last executing test programs: 6m33.418062468s ago: executing program 0 (id=1012): r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r5, 0x0, 0xa000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6m32.052632398s ago: executing program 0 (id=1013): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000080)={0x414401, 0x0, 0x8}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x38, 0x40044}}], 0x1, 0x4) rt_tgsigqueueinfo(r0, 0x0, 0x29, &(0x7f0000000180)={0x34, 0x8, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) 6m30.3002216s ago: executing program 0 (id=1015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0)) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) 6m27.978546976s ago: executing program 0 (id=1017): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, 0x3}}}, 0x11cb40c454c80c15) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r0, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080c4}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) 6m25.974131643s ago: executing program 0 (id=1018): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xb0, 0xf6, 0xa7, 0x8, 0x547, 0x2235, 0xa264, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbf, 0xfc, 0x0, 0xd9, 0xcc, 0x84}}]}}]}}, 0x0) 6m24.102653193s ago: executing program 0 (id=1021): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001cc0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000), 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2900, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x2) socket(0x2, 0x80805, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6m8.889479402s ago: executing program 32 (id=1021): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001cc0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000), 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2900, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x2) socket(0x2, 0x80805, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3m47.447668058s ago: executing program 3 (id=1216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x5a) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x17, 0x0, @void}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$fuse(0x0, &(0x7f00000190c0)='./file0/file0\x00', &(0x7f0000019080), 0x0, 0x0) 3m46.268261137s ago: executing program 3 (id=1218): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket(0x400000000010, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = socket(0x15, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setgroups(0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x8, 0x2f3d}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) 3m44.435392834s ago: executing program 3 (id=1220): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 3m42.711810895s ago: executing program 3 (id=1221): syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa09dd6000fc010000000000000000000000000001ff02000000000000000000", @ANYRESDEC=0x0], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) shutdown(r3, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r5 = openat$cgroup_int(r4, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xc92) 3m40.263202017s ago: executing program 3 (id=1224): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) socket$inet(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x1a404bc, &(0x7f0000001fc0)=ANY=[@ANYBLOB="ebbd4140", @ANYRES32=0x0, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES16, @ANYBLOB="e1d1b255b4eb5f7ce5cabfaa8a31fcb491915ed1121629c89803e5ee0c991af7d1459747a51bb4aefcb8ab7d721d76eb99ad97e1d70adc338da072ec3b49b23a8da3dd31ccbdfab2467a077078b50ca51139d4713acb42fa9e8f4d08e7c178f538b5dfefb4964e01a0cfa9ed7a636921161338dadfdfd055a5d651d68194e6239be784a880c61ab050a82dbc95daba03a8a48f6f55ed615d6bb4c4ab6df5c1a7c85cddb187bbcce01a5b2d86e17ff68d9a4044a8338d754c9daba97c34f55696b542b457505b868bf8cd3e9a7c03b72acd99dcd68362366226f2a78bcaa8ba0e7d33285a9fbfa4c2a70dd915d4a7959e08a8c592", @ANYRES16], 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x40, 0x400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r3, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r5}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r9}) 3m39.241111858s ago: executing program 3 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)={{0x107, 0x1, 0xf8, 0x17f, 0x134, 0x6, 0x280, 0x8}, "b3c42752aaf3c8fe037cdd650d75ec3fca7799ea3a044431ce01f36c5e7805e7f92e39dff76eb57dccdf901cb0184f786dbd96329ed166125b844ad621d65658830ed49faf62c398c381", ['\x00', '\x00']}, 0x26a) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 3m23.673888617s ago: executing program 33 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x2, 0xfe}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000004c0)={{0x107, 0x1, 0xf8, 0x17f, 0x134, 0x6, 0x280, 0x8}, "b3c42752aaf3c8fe037cdd650d75ec3fca7799ea3a044431ce01f36c5e7805e7f92e39dff76eb57dccdf901cb0184f786dbd96329ed166125b844ad621d65658830ed49faf62c398c381", ['\x00', '\x00']}, 0x26a) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1m52.372725143s ago: executing program 4 (id=1583): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 1m51.314328985s ago: executing program 4 (id=1586): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 1m50.937662997s ago: executing program 4 (id=1589): r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0x2, @empty, 0x400}}, 0xc, 0x4000}, &(0x7f0000000080)=0x90) 1m49.975103633s ago: executing program 4 (id=1596): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@minixdf}, {}, {@oldalloc}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0xaa72}}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m49.375765158s ago: executing program 4 (id=1599): syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f", @ANYRES8=r0], 0x3c}}, 0x10) 1m48.14521457s ago: executing program 4 (id=1603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000100)=""/162, 0xa2) close_range(r0, 0xffffffffffffffff, 0x0) 1m47.582254053s ago: executing program 34 (id=1603): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000100)=""/162, 0xa2) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.365006955s ago: executing program 5 (id=1630): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xaeb, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1m38.499772894s ago: executing program 5 (id=1635): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x4000, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r0}, "53f568152c31030d430c200c38e84c16a990aede877ea108710093bd32ba04c79ec264810065781069999202025feb7a0541d596a89f0f0e2b8e6ffa05903a1e331aebe507f5564176e374fe45eb4894d7174cdc4476a28cf45bfa7cfa40ead945d9227fa9e8ea13daddc7270ca2479fc6e7008a1ecfe6ae11927feddae24e15d5652e8369c06cd6daf6eba872f431f4e2ef41c55b02a1be2e20ff26ddfe653f8e5559a660082c65d0a452af7363501d8cf657b6dc53fcfb405adc8f1a4357a27d707f08812454d6ed98ca5f54008ae482a3a35eb0aec39f909df5cea52a1cbf468b65e592cf41284688e0caaa500082320bf2b9a10c81dd8d8b49b32f01764985be3798d7e1ee741f45fd52c0167fcdd2888a7da743d88ac8c6ba6f7383656bf3739d4034a3fbacb996937d20bfbdedd76b8e7a5e1581c8037cfe513b03d92c742809f16d3c02be441da3d3a29dacfabfb81bbdec7f4efd9886f7f6f60ca3e52965a4845d0799c2851a280070a7c157323a0df92c673c2a59cb6824712ae58149438e2e8e57456a93d5db7f2bc8e7e91a4c9733fc28d6c333af36b79893e00239daff9be0fa2b4c3b377b6abdb6abd2948f337bb048842fcfcb3504d06fd574062d5e493ca5df0d07e798fb81478ff599600fe191064b91eea6e3df4ad4f146f9233f7ff1eccae126440c1bfa2d306607959724b3ebae7b88243da093476093bbedffac9d322d37ccab8af896292804c1b52a36b55dd40065429f67fcbef8ef55a9514cd0d1069c5ec4fd9e998c580f67b8b82786beebf1df037795106635dce195c2eccc2ca390a12863d96cf699fe8abaf49cffe8d963b8d8699b1cd885ffef27cd48eef08d9209b89330df43224d76d7432c03ff0f0bc218d75bba746e5f1996bb0e5fa478a5c3ebce6b845ca5ebc21fda37cd9d6570f802cfe00f65e71b0306319f29526a4da7a8ad7ba3e127b81a85b74312828720a835b475aba78ff1abb70edc649a5b5f0c96f342a6170e9b5b06b77d192253f0a086d572ded05d645bc8e478a2fddd2588da4f56d47bc8d3363ae99a8293aaf901256bea1a606cbfbb603bf82cdf517f20dad3b104e365ed8a12a4dcff992e6e92a93aa53cedcca57540bdac5b0933c2982fa2f46787a27b93f90701fa9470973a5492a3c8b64c9f9acc9e4bf6c8e73279c0ce22e511e967e8d44e63f84e0a301bebdb92dbe23f1fbcc253cc7dee5df8a8b62b29b29ca557877aa5748bc77b5558c32706b444ae16c1141778d0feacc9a15695f81a776245cba8111924e16d7b21c13c0a6f5d891a13cb104773d05caa8e9bd6717dbb60a6d31fc31e1e774f02d49f9fa48846c6501dbf0a154aac450c3ad036241c6cffc12bb9b13a44a1c4b42b75bb646d8c9858dfea3546d45e8de6c57b06013bc6b978b1f3fbe1a179c111d4be91e7e9b57d02ae35d6ca95addfe5317c9029a0c532014eefdceb40b10e204a55dfa320da586c1ae85be181dea635562aa5bcedcbe3650684214eb3a69a22697c0fecc858ce9c9ed278f9eec57597db47708dd0f91c543431f05136a5436f56b760616a46a4a455e780eb962685d7dba6e372bc03e700d4e7f8082952eec23a471d28e8ab8bfb00d9c675469264da1a5662c1930c5416cf793b9e37bbf08bcd19eca55f505443da8d94de46c7710ea3859ba900095b14d5076810304c331482f837f24a02bb4fcea068b10fab0958bb67cf7ee7ab943d2861ec0d145ab70824122cf1998acc1958e7c810debc4688a0fae13fc112775b77b92102e43acf86e9945b166722e1bc7ee39224330bc668ba823934c8116d98886578e84d1cce881be6f23cd130b6ddb85ccb40869c111bb73e9785bb2e76b473d2667504d4ce47bc2b9c838c4b303f2deafdc44b90cc22fcb8d2e367912c04d7886dfb8c98bf76bd47318aee3db8d8b46f291d318724644a2a686545d0332eb6fac47f85c4951780164c1f5f88a95c40919354125c1587f2dc3c84af8b261ef408dac109b6299e2eacf92a77e0abeee26dc431661fed694b9b3bd2b648b83c1729f08d2c50f78dfa7f18768c402818d628d3e5ff8d45dbcaad21e98eef5a43ca7314f3798b01621ce26e84c396c1555140d9bc0cc023595eb90a4769fcd097c16a01ecf14c376849dc04509c4b2c8a26880095d240e45e21c006d9d2c7c9b5dc4101b09c830e9a085926c27b8f628a57937ac39492280958510b0ea9d0f2e297699610e14b513c9172a204125386559fa8183ad391bb94c2c32dd74a45c3e23229cb9e3d0ca2a1e18ea0bc98e593db3aad5202a86c7ef0f34d71d24f213e07c7905b6ace40a86fb929ce88409e3c4e1712db455e2cfaeb4125d239eb43edafe162e046faac7f7f0402c905dd7d27c5f16d01c8867e4e05e59e3aca249334e020d3bffbd7aa8f4421acfda5185bec0d24981587b4b127d234def1d4797440fcffce31fd38ee508023e7d60a951aea5a1c90e85a85dd651bb87ea4029017ac90ce8cdf1177fc4cf0724b5f6997bd3faa24564847b3625bdbeee486055af85f02928e9931e20655675659b350dc8e17975544f3115ca6dcc902d8d80e6d0fcc8bec43a18f1d4c9a4d1b8442a49975ea4ac95f7975cc28d3f13772b1631789affe0ec0abfd75a317a5281ed994fa2c0242c5c44dffaa04755c231ac269ce057d1c40b296a01f77f499d6e68a420306fff76393d1e106df5b5fad51af89b7b652af207d87e01a2c73b617dea95f841c821b9ade272bd7c6cf7c38d6e530960a81ff4e5f688e6145f50b4d17282907dd6be94f4af0f083fb0ed96e891243754c89a308e8179a4c49c9a8e880fe515c22d0818e932243594e75435d606c8595bb39df63f752f111ae7b94c7b1a91be23c068ffe93be45306566978bad1d16b14ff957d415e47598aaf0555a065a12458210352b657498be27e21f157842424036d1e10a6a386c9c5d08f8ac715c9ba42f651dcbc6ffad5040a5f90626ccaba0690dacb5ca4b6bc104911cce3bc34eae4414d5860f567e3d590139662ff7ac5bc4e1df84c775ea82b89f7eb64add3ef83090d5afbb752b3248804debe1f43313f5e89660faa3b32d571cedd14f56c1dd3e0bf15739b85b71d6c0357944b6f4a448ffb444667d64387968b00ad8937e152ae5bbada16211fadf36e959beea784a46e4337aabb4bf312b6ac8033d1252e1b29aa1b5e42e75c646350bcebbbaea944ad1b2e46ed91df0d9cd7a4526654a02bc812a4c64c0d87060b36133027bceaf171c2662bd8f95efc0a98744895335719e5d1defe99c9926c07d24344cdad487867e10035c62ad860fa70507eb82d75c2a91ee71f3c5be4a0278c0765073edb351c034aaaad777aa9c301744658f6368e0143203fe12ffcd1cdf7f0154401d460e46a6641f40388492c158921980d43a725c372477d9d2905e82a1568e584b4ec5bb7c19504b9377cd959bd22d868ea9fd40b1f5da7070dc0048535f82b36e4a8c3c1ab203362eff897be95353d8b120a78bc57992652768aed68bcbcd4262849346266e43418188ef790ccfe301ed7e493e48c64b8dbb9f8d8a171ab3c6ca083461ba1f3dc449a23afc4de9781a3f0716656c910b9ab1e4c05505512b56fb5484bccf8ab5f2211e656b00785b2b83ab1b006c7053ae1290fe9a171156ccc882fb4165060783e9e2f06965a5329d36f658080da326a0bcfbfc520566747117939609f4e5c3e5d76dc5964071206c562ab9e0bec768f008dc1034bcc4617c41b36238e847e773aba9bd723a865c67869f5743710cd9b8ff6066b2d6d0d55cc00b0b5366a15ce4763098572f13b32afd7ab3e3874319fe9bd31cc69bc19ed927f7b7a9f57c414532756d1d178f22d162b25e62c3290981748700c2e2194bff347501860f8cef7ce8e0082c8cd6a80b3b921469f5e2e46f74c9083c65eec41714e266e09f4369feba12bc7a5c677174a4081326b9f4d899361f636f76919f6cbf8806cbaad20e70d32a4c705fdee4a96c253a406970ecc6ed01544fc5bf62d476ca904e7a172513df3efbc69d5424a8ae7a1c9cf749347c4a2f18fb37205f1c3181c80aed7b7d439196c877972bcbbe74d414c05659a59c55372126c943edee1b6d47e0437c57fedfc8859878461797ede0108028d1e4819a6b26e2a6876030ee0c1e6847ce6f863f0e086cb9c253adb8eb9cf9c55a671a2e78a858ce8086a0de4e3be78e321a90a83704330a01510142080ce9adf38f40134f54ed1e6cd0401770f905c7e36a420507495855fb991f39a6d138aa8766c20c4763a9831b2ff459004e9182462d77e6415fa30e937452c1122218d579b3dadbbb5b10d9de1adfbf31452dd9bc2a0698bf9b4cc3c96a518c6613cb453c3836d98101d73b2c20472d006c60afadb26d4edd7b611ea8c04f53c008d814c6a5e0b26cc912e0501beeb0e2dcd7bc340e7e1f842c65e5af3a9f2348e7359cf8152e2751ebcec8c382c713f990e34a0b4cc7bbbba3229f256f709a376eb351972a6a8fde629daace12e019e82176862f55cd638ad48c87d924972746142b0c6d6f2b823c600dd22d336a404ef491df893f3f88f40ee9caeeecddca982ffaaff622236cb86bc0f86c7e93b5a440f43194663aead1c18f747bd356e06fb36b11a09b69a26cb920292a575a2a45fa38da076bdcf2a59e92bd36452c6f0ce4d5d59b44c94a0307fb65ac6c9c4a78bc179517bfe64f49d8729ffcaf7d921e940857e23d9f8e98827d650ec89ec68eed225835b92017e1ae8daee4375bd942696143941c26375619e14fe2c0d531baa0a71c7ec55ff36fe7257952c5c0f7c30895cb94cd449d82f3a2f7841bf9272a139107aa69e95974c14aacac6ceeec4d39fa5437d13ac90f0a68e101fae53b2a85e9cb76aa0aa88aa400f2ce76c15b368518c0bbac9ffd7c850cace7f55618f05102a789b100c14bb3f8389eeca83e550f4beb85269576a91bd82cb7dd084a1178737606f502ecf251e40610036b73c52569c6161500a511b36816d4abc262fed7fb3a8027db77aad973e37cd71045c73fc09342229a549bfd6c1343d7237baaf47207ef2bed004f3612fdb7aeafa45662690b2457d335a436f7de6f3dc7ee8b235bebc22443a6d7f1d779ff2d024598c698aabef7c5677a8b32a8ddd8915c28d4eba8700b036796fa2874c43582e853d27621d059a01a4e7fc104943184f23cf1e152f69b650338ceb76b62d6a7603bf559ce3fe1426a5a4cfd77ccf49aee58aee9a706a4201745702911a2504da643039aaf70575d77729d85510ebd27a3370d424dce39cc2429e16abbe786199e0025edfabcb8d951ad197bbbba65ffa1cf385a56374de15019cbbafe9c287740b9c5ca0aa17184e04e8ffbb219f11d54953cac991be4798b7a9d3b413b6cd309772ae468a9aca917d8b8aba116e7185f3a591f49d281aa8f6384c85b0021a1bbaba4a3692a1398a56c0f2f7e7b4b6353e54a94fe715e42a5f734aa72b2c61d37a1f734fc872bc7af60f81b02d15958483fd1a19f159ae96a060d4868ee09489e40fea986ed3956066e9160d5e1607ffba56b678de1b6a8e9f3c11fbdb312c3a2864449c4909529fe86b634c534009c354d5d4d8e875ff92319e7fae2af28cedd58baf17dc42cdc773026c00cd177820746eb1f1975d04acc5e9716d716ceb4eaaccdd8d71b12d74e18cbd9efd7e1ae43b2912c9864a5114d13f8c52828a9514cdbc98d91287217f05b82acbcf88264a1c5a29041b4ab190f844f82ca"}) open$dir(0x0, 0x4748a2, 0x408) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0xfffffffffffffffe}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001600)={{r0}, "0720e53a9d36ab4524b5fd3a663b8e24ab19a70cdf0006d3b8f56eb1d1dc011e118b90c34993d8a785d5009109050a88330ffaab39f7b9fa44ce53877c2e7f74bd0c0682d8c64d5111251c04c2c96174293d56d1b20a1609e390c6c84631f2a9564833f5eeb2cabe978d9980114f7d7250e7ad48059789802236fdfced44a5dd8dabfac37af1b212b496c925328e486c9f3e903399f07535ae0e4da677725712ecf2b6214b4d19746ba3a5aa70a14108822ff0ead855fdb152a24048d20dd1f23193f50006d2048f84d11004f211996949cddf3c10042d5a2e5fa606355f21ae09433a905fe6d93c38d74b4345f852f2bb9808b64f28e7963e3232e239f419f92f9e26e62dedb6b29abfa7b2efef7da2c0481f996c64c54f765b55f9311fd6727b4908ef74390bb987b89e74fafc6a35018ca1a03723d0a8041cf7151e75b4e52332c721d1f42cde299a95300e93384072e7740f5821ab49965142283be3ae85dcdab642bb5793b3e85e55fb8a1ca04b7a6fda81d120a1171f0bcd13e3a0e7275e0cd27cc173b18ee7767eec5a1a250c6125dd7dbb630e0e4d9a076c2ea609ce9858d1eec79e3f309e7c37b1a57a2845e05430134cbd633d2e596542ead8c4258cf72c1b774f1bbfadc45997fec29429af5169818d0f2144f2b9d3208819b0f712c65724d4d0bb470559f8e1a5563195f776b22e395f03fee11f815c1f8de629c766be731f729d9b88fe21f36fab3b4d1ae4a768d40f51d556c277859ef1dc2bbc063c76b5b4ed149a5163aece7513ae12de240fb957591b757db319b2082c06cfeb7a62c1673c63b10985e190450ffe7722ef1707404b3441f167770c1c113f61572112450367d0fe938ca864ca07599e83e69542c22a4ba8571027d78b3ab1d60a322415a9c826ed209dd618ed291b3658b70c747a6ef55d3bfdfa1ad98fe21967a8b54309b42034699fc9368f1a320bef2a84f8dea723c165457de297237e8d13491fc6177cfbcac7da7791674b150c393f32b200d03df5aac147dca4a021d4a914e4724022d5dbbcde06aed0854f36a3faf11449066a5652ff7053fd691e88ae97fd7c53d46ea287c9f2fd61956858b85096c81d24f03ec947f400419e6ce110e5ad3ad89ed5a667c66997385a26f99b424c7be20f1c744058980df0241cf24d6e83f5939391f3c1c1f91105fae79fd8a2ca8ba8fd7b96e3ebbfd5a93f3e9d9e081c05bdf2e5f3e8a356668abed18881f18e760b53dd2b548dbdc73b3d83a3a7725bcf4e7bb10446cb0a2441c13c3d78aa6a47e652cc43e535bc4bcdd24c4efe798901a159978ff26b0b8d531a01ca8d7600d7ef524a717792daade415f60dc231e6db8c9190821660cf9a83e39ded68951a3f672f9c0698dabd18798fa922deb601a6638fb7b473961b6202b00147b127d047814f6f70e3290dadb89e1ea80792c18f547aa4e78d03a5ea7b424973b8c2e3bbe09002c708c9b3cac286225f85d3c7e5e3dcd1b4986146b7946a4dbe4b9173bd5b1d918f7a874f8347306ded50bf161d372a14756c22feef3f851c92a57ca8e2f89174b1751de087f72ec24e5d4bc13c2844867ab8d75b6a10f659234406dd2c569349a76a6d414743b57bd7c4f7a642641fee2f8f025b33dbea5061c7b62cb2286af12fb8607e1250489028b8da6cd1844a03d5c9c6c5015acb4a6e3d1680ca4cd59a88f76a78289e927c59eba0bb043ebf51defd1ff7a4b43eb47af35874a806d83ae8923d385bd534baa7208cabc4078e1dbca46ef3aa4294c501daea2a7c1459ecf3b26db1f5f1e5c969f0676ad9fba184d90fad609dc8ebaa0dd28c8a9f37773b0a2c0be63d0dfad05dbcd888fb38db5bcaa1805a1b15d8925b9fb886c8b521d17c75df3dea58b63ff7d32f03b3e031f94e6e81362008966610e742d46023a1806775dd76fc585e0dcb29a2f9fbb76634fb7b671b411d60877a9ff314de6118824fc1add79d097dd86a08f241b6cb2c3ab06ed4047aa16aae161a1173895280942e8828104c58f7dc9dcf4babc045ba5db2f0b172830d38e768ca826515ce00e0e7c1889c6f409969e9775a1b3ebc32c8822c4dd002e76f1bfd4a7917c7581ceba56bbbe732e237e15bec4e27c323b8dc81b49c62791c127232528ad39116d3d202f260bac07d8ee3c47b64ebccd5ace9df5ebdfb0410f3af57dff13e5a2c4512fb6ce95a44b2bff86d3eb8671631c8f9516afca56920abe838f2d717f02ad4e2f3a55e98d3aabefa7111a05ee9586dd544139141409b59fdf11ea376850350a1dc777b2eefbe273f6ea2a8d229dac7880e6a1ac7f23fa2d1c68e0d5ed98cba2d3cc42f31ddc73fbf0c4e67d9f8ba33cd1ab007656b08563c23fb7bb09dd35cbcb438be574baa0f57ffd5312eaab366f6015187174fd1748a821a772da451ba6bd3d0d1386ab1cf8644b48cbf8e59547a98be1df3ac669abcadf0548671d106da33ef6d9514b86247dff5f1bc7be6464c7aa8c7eec31c3298a8121901502d14e795e133afb2c2ad3a2a0dbe5c57db19a99bc9b862148cc8fd20dafc2e38a16f35e049d7e69a978c4c9af89bf57d197e24101b638e0e836739ecc5b3616eee6bb08c8fa2577b9