last executing test programs: 29m44.332023159s ago: executing program 3 (id=232): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) socket(0x2a, 0x1, 0x2) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) 29m44.141244973s ago: executing program 3 (id=233): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) accept$alg(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000140)={0x19, 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 29m43.204850573s ago: executing program 3 (id=240): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x4}}}}], 0x20}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00010400000001000000", @ANYRES32=0x0, @ANYBLOB="2200ee000a000100aab449293008d373bcaeaaaaaa3900000600050001000000"], 0x30}}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000440), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 29m42.721197774s ago: executing program 3 (id=243): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1812475, &(0x7f0000001100)={[], [{@context={'context', 0x3d, 'root'}}]}) 29m42.524773468s ago: executing program 3 (id=245): r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x80802, 0x0) shutdown(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 29m41.980786331s ago: executing program 3 (id=247): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) 29m41.302300995s ago: executing program 32 (id=247): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) 9m16.421241006s ago: executing program 2 (id=4042): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, 0x0, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000080)) 9m15.860525548s ago: executing program 2 (id=4043): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891016000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 9m15.813690019s ago: executing program 2 (id=4044): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x1501) memfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x800000, &(0x7f00000002c0)) 9m14.179844955s ago: executing program 2 (id=4046): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 9m11.847975687s ago: executing program 2 (id=4050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x28, r1, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfe}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) 9m11.084737014s ago: executing program 2 (id=4053): keyctl$set_reqkey_keyring(0xe, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e21, @local}, 0x210, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)='pim6reg\x00', 0x1, 0x0, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 9m9.981590188s ago: executing program 33 (id=4053): keyctl$set_reqkey_keyring(0xe, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e21, @local}, 0x210, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)='pim6reg\x00', 0x1, 0x0, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 8m49.208364287s ago: executing program 4 (id=4109): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de", 0x37}, {&(0x7f0000000e80)="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", 0x106}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d8", 0xbc}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809ab9af264df85d4598d711f214896cc1b41c69a9868bfe470ae01ca415120bfb", 0x75}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7", 0x9b}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c21dac7fa1210c9447c04280f15323586b95a25dd43caf003485edf322562a00b43181318ae3bfcea72de3037f7df5359077a896792091a036aba4e0c3ef293f697c44727b36f3bf42cb3c71530bbed474ad5a846a8de5b34607b0faf9b2dcec2bc82ae6e", 0x86}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f7000000", 0x25, 0x340080d1, 0x0, 0x0) 8m48.893477274s ago: executing program 4 (id=4111): syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) 8m48.136957911s ago: executing program 4 (id=4113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x303081, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x82762000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 8m45.553313379s ago: executing program 4 (id=4114): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x200084, &(0x7f00000000c0)=ANY=[], 0x44, 0x71b, &(0x7f0000001380)="$eJzs3U1sHGf9B/DvrNdrbyq5bpO0/f+FFKsRETSQ2DElQUIiVAjlUKFIXHo1idMYO2lkuyiJEHGBgjjBCeXAoQiFQ0+oByQQB0Q5c+KKcuISiXvEAaPZnd3sru21nRc7CZ+PNDvPzPM6vzwzuzsbawL8zzr3TkbXUuTc8bevl9t378wu3b0ze6WTTjKWpJbU26sUV5Pi0+Rs2kv+r9xZNVds1c+b9/7wq2O3P55tb9WrpVW+NqxeklsH11uG9LBWLZlKMjL6UJGob9XehbzVWveNaVdNF91xlwE72gkc7Lf1DdZ2U33YeQs8I25t8b45mRxIMl59Dkh1dajt8fAeu11d5QAAAODpNLJdgRfv536uZ2JvhgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPh6L9zMCiWmqd9FSKzvP/G9W+UqOxz+Md7gvb5H94aY8GAgAAAAAAAABPxCfVD/dH7ud+rmeis3+9aP3m/3pr41Dr9YW8n5XMZzkncj1zWc1qljOTjE70NNi4Pre6ujyzseYvU9ZcX1+/VdU8lWRyQ81Te3DQAAAAAAAAAPD8+mHOZWK/BwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL2KZKS9ai2HOunJ1OpJxpM0ynJryZ866addc0jen/dwHAAAALBPOl+NJ4r/tBPrRes7/yut7/3jeT9Xs5qFrGYp87nYuhcwVtVZm126e2f2SrlsbPjr/9rVOBpJaklG8sEWPU+3Shzu1jiXb+bbOZ6pnM9yFvK9zGU185lKszyIzKXIZLN992KyM87Nx3u2b+v84NiODGy/1hpJM5ey0BrbiVxopH3bpHUMZZ+v9fT2+0Yy0OMHZXSKr1V2GKOLPf9ev6juy1TWX9xhG0/GZOvIR7sRmS5jX0XjpeGx3/E8+W431dvTTGrde1CHHvRSbg721In5d3YT8wPVuoz1T/pjPrDxyLa8lTay6d7BmJ9KrZp9ySv9Mb/22dsv91f+/N//cv5yLYuXL60cf7xH8dhMbVdgtJMYjMRsTyReHT77qkgsXV28fGlt55EYHdwxvtOaT1ajikZ7xuzsavmNVmour/dMwfdyMfM5nenM5Eym85Wcymx3hpXL4b641mevdGPyz3TOtdrG69uwO7FHP9dT6KfbFE7qDxWhh1PG5aWeuPZe6SZbedWesz/PdM/se3n47Nv1u0DZ//9X6bKPH3XfcZ4GfZGors2d0R0cHolfr5evK0tXF5cvz13bYX/HqnV52n7Yfzn+zc5HPfju/jiU8+Xl7hxtxaTZmS9l3sHuaPvj1ah+cWnXq23IO9zNm8xEFvKtLc/URvUZbmNL7bxXe/P+8eDK2ag+33Ty+j7l5L0stT6FDNj2Ug3AHjvwxoFG817zb82Pmj9uXm6+Pf7W2JmxzzQy+tf6H0d+V/tt7avFG/koP8jEfo8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeBys3bi7OLS3NL3cTGR/cs3Winu3LLK80kp9t3tfwRGrblrnzws4azGSGDzVFlWjsZoTPfmJtk6xmBvZ0nrD0qJ1+kmTTrBdaicYjH06x6zm2MdF5wNgWZYZkbZMo+o+98+C01p71kV2OcEiZelbGszhX1Dc548YenAWZXJxb+vd6X/Vmek4Z4Dl3cvXKtZMrN25+ceHK3Lvz785fPXXm9JnTs1+e+dLJSwtL89Pt1/0eJfAkrNy4uflzhgEAAAAAAAAAAICnVvW//1cf+u8l6tuUaSyvbN7zkb0+VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAZde6djK6lyMz0iely++6d2aVy6aQflKwnqSUpvp8UnyZn014y2dNcsVU/b95L7djtj2cftFXvlK8Nq7cza9WSqSQj1Xp7Y5s0s7G9Cz3trT3U8IruEZYBO9oJHOy3/wYAAP//dPn0Pg==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 8m40.573173109s ago: executing program 4 (id=4127): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de", 0x37}, {&(0x7f0000000e80)="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", 0x106}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d8", 0xbc}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000014c0)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809ab9af264df85d4598d711f214896cc1b41c69a9868bfe470ae01ca415120bfb", 0x75}, {&(0x7f0000001540)="417e1fcc84ba36d92eced7b76463a43ac6c3c9eb0773f03237cfb1c88c6f5c3ff8deb0767df1a43ed83eee5101fafe74471d69f3cdc3446cf9ded344d8fd6aa575be67f8f82a441939bdba0aa19c5c1438243d72a5b568bbc12cc965c0c639ee7fbb0c980242dc0b2856e9142f0909a2d9f4388e6c9be93c703892c4e14676278a121f86052dbb6694647460a139614be42fb89d5b1da1a07994b7", 