1573.315688][T21214] loop1: p5 size 8192 extends beyond EOD, truncated [ 1574.265545][T21257] read descriptors [ 1574.336695][T20619] veth0_vlan: entered promiscuous mode [ 1574.647744][T20619] veth1_vlan: entered promiscuous mode [ 1575.402525][T14311] ffs_data_put(): freeing [ 1575.467436][T20619] veth0_macvtap: entered promiscuous mode [ 1575.537559][T20619] veth1_macvtap: entered promiscuous mode [ 1575.671223][T21274] loop2: detected capacity change from 0 to 128 [ 1575.684504][T20619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1575.685371][T21276] loop1: detected capacity change from 0 to 256 [ 1575.908557][T21279] netlink: 'syz.0.3585': attribute type 10 has an invalid length. [ 1576.023291][T20619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.493436][ T9893] bond0: (slave bond_slave_0): interface is now down [ 1576.595354][ T9893] bond0: (slave bond_slave_1): interface is now down [ 1576.635208][T21286] loop1: detected capacity change from 0 to 512 [ 1576.671886][ T9893] bond0: (slave bond_slave_0): interface is now down [ 1576.723360][ T9893] bond0: (slave bond_slave_1): interface is now down [ 1576.750115][T21286] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1576.782803][T21279] syz_tun: entered promiscuous mode [ 1576.814567][ T9893] bond0: (slave bond_slave_0): interface is now down [ 1576.853233][T21286] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1576.863446][T21286] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.3586: Failed to acquire dquot type 1 [ 1576.874765][T21279] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1576.874887][ T9893] bond0: (slave bond_slave_1): interface is now down [ 1576.885725][T21286] loop1: lost filesystem error report for type 5 error -117 [ 1576.917633][T21286] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1576.925105][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1576.925141][ C1] EXT4-fs (loop1): last error at time 2000000426: ext4_acquire_dquot:7039 [ 1576.956728][ T9893] bond0: (slave syz_tun): interface is now down [ 1577.017512][ T12] bond0: (slave bond_slave_0): interface is now down [ 1577.044068][ T12] bond0: (slave bond_slave_1): interface is now down [ 1577.045115][ T153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.075120][ T12] bond0: (slave syz_tun): interface is now down [ 1577.122708][ T153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.143121][ T9893] bond0: (slave bond_slave_0): interface is now down [ 1577.151909][T21286] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1577.160921][ T9893] bond0: (slave bond_slave_1): interface is now down [ 1577.172215][ T153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.197630][T21286] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.3586: Failed to acquire dquot type 1 [ 1577.210163][ T9893] bond0: (slave syz_tun): interface is now down [ 1577.232915][T21293] loop2: detected capacity change from 0 to 2048 [ 1577.242721][ T153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.259242][T21286] loop1: lost filesystem error report for type 5 error -117 [ 1577.272270][ T37] bond0: (slave bond_slave_0): interface is now down [ 1577.319357][ T37] bond0: (slave bond_slave_1): interface is now down [ 1577.344674][T21286] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.3586: bg 0: block 248: padding at end of block bitmap is not set [ 1577.347612][ T37] bond0: (slave syz_tun): interface is now down [ 1577.382618][T21298] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1577.444009][T21286] loop1: lost filesystem error report for type 5 error -117 [ 1577.444810][T21286] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1577.485586][T21286] loop1: lost filesystem error report for type 5 error -117 [ 1577.517817][T21286] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1577.672481][T21293] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1577.690540][ T37] bond0: (slave bond_slave_0): interface is now down [ 1577.697509][ T37] bond0: (slave bond_slave_1): interface is now down [ 1577.704368][ T37] bond0: (slave syz_tun): interface is now down [ 1577.713356][T21286] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1577.739224][ T37] bond0: (slave bond_slave_0): interface is now down [ 1577.758353][T21286] EXT4-fs error (device loop1): ext4_acquire_dquot:7039: comm syz.1.3586: Failed to acquire dquot type 1 [ 1577.801031][ T37] bond0: (slave bond_slave_1): interface is now down [ 1577.830247][ T37] bond0: (slave syz_tun): interface is now down [ 1577.842002][T21286] loop1: lost filesystem error report for type 5 error -117 [ 1577.892802][ T37] bond0: (slave bond_slave_0): interface is now down [ 1577.910833][T21286] EXT4-fs (loop1): 1 orphan inode deleted [ 1577.999916][ T37] bond0: (slave bond_slave_1): interface is now down [ 1578.023467][T21286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.044676][ T37] bond0: (slave syz_tun): interface is now down [ 1578.100384][T18224] bond0: (slave bond_slave_0): interface is now down [ 1578.122801][T21286] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1578.148727][T18224] bond0: (slave bond_slave_1): interface is now down [ 1578.176562][T18224] bond0: (slave syz_tun): interface is now down [ 1578.221081][ T153] bond0: (slave bond_slave_0): interface is now down [ 1578.241149][ T153] bond0: (slave bond_slave_1): interface is now down [ 1578.259448][ T153] bond0: (slave syz_tun): interface is now down [ 1578.264106][T21046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.301941][T18224] bond0: (slave bond_slave_0): interface is now down [ 1578.319171][T21046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.328122][T18224] bond0: (slave bond_slave_1): interface is now down [ 1578.357316][T18224] bond0: (slave syz_tun): interface is now down [ 1578.373667][T21286] EXT4-fs error (device loop1): ext4_lookup:1787: inode #2: comm syz.1.3586: deleted inode referenced: 12 [ 1578.417488][T18224] bond0: (slave