eda5209c49e9b1f7e479186629809db6870c0d45c3c1d7342456087b2c487332565c2ee58897d7226872ab189d719f7da693411fa2d4809a115d2b4195158d5ec0fff8d9e160996b5e784cfbc1f4a46b55a9a5fc5d4308f198caf43faeef2bd21474e0f52ff2f91cecdab2a366fde60e211203e41aa91514b34cd6bdec78370addf40b3251373e50a86b6e63aeb1256ca394a2638c86a20a7dca43b4695bafc2a3e04c4a0310a519e0bb74807f4e8377e667861f0687a0efb7b75d5a2b91346baf9d068f3bdd9460a8bc7d84653b6bceaa91605ad73d42a58bc016b246527a3aef5b1757af53aea6a6af2612d1adacd0ab28a97140f624d9a05238fcb0395704564c2263bed768426cbec6528f11c748d100da594982fb2f2514a83e71c5987694b343b384808f2202c24bf45aec99726d4bda2df97e3a9b83982969ae31cccb6d2d673ca62447ad19b673cb0bfbb7980d548f264b607336b98db2a2d55f2f405b0ccac0024bd88fdefd0c2d53c2e8e161f396db2c98432e170a922a6655e9d87217fc2e713d36c19d4433886a6bac2137ea6cec183edff9f38c27b156bc9da958a46998d12c0255474f65443ab01c3536661004050cedeae5ac0ef075f3f9346d5664e921f122d75f17cc65cba08e5bb447beadf21622b01765e97a97fbd688c71eeca916c012d7fd255bf8818128d3d6aa3a1c900670bf1449ee2cfc32e922f52927f88d18a4993e780cc57bac6b2a3de0dd43f3c3da4990e60ce98d8a3de22c73b1a63f0f00bcb9cec143b4931e64f676b0f386680aa62560c6e972b486024736fb53ed414fd27dc499df929f29f33efbe9c262bd133e58227f6df083b5953d3de0d9000d5867bfd1e3ec237305a65c58428e81d9800cd5e7783875c6f54f3d90d92f62f3babb90b2133fabf5c3906bc337af02f1d7482eb895c8ade7ba7d2120c45e5ca1aa2e723077f9a60b27f352fe90b6dbda2dab103b8f0433668220ba275b3006fe19dab5984f65fe5c022a46613a8f924705e62435d5a8edf2bb6c5fbf8a0fe53066cb1b75d9882bcd588a1d7972793fc8da80a230e9b5443153dcb422f43d3d4510517a88da6d6b7faacf9a8b383e702e086c408bc23856b0081ab734601921983482f60e7a7224f948e8738cde98d381b48c7cd08117963eddfdb01dce5047251eb1554b73a8871f95313ae0a84c5a122af024b6c14a08f9a3704f615f98a9db0f7fed2e850e8fb7dc86a617873a5c0b2c8d7c681065b1cbe9aa69901bd70f110b82df21dbc3150f39628b17cec2adad9f3e43ba1bc16168b120cdd2ffddd34aaef0fe927391c4558fc7c1a0571fbecfe853ac34d35d48d55b82f01dbea2f2b459fc982c58d2c72c47f424410287c85a1c30e557b2a5bbe8247442429fabccc908932a57ce30048a23e356bc9ba23eb52a6a5743373044b976a12e77024395322e11d00785146560769a32d436f94a2b30060d7989405164a40815ff746a2fa30557841cf18dd8e50bcc6265e2622f44484bf8ef89126e0b721ff76035e558f669b1a1c8c91298cf02b4a7ea3a6e66c7e422fb33787fdb60329a5a52d935550ebb5968218c3cf67413d1611cb5536c8414a065fa180288bd99f90a67bdc6396cc7e64c4dabc508d020d0111a83923f19c730f3960b4e87ab117099867bac13fd701d02dd99be508b6bf01cb7a5629ae688f7237e00742579fabcf5b289671d0727a835902106c04e7ba7db32ac407c82c13fd40054ce99cc6b75850d70758b8305acf2f8876eab7f88904779f192ad9411375bb0206c27cef745142b1ae853e8d3acaacf3cdd3b7cacd9afcf3dde1dc2ed3e5d5f1bc87af79120b19e044de76405e59e4cdf779c539efa69407f06b13599399d59b5df8094516b7bec75c792961f63c1c267b4dfc6859f8969d965ae33870be28b8e1d43ec9bc6e79c2767b387295ebbd590d3ff762fcd15929159636d6afbe52a59d2ed0e8edb05c125d6eb91170abed06c3cfbd1a61d85d8f09147fde934b6dd554203d6dde0edef7adac75dcb1c8c674e825e2cdc4c5141d2c5ce3eeda4c3c427a2b8040bab517c505f3daa666625a87c802bf200a0d47cece5624994a4004605d2d2a9f8e547f709ab6188059061bfd379ddc32ef69d53d01e131ac159670ec9f8c75ca046633757c4ed4c851fc9df51f4c1a786c8f56b3ac9b84c4c8fe18e1c75a296fface76e62208277bf756aa621e2e4b2ebb571b425dc980394eb4d50f29b6fc0d7d13cf8fc3bdfc9d8c3815b99ca69a477b828179eb47ccd0066a6f8f2bc7e5677b4168bbd7ea7cc55570377aff37dca76de9b1e856192e38d26d83525f248a38e35cc8a0cb10c78b4ff08e6b832c7f8cae140f833552b23ed0fea37e2da487de19d7dbbbe4997a1af9b0d8fefee11069b75cb185dd1a2ab80c65ff4e719e290b736af3a7727d4799845c64ff11e16cbd57cb806cfbcd3424adc603daaf54dc5fb0b08823326422a3fd0e1bc1b0eb2f38a09ffdb8948b528c8f9366d0e6b14ef43c88d090fe40b9327c42700cd2a84334cbcfe1899f2bb6643a88dca43877ebc647c7b7ed257d0dfe472100284dcc42e3edadf83aeeea353b79385bf74bbaf503870c2e229a15fadb087e3c4bfae1ae8511f4b2e9ba9dfe0f12483a1b7c18950f99bd332fff29d5069ab35e3d63e392b2027734459db31850aa2b62f401aeb0eeb387caf6c7cd598d91b73a7bcc245d79df7863b90bde695a24248ceb638c7196446ddb6bfc5fb4a97aec251ecc2a0ce1d6b0757116c8d1ead92169b9d33dabcdd7311f2800168dc0a3c9bf0d8d690125ddcc93093ea854f758d702022ee1c9596eb4dededab4dea4cf9bcdc7aa6c6e3e370d3f9237b142b6ef6be36fe1ee580d477f97ab640a68045456074ff6c97f12ba50a5fdece22f937fb885ea3752e9fdeae294e67c79d21dc79410a5a6f897f6d48f9686434a16583f4b815d55786bd0386c1e93f1076b8e419536929428ede56d5c493004ccc10f72796adbd86fabb2ec456a2f388f66500caf3e59689791019ef071e0ca83ed9d04b29425988c538c81785d574ec42f10a6548e80224ddd6c45cfc927c04706a74167c76431c832da8dae082776087bf6923add2992fed4ec18c5e6c6b3c82fba13ea7c51"}) 1m37.101184005s ago: executing program 5 (id=1643): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r0, 0x0, 0xfffffffffffffff4) 1m36.778326445s ago: executing program 5 (id=1644): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@utf8no}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}, {@shortname_lower}, {@shortname_win95}]}, 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1m36.289502603s ago: executing program 5 (id=1647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c03c, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m35.435821343s ago: executing program 5 (id=1652): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 1m33.95291677s ago: executing program 35 (id=1652): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 39.137516753s ago: executing program 7 (id=1918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 36.46184114s ago: executing program 7 (id=1924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x4}}}, 0x24}}, 0x4000010) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 34.213643471s ago: executing program 7 (id=1932): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) 31.399587816s ago: executing program 7 (id=1943): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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") r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) 30.749821883s ago: executing program 7 (id=1946): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@nodioread_nolock}, {@data_err_ignore}, {@auto_da_alloc}]}, 0x3, 0x4f2, &(0x7f0000000140)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") syz_emit_ethernet(0xda, &(0x7f0000001ec0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x6, 0x6, "d2dddc", 0x9c, 0x11, 0x0, @private0, @empty, {[], {0x4e20, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "8fa2d2cef26d3d325e5c68c26cf6dbb75a7c8a3c33f2c63bd5f3927f155f6e64", "d3c4bb81f2a4cffdc2a1ddd4d1ae8dded65bc57b2e27e0f913d1770bf182ae005e6ef232bdba1bf0facc25291e3b4583", "f963cce78bc1469675617ae8c9d933decbcea07699047f9ed486247c", {"d371c763007d71578ca940587a192c58", "26e24406e5fd0cc07d5c04643d33c83f"}}}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="cf042c9d7000fbdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff00000500c200820000000800a400030000003400ac00135ec1fefc4f5ba6be6c1af4ea7e19da007981ee1bce56c1bd23c1d1ae6eb6a5682a7927bc133d5be7d045b94f1146c608001400", @ANYRES16=r2], 0xa0}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x12) ioctl$TIOCSLCKTRMIOS(r0, 0x80047456, &(0x7f00000010c0)) syz_open_dev$MSR(&(0x7f0000000640), 0x8, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 29.44804924s ago: executing program 7 (id=1950): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 28.391813571s ago: executing program 36 (id=1950): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 18.698283128s ago: executing program 2 (id=1991): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) 16.307926178s ago: executing program 2 (id=1993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x2c, 0x0, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080d4}, 0x8090) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.968975437s ago: executing program 2 (id=1994): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x4) close(0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, 0x0, 0x0) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) 8.72663652s ago: executing program 8 (id=2012): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x4008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x96) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 6.16860153s ago: executing program 8 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x1003, r3}, 0x38) 3.928813261s ago: executing program 8 (id=2016): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 3.587196411s ago: executing program 8 (id=2018): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x5, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd8, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x6, 0x4, {0x7, 0x25, 0x1, 0x0, 0x7f, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x9, 0x1, {0x7, 0x25, 0x1, 0x81, 0x3, 0x6a00}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 3.476885888s ago: executing program 1 (id=2019): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.41982229s ago: executing program 2 (id=2020): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x800) r2 = dup(r1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x5, 0x7, 0xdb9, 0x4, 0xb, "4ce691cf4fa57de5ceae21cb44e4495e1304ef", 0x4bf9, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020) 3.114487958s ago: executing program 6 (id=2021): syz_clone3(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x208205, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@lazytime}]}, 0x81, 0x63d, &(0x7f0000000600)="$eJzs3c9rHNcdAPDvzGplyVYruxRTm5YKerChWD9cU7c92b7UB0Nd6kMpPVi1JFd4ZQtLhto1RIYcHEgghFxD8CX/QO7B5OpbCCS55RxwQnDIwQneMLM78rI/pEXW7srezwdGevNmdt/77tPbebOjtxPA0JrKfqQRRyLichIx2bBtImobp+r7Pfn27pVsSaJa/cc3SST1vGL/Z/XfB7IfScRYRHxyLuIXpdZy127fuTZfqda8FjGzvrI6s3b7zonllfmri1cXr8+d/NOp07N/njs1tytxFnGdv/C3X7/1+n//uPRp5UQSZ+JS+f8L0RTHbpmKqXhWD7ExfyQiTmeJNq/Ly6YIIRlwPdiZUv3vsRwRh2MySrFvc9tkLL850MoBPVUtRVSBIZVs9v/yYCsC9FkxDijO7XtxHryXjZyNiKePIlriH6l9NhJj+bnR/idJfp5UyM53D+5C+VkZP949+l62RIfPIUZ2oZxONu5FxK/atX+S1+1g/ilOFn8aacPjsvRsRIzWX4t0h+VPNa33+++vOf6/j3SOv7EdsnjP1H9n+ee2L+p+u8xBxw/AcHp4tn4g38jWnh//s5FhMf6JNuOfiTbHrp0Y9PHv8dnaAbx1/FMc78fyz8jTpnFYNua52P4py80ZX75x/p1O5TeO/7IlK78YC/bD43sRR5viv58P5pLN9k/atH+2y+Uuy/jrZ1+f77Rt0PFXH0Qca3v+8/yKVpaaWV9ZLfKark/OLC1XFmdrP9uW8dGjf3/QqfxBx5+1f3SIf6v2z/JWuyzjw4sPVjptm9g2/vSr0eRSnhqt5/xvfn395lzEaHKhvktD/snNB7Z9eyr2KZ4ji//479r3/y3izxt6o8v4V/957Ukt1XqVtOv2b3lXyT2rdlmHTrL4F3bY/m93Wcb3/7r1m6as8SKxVfzjrU+VdPuaAwAAAAAAwDBK82uwSTq9mU7T6enaHN5fxv60cmNt/fdLN25dX4g4nv8/ZDktrnRP1taTbH2u/v+wxfrJpvU/RMShiHi3NJ6vT1+5UVkYdPAAAAAAAAAAAAAAAAAAAACwRxyoz/8v7lP9Xak2/78r64d7XDug53p5gzlgb9P/YXjl/b+bO7j+p/d1AfrL8R+Gl/4Pw0v/h+Gl/8Pwau7/3g9geOjvMLz0fxhe+j8AAAAAvJIO/fbhF0lEbPxlPF8yo/Vt5YHWDOi1xj4+1tUjpnpWF6C/uuvzLUq7XQ+g/zYv/Xcz/R94pXR1jv+0/uWAva8OMABJu8x8cFDduvM/bPtIAAAAAAAAAAAAAKAHjh0x/x+GVRofD7oKwIC8wER+3wEALzlf/Q/Dyzk+sN0s/o7fE2b+PwAAAAAAAAAAAAD0zUS+JOl0/RagE5Gm09MRP4uIg1FOlpYri7MR8fOI+LxU3petzw260gAAAAAAAAAAAAAAAAAAAPCKWbt959p8pbJ4szHxQ0tOjxPF3cW62blDnV8kUdwFtZ8hd5uIpP+FjkfEXoi9N4mRhpwkYiNr+T1RsZtrsSeqkebVGOCbEgAAAAAAAAAAAAAAAAAADKmGucftHX2/zzUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP57fv//nSeSbZ5n0DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+nnwIAAP///jAzVw==") mkdirat(r0, 0x0, 0x77) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020480) 3.009412285s ago: executing program 2 (id=2022): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x82, @remote, 'lo\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 2.889179162s ago: executing program 2 (id=2023): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r4 = dup2(r3, r3) syz_fuse_handle_req(r4, &(0x7f0000003400)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.822850416s ago: executing program 6 (id=2024): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() statfs(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 2.597448529s ago: executing program 6 (id=2025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 2.269237718s ago: executing program 1 (id=2026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a0, &(0x7f0000000e00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000012c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYRES64, @ANYBLOB="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", @ANYRESHEX=r4, @ANYRES8=r5], 0x8, 0x2ed, &(0x7f0000000a80)="$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") unlink(&(0x7f0000000140)='./file1\x00') pidfd_getfd(r2, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.487546434s ago: executing program 6 (id=2027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.419060798s ago: executing program 8 (id=2028): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000580)={0x1e57, 0x0, 0xffff7000, 0x1000407, 0x2, "04ad7d2ed56d7f7f6ad9784b08e9d3000d00", 0x400002, 0x1}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f00000015c0)="b12c1162ef103401801fef185a82a23109bf5bbcfbc3a5eb16a82bc9acb57a8e9ed93152", 0x0, 0x0, 0x0, 0x2, r5}, 0x38) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x6, @vifc_lcl_ifindex=r1, @multicast1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x1, 0x0, 0x10000202, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x9, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1b, 0xfffffffc, 0x3, 0x0, 0x7, 0x0, 0xb97, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffd, 0x3ff, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x81, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440000, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x2, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x0, 0x6, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x8d4}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 856.289201ms ago: executing program 1 (id=2029): write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0x0, 0x86dd}, @val={0xc5dd52d410861fde, 0x80, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "b9e7a9", 0x120, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x0, 0x23, '\x00', [@generic={0x6, 0xed, "5cab3ad2ec4e922222f0940d70aec90d220a57322c1a4fa58fd1fafcbb83b5ade430ac264433cbd74d1931f2b0e2dc4fd0dff2e22f95ab5ec3befc07d245875b674e928551d385aa7d1845a34858eabe94e4828d23bef83b1e8b1e278415d62273a92662f8a76ec9340c33a9c5b581e122e79533ade1a17f278b478b9d4c02d019c8843b199b3530e161006c3cea85bbd84a2ae3ddfb22e98ae6eb1048dc18d50c3fca6412a4e0c9acf23a26deffc88632269874e642a334a3bc74079dc85282e4c79bd143b58761f0b477a21f6e5ccfd6bc0f471cacfd73247dbddf6a28050b4b4b3a9d25eef16d077325713c"}, @pad1, @generic={0x3, 0x1e, "74f28bffb14222ae9c1e902d81db22909590ce76ec4e748de38495fb6670"}, @padn={0x1, 0x1, [0x0]}, @pad1]}]}}}}, 0x156) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8], 0xc4}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25ec1cd6f41c0da66956f8caeeea91f67a77dd7ba3ae6543a3470a60", 0xda}, {&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd66faf569fc7fbddfc2f6e4275c1df15f3a83eaa316135a25fe4533b1ca0ef0e263cab2f2549bb9e6b5695cbd3df", 0x5b}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x3, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x4004090}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac0", 0x2d}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb31c60880c389de6a8919a67", 0xbc}, {&(0x7f0000000cc0)}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)}, {&(0x7f0000000ec0)="9af11ddfb8ceb516a838dd3cedbe8ce91e02bfabade423d9a4d0ec122b7037a6bffa4c8dff825b4bb6af22c579faf7cd32f8fa2c632ee236967cf01e81fd58fa7de7dc69417ed5b34378c0cecc6e594591c035a1492419209e9b5aff174a1d1462bd1e5a8b80fbb1ce5c906a977485c7ae6af8991a8adedcede4e0eef2d587cf0504acfc212433c76b69460a6bd59788eff72bb7a32bdadca740aa47e60fc2210d5d4a9547afe26196f225cc9ddde32a2df9cccd74a4ba07a2ce22171a60f564119ed5d9dac59d865c6e1547e2c472e9bd574b1250286c316bd8bcc28407ca0e61b1c0e72349", 0xe6}, {&(0x7f0000000fc0)="26166583e37c8b7d00ab5146a77c416387ef936b5c5d71546721b5fe2369b8b7009262933b2d3280235aff09fc6b0d14ad0d2336b4f21ed53375838ff7f6c567b372b0124a5f1bc6ca1eef4cfdfe8e97b9cadc99cc2a870d680138b4bfe181d8181ce0e924e85ef677049d765a870450b00b1adda0d57413a2acb1d18236df1ea69ffd649198fe0b3bc101341dc23159730ef95cea61efc0cfb62cfef01920dd16c9d37367c185c0", 0xa8}], 0x3, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 622.605284ms ago: executing program 6 (id=2030): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200"], 0x8) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xe1c}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r3, 0x8, 0x4000, 0x4000) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) 501.307001ms ago: executing program 1 (id=2031): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x82, @remote, 'lo\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 311.857772ms ago: executing program 6 (id=2032): ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 258.754786ms ago: executing program 1 (id=2033): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) read$FUSE(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x400, 0x200000) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000001c0)={0x1, 0x5, 0x0, [{0xa, 0x80, 0x7, 0x9, 0x7, 0x0, 0x7, '\x00', 0x2}, {0x5, 0x81, 0xab, 0xb, 0x6, 0x1, 0xb3, '\x00', 0x79c5}, {0x4, 0x0, 0x7, 0x0, 0x22, 0x1, 0x4, '\x00', 0xfff}, {0x1, 0x1, 0x6, 0x5, 0x58, 0xb, 0x8, '\x00', 0x100000001}, {0xffff, 0x5cc, 0x5, 0x0, 0xe7, 0x10, 0x14, '\x00', 0x4}]}) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 73.224766ms ago: executing program 1 (id=2034): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x693d3506}, [@jmp={0x5, 0x1, 0x8, 0x3, 0x8, 0x1, 0xfffffffffffffff0}]}, 0x0, 0x9d, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xada1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xa, {"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", 0x5b6}}, 0x1006) sched_setscheduler(0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 8 (id=2035): open(0x0, 0x141b42, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0xffffffff) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): -1: Using ep0 maxpacket: 8 [ 546.840736][T10056] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 546.858176][T10056] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 546.903984][T10056] usb 2-1: Product: syz [ 546.908238][T10056] usb 2-1: Manufacturer: syz [ 546.930531][T10056] usb 2-1: SerialNumber: syz [ 546.970513][T10056] usb 2-1: config 0 descriptor?? [ 550.221863][T10056] usb 2-1: USB disconnect, device number 9 [ 550.318582][T10283] udevd[10283]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.421482][T10291] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 551.333947][T10297] loop4: detected capacity change from 0 to 1024 [ 552.412507][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1182'. [ 