0x9b}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c21dac7fa1210c9447c04280f15323586b95a25dd43caf003485edf322562a00b43181318ae3bfcea72de3037f7df5359077a896792091a036aba4e0c3ef293f697c44727b36f3bf42cb3c71530bbed474ad5a846a8de5b34607b0faf9b2dcec2bc82ae6e", 0x86}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f700000000", 0x26, 0x340080d1, 0x0, 0x0) 8m38.69324254s ago: executing program 4 (id=4130): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 8m38.116761983s ago: executing program 34 (id=4130): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 16.089172174s ago: executing program 6 (id=4850): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) close(0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) 13.986724261s ago: executing program 6 (id=4856): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5f24, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$fuse(0x0, 0x0, 0x309ca00, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 12.101956133s ago: executing program 1 (id=4862): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x2, 0x9}, 0x50) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = io_uring_setup(0x1de1, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x3ffffd, 0xb}) r4 = epoll_create1(0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0x20000005}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 11.393685379s ago: executing program 5 (id=4864): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) close(0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) 11.30057442s ago: executing program 0 (id=4865): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 11.025668046s ago: executing program 0 (id=4866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCSMASK(r6, 0x40104593, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) 9.586445688s ago: executing program 0 (id=4867): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001480)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) 9.52514229s ago: executing program 5 (id=4868): syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x202, &(0x7f0000000740)="$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") 8.118634281s ago: executing program 5 (id=4869): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0) 8.105010871s ago: executing program 1 (id=4870): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000025c0), 0x20001, 0x0) write$cgroup_subtree(r0, &(0x7f0000002600)=ANY=[], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001440)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) pipe2(0x0, 0x0) fanotify_init(0x10, 0x800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000022c0), 0xb, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000002300)={{0x4, 0x5, 0x5, 0x4, 'syz1\x00', 0x8}, 0x1, [0x9, 0xa4f, 0x8, 0xfffffffffffffffb, 0x8001, 0x2, 0x1, 0x1, 0xe, 0x80000000, 0x6, 0x8, 0x1, 0x6, 0x4, 0x4, 0xffffffff, 0x6, 0x7, 0x6, 0x18d7, 0x4, 0x0, 0x2, 0x5, 0x7, 0xff67000000, 0x10000000000, 0x7fff, 0x32e, 0x7, 0x8d3, 0x10, 0x7, 0x0, 0x100000001, 0x0, 0x194, 0x47, 0x401, 0x40008000, 0xffffffffffffe643, 0x1ff, 0x8, 0x5, 0x3, 0x4f, 0x8, 0x5, 0x6, 0x6, 0x1000, 0x200, 0x98, 0x18c, 0x1, 0x80, 0x1, 0xffe2, 0x9, 0x8, 0x7, 0x2000000000000000, 0x9, 0x1, 0xfffffffffffffffd, 0x6, 0x1, 0xfffffffffffffff8, 0x40, 0x5, 0xcb, 0x5, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x2, 0xc, 0x101, 0x1, 0x7080000000000000, 0x92, 0x5, 0x480000000000000, 0x2, 0xa981, 0xc34, 0x8, 0xb4f, 0x4, 0xffffffffffffffcb, 0x1, 0x9, 0x2, 0x29, 0xfffffffffffff71e, 0x40, 0x9, 0x9, 0x83, 0x3, 0xffffffff, 0x9, 0xfff, 0x9, 0x80000000, 0x1, 0x81, 0xc, 0x8, 0x4, 0x80000001, 0x8000000000000001, 0x3, 0x6, 0x902, 0x6, 0x0, 0x9, 0x9, 0x2, 0x9, 0x2, 0x5, 0x2, 0xe, 0x6, 0xb]}) 7.223265521s ago: executing program 1 (id=4871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0xfffffdb0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.32863871s ago: executing program 1 (id=4872): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 6.285576621s ago: executing program 6 (id=4873): rmdir(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0002800800014084bf95770c62fe23c7972363141f"], 0x44}}, 0x4000050) 5.565107138s ago: executing program 5 (id=4874): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 5.526042778s ago: executing program 0 (id=4875): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCSMASK(r7, 0x40104593, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) 5.505207979s ago: executing program 6 (id=4876): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x82002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) close(0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) 4.138781209s ago: executing program 0 (id=4877): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, 0x0) 3.953166153s ago: executing program 6 (id=4878): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x2, 0x9}, 0x50) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x4080) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = io_uring_setup(0x1de1, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x3ffffd, 0xb}) r4 = epoll_create1(0x0) epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0x20000005}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 3.893276184s ago: executing program 5 (id=4879): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000025c0), 0x20001, 0x0) write$cgroup_subtree(r0, &(0x7f0000002600)=ANY=[], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001440)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) pipe2(0x0, 0x0) fanotify_init(0x10, 0x800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000022c0), 0xb, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000002300)={{0x4, 0x5, 0x5, 0x4, 'syz1\x00', 0x8}, 0x1, [0x9, 0xa4f, 0x8, 0xfffffffffffffffb, 0x8001, 0x2, 0x1, 0x1, 0xe, 0x80000000, 0x6, 0x8, 0x1, 0x6, 0x4, 0x4, 0xffffffff, 0x6, 0x7, 0x6, 0x18d7, 0x4, 0x0, 0x2, 0x5, 0x7, 0xff67000000, 0x10000000000, 0x7fff, 0x32e, 0x7, 0x8d3, 0x10, 0x7, 0x0, 0x100000001, 0x0, 0x194, 0x47, 0x401, 0x40008000, 0xffffffffffffe643, 0x1ff, 0x8, 0x5, 0x3, 0x4f, 0x8, 0x5, 0x6, 0x6, 0x1000, 0x200, 0x98, 0x18c, 0x1, 0x80, 0x1, 0xffe2, 0x9, 0x8, 0x7, 0x2000000000000000, 0x9, 0x1, 0xfffffffffffffffd, 0x6, 0x1, 0xfffffffffffffff8, 0x40, 0x5, 0xcb, 0x5, 0x6, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x2, 0xc, 0x101, 0x1, 0x7080000000000000, 0x92, 0x5, 0x480000000000000, 0x2, 0xa981, 0xc34, 0x8, 0xb4f, 0x4, 0xffffffffffffffcb, 0x1, 0x9, 0x2, 0x29, 0xfffffffffffff71e, 0x40, 0x9, 0x9, 0x83, 0x3, 0xffffffff, 0x9, 0xfff, 0x9, 0x80000000, 0x1, 0x81, 0xc, 0x8, 0x4, 0x80000001, 0x8000000000000001, 0x3, 0x6, 0x902, 0x6, 0x0, 0x9, 0x9, 0x2, 0x9, 0x2, 0x5, 0x2, 0xe, 0x6, 0xb]}) 2.464917186s ago: executing program 1 (id=4880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0xfffffdb0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.657036324s ago: executing program 5 (id=4881): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="afa95f9cab972040eb9fc46ce566bc4486ba9a6989c0bcbc795394ff2d899681dbd0ed518553fdd737cf7cab81a48db6f37ceb751a4215755dfa881b23653a6adee02280713c97c4c2337acc38d8dba2777d97f0f3a7d4e2af5e3e3d1ba6b3b729b1082f1d55cd2d183b7846d0af750ead5f2877c4fd370bb62ef882b9e0dd6aed80295d4b2ba6a08289bfcfb55e320cb2caf5a6f91228a873087a9e00e2f5ad602a07c18de258a04d36d2e3b0f0b870e59183d63fb115b871bc6a89207f588d949b52ffac44128ba019113a77f2fac987603480363031eb8005cd60c15837354e5ef4ae098636321e48b419f8ba3edb2318af88fbf18ab51a523a303863468c45714743cdb0d6decaedff7a9b47ff1231408632fdffbfcf403cb27bb7385ebe81058d44940da7da7affe020e411516c829ee69885c3a10367f0f7b3ccbd05e1ff9ca570ba15a166be4afa64df7d8bddd19cbf2f0f2117b13569fe5ac12c82caaa3102209f48eb2040bc5e200eca176bf219e7a745b5d25ca0c899bc8b5695b15d6cc83c8966f77d35c90c819d465ead79bb584690d68ea083e6d7a1b6d2c393c21a1d601f98b6d45f59160e610d9cb3f84d152061ab136f8ca7ce57587a69f1576b0539ca9694da65de323861c262395d7106c08f5c1fda6b3df676f09d7311791e1bd5927229faf9b047db8afab569a9ca319888e4b4690054c0e0caf886f7773ed7453bb8a13e857524ef57d54b405751f26090ab906625b43efbde3f9e46a9d11c93cf0121f410bb0f09083c7f7118d7c7f057b57f800a8d36b4f214d694bcde0330b27adea2bc02095f9eb1941c0f3b5cd0fe682f3ee784cf04cc45a23a8631386ac72f620351fad5e4c17e700985459a8ce15c056474d4bc8caaa54cf23be06a6dfb428c0a2c1d731a60180c882e48e2e27f9edb5478bee530e6d8b13d8d9c3cca83279a50d3fdb30f7a91743a11590a1008f47b65339e9732b415c5c664007c33762fd82cab04ee9f07ce89175080e3ca3701a14b085d60eb193e2c4fba87cf51eb36fda2642b0dabd523aa26dc6ec415e8bb1a9d03734f47be7fa81593b18cbf7be085019fd33771d082696b89fa1417f7507013fbeffe456eb062dfdbaa519ea5a236308037eeb5eed80926a6dd5152c400eca2fade1cd0614072cdcf0c85d1778ee79dc8bfa62e6f30f0faac6c67ff223d2ff8f4f73441c2e53eda8d577e2a81d447fa2ce7ff6a4ccc57d37b0d63356a86ffa23f03758d1d1f3cf20e12892f9988377f6354f4a09efc11cf902179ef309d46f4fa24d040d765fa0c25d4b99cf820059a9f7222c4ad71b582d94dcb4bec9bd8d0bad258753cfc5c1f6b147aaa59f314bb2291bfa5fdcc80b8e04ca8c2e8488c79f444c179f59d7fe68419bc6c312e7fd71415dffd3178eca60b13ce5f2879d780883ccdc37e98b66c40f9cee4ae9e8f79f61982b1545b33a063a9d2ed6a8e5011a96d2b90eb3a74c1d78f34dfad8c2ad6f12d276007d1e9c051e16ae1fbc57da26e76addf5261ea8244c2b3e3c5edfbe55341b9a6ca17a91c9701a40db62bf7e8f1889f7127f528683883b2a2b8c47bb46e19e78c170d25962b7fb80ed5113a6cae6ae2ddaaea1301a497a133368c7b105e4e0c7eca9c9055cad603e1e41808420d9a09e7b57490cead94522b6a0f3f03f604836ff16c82094782a4b705285fec1e6e77ef0a4fab3cb411b8927b4e9e29cb8fb619f3ad05e26506a05b075e578890de1e6a4b49bebc984ab9a3057553b896675f21920125ae2f66fc3b0b0d83f895f945c5d5e2b57a4247de5186c3caaa7e3c4c4755f3d2c7c64a0ad6d82904c3188e4c37c71a2297a1e0dc481d43bafc16970d335f7552c541bb596be14ed733345118419e3420a44720335517f867e2cd7c228202fc87c6f109d89b9fdf8afe59a3887826722d3cce23c11fee3b2d97bc29f970f49161b1634d9ba9f328d776a36c5e553c79ec00417d1e5db10c42bba39d1fd0b5b311b9dff6ea6533232f75ee7a1e6ebe3c695f614fa77a6fccb6d001b3c97817a66e3c3a15947468990834fb2a45455430461060c6ac258b4d228bd31ed9c3bc6122264a174722197bf1dd2d401cd33930a014f4ee353ae33edebbdd857fbc665c184fdd123aea414b694ddd66a837878c0d4b82e803f45c11a7226bb8bef2378b658ec80e93caec5f94847cd7b18844b2123edc40f563c9ede52654d733490347d202e449a2c491a9bcae41d71102d0df5bd6defd278b9a6025eb48134f4ab98bdb2cb715805bcfee79f01e9a3fa01bb969c7c0bfed86392e598118dc54ddd4591390e6a0112cae3f4dd705e8bae5aa68523940982c48351effc8a4cbcd662626393ee2ab5e1a232faeb132517d7132a035557c92daaf532f0983b6a821e98667590161065d5da666b5a759a025f06e3f0ea7c0edb84c38e44d764de2b65c537ac7719018d58137c6b9d0f5b6fb83aecf63c7beeb4b7eaf948b4f2c3abfe670c9856aebf7cf1a52ec80eb4243fbb970eb94d19bd6e4f1a86f55e76c3431f62bc6e42f3da4f9804e5f5160d699a30a9655cd279f091cbbfdc691e3a8c842e3c719a080a00e188b895f1333f1a5364a9478457c9bfcc12176750473427e93c2036a4d9eeda739e4625216a0f9a304f68d8a3dda3933981d59bbe58ed9252d6e061e749567071e9999f82c6ae29494ed813012ca96c5af3df1711064131bf7f6f1b470c2e92f6f683b646f121b195afc2d93f49a040d970c52331abd0c6c9b47ca815e150176128a117c2d55d47f6eb967265e542d798fde2d63263e21475cb3a4272522254c99d3fd72d153101981d0f172f55b96ab750f5bf1e3ac37f3d63f7a08eeae76868e79825d6d1487b136c08942bea9507ea1de097aca4ba97d23d929e7ba92723fe708bd819e1e5f83daa03366db78a4a63e01b4498a97a62acae91af71b794d2b563f46d1e56aa7652a650a1231e8a3b9890968b6a030072ad5d65f89667ab67f3b9fdd53fa8330a8dbac11e17d87882ef2a2323fb9bed881301241107340ce96444040c574a38010b093fdce2c075f5466b21d16d0ddf32646a72c5d70082d60b39563464943ae1663c9f8d5fe12867ad92c177c3b8014ebf8b6d30c911c259e6ebdf89b476907c6f777748297df71d0648c7a2f166cf6ef39d88127e64cda67a8e860463f7a1cf5a06f438ac8374ed38be7aa025a8b38bb82d409310a21a4ccc974d8ffbcb0125e19107d5cb34dc999b53c2ab4afea86b9516c1506d49859a4aeab61c023ec342fe57ddb8aed17f018a69cb01622c30fcec3e947f35394c5dc8b8b78022c41f4f9a4915baa0ff0fb84f2100f3c88e0ed56348d2cc8fd7c66534e155995f15f1777f45b404a813695096cbb8b323a66b8619e0672f610bb2c82af4102849f8f587b8bc6670f371349eb514207d1a81c6cc3f378ad9d4fcd1578dff0123149c1822a71db1f71da0c05ef82290a68ba8bc241d967344573ebbac05f3b7e2d1d352419e2854110e6cb4fbdbcc879de29208e3535fe95e817fee6906afe84a69af8018adcbb0894f17d118aa59a5970aa539513eb9124b44db166be3cc64b191576a493b8af67fdcb0e2f3bd81ca8f2bcc91caea6e491dc72b5c3db24c7b85709836af573b892745a0212e882db0e88ff443391e28aa401ac13648aeca40f816a33dd919eb45b3c4fe93f3bece67c5bae6434cb391f994a5986778afe746e7d510f912316becfea724efb0831578f24e09adc3a501d42fbddf3767c12293c2a519aea9301d16d4e6fb4616a84638b8c1c45ba2365a6bd8389843ea02a9814ec3b4f829628fd8ade85f3869e8248a7b26250ec5800d06486ec908c408f5f7d05ecea339eeeea48b1cdfc19ac63927b37ecf5b7542c2395b551b56194fefc8ded81aa303fc932cdc1ef77534d43881454848e1f47310918799c1fdec51f09e1a3b45969f9dde46722c6d42c3fea5343879a2a629c4a8bbcf91af1ad9ef8d1b7ef5cc49014251a6629bbe38628689ef6cfc40072a4cdf4e079c03569bad1e2214d021b39d40026156d38fbe6ef7196a7690da2ee5f65a8e6665ef4b509b0c5e6390bc1c24edbb67c4d9722202cc628291d68d7c8e38f2bc4a383cbf2a9b39317b21014c9c2b82ca72f13ce0b1c19c2405fed6169ad7d49c5c0e23491edf6fc65b7cd103f5fb4c150cd73850930b03ad49ccd28a5b62354c6885bec47d4b4dcdd981179c7e0b4411ae5bc819af9fb1a92b76ca54bd2a560e1596cf97fc8ee65171bc74571421b9333cdc89ba0b3d705cd350aee6d24b876d01d8f04f0323d55ba5e1606b89023507bf286a10f61ee2a719b2e769a42601129db0e80948b7b698161bcbe4344228c9ca2c469af696671afe00febfac512ba027e28a273f026ec4591c8c58a4f5fd588d2f7d2bf0e552a53cca0982f256625da621e9fb923b6bcb0bce0b136a60fcda6b1748d2f8e2559b7a203276f69336d93ef025afe44f37f8033a0d3cc3b9c22a01ea595b47485c11c17f744a6ac4c5d2e53427758f7c02844aa92cbf20862d98515aa22707ed37358141b02db787e4e0ba954eb0f07a51eb825ab5f4cbb75f33f39d657f5792c4300be32eeb418fdf63cf8d832fdac233844e45257384da412af500ece64042c79f233618168d7e9d816bc51073bcb4cecf209848c8495224355561115a3727be4071caf025fb96187d6678313e29fc06b305e856214882da8c3f7d7282df71ef6a16e5774136f68b841ee5726fead65f35f318a402ac3f8df7cf2f67befb7793b41c920e70dbb58784f25f1d597df1736ce07250a910c09cd48a1374adfa477fa434be6424e8132cbc7c0a2222b2860dc481467933b95839a964fd2888266e2ea4e443313779a307d9c61540f508557a7ca0c323118a6d262ca664f2966c98e6792514d802a58b0483fe409602c2043b9ac63d5de51b72ffb9ba2cc7417d530ce3b20fd7442dce73997c205c900a80c44f611d3fcb06c45a5264fc6e44f166f64983245bb05b6966ad29285a0bb5a019231bf43a0e01c9839a68a415a38ec062188bf322a43a8eae9cbb04358ea584f597c189577e313fa7b6c93e81e0cdeb953239d03d035bae90f0130f057f11c5c351168b3c8b62e039b850a8af8dad6b33328691ff765e23ac9fd0bf7e7ae2c0c339a57cfd878300cd36bd5c70137850989d1fd7dc04df11e33a85622cbd65b0df85b00092a87710dcf6d8b2a528b929a0fbd58ff62594e508619bef14679a953287c170abd62d770b94f9433141da5b0aa73b0b761567eccacc4e806084d1d863f2472038427392656f9b47139ee5279fb5caf8b44478424c2ea9dfdcab90b55b002dcf4cab0dfff87583c58b93e866a295bed5579a8fdc973f969c61edc103fb40f2afd38c4678f1b7f7db5f51e8fcd59a64dc21f185f6aa3e3fb755162dd0abe47341e7fe6b89b2922a20738d1179b5017ae064a90e10a367345c6e6ca2f16fe3776f43c1ed9cc995f10fe555b1d964f6872ea1ba0a0071a58d711c6c326c2a53cadf6a48d87268f1f0e219b592910134f495a2f91d9b7e33befe8a9a0f7f13ae7575f92497b9ae12a807e4fc3f551ae66b2741c99ef294fbdc5b229fff185fa4047992925512dcc790f39e0fdf2e494f19cfe1879bb4fbfde4169cbf335dc7fb299bb496e604b144dfb33e6adc417ca8a0ab451055904ed169cd69d624e2ec20fc443c7dacb1ebb12bd2680309cf6a3f535ef6b64e05c9ce9ac4ca83f952d79488e1e6d207a5f93da48932d", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5f24, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) syz_mount_image$fuse(0x0, 