bond_slave_0): interface is now down [ 1578.428170][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1578.453155][T18224] bond0: (slave bond_slave_1): interface is now down [ 1578.479346][T18224] bond0: (slave syz_tun): interface is now down [ 1578.486979][T18230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.505205][T21316] read descriptors [ 1578.521958][ T37] bond0: (slave bond_slave_0): interface is now down [ 1578.546973][T18230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.557522][ T37] bond0: (slave bond_slave_1): interface is now down [ 1578.581440][ T37] bond0: (slave syz_tun): interface is now down [ 1578.631589][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1578.645116][ T37] bond0: now running without any active interface! [ 1578.651944][T14311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.664278][ T7707] ffs_data_put(): freeing [ 1578.691676][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.713106][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1578.752863][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1578.826124][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.917486][ T10] usb 3-1: config 0 descriptor?? [ 1579.106656][T21326] loop8: detected capacity change from 0 to 128 [ 1579.158290][T21329] loop1: detected capacity change from 0 to 256 [ 1580.220206][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1580.329756][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1580.340693][ T10] usb 3-1: USB disconnect, device number 12 [ 1580.532115][T21339] loop6: detected capacity change from 0 to 512 [ 1580.765674][T21339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.779447][T21339] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1583.307018][T21358] overlayfs: missing 'lowerdir' [ 1583.431156][T20619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.112238][T19784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1585.148217][T19784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1585.161634][T19784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1585.178966][T19784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1585.191242][T19784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1585.312713][T21375] syz.6.3608 (21375): drop_caches: 2 [ 1585.826692][T21400] retu-mfd 0-0001: could not read Retu revision: -5 [ 1585.887593][T21400] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 1585.918655][T21400] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 1586.128694][T21403] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 1586.190666][T21403] retu-mfd 0-0002: probe with driver retu-mfd failed with error -5 [ 1586.318700][T21413] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1587.254196][T13288] Bluetooth: hci2: command tx timeout [ 1587.633393][T21417] loop1: detected capacity change from 0 to 128 [ 1588.520297][T21417] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1588.564758][T21417] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.694579][T21403] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 1588.993209][ T7707] bond0: (slave syz_tun): Releasing backup interface [ 1589.378338][T13288] Bluetooth: hci2: command tx timeout [ 1589.496247][T14311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1589.554995][T21430] vivid-000: disconnect [ 1589.630935][T21426] vivid-000: reconnect [ 1589.755879][T21435] overlayfs: missing 'lowerdir' [ 1590.041714][T21443] sock: sock_timestamping_bind_phc: sock not bind to device [ 1590.573015][ T1102] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1591.614598][T13288] Bluetooth: hci2: command tx timeout [ 1592.197922][T21462] loop1: detected capacity change from 0 to 128 [ 1592.209836][T21462] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1592.221901][T21462] hpfs: filesystem error: improperly stopped [ 1592.227910][T21462] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1592.236856][T21462] hpfs: You really don't want any checks? You are crazy... [ 1592.244125][T21462] hpfs: Code page index out of array [ 1592.250564][T21462] hpfs: code page support is disabled [ 1592.261478][T21462] hpfs: hpfs_map_4sectors(): unaligned read [ 1592.267492][T21462] hpfs: hpfs_map_4sectors(): unaligned read [ 1592.273953][T21462] hpfs: filesystem error: unable to find root dir [ 1592.391352][T21468] loop2: detected capacity change from 0 to 512 [ 1592.563528][T21468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1592.679529][T21468] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.823670][ T1102] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.920119][T14269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.185240][T21491] overlayfs: missing 'lowerdir' [ 1593.246736][ T1102] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.377169][T21497] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1593.562314][T21500] sock: sock_timestamping_bind_phc: sock not bind to device [ 1593.649366][T13288] Bluetooth: hci2: command tx timeout [ 1594.246910][ T1102] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.795837][ T9893] netdevsim netdevsim8 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.978077][T18232] netdevsim netdevsim8 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.934690][ T9893] netdevsim netdevsim8 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 1597.234844][ T1102] bridge_slave_1: left allmulticast mode [ 1597.286121][ T1102] bridge_slave_1: left promiscuous mode [ 1597.333695][T21545] overlayfs: missing 'lowerdir' [ 1597.358962][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.433780][ T1102] bridge_slave_0: left allmulticast mode [ 1597.443509][ T1102] bridge_slave_0: left promiscuous mode [ 1597.460198][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.503338][T21557] sock: sock_timestamping_bind_phc: sock not bind to device [ 1598.604775][T21557] zram: Cannot change disksize for initialized device [ 1600.506732][ T1102] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1604.026457][ T1102] bond0 (unregistering): left promiscuous mode [ 1604.053699][ T1102] bond_slave_0: left promiscuous mode [ 1604.069825][ T1102] bond_slave_1: left promiscuous mode [ 1604.164059][T21607] overlayfs: missing 'lowerdir' [ 1604.246120][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.343579][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.373305][T21611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1604.414471][ T1102] bond0 (unregistering): Released all slaves [ 1604.497420][ T1102] bond1 (unregistering): Released all slaves [ 1604.815383][T18231] netdevsim netdevsim8 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.859914][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.924030][T21387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.972478][T21387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.018463][T21387] bridge_slave_0: entered allmulticast mode [ 1607.064549][T21387] bridge_slave_0: entered promiscuous mode [ 1607.135431][T21646] netlink: 'syz.5.3677': attribute type 10 has an invalid length. [ 1607.408616][T21625] loop6: detected capacity change from 0 to 32768 [ 1607.446359][T21387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.464033][T21387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.481286][T21387] bridge_slave_1: entered allmulticast mode [ 1607.509907][T21387] bridge_slave_1: entered promiscuous mode [ 1607.558556][T21625] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1607.558649][T21625] (syz.6.3672,21625,0):ocfs2_initialize_super:2226 ERROR: status = -12 [ 1607.578628][T21625] (syz.6.3672,21625,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 1608.408940][ T1102] batadv0: left promiscuous mode [ 1608.615186][T21662] sock: sock_timestamping_bind_phc: sock not bind to device [ 1608.634160][ T1102] hsr_slave_0: left promiscuous mode [ 1608.672537][ T1102] hsr_slave_1: left promiscuous mode [ 1608.703744][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1608.716227][T21662] zram: Cannot change disksize for initialized device [ 1608.741897][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1608.758531][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1608.781816][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1608.843500][ T1102] veth1_macvtap: left promiscuous mode [ 1608.861679][ T1102] veth0_macvtap: left promiscuous mode [ 1608.877573][ T1102] veth1_vlan: left promiscuous mode [ 1608.889688][ T1102] veth0_vlan: left promiscuous mode [ 1612.716342][T21708] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1612.855630][T21707] loop2: detected capacity change from 0 to 32768 [ 1612.877606][T21711] loop1: detected capacity change from 0 to 256 [ 1612.918605][T21707] JBD2: Ignoring recovery information on journal [ 1612.979527][T21707] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1614.685235][T14269] ocfs2: Unmounting device (7,2) on (node local) [ 1614.706576][T21725] futex_wake_op: syz.1.3701 tries to shift op by -65; fix this program [ 1615.007203][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 1615.853432][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 1619.616670][T21754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1620.356506][T21387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.461994][T21387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.814999][T21387] team0: Port device team_slave_0 added [ 1621.864638][T21387] team0: Port device team_slave_1 added [ 1621.948644][T21387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.989329][T21387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.042564][T21772] loop2: detected capacity change from 0 to 2048 [ 1622.102756][T21387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.163231][T21775] loop6: detected capacity change from 0 to 8 [ 1622.241275][T21387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.259435][T21387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1622.295690][T21775] squashfs image failed sanity check [ 1622.310384][T21387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.424942][T21772] loop2: p2 < > p3 < p5 > p4 [ 1622.472290][T21772] loop2: partition table partially beyond EOD, truncated [ 1622.514408][T21772] loop2: p2 start 4278190080 is beyond EOD, truncated [ 1622.616546][T21772] loop2: p4 size 8192 extends beyond EOD, truncated [ 1622.675241][T21772] loop2: p5 size 8192 extends beyond EOD, truncated [ 1622.964104][T21387] hsr_slave_0: entered promiscuous mode [ 1623.082681][T21387] hsr_slave_1: entered promiscuous mode [ 1623.137770][T21387] debugfs: 'hsr0' already exists in 'hsr' [ 1623.273065][T21387] Cannot create hsr debugfs directory [ 1624.495646][T21800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1626.088620][T18334] udevd[18334]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1626.153061][T18390] udevd[18390]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1626.434971][T21784] ================================================================== [ 1626.443094][T21784] BUG: KASAN: slab-out-of-bounds in free_netdev+0x7d9/0x8c0 [ 1626.450433][T21784] Read of size 8 at addr ffff88807c02cd48 by task syz.0.3719/21784 [ 1626.458344][T21784] [ 1626.460684][T21784] CPU: 1 UID: 0 PID: 21784 Comm: syz.0.3719 Not tainted syzkaller #0 PREEMPT(full) [ 1626.460739][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1626.460764][T21784] Call Trace: [ 1626.460778][T21784] [ 1626.460794][T21784] dump_stack_lvl+0x100/0x190 [ 1626.460843][T21784] print_report+0x13d/0x4b0 [ 1626.460901][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.460950][T21784] ? __virt_addr_valid+0x239/0x430 [ 1626.460999][T21784] ? free_netdev+0x7d9/0x8c0 [ 1626.461051][T21784] kasan_report+0xdf/0x1c0 [ 1626.461094][T21784] ? free_netdev+0x7d9/0x8c0 [ 1626.461153][T21784] free_netdev+0x7d9/0x8c0 [ 1626.461210][T21784] pn_bind+0x3a7/0x5b0 [ 