552.422610][T10312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1182'. [ 555.456917][T10322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.466702][T10327] (null): rxe_set_mtu: Set mtu to 1024 [ 555.505791][T10327] rdma_rxe: rxe_newlink: failed to add bond0 [ 555.529509][T10326] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.583866][T10326] bond2: (slave macvlan2): making interface the new active one [ 555.872754][T10326] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 557.322883][T10353] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 558.325017][T10351] mmap: syz.3.1192 (10351) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 560.133844][T10355] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 560.142731][T10355] netlink: 'syz.1.1193': attribute type 2 has an invalid length. [ 564.069810][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.076499][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.108899][T10056] IPVS: starting estimator thread 0... [ 564.219364][T10376] IPVS: using max 17 ests per chain, 40800 per kthread [ 565.953938][T10384] syz.4.1198 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 565.969024][T10384] ptrace attach of "./syz-executor exec"[9408] was attempted by " [ 566.608366][T10398] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 567.789197][T10399] loop4: detected capacity change from 0 to 512 [ 568.023030][T10398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.034937][T10398] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.542104][T10398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.743567][T10399] EXT4-fs (loop4): 1 truncate cleaned up [ 568.750813][T10399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.026821][ T9408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.692749][T10420] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 569.708927][T10420] Error parsing options; rc = [-22] [ 571.619236][T10408] Bluetooth: hci3: command 0x0406 tx timeout [ 572.812383][T10434] loop1: detected capacity change from 0 to 2048 [ 572.888270][T10434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.637524][T10449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1210'. [ 575.279807][T10458] netlink: 2124 bytes leftover after parsing attributes in process `syz.2.1211'. [ 575.325593][T10458] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1211'. [ 575.685112][T10469] xt_cgroup: path and classid specified [ 576.908115][T10481] Bluetooth: MGMT ver 1.22 [ 577.673664][T10470] netlink: 'syz.4.1214': attribute type 30 has an invalid length. [ 577.686995][T10470] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.696648][T10470] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.705441][T10470] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.714241][T10470] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.751258][T10470] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.760450][T10470] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.769613][T10470] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.778516][T10470] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.417409][T10494] 9pnet_virtio: no channels available for device syz [ 578.497828][T10473] netlink: 'syz.4.1214': attribute type 30 has an invalid length. [ 578.588601][T10473] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.597977][T10473] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.606782][T10473] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.615639][T10473] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.508502][T10473] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.517839][T10473] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.526866][T10473] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.535990][T10473] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.767008][T10544] batadv_slave_1: entered promiscuous mode [ 585.881508][T10554] loop1: detected capacity change from 0 to 512 [ 585.890579][T10554] EXT4-fs: Ignoring removed i_version option [ 586.040246][T10554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.196204][T10554] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 593.196745][T10554] EXT4-fs: failed to create workqueue [ 593.211990][T10554] EXT4-fs (loop1): mount failed [ 598.242625][T10582] x_tables: duplicate underflow at hook 1 [ 600.264942][T10594] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 600.396652][T10591] loop4: detected capacity change from 0 to 4096 [ 601.590940][T10591] ntfs: volume version 3.1. [ 603.899133][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1241'. [ 604.064114][T10621] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1241'. [ 605.651973][T10408] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 605.666305][T10408] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 605.678604][T10408] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 605.719621][T10408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 605.975691][T10635] kernel profiling enabled (shift: 9) [ 606.033124][T10637] netlink: 'syz.4.1242': attribute type 4 has an invalid length. [ 606.041055][T10637] netlink: 1601 bytes leftover after parsing attributes in process `syz.4.1242'. [ 606.801185][T10408] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 606.811604][T10408] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 608.936319][T10678] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1247'. [ 608.989855][T10408] Bluetooth: hci4: command tx timeout [ 609.030689][T10625] chnl_net:caif_netlink_parms(): no params data found [ 609.108096][T10686] loop4: detected capacity change from 0 to 8 [ 609.184832][T10686] SQUASHFS error: lzo decompression failed, data probably corrupt [ 609.257315][T10686] SQUASHFS error: Failed to read block 0x91: -5 [ 609.339428][T10686] SQUASHFS error: Unable to read metadata cache entry [8f] [ 609.379181][T10686] SQUASHFS error: Unable to read inode 0x11f [ 609.540922][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.549427][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.590530][T10625] bridge_slave_0: entered allmulticast mode [ 609.649581][T10625] bridge_slave_0: entered promiscuous mode [ 609.714494][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.778005][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.826330][T10625] bridge_slave_1: entered allmulticast mode [ 609.887166][T10625] bridge_slave_1: entered promiscuous mode [ 610.077086][T10694] loop4: detected capacity change from 0 to 8 [ 610.120259][T10694] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 610.142736][T10625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.205706][T10567] udevd[10567]: incorrect cramfs checksum on /dev/loop4 [ 610.225469][T10625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.288295][T10694] cramfs: Error -3 while decompressing! [ 610.311366][T10694] cramfs: ffffffff973f4348(18)->ffff88804601b000(4096) [ 610.362160][T10694] cramfs: Error -3 while decompressing! [ 610.369011][T10694] cramfs: ffffffff973f4348(18)->ffff88804601b000(4096) [ 610.383808][ T28] audit: type=1800 audit(1770307585.135:128): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1252" name="file1" dev="loop4" ino=324 res=0 errno=0 [ 610.432049][T10567] udevd[10567]: incorrect cramfs checksum on /dev/loop4 [ 610.652024][T10625] team0: Port device team_slave_0 added [ 611.020372][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.071649][T10408] Bluetooth: hci4: command tx timeout [ 611.162567][T10625] team0: Port device team_slave_1 added [ 611.344875][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.431455][T10625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.476203][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.603294][ T5866] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 612.129299][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 612.194159][ T5866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 618.170263][T10717] loop1: detected capacity change from 0 to 1024 [ 618.187630][T10717] EXT4-fs: Ignoring removed mblk_io_submit option [ 618.194378][T10717] EXT4-fs: Ignoring removed orlov option [ 618.988260][T10717] EXT4-fs (loop1): Test dummy encryption mode enabled [ 618.996569][T10717] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 619.007583][T10717] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 619.017859][T10717] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 619.033796][T10408] Bluetooth: hci4: command tx timeout [ 619.047193][ T5866] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 619.091849][T10625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.105040][T10711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1259'. [ 619.118806][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1259'. [ 619.494727][ T5866] usb 5-1: string descriptor 0 read error: -71 [ 619.529569][ T5866] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 619.538701][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.591024][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.643674][ T5866] usb 5-1: can't set config #1, error -71 [ 619.696215][T10625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.714473][ T5866] usb 5-1: USB disconnect, device number 3 [ 619.740952][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.829945][T10625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.916531][T10408] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 619.989443][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.302817][T10732] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 620.613221][T10732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.916798][T10625] hsr_slave_0: entered promiscuous mode [ 621.212854][T10625] hsr_slave_1: entered promiscuous mode [ 621.219353][T10408] Bluetooth: hci4: command tx timeout [ 621.369957][T10625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.377712][T10625] Cannot create hsr debugfs directory [ 622.957567][T10769] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 623.867438][T10769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.877243][T10769] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.910937][T10769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.870547][T10783] 9pnet_virtio: no channels available for device syz [ 625.154291][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.160914][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.721016][T10784] netlink: 'syz.1.1279': attribute type 30 has an invalid length. [ 625.764054][T10784] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.773309][T10784] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.782535][T10784] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.792026][T10784] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 625.911253][T10784] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.920708][T10784] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.930046][T10784] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 625.939332][T10784] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.105953][T10785] netlink: 'syz.1.1279': attribute type 30 has an invalid length. [ 626.146139][T10785] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.155301][T10785] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.164718][T10785] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.173881][T10785] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.186706][T10785] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.195744][T10785] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.205021][T10785] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.214304][T10785] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.433937][T10625] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 626.576858][T10625] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 626.685092][T10805] loop4: detected capacity change from 0 to 64 [ 626.805933][ T49] bond2: (slave gretap1): Releasing active interface [ 626.853602][T10625] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 626.915973][T10805] Trying to free block not in datazone [ 626.933624][T10805] Trying to free block not in datazone [ 626.943805][T10805] Trying to free block not in datazone [ 626.986527][T10625] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 627.371460][T10822] loop4: detected capacity change from 0 to 1024 [ 627.624375][T10825] netlink: 'syz.2.1291': attribute type 10 has an invalid length. [ 627.764140][ T49] hsr_slave_0: left promiscuous mode [ 627.805582][ T49] hsr_slave_1: left promiscuous mode [ 627.895048][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1293'. [ 627.953382][T10807] loop1: detected capacity change from 0 to 32768 [ 628.017423][ T49] batadv_slave_1: left promiscuous mode [ 628.072895][ T49] veth1_macvtap: left promiscuous mode [ 628.078687][ T49] veth0_macvtap: left promiscuous mode [ 628.088544][ T49] veth1_vlan: left promiscuous mode [ 628.109823][ T49] veth0_vlan: left promiscuous mode [ 628.173345][T10807] add_index: next_index = 0. Resetting! [ 628.210308][T10807] find_entry called with index >= next_index [ 628.224489][T10807] find_entry called with index >= next_index [ 628.243331][T10807] find_entry called with index >= next_index [ 628.258624][T10807] find_entry called with index >= next_index [ 629.140413][ T49] bond2 (unregistering): Released all slaves [ 629.405797][ T49] bond1 (unregistering): Released all slaves [ 631.564241][ T49] bond0 (unregistering): Released all slaves [ 631.954057][T10625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.000761][T10625] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.041440][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.048889][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.210479][ T9149] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.217756][ T9149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.891596][T10871] loop4: detected capacity change from 0 to 1024 [ 633.178630][T10625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.537855][ T49] IPVS: stop unused estimator thread 0... [ 633.740306][T10890] loop4: detected capacity change from 0 to 256 [ 633.899004][T10890] FAT-fs (loop4): Directory bread(block 64) failed [ 633.905744][T10890] FAT-fs (loop4): Directory bread(block 65) failed [ 633.950138][T10890] FAT-fs (loop4): Directory bread(block 66) failed [ 633.956780][T10890] FAT-fs (loop4): Directory bread(block 67) failed [ 633.977286][T10893] vlan2: entered promiscuous mode [ 633.990234][T10893] macvlan0: entered promiscuous mode [ 634.006926][T10890] FAT-fs (loop4): Directory bread(block 68) failed [ 634.024672][T10890] FAT-fs (loop4): Directory bread(block 69) failed [ 634.055064][T10890] FAT-fs (loop4): Directory bread(block 70) failed [ 634.095604][T10890] FAT-fs (loop4): Directory bread(block 71) failed [ 634.136341][T10890] FAT-fs (loop4): Directory bread(block 72) failed [ 634.183444][T10890] FAT-fs (loop4): Directory bread(block 73) failed [ 634.354452][T10625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.390085][T10890] syz.4.1310: attempt to access beyond end of device [ 634.390085][T10890] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 634.453053][T10890] syz.4.1310: attempt to access beyond end of device [ 634.453053][T10890] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 634.490494][ T28] audit: type=1800 audit(1770307609.235:129): pid=10890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1310" name="file0" dev="loop4" ino=1048609 res=0 errno=0 [ 635.491953][T10625] veth0_vlan: entered promiscuous mode [ 635.532038][T10625] veth1_vlan: entered promiscuous mode [ 635.656706][T10625] veth0_macvtap: entered promiscuous mode [ 635.697019][T10625] veth1_macvtap: entered promiscuous mode [ 635.757816][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.787821][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.820858][T10625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.861873][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.877067][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.890807][T10625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.914500][T10625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.928110][T10625] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.958068][T10625] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.981192][T10625] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.025995][T10914] loop4: detected capacity change from 0 to 40427 [ 636.113830][T10914] F2FS-fs (loop4): invalid crc value [ 636.212414][T10914] F2FS-fs (loop4): Found nat_bits in checkpoint [ 636.317493][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.356279][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.430939][T10914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 636.480453][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.658677][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.519601][T10914] F2FS-fs (loop4): Can't flush 3 in 0 for SEGS_PER_SEC 1 != 1 [ 637.964717][ T9408] syz-executor: attempt to access beyond end of device [ 637.964717][ T9408] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 638.020243][ T9408] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 639.728448][T10974] loop5: detected capacity change from 0 to 1024 [ 640.669719][ T5866] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 640.899171][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 640.914506][T10989] netlink: 2124 bytes leftover after parsing attributes in process `syz.4.1328'. [ 640.918157][ T5866] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 640.945353][T10989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1328'. [ 640.963870][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.984055][ T5866] usb 6-1: Product: syz [ 640.988324][ T5866] usb 6-1: Manufacturer: syz [ 641.021938][ T5866] usb 6-1: SerialNumber: syz [ 641.042277][ T5866] usb 6-1: config 0 descriptor?? [ 641.069857][ T5866] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244) [ 641.709141][ T5866] radio-usb-si4713: probe of 6-1:0.0 failed with error -71 [ 641.727597][ T5866] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 641.769330][ T5866] usb 6-1: USB disconnect, device number 2 [ 642.318094][T11026] loop4: detected capacity change from 0 to 64 [ 642.373338][T11026] Trying to free block not in datazone [ 642.414371][T11026] Trying to