0x0, 0x309ca00, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 996.482139ms ago: executing program 0 (id=4882): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0xc2) pwrite64(r1, &(0x7f0000000080)="cc", 0x1, 0x200980) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x13, 0x72d, &(0x7f0000001080)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1) setxattr$incfs_metadata(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) syz_open_dev$loop(0x0, 0x7, 0x4100) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xffffffffffffff9b) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 898.901461ms ago: executing program 6 (id=4883): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "0989e19c"}, @local=@item_4={0x3, 0x2, 0xa, "1c51aa7b"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 0s ago: executing program 1 (id=4884): rmdir(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c0002800800014084bf95770c62fe23c7972363141f"], 0x44}}, 0x4000050) kernel console output (not intermixed with test programs): e. [ 1387.830884][T19932] overlayfs: overlapping lowerdir path [ 1388.298758][T19944] loop0: detected capacity change from 0 to 8 [ 1388.313759][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1388.740991][ T10] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.002356][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1389.161976][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.205364][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1391.190975][T19966] loop4: detected capacity change from 0 to 2048 [ 1391.199839][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 1391.224072][ T10] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 1392.473854][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1392.486528][T19968] loop1: detected capacity change from 0 to 8 [ 1392.503304][T19966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1392.517158][ T10] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 1392.528378][ T10] usb 2-1: USB disconnect, device number 13 [ 1393.519314][T15697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.181977][T15697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.541369][T15697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.746923][T15697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.805208][T13667] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1395.892855][T20001] loop1: detected capacity change from 0 to 2048 [ 1395.939381][T13667] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1396.026190][T13667] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1396.044579][T13667] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1396.071265][T20001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1396.121699][T13667] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1396.139895][T13667] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1396.935841][T20004] Set syz1 is full, maxelem 6117 reached [ 1399.190883][T13667] Bluetooth: hci1: command tx timeout [ 1399.347724][ T3061] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1399.449480][ T5808] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1399.516867][T19996] chnl_net:caif_netlink_parms(): no params data found [ 1399.547859][ T3061] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1399.575233][ T3061] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1399.608211][ T3061] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1399.631901][ T3061] usb 2-1: string descriptor 0 read error: -22 [ 1399.654510][ T3061] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1399.659823][ T5808] usb 5-1: Using ep0 maxpacket: 8 [ 1399.680149][ T3061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.688595][ T5808] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1399.699780][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.726125][ T5808] usb 5-1: Product: syz [ 1399.744725][ T5808] usb 5-1: Manufacturer: syz [ 1399.749390][ T5808] usb 5-1: SerialNumber: syz [ 1399.982250][ T5808] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1399.992238][ T5808] usb 5-1: clock source 0 is not valid, cannot use [ 1400.006246][ T5808] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 1400.034594][ T5808] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1400.055496][ T5808] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1400.064174][ T5808] usb 5-1: clock source 0 is not valid, cannot use [ 1400.114172][ T5808] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 1400.134662][ T5808] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1400.162235][ T3061] logitech 0003:046D:C626.0003: unknown main item tag 0x2 [ 1400.182586][ T3061] logitech 0003:046D:C626.0003: unexpected long global item [ 1400.191304][ T3061] logitech 0003:046D:C626.0003: parse failed [ 1400.207388][ T3061] logitech: probe of 0003:046D:C626.0003 failed with error -22 [ 1400.237889][T19996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.261428][T19996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.274685][T19996] bridge_slave_0: entered allmulticast mode [ 1400.276686][ T5808] usb 5-1: USB disconnect, device number 14 [ 1400.296052][T19996] bridge_slave_0: entered promiscuous mode [ 1400.385066][ T10] usb 2-1: USB disconnect, device number 14 [ 1400.462342][T19996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.557757][T19996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.587458][T19996] bridge_slave_1: entered allmulticast mode [ 1400.601722][T19996] bridge_slave_1: entered promiscuous mode [ 1400.843632][T19996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.991728][T20053] loop0: detected capacity change from 0 to 2048 [ 1401.199130][T20053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1401.254910][T13667] Bluetooth: hci1: command tx timeout [ 1401.539327][T19996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.664869][T15697] hsr_slave_0: left promiscuous mode [ 1401.753289][T15697] hsr_slave_1: left promiscuous mode [ 