1626.461252][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.461302][T21784] ? __pfx_pn_bind+0x10/0x10 [ 1626.461343][T21784] usb_add_function+0x219/0x890 [ 1626.461406][T21784] configfs_composite_bind+0xd83/0x1960 [ 1626.461477][T21784] gadget_bind_driver+0x28c/0xbf0 [ 1626.461519][T21784] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 1626.461579][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.461628][T21784] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1626.461671][T21784] really_probe+0x241/0xa60 [ 1626.461736][T21784] __driver_probe_device+0x20e/0x450 [ 1626.461792][T21784] driver_probe_device+0x4a/0x140 [ 1626.461846][T21784] __driver_attach+0x21f/0x5b0 [ 1626.461900][T21784] ? __pfx___driver_attach+0x10/0x10 [ 1626.461952][T21784] bus_for_each_dev+0x13e/0x1d0 [ 1626.461994][T21784] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1626.462035][T21784] ? bus_add_driver+0x2b5/0x5b0 [ 1626.462081][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.462135][T21784] bus_add_driver+0x305/0x5b0 [ 1626.462186][T21784] driver_register+0x1e2/0x360 [ 1626.462243][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.462294][T21784] usb_gadget_register_driver_owner+0x132/0x210 [ 1626.462340][T21784] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1626.462397][T21784] configfs_write_iter+0x302/0x4e0 [ 1626.462465][T21784] vfs_write+0x6ac/0x1050 [ 1626.462516][T21784] ? __pfx_configfs_write_iter+0x10/0x10 [ 1626.462580][T21784] ? __pfx_vfs_write+0x10/0x10 [ 1626.462647][T21784] ksys_write+0x12a/0x250 [ 1626.462697][T21784] ? __pfx_ksys_write+0x10/0x10 [ 1626.462758][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1626.462811][T21784] do_syscall_64+0x115/0x870 [ 1626.462866][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.462906][T21784] RIP: 0033:0x7f39ea99de99 [ 1626.462937][T21784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.462977][T21784] RSP: 002b:00007f39eb86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1626.463016][T21784] RAX: ffffffffffffffda RBX: 00007f39eac26090 RCX: 00007f39ea99de99 [ 1626.463044][T21784] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000004 [ 1626.463071][T21784] RBP: 00007f39eaa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1626.463097][T21784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.463123][T21784] R13: 00007f39eac26128 R14: 00007f39eac26090 R15: 00007ffd7160c058 [ 1626.463165][T21784] [ 1626.463181][T21784] [ 1626.768677][T21784] Allocated by task 18935: [ 1626.773176][T21784] kasan_save_stack+0x30/0x50 [ 1626.777888][T21784] kasan_save_track+0x14/0x30 [ 1626.782599][T21784] __kasan_kmalloc+0xaa/0xb0 [ 1626.787218][T21784] __kvmalloc_node_noprof+0x34f/0x970 [ 1626.792624][T21784] veth_dev_init+0x37c/0x580 [ 1626.797238][T21784] register_netdevice+0x685/0x25a0 [ 1626.802373][T21784] veth_newlink+0x316/0xa00 [ 1626.806897][T21784] rtnl_newlink+0x1499/0x2380 [ 1626.811743][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1626.816816][T21784] netlink_rcv_skb+0x159/0x420 [ 1626.821597][T21784] netlink_unicast+0x585/0x850 [ 1626.826370][T21784] netlink_sendmsg+0x8b0/0xda0 [ 1626.831236][T21784] __sys_sendto+0x48b/0x4e0 [ 1626.835752][T21784] __x64_sys_sendto+0xe0/0x1c0 [ 1626.840541][T21784] do_syscall_64+0x115/0x870 [ 1626.845239][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.851149][T21784] [ 1626.853488][T21784] The buggy address belongs to the object at ffff88807c02c000 [ 1626.853488][T21784] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1626.867830][T21784] The buggy address is located 1096 bytes to the right of [ 1626.867830][T21784] allocated 2304-byte region [ffff88807c02c000, ffff88807c02c900) [ 1626.882788][T21784] [ 1626.885123][T21784] The buggy address belongs to the physical page: [ 1626.891661][T21784] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c028 [ 1626.900437][T21784] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1626.908957][T21784] memcg:ffff888075be6fc1 [ 1626.913292][T21784] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1626.920844][T21784] page_type: f5(slab) [ 1626.924834][T21784] raw: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 1626.933463][T21784] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff888075be6fc1 [ 1626.942146][T21784] head: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 1626.950829][T21784] head: 0000000000000000 0000000800040004 00000000f5000000 ffff888075be6fc1 [ 1626.960222][T21784] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1626.968946][T21784] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1626.977923][T21784] page dumped because: kasan: bad access detected [ 1626.984377][T21784] page_owner tracks the page as allocated [ 1626.990102][T21784] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5628, tgid 5628 (syz-executor), ts 104352423084, free_ts 104350333295 [ 1627.011685][T21784] post_alloc_hook+0xfd/0x120 [ 1627.016423][T21784] get_page_from_freelist+0xf48/0x3530 [ 1627.021921][T21784] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1627.027865][T21784] new_slab+0xa2/0x640 [ 1627.031993][T21784] refill_objects+0xe3/0x410 [ 1627.036640][T21784] __pcs_replace_empty_main+0x376/0x680 [ 1627.042225][T21784] __kmalloc_cache_noprof+0x479/0x6c0 [ 1627.047645][T21784] ipv6_add_dev+0x670/0x1520 [ 1627.052390][T21784] addrconf_notify+0x5db/0x1ba0 [ 1627.057306][T21784] notifier_call_chain+0x99/0x3f0 [ 1627.062393][T21784] call_netdevice_notifiers_info+0xbe/0x110 [ 1627.068343][T21784] register_netdevice+0x1998/0x25a0 [ 1627.073594][T21784] veth_newlink+0x316/0xa00 [ 1627.078135][T21784] rtnl_newlink+0x1499/0x2380 [ 1627.082840][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1627.087805][T21784] netlink_rcv_skb+0x159/0x420 [ 1627.092581][T21784] page last free pid 5628 tgid 5628 stack trace: [ 1627.098907][T21784] __free_frozen_pages+0x79f/0x1090 [ 1627.104129][T21784] qlist_free_all+0x47/0xf0 [ 1627.108659][T21784] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1627.114146][T21784] __kasan_slab_alloc+0x69/0x90 [ 1627.119034][T21784] __kmalloc_cache_noprof+0x265/0x6c0 [ 1627.124430][T21784] ref_tracker_alloc+0x190/0x590 [ 1627.129398][T21784] netdev_queue_update_kobjects+0x2db/0x6f0 [ 1627.135301][T21784] netdev_register_kobject+0x2b3/0x3d0 [ 1627.140770][T21784] register_netdevice+0x15b6/0x25a0 [ 1627.145993][T21784] veth_newlink+0x316/0xa00 [ 1627.150514][T21784] rtnl_newlink+0x1499/0x2380 [ 1627.155232][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1627.160202][T21784] netlink_rcv_skb+0x159/0x420 [ 1627.164988][T21784] netlink_unicast+0x585/0x850 [ 1627.169763][T21784] netlink_sendmsg+0x8b0/0xda0 [ 1627.174560][T21784] __sys_sendto+0x48b/0x4e0 [ 1627.179116][T21784] [ 1627.181444][T21784] Memory state around the buggy address: [ 1627.187075][T21784] ffff88807c02cc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1627.195148][T21784] ffff88807c02cc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1627.203309][T21784] >ffff88807c02cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1627.211467][T21784] ^ [ 1627.217919][T21784] ffff88807c02cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1627.225994][T21784] ffff88807c02ce00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1627.234056][T21784] ================================================================== [ 1627.921180][T21784] Disabling lock debugging due to kernel taint [ 1627.930859][T21815] loop2: detected capacity change from 0 to 256 [ 1627.990964][T21784] ================================================================== [ 1627.999077][T21784] BUG: KASAN: slab-out-of-bounds in free_netdev+0x82e/0x8c0 [ 1628.006610][T21784] Read of size 8 at addr ffff88807c02cd50 by task syz.0.3719/21784 [ 1628.014551][T21784] [ 1628.016898][T21784] CPU: 1 UID: 0 PID: 21784 Comm: syz.0.3719 Tainted: G B syzkaller #0 PREEMPT(full) [ 1628.016956][T21784] Tainted: [B]=BAD_PAGE [ 1628.016970][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1628.016996][T21784] Call Trace: [ 1628.017012][T21784] [ 1628.017028][T21784] dump_stack_lvl+0x100/0x190 [ 1628.017076][T21784] print_report+0x13d/0x4b0 [ 1628.017134][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.017183][T21784] ? __virt_addr_valid+0x239/0x430 [ 1628.017233][T21784] ? free_netdev+0x82e/0x8c0 [ 1628.017289][T21784] kasan_report+0xdf/0x1c0 [ 1628.017332][T21784] ? free_netdev+0x82e/0x8c0 [ 1628.017390][T21784] free_netdev+0x82e/0x8c0 [ 1628.017446][T21784] pn_bind+0x3a7/0x5b0 [ 1628.017488][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.017537][T21784] ? __pfx_pn_bind+0x10/0x10 [ 1628.017577][T21784] usb_add_function+0x219/0x890 [ 1628.017640][T21784] configfs_composite_bind+0xd83/0x1960 [ 1628.017708][T21784] gadget_bind_driver+0x28c/0xbf0 [ 1628.017749][T21784] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 1628.017809][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.017857][T21784] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1628.017900][T21784] really_probe+0x241/0xa60 [ 1628.017956][T21784] __driver_probe_device+0x20e/0x450 [ 1628.018012][T21784] driver_probe_device+0x4a/0x140 [ 1628.018066][T21784] __driver_attach+0x21f/0x5b0 [ 1628.018119][T21784] ? __pfx___driver_attach+0x10/0x10 [ 1628.018172][T21784] bus_for_each_dev+0x13e/0x1d0 [ 1628.018214][T21784] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1628.018258][T21784] ? bus_add_driver+0x2b5/0x5b0 [ 1628.018304][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.018358][T21784] bus_add_driver+0x305/0x5b0 [ 1628.018408][T21784] driver_register+0x1e2/0x360 [ 1628.018464][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.018514][T21784] usb_gadget_register_driver_owner+0x132/0x210 [ 1628.018559][T21784] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1628.018615][T21784] configfs_write_iter+0x302/0x4e0 [ 1628.018682][T21784] vfs_write+0x6ac/0x1050 [ 1628.018732][T21784] ? __pfx_configfs_write_iter+0x10/0x10 [ 1628.018794][T21784] ? __pfx_vfs_write+0x10/0x10 [ 1628.018859][T21784] ksys_write+0x12a/0x250 [ 1628.018907][T21784] ? __pfx_ksys_write+0x10/0x10 [ 1628.018959][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.019011][T21784] do_syscall_64+0x115/0x870 [ 1628.019063][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.019104][T21784] RIP: 0033:0x7f39ea99de99 [ 1628.019134][T21784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.019174][T21784] RSP: 002b:00007f39eb86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1628.019211][T21784] RAX: ffffffffffffffda RBX: 00007f39eac26090 RCX: 00007f39ea99de99 [ 1628.019239][T21784] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000004 [ 1628.019268][T21784] RBP: 00007f39eaa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1628.019291][T21784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.019316][T21784] R13: 00007f39eac26128 R14: 00007f39eac26090 R15: 00007ffd7160c058 [ 1628.019356][T21784] [ 1628.019370][T21784] [ 1628.330839][T21784] Allocated by task 18935: [ 1628.335257][T21784] kasan_save_stack+0x30/0x50 [ 1628.339979][T21784] kasan_save_track+0x14/0x30 [ 1628.344692][T21784] __kasan_kmalloc+0xaa/0xb0 [ 1628.349323][T21784] __kvmalloc_node_noprof+0x34f/0x970 [ 1628.354772][T21784] veth_dev_init+0x37c/0x580 [ 1628.359399][T21784] register_netdevice+0x685/0x25a0 [ 1628.364550][T21784] veth_newlink+0x316/0xa00 [ 1628.369082][T21784] rtnl_newlink+0x1499/0x2380 [ 1628.373792][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1628.378851][T21784] netlink_rcv_skb+0x159/0x420 [ 1628.383636][T21784] netlink_unicast+0x585/0x850 [ 1628.388435][T21784] netlink_sendmsg+0x8b0/0xda0 [ 1628.393253][T21784] __sys_sendto+0x48b/0x4e0 [ 1628.397809][T21784] __x64_sys_sendto+0xe0/0x1c0 [ 1628.402625][T21784] do_syscall_64+0x115/0x870 [ 1628.407269][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.413210][T21784] [ 1628.415542][T21784] The buggy address belongs to the object at ffff88807c02c000 [ 