free block not in datazone [ 642.446556][T11026] Trying to free block not in datazone [ 642.469502][T11026] Trying to free block not in datazone [ 642.475164][T11026] minix_free_block (loop4:6): bit already cleared [ 642.527282][T11026] Trying to free block not in datazone [ 642.550111][T11026] Trying to free block not in datazone [ 642.567984][T11035] loop5: detected capacity change from 0 to 512 [ 642.681007][T11035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.694478][T11035] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.985502][T10625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.013482][T10056] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 643.232261][T10056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 643.269728][T10056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.306694][T10056] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 643.346909][T10056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.393044][T10056] usb 2-1: config 0 descriptor?? [ 643.714979][T11067] loop4: detected capacity change from 0 to 2048 [ 643.756232][T11067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.808506][T11067] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.881583][T10056] uclogic 0003:2179:0077.0001: interface is invalid, ignoring [ 643.921714][T11067] overlayfs: missing 'lowerdir' [ 643.985586][T11072] loop5: detected capacity change from 0 to 128 [ 644.036417][ T9408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.120672][T11072] syz.5.1347: attempt to access beyond end of device [ 644.120672][T11072] loop5: rw=2051, sector=104, nr_sectors = 25 limit=128 [ 644.145677][ T5866] usb 2-1: USB disconnect, device number 10 [ 644.277991][T11075] loop4: detected capacity change from 0 to 736 [ 645.229546][T10056] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 645.272890][T11101] loop4: detected capacity change from 0 to 1764 [ 645.427093][T10056] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 645.467225][T10056] usb 2-1: config 0 has no interface number 0 [ 645.483882][T10056] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 645.525693][T10056] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.549823][T10056] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 645.579497][T10056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.599411][T10056] usb 2-1: config 0 descriptor?? [ 646.049258][T10056] hid (null): global environment stack underflow [ 646.070149][ T5866] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 646.091369][T11115] netlink: 2124 bytes leftover after parsing attributes in process `syz.2.1357'. [ 646.101943][T10056] uclogic 0003:5543:0522.0002: global environment stack underflow [ 646.124670][T10056] uclogic 0003:5543:0522.0002: item 0 4 1 11 parsing failed [ 646.142598][T11115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1357'. [ 646.159381][T10056] uclogic 0003:5543:0522.0002: parse failed [ 646.178624][T10056] uclogic: probe of 0003:5543:0522.0002 failed with error -22 [ 646.281405][ T5866] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.312287][ T5866] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 646.327008][T10056] usb 2-1: USB disconnect, device number 11 [ 646.376670][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 646.400135][ T5866] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 646.425021][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.450398][ T5866] usb 5-1: config 0 descriptor?? [ 646.933646][ T5866] cmedia_hs100b 0003:0D8C:0014.0003: item fetching failed at offset 4/5 [ 646.970416][ T5866] cmedia_hs100b: probe of 0003:0D8C:0014.0003 failed with error -22 [ 647.218459][ T5866] usb 5-1: USB disconnect, device number 4 [ 648.119309][ T5762] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 648.172456][T11155] netlink: 2124 bytes leftover after parsing attributes in process `syz.2.1368'. [ 648.212796][T11155] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1368'. [ 648.311576][ T5762] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.332626][ T5762] usb 2-1: config 0 interface 0 has no altsetting 0 [ 648.347493][ T5762] usb 2-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 648.368010][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.398563][ T5762] usb 2-1: config 0 descriptor?? [ 648.489396][ T5866] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 648.699145][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 648.711552][ T5866] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 648.725888][ T5866] usb 5-1: config 0 has no interface number 0 [ 648.733694][ T5866] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 648.752210][ T5866] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 648.765544][ T5866] usb 5-1: config 0 interface 41 has no altsetting 0 [ 648.783251][ T5866] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 648.809200][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.827583][ T5866] usb 5-1: Product: syz [ 648.849157][ T5762] hid (null): usage index exceeded [ 648.854669][ T5866] usb 5-1: Manufacturer: syz [ 648.869256][ T5866] usb 5-1: SerialNumber: syz [ 648.875111][ T5762] wacom 0003:056A:0335.0004: ignoring exceeding usage max [ 648.890451][ T5866] usb 5-1: config 0 descriptor?? [ 648.906545][T11158] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 648.924775][ T5762] wacom 0003:056A:0335.0004: ignoring exceeding usage max [ 648.937295][T11158] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 648.954850][ T5762] wacom 0003:056A:0335.0004: usage index exceeded [ 648.963006][ T5762] wacom 0003:056A:0335.0004: item 0 1 2 2 parsing failed [ 648.975285][ T5762] wacom 0003:056A:0335.0004: parse failed [ 648.983167][ T5762] wacom: probe of 0003:056A:0335.0004 failed with error -22 [ 649.073313][T10038] usb 2-1: USB disconnect, device number 12 [ 649.182242][T11158] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 649.203204][T11158] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 649.440897][ T5866] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 649.462651][ T5866] usb 5-1: USB disconnect, device number 5 [ 649.605276][T11179] loop5: detected capacity change from 0 to 512 [ 649.642051][T11179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 649.762446][T11185] tipc: Enabling of bearer rejected, failed to enable media [ 649.794852][T11179] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1375: Parent and EA inode have the same ino 15 [ 649.860152][T11188] loop1: detected capacity change from 0 to 512 [ 649.868122][T11188] EXT4-fs: Ignoring removed mblk_io_submit option [ 649.885425][T11188] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 649.901476][T11179] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1375: Parent and EA inode have the same ino 15 [ 649.921074][T11188] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 649.930102][T11179] EXT4-fs (loop5): 1 orphan inode deleted [ 649.937258][T11179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.950044][T11188] System zones: 1-12 [ 649.955080][T11188] EXT4-fs (loop1): orphan cleanup on readonly fs [ 649.964206][T11188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1379: bg 0: block 361: padding at end of block bitmap is not set [ 650.031918][T11188] EXT4-fs (loop1): Remounting filesystem read-only [ 650.049360][T11188] EXT4-fs (loop1): 1 truncate cleaned up [ 650.064438][T11188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 650.126110][T11188] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1379: error -117 reading directory block [ 650.185381][T10625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.202253][T11193] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1379: error -117 reading directory block [ 650.317787][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 650.890121][T11207] loop5: detected capacity change from 0 to 512 [ 651.156180][T11207] EXT4-fs error (device loop5): ext4_orphan_get:1398: inode #15: comm syz.5.1385: inode has both inline data and extents flags [ 651.370262][T11207] EXT4-fs error (device loop5): ext4_orphan_get:1403: comm syz.5.1385: couldn't read orphan inode 15 (err -117) [ 651.480375][T11207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.570579][T10625] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.756361][T11218] loop1: detected capacity change from 0 to 32768 [ 652.803112][T11218] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1390 (11218) [ 653.079338][T11218] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 653.099981][T11218] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 653.115370][T11218] BTRFS info (device loop1): using free space tree [ 653.369008][T11218] BTRFS info (device loop1): enabling ssd optimizations [ 653.418088][T11218] BTRFS info (device loop1): auto enabling async discard [ 653.745118][ T5772] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 654.146933][T11234] loop5: detected capacity change from 0 to 32768 [ 654.680352][T11234] [ 654.680352][T11234] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 654.680352][T11234] [ 655.026311][T11234] find_entry called with index = 0 [ 655.071587][T11234] read_mapping_page failed! [ 655.090444][T11234] ERROR: (device loop5): txCommit: [ 655.090444][T11234] [ 655.401331][ T1144] ERROR: (device loop5): diWrite: ixpxd invalid [ 655.401331][ T1144] [ 655.445311][ T1144] ERROR: (device loop5): txCommit: [ 655.445311][ T1144] [ 655.489388][ T1144] jfs_write_inode: jfs_commit_inode failed! [ 655.519516][T10625] [ 655.519516][T10625] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.519516][T10625] [ 655.595406][T10625] [ 655.595406][T10625] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 655.595406][T10625] [ 657.461384][T11288] loop1: detected capacity change from 0 to 32768 [ 657.623276][T11288] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 658.493134][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 659.763251][T11325] loop1: detected capacity change from 0 to 1024 [ 660.219191][ T5866] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 660.409189][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 660.446602][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.503786][ T5866] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 660.532120][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.601894][ T5866] usb 6-1: config 0 descriptor?? [ 662.399427][ T5866] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 662.414210][ T5866] usb 6-1: USB disconnect, device number 3 [ 662.974750][ T5821] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 663.212485][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.269630][ T5821] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 663.295081][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.326482][ T5821] usb 2-1: config 0 descriptor?? [ 663.350723][ T5821] pwc: Askey VC010 type 2 USB webcam detected. [ 663.769219][ T2132] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 663.979513][ T2132] usb 5-1: Using ep0 maxpacket: 32 [ 663.992375][ T2132] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.014178][ T2132] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.061921][ T2132] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 664.081695][ T2132] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 664.109136][ T2132] usb 5-1: Product: syz [ 664.113415][ T2132] usb 5-1: Manufacturer: syz [ 664.174703][ T2132] hub 5-1:4.0: USB hub found [ 664.193921][ T5821] pwc: recv_control_msg error -71 req 02 val 2c00 [ 664.218219][ T5821] pwc: recv_control_msg error -71 req 04 val 1000 [ 664.246035][ T5821] pwc: recv_control_msg error -71 req 04 val 1300 [ 664.269886][ T5821] pwc: recv_control_msg error -71 req 04 val 1400 [ 664.296939][ T5821] pwc: recv_control_msg error -71 req 02 val 2000 [ 664.343595][ T5821] pwc: recv_control_msg error -71 req 02 val 2100 [ 664.364346][ T5821] pwc: recv_control_msg error -71 req 04 val 1500 [ 664.385353][ T2132] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 664.402711][ T5821] pwc: recv_control_msg error -71 req 02 val 2500 [ 664.423121][ T5821] pwc: recv_control_msg error -71 req 02 val 2400 [ 664.437154][ T5821] pwc: recv_control_msg error -71 req 02 val 2600 [ 664.455146][ T5821] pwc: recv_control_msg error -71 req 02 val 2900 [ 664.479322][ T5821] pwc: recv_control_msg error -71 req 02 val 2800 [ 664.497077][ T5821] pwc: recv_control_msg error -71 req 04 val 1100 [ 664.543223][ T5821] pwc: recv_control_msg error -71 req 04 val 1200 [ 664.580425][ T5821] pwc: Registered as video103. [ 664.594444][ T5821] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 664.651477][ T5821] usb 2-1: USB disconnect, device number 13 [ 664.716929][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1434'. [ 664.739459][ T2132] usb 5-1: USB disconnect, device number 6 [ 666.229280][ T7818] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 666.288892][T11454] loop1: detected capacity change from 0 to 4096 [ 666.430142][ T7818] usb 5-1: Using ep0 maxpacket: 32 [ 666.466049][ T7818] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 666.500601][ T7818] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 666.529257][ T7818] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 666.569095][ T7818] usb 5-1: config 0 interface 0 has no altsetting 1 [ 666.597959][ T7818] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 666.617474][ T7818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 666.629469][ T7818] usb 5-1: SerialNumber: syz [ 666.649602][ T7818] usb 5-1: config 0 descriptor?? [ 666.678468][ T7818] usb-storage 5-1:0.0: USB Mass Storage device detected [ 666.756891][ T7818] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 666.846797][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1444'. [ 666.937899][ T7818] usb 5-1: USB disconnect, device number 7 [ 667.130050][T11444] loop5: detected capacity change from 0 to 32768 [ 667.222177][T11444] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 667.283379][T11444] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 667.347496][T11469] loop1: detected capacity change from 0 to 4096 [ 667.492606][T11477] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 667.621810][ T28] audit: type=1800 audit(1770307642.365:130): pid=11469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1445" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 667.705141][T11444] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 667.743803][ T5821] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 667.752807][ T5821] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 667.828962][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 667.849121][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 667.950756][ T5821] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 197ms [ 667.979827][ T5821] gfs2: fsid=syz:syz.0: jid=0: Done [ 667.988193][T11444] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 668.373776][T11497] loop1: detected capacity change from 0 to 128 [ 668.428670][T11497] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 668.473487][T11497] hpfs: filesystem error: improperly stopped [ 668.504550][T11497] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 668.536040][T11497] hpfs: You really don't want any checks? You are crazy... [ 668.572021][T11497] hpfs: hpfs_map_sector(): read error [ 668.577476][T11497] hpfs: code page support is disabled [ 668.613252][T11497] hpfs: hpfs_map_4sectors(): unaligned read [ 668.654570][T11497] hpfs: hpfs_map_4sectors(): unaligned read [ 668.674181][T11497] hpfs: filesystem error: unable to find root dir [ 669.889607][T11503] loop1: detected capacity change from 0 to 40427 [ 669.941195][T11503] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 669.971922][T11503] F2FS-fs (loop1): heap/no_heap options were deprecated [ 669.988015][T11503] F2FS-fs (loop1): Image doesn't support compression [ 670.028128][T11503] F2FS-fs (loop1): invalid crc value [ 670.041865][T11523] loop5: detected capacity change from 0 to 64 [ 670.083607][T11503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 670.188037][T11523] Trying to free block not in datazone [ 670.198229][T11523] minix_free_block (loop5:21): bit already cleared [ 670.369967][T11503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 670.389299][ T2132] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 670.574386][ T5772] syz-executor: attempt to access beyond end of device [ 670.574386][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 670.608753][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 670.626142][ T2132] usb 5-1: Using ep0 maxpacket: 16 [ 670.641963][ T2132] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.674835][ T2132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.717134][ T2132] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 670.747642][ T2132] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 670.786692][ T2132] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.823658][ T2132] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 670.841648][ T2132] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 670.861432][ T2132] usb 5-1: Manufacturer: syz [ 670.892150][ T2132] usb 5-1: config 0 descriptor?? [ 671.022682][T11549] loop5: detected capacity change from 0 to 128 [ 671.071407][T11549] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 671.122570][T11549] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 671.369448][ T2132] rc_core: IR keymap rc-hauppauge not found [ 671.375443][ T2132] Registered IR keymap rc-empty [ 671.389608][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.429817][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.480212][ T2132] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 671.499368][ T7818] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 671.512769][ T2132] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 671.543177][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.629394][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.686362][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.720637][ T7818] usb 6-1: Using ep0 maxpacket: 16 [ 671.728494][ T7818] usb 6-1: config 0 interface 0 has no altsetting 0 [ 671.749199][ T7818] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 671.749855][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.777026][ T7818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.814448][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.824634][ T7818] usb 6-1: config 0 descriptor?? [ 671.859321][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.899486][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.939191][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 671.978187][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.019378][ T2132] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 672.052287][ T2132] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 672.081675][ T2132] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 672.125929][ T2132] usb 5-1: USB disconnect, device number 8 [ 672.305478][ T7818] hid (null): unknown global tag 0xe [ 672.318027][ T7818] hid (null): global environment stack underflow [ 672.324849][ T7818] hid (null): unknown global tag 0xd [ 672.336892][ T7818] hid (null): unknown global tag 0xc [ 672.342409][ T7818] hid (null): unknown global tag 0xe [ 672.348031][ T7818] hid (null): invalid report_size 61170 [ 672.358333][ T7818] hid (null): report_id 0 is invalid [ 672.364247][ T7818] hid (null): global environment stack overflow [ 672.563573][ T7818] usb 6-1: USB disconnect, device number 4 [ 672.653765][T11584] loop4: detected capacity change from 0 to 2048 [ 672.678523][T11584] UDF-fs: bad mount option "defcont‡Þð+Ì8rÛ8xtroot}®°oèDÉ·°BúpM#d%" or missing value [ 672.767408][T11587] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 673.074170][T11570] loop1: detected capacity change from 0 to 65536 [ 673.178939][T11570] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 673.230452][T10625] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 673.274277][T11570] XFS (loop1): Ending clean mount [ 673.344527][T11570] XFS (loop1): Quotacheck needed: Please wait. [ 673.475516][T11570] XFS (loop1): Quotacheck: Done. [ 673.559432][ T7818] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x8004 [ 673.630055][ T7818] XFS (loop1): Unmount and run xfs_repair [ 673.642903][ T7818] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 673.660953][ T7818] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 673.681374][ T7818] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 673.704599][ T7818] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 673.745786][ T7818] 00000030: 00 00 00 01 21 05 00 0a 00 00 00 05 00 00 00 03 ....!........... [ 673.770216][ T7818] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 00 00 00 00 ......;\........ [ 673.797103][ T7818] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 673.826100][ T7818] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 673.839284][ T7818] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 673.851495][T11570] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x8004 len 2 error 74 [ 673.948742][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 674.541917][T11628] loop4: detected capacity change from 0 to 8 [ 674.631146][T11628] SQUASHFS error: Unable to read directory block [629:fe] [ 674.914230][T11632] loop1: detected capacity change from 0 to 256 [ 674.940271][T11632] exfat: Unknown parameter 'd›Áf¨j†™af¸nF˜f”eF›Ñf¬kÆ›ñ&Ùg3ÍD3ÉL2“Íd3u@63ÝL73ÍL3ËÌ2sÌ3×Ì5óÌ<³À' [ 675.271635][T11624] loop5: detected capacity change from 0 to 40427 [ 675.316632][T11624] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 675.337744][T11624] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 675.371278][T11624] F2FS-fs (loop5): invalid crc value [ 675.607915][T11624] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 675.618218][T11624] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 676.679295][T11655] loop4: detected capacity change from 0 to 256 [ 676.793185][T11655] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 676.851097][T11657] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1492'. [ 676.965216][T10625] syz-executor: attempt to access beyond end of device [ 676.965216][T10625] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 677.004266][T10625] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 677.163793][T11659] loop1: detected capacity change from 0 to 2048 [ 677.186141][T11661] kvm: kvm [11660]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xbffffffffffffffd [ 677.224432][T11659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 677.814666][T11670] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1498'. [ 678.149230][ T2132] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 678.366604][ T2132] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.389130][ T2132] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 678.398112][ T2132] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 678.433529][ T2132] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 678.456111][ T2132] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.482500][T11672] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 678.501373][ T2132] hub 6-1:1.0: bad descriptor, ignoring hub [ 678.507376][ T2132] hub: probe of 6-1:1.0 failed with error -5 [ 678.529760][ T2132] cdc_wdm 6-1:1.0: skipping garbage [ 678.535088][ T2132] cdc_wdm 6-1:1.0: skipping garbage [ 678.564660][ T2132] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 678.572599][T11674] loop1: detected capacity change from 0 to 32768 [ 678.579316][ T2132] cdc_wdm 6-1:1.0: Unknown control protocol [ 678.603330][T11674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1499 (11674) [ 678.645564][T11674] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 678.656674][T11674] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 678.670642][T11674] BTRFS info (device loop1): using free space tree [ 678.791895][T11674] BTRFS info (device loop1): enabling ssd optimizations [ 678.814111][T11674] BTRFS info (device loop1): auto enabling async discard [ 678.952414][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 678.959543][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 678.966060][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 678.972749][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 678.980248][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 678.986995][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 678.993485][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 679.000323][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 679.009192][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 679.015848][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 679.029502][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 679.036267][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 679.042597][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 679.049346][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 679.055702][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 679.062566][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 679.068984][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 679.075766][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 679.082523][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 679.089203][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 679.194902][ T5772] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 679.602320][T10720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (10720) [ 679.722190][ T5762] usb 6-1: USB disconnect, device number 5 [ 680.139685][ T2132] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 680.349351][ T2132] usb 2-1: Using ep0 maxpacket: 8 [ 680.385110][ T2132] usb 2-1: unable to get BOS descriptor or descriptor too short [ 680.428828][ T2132] usb 2-1: config 4 interface 0 has no altsetting 0 [ 680.474054][ T2132] usb 2-1: string descriptor 0 read error: -22 [ 680.486009][ T2132] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 680.499411][ T2132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.531319][ T2132] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 680.556759][ T2132] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 680.568058][ T2132] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 680.578340][ T2132] usb 2-1: media controller created [ 680.684226][ T2132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.834376][T11719] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 681.058808][ T2132] zl10353_read_register: readreg error (reg=127, ret==0) [ 681.158175][T11750] loop4: detected capacity change from 0 to 512 [ 681.186812][T11750] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 681.195587][T11750] EXT4-fs (loop4): orphan cleanup on readonly fs [ 681.222155][T11750] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 681.256462][ T2132] usb 2-1: USB disconnect, device number 14 [ 681.349475][T11750] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 681.372571][T11750] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.1523: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 681.421195][T11750] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1523: couldn't read orphan inode 13 (err -117) [ 681.436389][T11750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 681.492513][T11750] EXT4-fs error (device loop4): ext4_lookup:1858: comm syz.4.1523: inode #15: comm syz.4.1523: iget: illegal inode # [ 681.527570][T11756] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 681.569678][T11756] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 681.609928][T11756] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 681.657642][ T9408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.874749][T11764] loop1: detected capacity change from 0 to 16 [ 681.906778][T11765] loop4: detected capacity change from 0 to 512 [ 681.918064][T11764] erofs: (device loop1): mounted with root inode @ nid 36. [ 681.941010][T11764] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 681.968276][T11764] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 681.980068][T11764] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 681.994361][T11764] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 682.031444][T11765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.065542][T11764] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 682.083374][T11765] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.100027][T11764] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 682.134200][T11766] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 682.171395][T11766] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 682.197663][T11766] erofs: (device loop1): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 682.207767][T11766] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 682.218993][T11766] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 682.228540][T11766] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 682.301560][ T9408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.519202][ T2132] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 683.569433][T10056] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 683.579353][ T5866] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 683.709193][ T2132] usb 5-1: Using ep0 maxpacket: 8 [ 683.717321][ T2132] usb 5-1: unable to get BOS descriptor or descriptor too short [ 683.727772][ T2132] usb 5-1: config 4 interface 0 has no altsetting 0 [ 683.741281][ T2132] usb 5-1: string descriptor 0 read error: -22 [ 683.747757][ T2132] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 683.749342][T10056] usb 2-1: Using ep0 maxpacket: 16 [ 683.757045][ T2132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.772333][ T5866] usb 6-1: config index 0 descriptor too short (expected 19492, got 36) [ 683.782399][ T5866] usb 6-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 683.794518][ T5866] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 683.796506][T10056] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.817133][ T2132] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 683.829479][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 683.831433][T10056] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.841609][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.862191][ T2132] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 683.867348][T10056] usb 2-1: config 0 interface 0 has no altsetting 0 [ 683.888892][T10056] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 683.895970][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.899688][T10056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.919521][ T2132] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 683.927493][T10056] usb 2-1: config 0 descriptor?? [ 683.937673][ T2132] usb 5-1: media controller created [ 683.969311][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 683.978446][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.001426][ T2132] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.015401][ T5866] usb 6-1: config 0 descriptor?? [ 684.119358][T11796] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 684.325543][ T2132] zl10353_read_register: readreg error (reg=127, ret==0) [ 684.354759][T10056] hid (null): report_id 3323596431 is invalid [ 684.366880][T10056] hid (null): unknown global tag 0xe [ 684.372891][T10056] hid (null): unknown global tag 0xe [ 684.385242][T10056] hid (null): unknown global tag 0xe [ 684.392642][T10056] hid (null): unknown global tag 0x63 [ 684.403938][T10056] hid (null): unknown global tag 0xd [ 684.455800][ T2132] usb 5-1: USB disconnect, device number 9 [ 684.467277][ T5866] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 684.479223][ T5866] lg-g15 0003:046D:C225.0007: unknown main item tag 0x0 [ 684.506163][ T5866] lg-g15 0003:046D:C225.0007: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.5-1/input0 [ 684.627522][ T7818] usb 2-1: USB disconnect, device number 15 [ 684.743283][ T2132] usb 6-1: USB disconnect, device number 6 [ 685.667529][T11821] cgroup2: Unknown parameter 'unce 0 [ 685.667529][T11821] nr_zspages 0 [ 685.667529][T11821] nr_free_cma 0 [ 685.667529][T11821] numa_hit 3244645 [ 685.667529][T11821] numa_miss 0 [ 685.667529][T11821] numa_foreign 0 [ 685.667529][T11821] numa_interleave 45464 [ 685.667529][T11821] numa_local 3220919 [ 685.667529][T11821] numa_other 23726 [ 685.667529][T11821] nr_inactive_anon 1 [ 685.667529][T11821] nr_active_anon 25768 [ 685.667529][T11821] nr_inactive_file 40619 [ 685.667529][T11821] nr_active_file 18154 [ 685.667529][T11821] nr_unevictable 768 [ 685.667529][T11821] nr_slab_reclaimable 11535 [ 685.667529][T11821] nr_slab_unreclaimable 127748 [ 685.667529][T11821] nr_isolated_anon 0 [ 685.667529][T11821] nr_isolated_file 0 [ 685.667529][T11821] workingset_nodes 4 [ 685.667529][T11821] workingset_refault_anon 286 [ 685.667529][T11821] workingset_refault_file 32 [ 685.667529][T11821] workingset_activate_anon 286 [ 685.667529][T11821] workingset_activate_file 32 [ 685.667529][T11821] workingset_restore_anon 284 [ 685.667529][T11821] workingset_restore_file 32 [ 685.667529][T11821] workingset_nodereclaim 0 [ 685.667529][T11821] nr_anon_pages 6323 [ 685.667529][T11821] nr_mapped 27707 [ 685.667529][T11821] nr_file_pages 78950 [ 685.667529][T11821] nr_dirty 112 [ 685.667529][T11821] nr_writeback 0 [ 685.667529][T11821] nr_writeback_temp 0 [ 685.667529][T11821] nr_shmem 20237 [ 685.667529][T11821] nr_shmem_hugepages 0 [ 685.667529][T11821] nr_shmem_pmdmapped 0 [ 685.667529][T11821] nr_file_hugepages 0 [ 685.667529][T11821] nr_file_pmdmapped 0 [ 685.667529][T11821] nr_anon_transparent_hugepages 0 [ 685.667529][T11821] nr_vmscan_write 3091 [ 685.667529][T11821] nr_vmscan_immediate_reclaim 1 [ 685.667529][T11821] nr_dirtied 15207 [ 685.667529][T11821] nr_written 16347 [ 685.667529][T11821] nr_throttled_written 0 [ 685.667529][T11821] nr_kernel_misc_reclaimable 0 [ 685.667529][T11821] nr_foll_pin_acquired 26741 [ 685.672498][T11821] fuse: Unknown parameter 'f' [ 686.368056][T11831] loop1: detected capacity change from 0 to 128 [ 686.398426][T11831] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 686.435320][T11831] hpfs: filesystem error: improperly stopped [ 686.454365][T11831] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 686.466411][T11831] hpfs: You really don't want any checks? You are crazy... [ 686.478787][T11831] hpfs: hpfs_map_sector(): read error [ 686.487201][T11831] hpfs: code page support is disabled [ 686.497063][T11831] hpfs: hpfs_map_4sectors(): unaligned read [ 686.505946][T11831] hpfs: hpfs_map_4sectors(): unaligned read [ 686.514881][T11831] hpfs: filesystem error: unable to find root dir [ 686.564535][T11831] hpfs: hpfs_map_4sectors(): unaligned read [ 686.585950][T11831] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 686.644265][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.653626][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.611128][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1561'. [ 691.241524][ T5866] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 691.649224][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 691.672216][ T5866] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 691.716591][ T5866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 691.980958][ T5866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.219925][ T5866] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.288570][ T28] audit: type=1326 audit(1770307667.035:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11933 comm="syz.4.1583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f88d9aeb9 code=0x0 [ 692.311392][ T5866] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.331956][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.608949][ T5866] usb 6-1: usb_control_msg returned -32 [ 692.627713][ T5866] usbtmc 6-1:16.0: can't read capabilities [ 692.782507][T11947] netlink: 2124 bytes leftover after parsing attributes in process `syz.2.1588'. [ 692.793163][T11947] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1588'. [ 692.984236][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 693.973666][T11968] loop4: detected capacity change from 0 to 1024 [ 694.000375][T11968] EXT4-fs: Ignoring removed oldalloc option [ 694.006481][T11968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 694.078948][T10038] usb 6-1: USB disconnect, device number 7 [ 694.139493][T11968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.591574][ T9408] EXT4-fs error (device loop4): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 694.658973][ T9408] EXT4-fs error (device loop4): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 