1401.786489][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.793963][T15697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.894857][T15697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.079687][T15697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.099438][T15697] bridge_slave_1: left allmulticast mode [ 1402.124042][T15697] bridge_slave_1: left promiscuous mode [ 1402.147162][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.814266][T15697] bridge_slave_0: left allmulticast mode [ 1402.884860][T15697] bridge_slave_0: left promiscuous mode [ 1402.912389][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.118590][T15697] veth1_macvtap: left promiscuous mode [ 1403.124222][T15697] veth0_macvtap: left promiscuous mode [ 1403.163777][T15697] veth1_vlan: left promiscuous mode [ 1403.182079][T15697] veth0_vlan: left promiscuous mode [ 1403.325092][T13667] Bluetooth: hci1: command tx timeout [ 1403.558116][T20079] binder: 20076:20079 ioctl c0306201 200000000000 returned -14 [ 1404.354306][T20081] loop4: detected capacity change from 0 to 32768 [ 1404.627023][T20089] loop1: detected capacity change from 0 to 8 [ 1405.054199][T20089] SQUASHFS error: Failed to read block 0x71: -5 [ 1405.108427][ T28] audit: type=1800 audit(2000001952.122:309): pid=20089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4079" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 1405.417335][T13667] Bluetooth: hci1: command tx timeout [ 1406.238191][T20105] loop1: detected capacity change from 0 to 4096 [ 1406.295411][T20108] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1406.456153][T20109] loop4: detected capacity change from 0 to 4096 [ 1406.478590][T20109] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1406.486697][T20109] NILFS (loop4): trying rollback from an earlier position [ 1406.532345][T20109] NILFS (loop4): recovery complete [ 1406.584432][T20110] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1406.639201][T15697] team0 (unregistering): Port device team_slave_1 removed [ 1406.935996][T15697] team0 (unregistering): Port device team_slave_0 removed [ 1407.060667][T20117] loop1: detected capacity change from 0 to 512 [ 1407.086426][T20117] EXT4-fs: Ignoring removed oldalloc option [ 1407.100518][T20117] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1407.188304][T20115] loop4: detected capacity change from 0 to 2048 [ 1407.252959][T20117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1407.298645][T15697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1407.335892][T20115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1407.466434][T15697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1407.552830][T20115] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.4087: Unrecognised inode hash code 20 [ 1407.612509][T20115] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4087: Corrupt directory, running e2fsck is recommended [ 1407.634407][T20115] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.4087: Unrecognised inode hash code 20 [ 1407.653731][T20115] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.4087: Corrupt directory, running e2fsck is recommended [ 1407.745891][T15151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1407.797928][T20117] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1407.896652][T13666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.258663][T20137] loop4: detected capacity change from 0 to 4096 [ 1408.357898][T20143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1409.253444][T20153] loop1: detected capacity change from 0 to 4096 [ 1409.314027][T20153] NILFS (loop1): invalid segment: Checksum error in segment payload [ 1409.323182][T20153] NILFS (loop1): trying rollback from an earlier position [ 1409.534997][T20153] NILFS (loop1): recovery complete [ 1409.770131][T20156] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1412.082607][T15697] bond0 (unregistering): Released all slaves [ 1412.306276][T13812] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1412.352937][T19996] team0: Port device team_slave_0 added [ 1412.397976][T19996] team0: Port device team_slave_1 added [ 1412.510910][T19996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.525442][T19996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.580663][T19996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.596393][T13812] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 1412.604716][T13812] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 1412.613818][T19996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.644527][T13812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1412.656060][T19996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.692874][T13812] usb 5-1: config 0 has no interface number 0 [ 1412.699384][T13812] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1412.710764][T13812] usb 5-1: config 0 interface 104 has no altsetting 1 [ 1412.717866][T19996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.733761][T13812] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1412.776253][T13812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.784318][T13812] usb 5-1: Product: syz [ 1412.860833][T13812] usb 5-1: Manufacturer: syz [ 1412.865506][T13812] usb 5-1: SerialNumber: syz [ 1412.889698][T20184] loop0: detected capacity change from 0 to 256 [ 1412.897280][T13812] usb 5-1: config 0 descriptor?? [ 1413.045761][T13812] asix: probe of 5-1:0.104 failed with error -22 [ 1413.071815][T19996] hsr_slave_0: entered promiscuous mode [ 1413.085046][T19996] hsr_slave_1: entered promiscuous mode [ 1413.137252][T20184] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 1413.898126][T20184] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1414.195929][ T3061] usb 5-1: USB disconnect, device number 15 [ 1414.959372][T17861] Bluetooth: hci0: unexpected event for opcode 0x100c [ 1414.966992][T17861] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 1415.299790][T19996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1415.351073][T19996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1415.549426][T19996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1415.592379][T19996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1417.304516][T19996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.388278][T19996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.574887][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.582157][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.621081][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.628328][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.136285][ T28] audit: type=1326 audit(2000001966.150:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.286678][ T28] audit: type=1326 audit(2000001966.180:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.396809][ T28] audit: type=1326 audit(2000001966.180:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.461449][ T28] audit: type=1326 audit(2000001966.180:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.530229][T19996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.537992][ T28] audit: type=1326 