1628.415542][T21784] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1628.429892][T21784] The buggy address is located 1104 bytes to the right of [ 1628.429892][T21784] allocated 2304-byte region [ffff88807c02c000, ffff88807c02c900) [ 1628.444864][T21784] [ 1628.447206][T21784] The buggy address belongs to the physical page: [ 1628.453882][T21784] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c028 [ 1628.462668][T21784] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1628.471219][T21784] memcg:ffff888075be6fc1 [ 1628.475463][T21784] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1628.483017][T21784] page_type: f5(slab) [ 1628.487026][T21784] raw: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 1628.495648][T21784] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff888075be6fc1 [ 1628.504413][T21784] head: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 1628.513168][T21784] head: 0000000000000000 0000000800040004 00000000f5000000 ffff888075be6fc1 [ 1628.521872][T21784] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1628.530661][T21784] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1628.539377][T21784] page dumped because: kasan: bad access detected [ 1628.545889][T21784] page_owner tracks the page as allocated [ 1628.551604][T21784] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5628, tgid 5628 (syz-executor), ts 104352423084, free_ts 104350333295 [ 1628.573217][T21784] post_alloc_hook+0xfd/0x120 [ 1628.577935][T21784] get_page_from_freelist+0xf48/0x3530 [ 1628.583429][T21784] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1628.589372][T21784] new_slab+0xa2/0x640 [ 1628.593497][T21784] refill_objects+0xe3/0x410 [ 1628.598126][T21784] __pcs_replace_empty_main+0x376/0x680 [ 1628.603712][T21784] __kmalloc_cache_noprof+0x479/0x6c0 [ 1628.609211][T21784] ipv6_add_dev+0x670/0x1520 [ 1628.613841][T21784] addrconf_notify+0x5db/0x1ba0 [ 1628.618739][T21784] notifier_call_chain+0x99/0x3f0 [ 1628.623799][T21784] call_netdevice_notifiers_info+0xbe/0x110 [ 1628.629732][T21784] register_netdevice+0x1998/0x25a0 [ 1628.634969][T21784] veth_newlink+0x316/0xa00 [ 1628.639493][T21784] rtnl_newlink+0x1499/0x2380 [ 1628.644197][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1628.649158][T21784] netlink_rcv_skb+0x159/0x420 [ 1628.653934][T21784] page last free pid 5628 tgid 5628 stack trace: [ 1628.660286][T21784] __free_frozen_pages+0x79f/0x1090 [ 1628.665497][T21784] qlist_free_all+0x47/0xf0 [ 1628.670718][T21784] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1628.676221][T21784] __kasan_slab_alloc+0x69/0x90 [ 1628.681101][T21784] __kmalloc_cache_noprof+0x265/0x6c0 [ 1628.686504][T21784] ref_tracker_alloc+0x190/0x590 [ 1628.691572][T21784] netdev_queue_update_kobjects+0x2db/0x6f0 [ 1628.697631][T21784] netdev_register_kobject+0x2b3/0x3d0 [ 1628.703128][T21784] register_netdevice+0x15b6/0x25a0 [ 1628.708401][T21784] veth_newlink+0x316/0xa00 [ 1628.712938][T21784] rtnl_newlink+0x1499/0x2380 [ 1628.717650][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1628.722621][T21784] netlink_rcv_skb+0x159/0x420 [ 1628.727395][T21784] netlink_unicast+0x585/0x850 [ 1628.732172][T21784] netlink_sendmsg+0x8b0/0xda0 [ 1628.736945][T21784] __sys_sendto+0x48b/0x4e0 [ 1628.741472][T21784] [ 1628.743793][T21784] Memory state around the buggy address: [ 1628.749419][T21784] ffff88807c02cc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1628.757482][T21784] ffff88807c02cc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1628.765661][T21784] >ffff88807c02cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1628.773720][T21784] ^ [ 1628.780395][T21784] ffff88807c02cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1628.788463][T21784] ffff88807c02ce00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1628.796524][T21784] ================================================================== [ 1628.843343][T21784] ================================================================== [ 1628.851457][T21784] BUG: KASAN: slab-out-of-bounds in free_netdev+0x7c2/0x8c0 [ 1628.858780][T21784] Read of size 8 at addr ffff88807c02cd58 by task syz.0.3719/21784 [ 1628.866672][T21784] [ 1628.869029][T21784] CPU: 0 UID: 0 PID: 21784 Comm: syz.0.3719 Tainted: G B syzkaller #0 PREEMPT(full) [ 1628.869079][T21784] Tainted: [B]=BAD_PAGE [ 1628.869092][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1628.869114][T21784] Call Trace: [ 1628.869128][T21784] [ 1628.869143][T21784] dump_stack_lvl+0x100/0x190 [ 1628.869185][T21784] print_report+0x13d/0x4b0 [ 1628.869235][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.869278][T21784] ? __virt_addr_valid+0x239/0x430 [ 1628.869325][T21784] ? free_netdev+0x7c2/0x8c0 [ 1628.869371][T21784] kasan_report+0xdf/0x1c0 [ 1628.869408][T21784] ? free_netdev+0x7c2/0x8c0 [ 1628.869458][T21784] free_netdev+0x7c2/0x8c0 [ 1628.869507][T21784] pn_bind+0x3a7/0x5b0 [ 1628.869544][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.869587][T21784] ? __pfx_pn_bind+0x10/0x10 [ 1628.869622][T21784] usb_add_function+0x219/0x890 [ 1628.869676][T21784] configfs_composite_bind+0xd83/0x1960 [ 1628.869736][T21784] gadget_bind_driver+0x28c/0xbf0 [ 1628.869778][T21784] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 1628.869830][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.869872][T21784] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1628.869909][T21784] really_probe+0x241/0xa60 [ 1628.869959][T21784] __driver_probe_device+0x20e/0x450 [ 1628.870008][T21784] driver_probe_device+0x4a/0x140 [ 1628.870055][T21784] __driver_attach+0x21f/0x5b0 [ 1628.870102][T21784] ? __pfx___driver_attach+0x10/0x10 [ 1628.870148][T21784] bus_for_each_dev+0x13e/0x1d0 [ 1628.870184][T21784] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1628.870219][T21784] ? bus_add_driver+0x2b5/0x5b0 [ 1628.870259][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.870306][T21784] bus_add_driver+0x305/0x5b0 [ 1628.870349][T21784] driver_register+0x1e2/0x360 [ 