694.936098][T11791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.297779][T11980] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1600'. [ 696.226644][ T1144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.512584][ T1144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.744647][ T1144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.956614][ T1144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.521718][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 697.550590][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 697.564293][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 697.619391][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 697.627663][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 697.694399][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.569147][ T5762] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 698.761701][ T5762] usb 6-1: Using ep0 maxpacket: 16 [ 698.836342][ T5762] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 698.863623][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.894520][ T5762] usb 6-1: Product: syz [ 698.923844][ T5762] usb 6-1: Manufacturer: syz [ 698.928577][ T5762] usb 6-1: SerialNumber: syz [ 698.947748][T12010] chnl_net:caif_netlink_parms(): no params data found [ 698.965792][ T5762] usb 6-1: config 0 descriptor?? [ 698.985143][ T5762] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 699.022080][ T5762] usb 6-1: Detected FT232H [ 699.088488][T11938] Set syz1 is full, maxelem 65536 reached [ 699.214889][ T5762] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 699.457170][T12010] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.464864][T12010] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.475127][T12010] bridge_slave_0: entered allmulticast mode [ 699.483876][T12010] bridge_slave_0: entered promiscuous mode [ 699.493128][T12010] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.500576][T12010] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.507860][T12010] bridge_slave_1: entered allmulticast mode [ 699.530751][T12010] bridge_slave_1: entered promiscuous mode [ 699.659790][T12045] GUP no longer grows the stack in syz.1.1617 (12045): 200000004000-200000005000 (200000001000) [ 699.671166][T12045] CPU: 1 PID: 12045 Comm: syz.1.1617 Not tainted syzkaller #0 [ 699.678857][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 699.688971][T12045] Call Trace: [ 699.692302][T12045] [ 699.695289][T12045] dump_stack_lvl+0x18c/0x250 [ 699.700042][T12045] ? show_regs_print_info+0x20/0x20 [ 699.705311][T12045] ? load_image+0x400/0x400 [ 699.709866][T12045] ? find_vma+0x134/0x1b0 [ 699.714279][T12045] __get_user_pages+0xf0e/0x1380 [ 699.719305][T12045] ? populate_vma_page_range+0x380/0x380 [ 699.724999][T12045] ? __gup_longterm_locked+0x20f6/0x2b80 [ 699.730567][ T5762] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 699.730764][T12045] ? down_read_killable+0x1d0/0x340 [ 699.744196][T12045] ? mark_lock+0x94/0x320 [ 699.748599][T12045] __gup_longterm_locked+0x2251/0x2b80 [ 699.754194][T12045] ? pin_user_pages_remote+0x220/0x220 [ 699.759842][T12045] ? mark_lock+0x94/0x320 [ 699.764234][T12045] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 699.770395][T12045] ? lock_chain_count+0x20/0x20 [ 699.775505][T12045] ? internal_get_user_pages_fast+0x1fc6/0x2760 [ 699.781827][T12045] internal_get_user_pages_fast+0x21bf/0x2760 [ 699.788013][T12045] ? get_user_pages_fast_only+0xa0/0xa0 [ 699.793635][T12045] ? rcu_is_watching+0x15/0xb0 [ 699.798476][T12045] ? trace_contention_end+0x39/0xe0 [ 699.803758][T12045] ? __mutex_lock+0x315/0xcc0 [ 699.808621][T12045] ? preempt_schedule+0xc0/0xd0 [ 699.813548][T12045] __iov_iter_get_pages_alloc+0x37e/0xa80 [ 699.819366][T12045] ? wait_for_space+0x24c/0x2c0 [ 699.824389][T12045] iov_iter_get_pages2+0x5f/0xa0 [ 699.829414][T12045] __se_sys_vmsplice+0x5f9/0x1200 [ 699.834542][T12045] ? futex_wake+0x42a/0x4f0 [ 699.839212][T12045] ? __x64_sys_vmsplice+0xb0/0xb0 [ 699.844317][T12045] ? futex_wake_mark+0x150/0x150 [ 699.849492][T12045] ? aa_get_newest_label+0xfd/0x5c0 [ 699.854811][T12045] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 699.860885][T12045] ? lockdep_hardirqs_on+0x98/0x150 [ 699.866170][T12045] do_syscall_64+0x55/0xa0 [ 699.870671][T12045] ? clear_bhb_loop+0x40/0x90 [ 699.875406][T12045] ? clear_bhb_loop+0x40/0x90 [ 699.880185][T12045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 699.886163][T12045] RIP: 0033:0x7f3e8059aeb9 [ 699.890489][T10408] Bluetooth: hci1: command tx timeout [ 699.896016][T12045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.896047][T12045] RSP: 002b:00007f3e81527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 699.896073][T12045] RAX: ffffffffffffffda RBX: 00007f3e80815fa0 RCX: 00007f3e8059aeb9 [ 699.896089][T12045] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 699.940882][T12045] RBP: 00007f3e80608c1f R08: 0000000000000000 R09: 0000000000000000 [ 699.948928][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.956957][T12045] R13: 00007f3e80816038 R14: 00007f3e80815fa0 R15: 00007ffcd10a1968 [ 699.965100][T12045] [ 699.986571][T12010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.101249][T12010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.120936][ T9] usb 6-1: USB disconnect, device number 8 [ 700.187621][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 700.199753][ T9] ftdi_sio 6-1:0.0: device disconnected [ 700.267802][ T1144] hsr_slave_0: left promiscuous mode [ 700.287582][ T1144] hsr_slave_1: left promiscuous mode [ 700.295685][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.315462][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.324297][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.346259][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.359741][ T1144] bridge_slave_1: left allmulticast mode [ 700.372641][ T1144] bridge_slave_1: left promiscuous mode [ 700.384143][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.414188][ T1144] bridge_slave_0: left allmulticast mode [ 700.421219][ T1144] bridge_slave_0: left promiscuous mode [ 700.441627][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.567817][ T1144] veth1_macvtap: left promiscuous mode [ 700.579395][ T1144] veth0_macvtap: left promiscuous mode [ 700.590782][ T1144] veth1_vlan: left promiscuous mode [ 700.607020][ T1144] veth0_vlan: left promiscuous mode [ 701.959811][T10408] Bluetooth: hci1: command tx timeout [ 702.752083][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 703.378785][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 703.504945][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.618176][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.952366][ T5821] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 704.044579][T10408] Bluetooth: hci1: command tx timeout [ 704.156692][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.168084][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.181734][ T5821] usb 6-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 704.200534][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.236510][ T5821] usb 6-1: config 0 descriptor?? [ 704.357846][ T1144] bond0 (unregistering): Released all slaves [ 704.546821][ T5821] usbhid 6-1:0.0: can't add hid device: -71 [ 704.584255][ T5821] usbhid: probe of 6-1:0.0 failed with error -71 [ 704.625246][ T5821] usb 6-1: USB disconnect, device number 9 [ 704.680010][T12010] team0: Port device team_slave_0 added [ 704.765219][T12010] team0: Port device team_slave_1 added [ 704.862630][T12010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.875267][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.925889][T12010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.942081][T12010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.949651][T12010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.976138][T12010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.172821][T12010] hsr_slave_0: entered promiscuous mode [ 705.199839][T12010] hsr_slave_1: entered promiscuous mode [ 705.220827][T12010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.241213][T12010] Cannot create hsr debugfs directory [ 705.699858][T12129] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 705.816695][T12132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 705.905416][T12132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 705.949375][T12132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 705.970875][T12132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 706.015213][T12132] bond3: (slave geneve2): making interface the new active one [ 706.055245][T12132] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 706.109407][T10408] Bluetooth: hci1: command tx timeout [ 706.352973][T12010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 706.393642][T12010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 706.422951][T12010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 706.488029][T12010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 706.577417][T12121] loop5: detected capacity change from 0 to 32768 [ 706.588614][T12121] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 706.831543][T10720] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10 [ 706.851760][T12010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.972165][T12010] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.032037][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.039473][ T9149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.105533][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.112890][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.220841][T12165] loop5: detected capacity change from 0 to 128 [ 707.631749][T12171] loop1: detected capacity change from 0 to 256 [ 707.703300][T12171] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 708.346986][T12010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.210277][T10038] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 709.557577][ T9149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.779380][T10038] usb 2-1: Using ep0 maxpacket: 32 [ 709.797021][T10038] usb 2-1: config 0 interface 0 has no altsetting 0 [ 709.809259][T10038] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 709.818392][T10038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.844192][ T9149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.862709][T10038] usb 2-1: config 0 descriptor?? [ 710.065176][ T9149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.224776][ T9149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.345312][T10038] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 710.506184][T12010] veth0_vlan: entered promiscuous mode [ 710.666037][T12010] veth1_vlan: entered promiscuous mode [ 710.890686][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 710.903107][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 710.922692][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.935547][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 710.937669][T10038] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -71 [ 711.010813][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 711.021077][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 711.086489][T10038] usb 2-1: USB disconnect, device number 16 [ 711.104052][T12010] veth0_macvtap: entered promiscuous mode [ 711.155815][T12010] veth1_macvtap: entered promiscuous mode [ 711.362117][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.390336][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.410779][T12010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.486603][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.519108][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.540908][T12010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.691480][T12010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.729122][T12010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.758704][T12010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.789204][T12010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.838910][T12245] loop1: detected capacity change from 0 to 512 [ 711.928246][T12245] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 712.011176][T12245] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 712.023670][T12245] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1663: Corrupt directory, running e2fsck is recommended [ 712.071036][T12245] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 712.079720][T12245] EXT4-fs error (device loop1): ext4_iget_extra_inode:4732: inode #15: comm syz.1.1663: corrupted in-inode xattr: e_name out of bounds [ 712.100632][T12245] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.1663: couldn't read orphan inode 15 (err -117) [ 712.132772][T12245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.210654][T12245] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 712.226220][T12245] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 712.244049][T12245] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1663: Corrupt directory, running e2fsck is recommended [ 712.294565][T12251] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 712.341965][T12251] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 712.369212][T12251] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1663: Corrupt directory, running e2fsck is recommended [ 712.414573][T12245] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 712.503553][T12245] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 712.518543][T12245] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1663: Corrupt directory, running e2fsck is recommended [ 712.538673][T12253] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 712.558771][T12251] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1663: path /348/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 712.596914][T12251] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 22: comm syz.1.1663: path /348/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=65535, size=1024 fake=0 [ 712.624317][T12251] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 8: comm syz.1.1663: path /348/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 712.702562][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.954983][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.963292][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.102432][T12225] chnl_net:caif_netlink_parms(): no params data found [ 713.160589][ T5775] Bluetooth: hci3: command tx timeout [ 713.299206][ T9149] hsr_slave_0: left promiscuous mode [ 713.337108][ T9149] hsr_slave_1: left promiscuous mode [ 713.365181][ T9149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.378346][ T9149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.397171][ T9149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.413661][ T9149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.445540][ T9149] bridge_slave_1: left allmulticast mode [ 713.453652][ T9149] bridge_slave_1: left promiscuous mode [ 713.466523][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.511321][ T9149] bridge_slave_0: left allmulticast mode [ 713.521727][ T9149] bridge_slave_0: left promiscuous mode [ 713.534592][ T9149] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.630492][ T9149] veth1_macvtap: left promiscuous mode [ 713.643060][ T9149] veth0_macvtap: left promiscuous mode [ 713.656321][ T9149] veth1_vlan: left promiscuous mode [ 713.667659][ T9149] veth0_vlan: left promiscuous mode [ 715.230856][ T5775] Bluetooth: hci3: command tx timeout [ 715.644206][ T9149] team0 (unregistering): Port device team_slave_1 removed [ 715.735524][ T9149] team0 (unregistering): Port device team_slave_0 removed [ 715.833419][ T9149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.966957][ T9149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.552746][T12292] overlayfs: failed to clone upperpath [ 716.844472][ T9149] bond0 (unregistering): Released all slaves [ 717.000421][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.008291][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.041477][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 717.056478][T12284] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.065691][T12284] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.075005][T12284] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.084099][T12284] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.128901][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 717.326313][ T5775] Bluetooth: hci3: command tx timeout [ 717.371064][T12225] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.379270][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.396438][T12225] bridge_slave_0: entered allmulticast mode [ 717.450479][T12225] bridge_slave_0: entered promiscuous mode [ 717.481112][T12225] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.488344][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.524679][T12225] bridge_slave_1: entered allmulticast mode [ 717.533179][T12225] bridge_slave_1: entered promiscuous mode [ 717.587260][T12225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.611908][T12225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.716679][T12225] team0: Port device team_slave_0 added [ 717.750457][T12225] team0: Port device team_slave_1 added [ 717.842035][T12225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.859507][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.939492][T12225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.999336][T12225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.018601][T12225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.073703][T12225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.278277][T12225] hsr_slave_0: entered promiscuous mode [ 718.323947][T12225] hsr_slave_1: entered promiscuous mode [ 718.357759][T12225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.365878][T12225] Cannot create hsr debugfs directory [ 718.504328][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.525468][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.537174][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.550745][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.558498][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.571467][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.581503][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.592870][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.606987][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.616127][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.643698][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.661380][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.681456][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.698809][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.718694][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.730424][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.738122][ T9] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 718.790626][ T9] hid-generic 0006:0004:0009.