audit(2000001966.200:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.563569][ T28] audit: type=1326 audit(2000001966.200:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.589249][ T28] audit: type=1326 audit(2000001966.200:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.621987][ T28] audit: type=1326 audit(2000001966.200:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.688945][ T28] audit: type=1326 audit(2000001966.200:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.791406][ T28] audit: type=1326 audit(2000001966.200:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20240 comm="syz.1.4116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1419.858635][T20260] loop0: detected capacity change from 0 to 1024 [ 1420.217373][T20268] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1421.954295][T19996] veth0_vlan: entered promiscuous mode [ 1422.054512][T19996] veth1_vlan: entered promiscuous mode [ 1423.343256][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.349922][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.450516][T19996] veth0_macvtap: entered promiscuous mode [ 1423.461811][T19996] veth1_macvtap: entered promiscuous mode [ 1423.481822][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.497535][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.541243][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.557762][T20284] loop4: detected capacity change from 0 to 1024 [ 1423.568237][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.588846][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.616828][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.641290][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.687468][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.728607][T19996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.765343][T15151] hfsplus: bad catalog entry type [ 1423.779588][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.830110][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.850447][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.870428][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.882193][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.896991][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.924737][T19996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1423.939876][T19996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.958589][T19996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.973513][ T1141] hfsplus: b-tree write err: -5, ino 25 [ 1423.982051][ T1141] hfsplus: b-tree write err: -5, ino 4 [ 1423.991779][T19996] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.007419][ T1141] hfsplus: b-tree write err: -5, ino 2 [ 1424.013023][ T1141] hfsplus: b-tree write err: -5, ino 26 [ 1424.021189][T19996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.043750][T19996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.102675][T19996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.605929][T13829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.667841][T13829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.002423][ T1141] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.104622][ T7774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.127697][ T7774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.210286][ T1141] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.386880][ T1141] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.224267][ T1141] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.615094][T20330] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4129'. [ 1429.264457][T20337] loop1: detected capacity change from 0 to 16 [ 1429.298604][T13667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1429.311117][T13667] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1429.325555][T13667] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1429.348804][T13667] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1429.372184][T13667] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1429.381102][T13667] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1429.413129][T15994] udevd[15994]: incorrect erofs checksum on /dev/loop1 [ 1430.478302][T20356] loop5: detected capacity change from 0 to 1024 [ 1430.540056][T20356] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1430.540056][T20356] [ 1430.635340][T20360] loop1: detected capacity change from 0 to 1024 [ 1430.714407][T20360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.012527][T13666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.055770][T20371] xt_NFQUEUE: number of total queues is 0 [ 1431.243097][T20338] chnl_net:caif_netlink_parms(): no params data found [ 1431.499642][T13667] Bluetooth: hci2: command tx timeout [ 1431.506124][T20380] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1433.454115][T20338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.476247][T20338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.500666][T20338] bridge_slave_0: entered allmulticast mode [ 1433.527302][T20338] bridge_slave_0: entered promiscuous mode [ 1433.568572][T13667] Bluetooth: hci2: command tx timeout [ 1433.643345][T20338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.678664][T20338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.718429][T20338] bridge_slave_1: entered allmulticast mode [ 1433.729848][T20338] bridge_slave_1: entered promiscuous mode [ 1434.700836][T20338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.845639][T20407] loop1: detected capacity change from 0 to 1024 [ 1434.854103][T20338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.918565][T20407] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 1434.918565][T20407] [ 1435.536506][ T1141] hsr_slave_0: left promiscuous mode [ 1435.608613][ T1141] hsr_slave_1: left promiscuous mode [ 1435.633354][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1435.648930][T13667] Bluetooth: hci2: command tx timeout [ 1435.655469][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.706790][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.758535][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.779507][ T1141] bridge_slave_1: left allmulticast mode [ 1435.785205][ T1141] bridge_slave_1: left promiscuous mode [ 1435.801532][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.826517][ T1141] bridge_slave_0: left allmulticast mode [ 1435.835380][ T1141] bridge_slave_0: left promiscuous mode [ 1435.855765][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.945569][T20428] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4155'. [ 1436.729368][ T1141] veth1_macvtap: left promiscuous mode [ 1436.734974][ T1141] veth0_macvtap: left promiscuous mode [ 1436.766260][ T1141] veth1_vlan: left promiscuous mode [ 1436.776358][ T1141] veth0_vlan: left promiscuous mode [ 1437.729242][T13667] Bluetooth: hci2: command tx timeout [ 1438.351066][T20445] loop0: detected capacity change from 0 to 1024 [ 1438.391030][T20445] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1438.391030][T20445] [ 1443.073783][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 