1628.870398][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.870441][T21784] usb_gadget_register_driver_owner+0x132/0x210 [ 1628.870481][T21784] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1628.870529][T21784] configfs_write_iter+0x302/0x4e0 [ 1628.870587][T21784] vfs_write+0x6ac/0x1050 [ 1628.870631][T21784] ? __pfx_configfs_write_iter+0x10/0x10 [ 1628.870686][T21784] ? __pfx_vfs_write+0x10/0x10 [ 1628.870743][T21784] ksys_write+0x12a/0x250 [ 1628.870790][T21784] ? __pfx_ksys_write+0x10/0x10 [ 1628.870836][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1628.870881][T21784] do_syscall_64+0x115/0x870 [ 1628.870928][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.870963][T21784] RIP: 0033:0x7f39ea99de99 [ 1628.870990][T21784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.871024][T21784] RSP: 002b:00007f39eb86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1628.871057][T21784] RAX: ffffffffffffffda RBX: 00007f39eac26090 RCX: 00007f39ea99de99 [ 1628.871081][T21784] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000004 [ 1628.871103][T21784] RBP: 00007f39eaa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1628.871126][T21784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1628.871148][T21784] R13: 00007f39eac26128 R14: 00007f39eac26090 R15: 00007ffd7160c058 [ 1628.871183][T21784] [ 1628.871196][T21784] [ 1629.181739][T21784] Allocated by task 18935: [ 1629.186283][T21784] kasan_save_stack+0x30/0x50 [ 1629.191007][T21784] kasan_save_track+0x14/0x30 [ 1629.195715][T21784] __kasan_kmalloc+0xaa/0xb0 [ 1629.200333][T21784] __kvmalloc_node_noprof+0x34f/0x970 [ 1629.205734][T21784] veth_dev_init+0x37c/0x580 [ 1629.210345][T21784] register_netdevice+0x685/0x25a0 [ 1629.215572][T21784] veth_newlink+0x316/0xa00 [ 1629.220112][T21784] rtnl_newlink+0x1499/0x2380 [ 1629.224816][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1629.229779][T21784] netlink_rcv_skb+0x159/0x420 [ 1629.234558][T21784] netlink_unicast+0x585/0x850 [ 1629.239332][T21784] netlink_sendmsg+0x8b0/0xda0 [ 1629.244120][T21784] __sys_sendto+0x48b/0x4e0 [ 1629.248656][T21784] __x64_sys_sendto+0xe0/0x1c0 [ 1629.253439][T21784] do_syscall_64+0x115/0x870 [ 1629.258139][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.264046][T21784] [ 1629.266369][T21784] The buggy address belongs to the object at ffff88807c02c000 [ 1629.266369][T21784] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1629.280693][T21784] The buggy address is located 1112 bytes to the right of [ 1629.280693][T21784] allocated 2304-byte region [ffff88807c02c000, ffff88807c02c900) [ 1629.295554][T21784] [ 1629.297875][T21784] The buggy address belongs to the physical page: [ 1629.304285][T21784] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c028 [ 1629.313095][T21784] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1629.321604][T21784] memcg:ffff888075be6fc1 [ 1629.325878][T21784] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1629.333426][T21784] page_type: f5(slab) [ 1629.337416][T21784] raw: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 1629.346006][T21784] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff888075be6fc1 [ 1629.354776][T21784] head: 00fff00000000040 ffff88813fe2b500 dead000000000100 dead000000000122 [ 1629.363455][T21784] head: 0000000000000000 0000000800040004 00000000f5000000 ffff888075be6fc1 [ 1629.372136][T21784] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1629.380909][T21784] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1629.389620][T21784] page dumped because: kasan: bad access detected [ 1629.396029][T21784] page_owner tracks the page as allocated [ 1629.401735][T21784] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5628, tgid 5628 (syz-executor), ts 104352423084, free_ts 104350333295 [ 1629.423307][T21784] post_alloc_hook+0xfd/0x120 [ 1629.428019][T21784] get_page_from_freelist+0xf48/0x3530 [ 1629.433515][T21784] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 1629.439452][T21784] new_slab+0xa2/0x640 [ 1629.443545][T21784] refill_objects+0xe3/0x410 [ 1629.448154][T21784] __pcs_replace_empty_main+0x376/0x680 [ 1629.453811][T21784] __kmalloc_cache_noprof+0x479/0x6c0 [ 1629.459248][T21784] ipv6_add_dev+0x670/0x1520 [ 1629.463942][T21784] addrconf_notify+0x5db/0x1ba0 [ 1629.468854][T21784] notifier_call_chain+0x99/0x3f0 [ 1629.473933][T21784] call_netdevice_notifiers_info+0xbe/0x110 [ 1629.480530][T21784] register_netdevice+0x1998/0x25a0 [ 1629.485761][T21784] veth_newlink+0x316/0xa00 [ 1629.490286][T21784] rtnl_newlink+0x1499/0x2380 [ 1629.495095][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1629.500086][T21784] netlink_rcv_skb+0x159/0x420 [ 1629.504869][T21784] page last free pid 5628 tgid 5628 stack trace: [ 1629.511191][T21784] __free_frozen_pages+0x79f/0x1090 [ 1629.516418][T21784] qlist_free_all+0x47/0xf0 [ 1629.520945][T21784] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1629.526432][T21784] __kasan_slab_alloc+0x69/0x90 [ 1629.531287][T21784] __kmalloc_cache_noprof+0x265/0x6c0 [ 1629.536680][T21784] ref_tracker_alloc+0x190/0x590 [ 1629.541675][T21784] netdev_queue_update_kobjects+0x2db/0x6f0 [ 1629.547667][T21784] netdev_register_kobject+0x2b3/0x3d0 [ 1629.553135][T21784] register_netdevice+0x15b6/0x25a0 [ 1629.558359][T21784] veth_newlink+0x316/0xa00 [ 1629.562883][T21784] rtnl_newlink+0x1499/0x2380 [ 1629.567612][T21784] rtnetlink_rcv_msg+0x95e/0xe90 [ 1629.572661][T21784] netlink_rcv_skb+0x159/0x420 [ 1629.577436][T21784] netlink_unicast+0x585/0x850 [ 1629.582206][T21784] netlink_sendmsg+0x8b0/0xda0 [ 1629.586982][T21784] __sys_sendto+0x48b/0x4e0 [ 1629.591548][T21784] [ 1629.593876][T21784] Memory state around the buggy address: [ 1629.599590][T21784] ffff88807c02cc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1629.607799][T21784] ffff88807c02cc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1629.615883][T21784] >ffff88807c02cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1629.624049][T21784] ^ [ 1629.630994][T21784] ffff88807c02cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1629.639149][T21784] ffff88807c02ce00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1629.647211][T21784] ================================================================== [ 1629.673450][T21784] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 1629.685585][T21784] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1629.694032][T21784] CPU: 1 UID: 0 PID: 21784 Comm: syz.0.3719 Tainted: G B syzkaller #0 PREEMPT(full) [ 1629.705010][T21784] Tainted: [B]=BAD_PAGE [ 1629.709201][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1629.719274][T21784] RIP: 0010:__hw_addr_flush+0x70/0x250 [ 1629.724770][T21784] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d0 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 1e 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a5 01 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8b [ 1629.744937][T21784] RSP: 0018:ffffc900040f7830 EFLAGS: 00010256 [ 1629.751035][T21784] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90011a4f000 [ 1629.759023][T21784] RDX: 0000000000000000 RSI: ffffffff898fd92a RDI: ffff88807c02c460 [ 1629.767100][T21784] RBP: 0000000000000000 R08: 0000000000000006 R09: ffffc90000000000 [ 1629.775123][T21784] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88807c02c168 [ 1629.783162][T21784] R13: ffff88807bcffc00 R14: ffff88807c02c448 R15: 00000000fffffffc [ 1629.791242][T21784] FS: 00007f39eb86e6c0(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 1629.800372][T21784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1629.807001][T21784] CR2: 0000559c4d2dc950 CR3: 0000000075962000 CR4: 0000000000350ef0 [ 1629.814999][T21784] Call Trace: [ 1629.818321][T21784] [ 1629.821260][T21784] free_netdev+0x25d/0x8c0 [ 1629.825750][T21784] pn_bind+0x3a7/0x5b0 [ 1629.829846][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.835510][T21784] ? __pfx_pn_bind+0x10/0x10 [ 1629.840124][T21784] usb_add_function+0x219/0x890 [ 1629.845018][T21784] configfs_composite_bind+0xd83/0x1960 [ 1629.850615][T21784] gadget_bind_driver+0x28c/0xbf0 [ 1629.855836][T21784] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 1629.861511][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.867172][T21784] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1629.872739][T21784] really_probe+0x241/0xa60 [ 1629.877367][T21784] __driver_probe_device+0x20e/0x450 [ 1629.882762][T21784] driver_probe_device+0x4a/0x140 [ 1629.887836][T21784] __driver_attach+0x21f/0x5b0 [ 1629.892780][T21784] ? __pfx___driver_attach+0x10/0x10 [ 1629.898126][T21784] bus_for_each_dev+0x13e/0x1d0 [ 1629.903008][T21784] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1629.908410][T21784] ? bus_add_driver+0x2b5/0x5b0 [ 1629.913291][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.918959][T21784] bus_add_driver+0x305/0x5b0 [ 1629.923864][T21784] driver_register+0x1e2/0x360 [ 1629.928667][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.934349][T21784] usb_gadget_register_driver_owner+0x132/0x210 [ 1629.940620][T21784] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 1629.946289][T21784] configfs_write_iter+0x302/0x4e0 [ 1629.951489][T21784] vfs_write+0x6ac/0x1050 [ 1629.955861][T21784] ? __pfx_configfs_write_iter+0x10/0x10 [ 1629.961558][T21784] ? __pfx_vfs_write+0x10/0x10 [ 1629.966390][T21784] ksys_write+0x12a/0x250 [ 1629.970778][T21784] ? __pfx_ksys_write+0x10/0x10 [ 1629.975692][T21784] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1629.981368][T21784] do_syscall_64+0x115/0x870 [ 1629.986004][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.991924][T21784] RIP: 0033:0x7f39ea99de99 [ 1629.996526][T21784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1630.016256][T21784] RSP: 002b:00007f39eb86e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1630.024705][T21784] RAX: ffffffffffffffda RBX: 00007f39eac26090 RCX: 00007f39ea99de99 [ 1630.032763][T21784] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 0000000000000004 [ 1630.040749][T21784] RBP: 00007f39eaa33eaf R08: 0000000000000000 R09: 0000000000000000 [ 1630.048734][T21784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1630.056834][T21784] R13: 00007f39eac26128 R14: 00007f39eac26090 R15: 00007ffd7160c058 [ 1630.064869][T21784] [ 1630.067977][T21784] Modules linked in: [ 1630.073210][T21784] ---[ end trace 0000000000000000 ]--- [ 1630.168231][T21784] RIP: 0010:__hw_addr_flush+0x70/0x250 [ 1630.275253][T21784] Code: 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 d0 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 1e 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 a5 01 00 00 49 bc 00 00 00 00 00 fc ff df 4c 8b [ 1630.325000][T21784] RSP: 0018:ffffc900040f7830 EFLAGS: 00010256 [ 1630.334924][T21387] netdevsim netdevsim8 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.336421][T21816] udevd[21816]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 1630.358507][T21784] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90011a4f000 [ 1630.366670][T21784] RDX: 0000000000000000 RSI: ffffffff898fd92a RDI: ffff88807c02c460 [ 1630.385403][T21784] RBP: 0000000000000000 R08: 0000000000000006 R09: ffffc90000000000 [ 1630.405140][T21784] R10: 0000000000000000 R11: 3d3d3d3d3d3d3d3d R12: ffff88807c02c168 [ 1630.428684][T21387] netdevsim netdevsim8 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.429734][T21784] R13: ffff88807bcffc00 R14: ffff88807c02c448 R15: 00000000fffffffc [ 1630.451007][T21784] FS: 00007f39eb86e6c0(0000) GS:ffff888123ede000(0000) knlGS:0000000000000000 [ 1630.463564][T21784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1630.470776][T21784] CR2: 00007ffdf7949ff8 CR3: 0000000075962000 CR4: 0000000000350ef0 [ 1630.478858][T21784] Kernel panic - not syncing: Fatal exception [ 1630.485257][T21784] Kernel Offset: disabled [ 1630.489604][T21784] Rebooting in 86400 seconds..