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 718.964894][T12343] fido_id[12343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 719.021014][T12345] pim6reg: entered allmulticast mode [ 719.044463][T12347] bridge0: entered allmulticast mode [ 719.057252][T12349] pim6reg: left allmulticast mode [ 719.062886][T12349] bridge0: left allmulticast mode [ 719.389504][ T5775] Bluetooth: hci3: command tx timeout [ 719.606291][T12225] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 719.638561][T12225] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 719.661553][T12225] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 719.680421][T12225] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 719.907799][T12225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.960890][T12225] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.122222][ T9149] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.129629][ T9149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.246687][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.253995][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.904816][ T5775] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 721.117746][T12225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.631597][T12409] block device autoloading is deprecated and will be removed. [ 721.890346][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.899542][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 722.075504][T12420] loop6: detected capacity change from 0 to 1024 [ 722.091069][T12420] EXT4-fs: inline encryption not supported [ 722.102821][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 722.142697][T12420] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 722.144115][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.170450][T12420] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 722.186309][T12420] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 722.200242][T12420] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 722.221224][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 722.244158][ T9] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 722.278506][ T9] usb 2-1: Product: syz [ 722.298332][ T9] usb 2-1: SerialNumber: syz [ 722.320191][ T9] usb 2-1: config 0 descriptor?? [ 722.357651][ T9] usb 2-1: selecting invalid altsetting 1 [ 722.389285][ T9] usb 2-1: Can not set alternate setting to 1, error: -22 [ 722.422529][ T9] synaptics_usb: probe of 2-1:0.0 failed with error -22 [ 722.686786][T12433] loop6: detected capacity change from 0 to 128 [ 722.815766][T12225] veth0_vlan: entered promiscuous mode [ 722.835537][T12225] veth1_vlan: entered promiscuous mode [ 722.893143][T12225] veth0_macvtap: entered promiscuous mode [ 722.905991][T12225] veth1_macvtap: entered promiscuous mode [ 722.942349][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.955263][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.975854][T12225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.999744][T12225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.012875][T12225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.026346][T12225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.047105][T12225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.056388][T12225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.068213][T12225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.083089][T12225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.256779][ T7818] usb 2-1: USB disconnect, device number 17 [ 723.334186][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.364432][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.426055][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.447752][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.066781][T12466] loop7: detected capacity change from 0 to 256 [ 724.079881][T12466] exfat: Deprecated parameter 'namecase' [ 724.085698][T12466] exfat: Deprecated parameter 'namecase' [ 724.174725][T12466] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 724.264773][T12466] syz.7.1706: attempt to access beyond end of device [ 724.264773][T12466] loop7: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 724.334602][T12466] syz.7.1706: attempt to access beyond end of device [ 724.334602][T12466] loop7: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 724.431433][ T28] audit: type=1800 audit(1770307699.175:132): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1706" name="file1" dev="loop7" ino=1048638 res=0 errno=0 [ 724.616981][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 725.108413][T12496] loop7: detected capacity change from 0 to 1024 [ 725.519725][T12509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.146671][T12535] loop6: detected capacity change from 0 to 32768 [ 727.217635][ T2132] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 727.253779][T12535] JBD2: Ignoring recovery information on journal [ 727.365806][T12559] overlayfs: failed to clone upperpath [ 727.466612][ T2132] usb 8-1: unable to get BOS descriptor or descriptor too short [ 727.523691][ T2132] usb 8-1: not running at top speed; connect to a high speed hub [ 727.542244][T12535] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 727.561511][ T2132] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.589200][ T2132] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.644479][ T2132] usb 8-1: string descriptor 0 read error: -22 [ 727.660235][ T2132] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.700035][ T2132] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.765389][ T2132] usb 8-1: 0:2 : does not exist [ 727.936867][T12535] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 727.987567][T12535] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 728.009146][T12535] OCFS2: File system is now read-only. [ 728.022754][T12535] (syz.6.1724,12535,0):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 728.230070][T12010] ocfs2: Unmounting device (7,6) on (node local) [ 728.896319][T12583] loop6: detected capacity change from 0 to 256 [ 728.976584][T12583] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 729.030486][ T2132] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 729.096371][ T2132] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 729.139317][ T2132] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 729.160336][T12586] overlayfs: failed to clone upperpath [ 729.260562][ T2132] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 729.309961][ T2132] usb 8-1: USB disconnect, device number 2 [ 730.623360][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 731.054945][T12602] loop7: detected capacity change from 0 to 32768 [ 731.172559][T12602] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 731.248153][T12602] XFS (loop7): Ending clean mount [ 731.306080][T12639] netlink: 'syz.1.1746': attribute type 4 has an invalid length. [ 731.349806][ T28] audit: type=1800 audit(1770307706.095:133): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1740" name="file1" dev="loop7" ino=4422 res=0 errno=0 [ 731.830315][T12225] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 733.731416][T12702] loop7: detected capacity change from 0 to 1024 [ 733.926609][ T28] audit: type=1800 audit(1770307708.675:134): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1751" name="file2" dev="loop7" ino=21 res=0 errno=0 [ 735.354818][T12745] netlink: 'syz.6.1770': attribute type 4 has an invalid length. [ 737.260759][T12784] loop1: detected capacity change from 0 to 128 [ 737.532171][T12784] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 737.933444][T12784] ext4 filesystem being mounted at /386/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 738.442173][T12784] fscrypt (loop1, inode 12): Error allocating 'adiantum(xchacha12,aes)' transform: -4 [ 738.590818][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 738.822877][T12811] loop1: detected capacity change from 0 to 128 [ 738.888156][T12811] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 738.965342][T12811] ext4 filesystem being mounted at /387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 739.132213][ T28] audit: type=1800 audit(1770307713.875:135): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1786" name="bus" dev="loop1" ino=12 res=0 errno=0 [ 739.313786][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 739.566570][T12820] loop1: detected capacity change from 0 to 512 [ 740.618149][T12844] loop7: detected capacity change from 0 to 512 [ 741.849970][T12862] syz_tun: entered allmulticast mode [ 741.886641][T12861] syz_tun: left allmulticast mode [ 742.400585][T12880] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.409019][T12880] IPv6: NLM_F_CREATE should be set when creating new route [ 742.438918][T12880] lo: entered allmulticast mode [ 742.529338][T12880] tunl0: entered allmulticast mode [ 742.575521][T12880] gre0: entered allmulticast mode [ 742.733090][T12880] gretap0: entered allmulticast mode [ 742.776204][T12880] erspan0: entered allmulticast mode [ 742.869350][T12880] ip_vti0: entered allmulticast mode [ 742.914857][T12880] ip6_vti0: entered allmulticast mode [ 743.015123][T12880] sit0: entered allmulticast mode [ 743.284964][T12880] ip6tnl0: entered allmulticast mode [ 743.362719][T12880] ip6gre0: entered allmulticast mode [ 743.423088][T12880] syz_tun: entered allmulticast mode [ 743.478582][T12880] ip6gretap0: entered allmulticast mode [ 743.530570][T12887] overlayfs: failed to clone upperpath [ 743.569615][T12880] vcan0: entered allmulticast mode [ 743.667933][T12880] bond0: entered allmulticast mode [ 743.678093][T12880] bond_slave_0: entered allmulticast mode [ 743.699566][T12880] bond_slave_1: entered allmulticast mode [ 743.780459][T12880] team0: entered allmulticast mode [ 743.785689][T12880] team_slave_0: entered allmulticast mode [ 743.819803][T12880] team_slave_1: entered allmulticast mode [ 743.895581][T12880] dummy0: entered allmulticast mode [ 743.970897][T12880] nlmon0: entered allmulticast mode [ 743.988250][T12880] caif0: entered allmulticast mode [ 744.009468][T12880] batadv0: entered allmulticast mode [ 744.015147][T12880] veth0: entered allmulticast mode [ 744.026855][T12880] wg0: entered allmulticast mode [ 744.039572][T12880] wg1: entered allmulticast mode [ 744.044816][T12880] wg2: entered allmulticast mode [ 744.060679][T12880] veth0_to_bridge: entered allmulticast mode [ 744.066949][T12880] bridge_slave_0: entered allmulticast mode [ 744.089908][T12880] veth1_to_bridge: entered allmulticast mode [ 744.106124][T12880] bridge_slave_1: entered allmulticast mode [ 744.119640][T12880] veth0_to_bond: entered allmulticast mode [ 744.149410][T12880] veth1_to_bond: entered allmulticast mode [ 744.155806][T12880] veth0_to_team: entered allmulticast mode [ 744.179667][T12880] veth1_to_team: entered allmulticast mode [ 744.185932][T12880] veth0_to_batadv: entered allmulticast mode [ 744.199416][T12880] batadv_slave_0: entered allmulticast mode [ 744.205671][T12880] veth1_to_batadv: entered allmulticast mode [ 744.229371][T12880] batadv_slave_1: entered allmulticast mode [ 744.235573][T12880] xfrm0: entered allmulticast mode [ 744.259266][T12880] veth0_to_hsr: entered allmulticast mode [ 744.265360][T12880] hsr_slave_0: entered allmulticast mode [ 744.292563][T12880] veth1_to_hsr: entered allmulticast mode [ 744.298596][T12880] hsr_slave_1: entered allmulticast mode [ 744.319276][T12880] hsr0: entered allmulticast mode [ 744.324692][T12880] veth1_virt_wifi: entered allmulticast mode [ 744.340291][T12880] veth0_virt_wifi: entered allmulticast mode [ 744.346576][T12880] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 744.369764][T12880] veth1_vlan: entered allmulticast mode [ 744.375781][T12880] vlan0: entered allmulticast mode [ 744.381942][T12880] vlan1: entered allmulticast mode [ 744.387317][T12880] macvlan0: entered allmulticast mode [ 744.395599][T12880] macvlan1: entered allmulticast mode [ 744.405518][T12880] ipvlan0: entered allmulticast mode [ 744.412641][T12880] ipvlan1: entered allmulticast mode [ 744.418222][T12880] veth1_macvtap: entered allmulticast mode [ 744.425125][T12880] veth0_macvtap: entered allmulticast mode [ 744.440728][T12880] macvtap0: entered allmulticast mode [ 744.446822][T12880] macsec0: entered allmulticast mode [ 744.456493][T12880] geneve0: entered allmulticast mode [ 744.463792][T12880] geneve1: entered allmulticast mode [ 744.473821][T12880] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 744.483059][T12880] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 744.495029][T12880] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 744.506640][T12880] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 744.529518][T12880] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 744.540291][T12880] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 744.559386][T12880] gre1: entered allmulticast mode [ 744.565914][T12880] gre2: entered allmulticast mode [ 744.578047][T12880] vlan2: entered allmulticast mode [ 744.610596][T12880] bond1: entered allmulticast mode [ 744.640428][T12880] veth2: entered allmulticast mode [ 744.661178][T12880] veth3: entered allmulticast mode [ 744.711367][T12880] bond2: entered allmulticast mode [ 744.716564][T12880] macvlan2: entered allmulticast mode [ 744.763568][T12880] ip6tnl1: entered allmulticast mode [ 744.779065][T12880] ip6erspan0: entered allmulticast mode [ 744.789914][T12880] syztnl1: entered allmulticast mode [ 744.805696][T12880] erspan0.1: entered allmulticast mode [ 744.817277][T12880] bond3: entered allmulticast mode [ 744.835883][T12880] geneve2: entered allmulticast mode [ 744.844021][T12880] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 744.859904][T12880] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 744.869093][T12880] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 744.878112][T12880] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 744.917665][T12880] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.927185][T12880] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.936167][T12880] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.945175][T12880] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.957067][T12880] : entered allmulticast mode [ 744.993094][T12894] syz_tun: entered allmulticast mode [ 745.016486][T12894] syz_tun: left allmulticast mode [ 746.042382][T12940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.150187][T12938] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 746.417009][T12950] loop6: detected capacity change from 0 to 512 [ 746.512623][T12950] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 746.957692][T12950] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 748.037226][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.046448][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.170724][T12996] loop1: detected capacity change from 0 to 2048 [ 749.236695][T12996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.370876][T13002] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 749.394282][T13002] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 28 [ 749.407124][T13002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 749.407124][T13002] [ 749.463572][T13002] EXT4-fs (loop1): Total free blocks count 0 [ 749.472813][T13002] EXT4-fs (loop1): Free/Dirty block details [ 749.493157][T13002] EXT4-fs (loop1): free_blocks=2415919504 [ 749.509057][T13002] EXT4-fs (loop1): dirty_blocks=128 [ 749.520845][T13002] EXT4-fs (loop1): Block reservation details [ 749.530344][T13005] loop6: detected capacity change from 0 to 128 [ 749.563108][T13002] EXT4-fs (loop1): i_reserved_data_blocks=8 [ 749.691101][ T2132] Process accounting resumed [ 749.698090][ T2132] FAT-fs (loop6): error, corrupted file size (i_pos 548, 512) [ 749.734743][ T2132] FAT-fs (loop6): Filesystem has been set read-only [ 749.823338][ T59] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 752.150665][ T31] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 752.745676][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.776613][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.299159][ T5866] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 755.516936][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 755.573602][ T5866] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 755.615809][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.673537][ T5866] usb 8-1: config 0 descriptor?? [ 755.679882][T13126] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 756.184847][ T5866] elan 0003:04F3:0755.000A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 756.353217][T12530] usb 8-1: USB disconnect, device number 3 [ 756.504091][T13170] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 756.516426][T13170] syzkaller0: entered promiscuous mode [ 756.527969][T13170] syzkaller0: entered allmulticast mode [ 757.337844][T13193] loop1: detected capacity change from 0 to 2048 [ 757.401696][T13193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.416805][T13193] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.498212][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.085987][T13219] loop7: detected capacity change from 0 to 764 [ 760.796497][T13280] netlink: 2124 bytes leftover after parsing attributes in process `syz.2.1904'. [ 762.712892][T13299] overlayfs: failed to clone upperpath [ 763.974207][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1913'. [ 764.069645][T13328] team1: entered promiscuous mode [ 764.084974][T13328] team1: entered allmulticast mode [ 764.416741][T13339] loop7: detected capacity change from 0 to 128 [ 764.442039][T13339] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 764.465572][T13339] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 764.565416][T13339] syz.7.1915 (pid 