1443.164733][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 1443.255667][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.330880][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.825407][T20479] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input31 [ 1445.864801][ T1141] bond0 (unregistering): Released all slaves [ 1446.204292][T20338] team0: Port device team_slave_0 added [ 1446.233712][T20338] team0: Port device team_slave_1 added [ 1447.794548][T20338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.846047][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.921951][T20338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.115860][T20338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.589980][T20338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.720579][T20338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.954034][T20338] hsr_slave_0: entered promiscuous mode [ 1449.064602][T20338] hsr_slave_1: entered promiscuous mode [ 1449.110212][T20338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.143003][T20338] Cannot create hsr debugfs directory [ 1449.628374][T20517] binder: 20513:20517 ioctl c0306201 200000000000 returned -14 [ 1449.779462][T20338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1449.833421][T20338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1449.879674][T20338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1449.898926][T20338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1450.121880][T15344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1450.183294][T20338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.237278][T20338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.287502][T20528] loop1: detected capacity change from 0 to 512 [ 1450.307085][T15697] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.314295][T15697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.330117][T15344] usb 6-1: Using ep0 maxpacket: 16 [ 1450.372112][T15697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.379282][T15697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.381560][T15344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.461630][T20528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.495331][T15344] usb 6-1: config 0 has no interfaces? [ 1450.540254][T15344] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1450.603221][T20338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1450.617169][T15344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.632859][T20528] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.650640][T20338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1450.677429][T15344] usb 6-1: config 0 descriptor?? [ 1451.089083][T20538] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.4180: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1451.791738][T20523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.806046][T20523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.822624][T13666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.854143][T13667] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1451.863085][T15344] usb 6-1: USB disconnect, device number 2 [ 1452.351436][T20551] loop0: detected capacity change from 0 to 32768 [ 1452.473557][T20551] JBD2: Ignoring recovery information on journal [ 1452.479764][T20338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1452.538404][T20551] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1453.279185][T20570] fuse: Bad value for 'fd' [ 1453.530957][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1453.865860][T20554] loop1: detected capacity change from 0 to 32768 [ 1453.991781][T20338] veth0_vlan: entered promiscuous mode [ 1454.019171][T20338] veth1_vlan: entered promiscuous mode [ 1455.686343][T20338] veth0_macvtap: entered promiscuous mode [ 1455.754189][T20338] veth1_macvtap: entered promiscuous mode [ 1455.829203][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.478724][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.529220][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.572854][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.599732][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.652806][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.684175][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1456.724169][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.827815][T20338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.868145][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.950896][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.971445][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1456.982308][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1456.999753][T20602] loop5: detected capacity change from 0 to 512 [ 1457.014396][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.050775][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.083979][T20338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1457.107454][T20338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1457.135684][T20602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1457.156860][T20338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.204318][T20602] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1457.227893][T20338] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.260845][T20338] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.270105][T20338] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.278925][T20338] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.866364][T20614] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4192: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1458.389883][ T7774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.431103][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1458.471864][ T7774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.573634][ T6321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1458.583479][ T6321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1458.695004][ T10] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1458.731113][ T10] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1458.756391][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1458.783886][ T10] usb 1-1: config 0 has no interface number 0 [ 1458.790066][ T10] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1458.941013][ T10] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1460.011177][ T10] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1460.048377][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.101384][ T10] usb 1-1: Product: syz [ 1460.105606][ T10] usb 1-1: Manufacturer: syz [ 1460.110235][ T10] usb 1-1: SerialNumber: syz [ 1460.170342][ T10] usb 1-1: config 0 descriptor?? [ 1460.196135][ T10] asix: probe of 1-1:0.104 failed with error -22 [ 1460.416992][ T10] usb 1-1: USB disconnect, device number 7 [ 1461.409687][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.452149][T20666] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1464.213347][T20672] loop0: detected capacity change from 0 to 4096 [ 