13339) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 764.594137][T13339] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 764.771780][T12225] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.102623][T13330] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.110802][T13330] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.396029][T13330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.529338][T13330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.744715][T13330] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.769042][T13330] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.786847][T13330] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.797352][T13330] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.970744][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'. [ 770.014877][T13417] gre3: entered allmulticast mode [ 771.648628][T13437] binder: BINDER_SET_CONTEXT_MGR already set [ 771.705733][T13437] binder: 13434:13437 ioctl 4018620d 200000000040 returned -16 [ 771.789967][T13437] binder: 13434:13437 ioctl c0306201 2000000016c0 returned -14 [ 772.632416][T13458] loop7: detected capacity change from 0 to 512 [ 772.681432][T13458] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 772.722093][T13458] EXT4-fs error (device loop7): ext4_iget_extra_inode:4732: inode #17: comm syz.7.1943: corrupted in-inode xattr: invalid size in ea xattr [ 772.821556][T13458] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.1943: couldn't read orphan inode 17 (err -117) [ 772.892263][T13458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 773.028440][T12225] VFS: Lookup of '.' in ext4 loop7 would have caused loop [ 773.051114][T12225] VFS: Lookup of '.' in ext4 loop7 would have caused loop [ 774.165684][T12225] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.329202][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 774.417714][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.601008][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.619178][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 774.720644][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 774.785377][ T9] usb 2-1: config 0 has no interface number 0 [ 774.806991][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.843901][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 774.927099][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 774.958759][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.979013][ T9] usb 2-1: Product: syz [ 774.983264][ T9] usb 2-1: Manufacturer: syz [ 775.021313][ T9] usb 2-1: SerialNumber: syz [ 775.055742][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.069356][ T9] usb 2-1: config 0 descriptor?? [ 775.079572][T13484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 775.324567][T13484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 777.114701][T10408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 777.130860][T10408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 777.145023][T10408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 777.170629][T10408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 777.195090][T10408] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 777.205231][T10408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 777.929624][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 777.969651][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 777.990859][ T9] asix: probe of 2-1:0.188 failed with error -71 [ 778.038886][ T9] usb 2-1: USB disconnect, device number 18 [ 778.612524][ T59] hsr_slave_0: left promiscuous mode [ 778.642701][ T59] hsr_slave_1: left promiscuous mode [ 778.654873][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.674492][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.685701][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.712790][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.733206][ T59] bridge_slave_1: left allmulticast mode [ 778.742118][ T59] bridge_slave_1: left promiscuous mode [ 778.748362][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.767997][ T59] bridge_slave_0: left allmulticast mode [ 778.787921][ T59] bridge_slave_0: left promiscuous mode [ 778.804542][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.985518][ T59] veth1_macvtap: left promiscuous mode [ 779.000504][ T59] veth0_macvtap: left promiscuous mode [ 779.016465][ T59] veth1_vlan: left promiscuous mode [ 779.026406][ T28] audit: type=1804 audit(1770308009.774:136): pid=13576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1966" name="/newroot/431/file0" dev="fuse" ino=1 res=1 errno=0 [ 779.058140][ T59] veth0_vlan: left promiscuous mode [ 779.339560][T10408] Bluetooth: hci3: command tx timeout [ 781.283759][ T59] team0 (unregistering): Port device team_slave_1 removed [ 781.399959][T10408] Bluetooth: hci3: command tx timeout [ 781.411667][ T59] team0 (unregistering): Port device team_slave_0 removed [ 781.502698][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.595198][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.251166][ T59] bond0 (unregistering): Released all slaves [ 782.402083][T13580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1967'. [ 782.447423][T13580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.504232][T13624] netlink: 'syz.6.1978': attribute type 4 has an invalid length. [ 782.517669][T13625] netlink: 'syz.6.1978': attribute type 4 has an invalid length. [ 782.543203][T13530] chnl_net:caif_netlink_parms(): no params data found [ 782.941987][T13530] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.959228][T13530] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.976826][T13530] bridge_slave_0: entered allmulticast mode [ 782.984524][T13530] bridge_slave_0: entered promiscuous mode [ 783.004294][T13530] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.020588][T13530] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.028374][T13530] bridge_slave_1: entered allmulticast mode [ 783.036445][T13530] bridge_slave_1: entered promiscuous mode [ 783.144753][T13530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.175988][T13530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.343754][T13530] team0: Port device team_slave_0 added [ 783.425461][T13530] team0: Port device team_slave_1 added [ 783.469414][T10408] Bluetooth: hci3: command tx timeout [ 783.550034][T13530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.557240][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.652439][T13530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.713295][T13659] syzkaller0: entered promiscuous mode [ 783.740509][T13659] syzkaller0: entered allmulticast mode [ 783.754462][T13530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.773373][T13530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.839491][T13530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.145191][T13530] hsr_slave_0: entered promiscuous mode [ 784.178099][T13530] hsr_slave_1: entered promiscuous mode [ 784.256918][T13530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 784.355348][T13530] Cannot create hsr debugfs directory [ 785.579100][T10408] Bluetooth: hci3: command tx timeout [ 787.592055][T13530] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 787.703945][T13530] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 787.743758][T13530] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 787.774832][T13530] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 788.735166][T13760] xt_hashlimit: size too large, truncated to 1048576 [ 789.020947][T13530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.134864][T13530] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.537890][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.545320][T13727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.951881][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.959282][T13727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.769589][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.501295][T13530] veth0_vlan: entered promiscuous mode [ 792.868003][T13530] veth1_vlan: entered promiscuous mode [ 793.012015][T13530] veth0_macvtap: entered promiscuous mode [ 793.047921][T13530] veth1_macvtap: entered promiscuous mode [ 793.102137][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.309402][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.689609][T13530] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.803390][T13530] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.937128][T13530] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.946767][T13530] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.229822][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.251631][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.334957][T13835] netlink: 'syz.1.2007': attribute type 10 has an invalid length. [ 794.359186][T13835] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 794.380194][T13835] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 794.399885][T13835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 794.418759][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.449202][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.394209][T13859] virtio-fs: tag not found [ 797.727593][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2014'. [ 799.912738][T13871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.779080][ T5866] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 801.223051][ T5866] usb 9-1: unable to get BOS descriptor or descriptor too short [ 801.242939][ T5866] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 801.260135][ T5866] usb 9-1: can't read configurations, error -71 [ 802.361105][T13929] loop1: detected capacity change from 0 to 512 [ 802.399826][T13929] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.2026: corrupted xattr block 95: invalid header [ 802.435852][T13929] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2026: bg 0: block 7: invalid block bitmap [ 802.515604][T13929] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 802.575995][T13939] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 802.590835][T13929] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2969: inode #11: comm syz.1.2026: corrupted xattr block 95: invalid header [ 802.680040][T13929] EXT4-fs warning (device loop1): ext4_evict_inode:272: xattr delete (err -117) [ 802.704005][T13929] EXT4-fs (loop1): 1 orphan inode deleted [ 802.720359][T13929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.978819][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.049035][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.913101][T10408] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 803.925361][T10408] CPU: 0 PID: 10408 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 803.933074][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 803.943199][T10408] Workqueue: hci0 hci_rx_work [ 803.947958][T10408] Call Trace: [ 803.951292][T10408] [ 803.954291][T10408] dump_stack_lvl+0x18c/0x250 [ 803.959057][T10408] ? show_regs_print_info+0x20/0x20 [ 803.964422][T10408] ? load_image+0x400/0x400 [ 803.969026][T10408] sysfs_create_dir_ns+0x26e/0x2a0 [ 803.974216][T10408] ? sysfs_warn_dup+0xa0/0xa0 [ 803.978954][T10408] ? do_raw_spin_unlock+0x121/0x230 [ 803.984221][T10408] kobject_add_internal+0x61c/0xcc0 [ 803.989475][T10408] kobject_add+0x164/0x240 [ 803.993938][T10408] ? __rwlock_init+0x150/0x150 [ 803.998746][T10408] ? kobject_init+0x1e0/0x1e0 [ 804.003479][T10408] ? _raw_spin_unlock+0x28/0x40 [ 804.008386][T10408] ? get_device_parent+0x366/0x390 [ 804.013540][T10408] device_add+0x408/0xc20 [ 804.017919][T10408] hci_conn_add_sysfs+0xd5/0x1e0 [ 804.022984][T10408] le_conn_complete_evt+0xf5d/0x1540 [ 804.028405][T10408] ? hci_event_packet+0x4cb/0x1270 [ 804.033743][T10408] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 804.040061][T10408] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 804.045911][T10408] ? skb_pull_data+0xfb/0x200 [ 804.050740][T10408] hci_le_conn_complete_evt+0x187/0x440 [ 804.056334][T10408] ? hci_remote_host_features_evt+0x150/0x150 [ 804.062501][T10408] hci_event_packet+0x7ba/0x1270 [ 804.067497][T10408] ? bis_list+0x290/0x290 [ 804.071882][T10408] ? lockdep_hardirqs_on+0x98/0x150 [ 804.077155][T10408] ? hci_send_to_monitor+0xd7/0x4f0 [ 804.082421][T10408] hci_rx_work+0x43a/0xd60 [ 804.086907][T10408] ? process_scheduled_works+0x96f/0x15d0 [ 804.092695][T10408] process_scheduled_works+0xa5d/0x15d0 [ 804.098319][T10408] ? assign_work+0x430/0x430 [ 804.102962][T10408] ? assign_work+0x3d0/0x430 [ 804.107593][T10408] worker_thread+0xa55/0xfc0 [ 804.112235][T10408] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 804.118161][T10408] ? _raw_spin_unlock+0x40/0x40 [ 804.123184][T10408] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 804.129196][T10408] kthread+0x2fa/0x390 [ 804.133320][T10408] ? pr_cont_work+0x560/0x560 [ 804.138038][T10408] ? kthread_blkcg+0xd0/0xd0 [ 804.142664][T10408] ret_from_fork+0x48/0x80 [ 804.147219][T10408] ? kthread_blkcg+0xd0/0xd0 [ 804.151843][T10408] ret_from_fork_asm+0x11/0x20 [ 804.156662][T10408] [ 804.161435][T10408] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 804.175808][T10408] Bluetooth: hci0: failed to register connection device [ 804.206298][T10408] general protection fault, probably for non-canonical address 0xdffffc0000000026: 0000 [#1] PREEMPT SMP KASAN [ 804.218051][T10408] KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137] [ 804.226473][T10408] CPU: 0 PID: 10408 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 804.234212][T10408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.244309][T10408] Workqueue: hci0 hci_rx_work [ 804.249097][T10408] RIP: 0010:__lock_acquire+0xf9/0x7d40 [ 804.254570][T10408] Code: 89 bc 24 88 00 00 00 0f 85 88 67 00 00 83 3d b9 ec 22 0d 00 0f 84 16 10 00 00 83 3d 00 c9 97 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 23 14 77 00 48 8b [ 804.274284][T10408] RSP: 0018:ffffc9000c2772a0 EFLAGS: 00010002 [ 804.280458][T10408] RAX: 0000000000000026 RBX: ffff8880273a8000 RCX: 1ffff9200184ee78 [ 804.288440][T10408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 804.296436][T10408] RBP: ffffc9000c2774e8 R08: dffffc0000000000 R09: 0000000000000000 [ 804.304571][T10408] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 0000000000000000 [ 804.312705][T10408] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 804.320883][T10408] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 804.330026][T10408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.336717][T10408] CR2: 00007f3e805e8600 CR3: 0000000040331000 CR4: 00000000003506f0 [ 804.344713][T10408] Call Trace: [ 804.348004][T10408] [ 804.350974][T10408] ? finish_task_switch+0x265/0x8f0 [ 804.356448][T10408] ? verify_lock_unused+0x140/0x140 [ 804.361675][T10408] ? __schedule+0x155b/0x45a0 [ 804.366415][T10408] ? verify_lock_unused+0x140/0x140 [ 804.371815][T10408] ? __mutex_lock+0x94c/0xcc0 [ 804.376511][T10408] ? __lock_acquire+0x7d40/0x7d40 [ 804.381553][T10408] ? do_raw_spin_lock+0x11f/0x2c0 [ 804.386593][T10408] lock_acquire+0x19e/0x420 [ 804.391115][T10408] ? l2cap_sock_new_connection_cb+0x4a/0x2a0 [ 804.397207][T10408] ? __mutex_lock+0x956/0xcc0 [ 804.401908][T10408] ? read_lock_is_recursive+0x20/0x20 [ 804.407312][T10408] ? mutex_lock_nested+0x20/0x20 [ 804.412267][T10408] ? l2cap_global_fixed_chan+0x2ef/0x380 [ 804.418002][T10408] lock_sock_nested+0x48/0x100 [ 804.422880][T10408] ? l2cap_sock_new_connection_cb+0x4a/0x2a0 [ 804.428888][T10408] l2cap_sock_new_connection_cb+0x4a/0x2a0 [ 804.434741][T10408] l2cap_connect_cfm+0x375/0x1070 [ 804.439783][T10408] ? l2cap_ertm_resend+0x1040/0x1040 [ 804.445081][T10408] ? l2cap_ertm_resend+0x1040/0x1040 [ 804.450378][T10408] hci_connect_cfm+0x8f/0x130 [ 804.455069][T10408] le_conn_complete_evt+0xfdc/0x1540 [ 804.460368][T10408] ? hci_event_packet+0x4cb/0x1270 [ 804.465558][T10408] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 804.471836][T10408] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 804.477500][T10408] ? skb_pull_data+0xfb/0x200 [ 804.482209][T10408] hci_le_conn_complete_evt+0x187/0x440 [ 804.488086][T10408] ? hci_remote_host_features_evt+0x150/0x150 [ 804.494338][T10408] hci_event_packet+0x7ba/0x1270 [ 804.499293][T10408] ? bis_list+0x290/0x290 [ 804.503718][T10408] ? lockdep_hardirqs_on+0x98/0x150 [ 804.508925][T10408] ? hci_send_to_monitor+0xd7/0x4f0 [ 804.514348][T10408] hci_rx_work+0x43a/0xd60 [ 804.518875][T10408] ? process_scheduled_works+0x96f/0x15d0 [ 804.524611][T10408] process_scheduled_works+0xa5d/0x15d0 [ 804.530210][T10408] ? assign_work+0x430/0x430 [ 804.534834][T10408] ? assign_work+0x3d0/0x430 [ 804.539453][T10408] worker_thread+0xa55/0xfc0 [ 804.544058][T10408] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 804.549960][T10408] ? _raw_spin_unlock+0x40/0x40 [ 804.554832][T10408] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 804.560749][T10408] kthread+0x2fa/0x390 [ 804.564843][T10408] ? pr_cont_work+0x560/0x560 [ 804.569562][T10408] ? kthread_blkcg+0xd0/0xd0 [ 804.574164][T10408] ret_from_fork+0x48/0x80 [ 804.578593][T10408] ? kthread_blkcg+0xd0/0xd0 [ 804.583199][T10408] ret_from_fork_asm+0x11/0x20 [ 804.588072][T10408] [ 804.591222][T10408] Modules linked in: [ 804.595135][T10408] ---[ end trace 0000000000000000 ]--- [ 804.600696][T10408] RIP: 0010:__lock_acquire+0xf9/0x7d40 [ 804.606255][T10408] Code: 89 bc 24 88 00 00 00 0f 85 88 67 00 00 83 3d b9 ec 22 0d 00 0f 84 16 10 00 00 83 3d 00 c9 97 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 23 14 77 00 48 8b [ 804.625985][T10408] RSP: 0018:ffffc9000c2772a0 EFLAGS: 00010002 [ 804.632161][T10408] RAX: 0000000000000026 RBX: ffff8880273a8000 RCX: 1ffff9200184ee78 [ 804.640236][T10408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 804.648307][T10408] RBP: ffffc9000c2774e8 R08: dffffc0000000000 R09: 0000000000000000 [ 804.656291][T10408] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 0000000000000000 [ 804.664285][T10408] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 804.672266][T10408] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 804.681297][T10408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.687912][T10408] CR2: 00007f3e805e8600 CR3: 0000000040331000 CR4: 00000000003506f0 [ 804.695903][T10408] Kernel panic - not syncing: Fatal exception [ 804.702484][T10408] Kernel Offset: disabled [ 804.706834][T10408] Rebooting in 86400 seconds..