1464.307539][T20675] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1465.532867][T20695] loop6: detected capacity change from 0 to 4096 [ 1465.984960][T20695] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1465.993288][T20695] NILFS (loop6): trying rollback from an earlier position [ 1467.178223][T20695] NILFS (loop6): recovery complete [ 1468.808038][T20695] NILFS (loop6): error -4 creating segctord thread [ 1470.584444][T20736] overlayfs: overlapping lowerdir path [ 1470.625271][T20736] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1470.847203][T20736] overlayfs: overlapping lowerdir path [ 1472.998274][T20750] loop0: detected capacity change from 0 to 4096 [ 1473.028778][T20750] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1473.037208][T20750] NILFS (loop0): trying rollback from an earlier position [ 1473.562970][T20750] NILFS (loop0): recovery complete [ 1474.088973][T20753] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1476.182916][T20233] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1476.394846][T20233] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1476.417790][T20233] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1476.440419][T20233] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1476.449673][T20233] usb 2-1: config 0 has no interface number 0 [ 1476.457646][T20233] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1476.473579][T20233] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1476.489573][T20233] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1476.507613][T20233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.525877][T20233] usb 2-1: Product: syz [ 1476.530064][T20233] usb 2-1: Manufacturer: syz [ 1476.553018][T20233] usb 2-1: SerialNumber: syz [ 1476.573072][T20233] usb 2-1: config 0 descriptor?? [ 1476.581175][T20233] asix: probe of 2-1:0.104 failed with error -22 [ 1476.813282][T15344] usb 2-1: USB disconnect, device number 15 [ 1482.346094][T20799] loop6: detected capacity change from 0 to 32768 [ 1484.897440][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.904509][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.947762][T20233] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1490.639745][T20885] loop5: detected capacity change from 0 to 512 [ 1490.756150][T20885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1490.773377][T20885] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1491.225810][T20894] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4237: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1498.314919][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.098966][T20951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1500.346834][T15344] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1500.605684][T15344] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1500.640752][T15344] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1500.685279][T15344] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1500.736842][T15344] usb 2-1: config 0 has no interface number 0 [ 1500.766616][T15344] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1500.810193][T15344] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1500.847672][T15344] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1500.879755][T15344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.899501][T15344] usb 2-1: Product: syz [ 1500.915797][T15344] usb 2-1: Manufacturer: syz [ 1500.926367][T15344] usb 2-1: SerialNumber: syz [ 1500.956685][T15344] usb 2-1: config 0 descriptor?? [ 1500.988099][T15344] asix: probe of 2-1:0.104 failed with error -22 [ 1501.845275][ T5831] usb 2-1: USB disconnect, device number 16 [ 1505.005059][T21000] loop1: detected capacity change from 0 to 512 [ 1506.048297][T21000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.154242][T21000] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.684138][T21000] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.4261: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1507.984094][T13666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.576804][ T5808] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1509.890262][ T5808] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1509.916580][ T5808] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1509.936618][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1509.966290][ T5808] usb 2-1: config 0 has no interface number 0 [ 1509.986332][ T5808] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1510.008412][ T5808] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1510.025741][ T5808] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1510.045995][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.067578][ T5808] usb 2-1: Product: syz [ 1510.076584][ T5808] usb 2-1: Manufacturer: syz [ 1510.090132][ T5808] usb 2-1: SerialNumber: syz [ 1510.112578][ T5808] usb 2-1: config 0 descriptor?? [ 1510.133218][ T5808] asix: probe of 2-1:0.104 failed with error -22 [ 1510.788523][T21034] loop6: detected capacity change from 0 to 32768 [ 1512.350960][ T3061] usb 2-1: USB disconnect, device number 17 [ 1512.579141][T21069] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1513.494151][T21076] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4271'. [ 1515.265101][T21090] loop5: detected capacity change from 0 to 512 [ 1515.326728][T21090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.356715][T21090] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.618589][T21090] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4274: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1515.643640][T21098] loop1: detected capacity change from 0 to 32768 [ 1515.927000][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.941337][T21098] JBD2: Ignoring recovery information on journal [ 1516.211878][T21098] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1518.290174][T13666] ocfs2: Unmounting device (7,1) on (node local) [ 1518.927772][T19194] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1519.254697][T19194] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1520.014628][T19194] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1520.067695][T19194] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1520.085110][T19194] usb 6-1: config 0 has no interface number 0 [ 1520.091731][T19194] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1520.113720][T19194] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1522.544343][T21154] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4282'. [ 1523.280153][T21159] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1523.498207][T19194] usb 6-1: string descriptor 0 read error: -71 [ 1523.504806][T19194] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1523.538207][T19194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.556970][T19194] usb 6-1: config 0 descriptor?? [ 1523.575513][T19194] usb 6-1: can't set config #0, error -71 [ 1523.608302][T19194] usb 6-1: USB disconnect, device number 3 [ 1523.716606][T21169] loop0: detected capacity change from 0 to 512 [ 1523.774474][T21150] Bluetooth: hci1: command 0x0406 tx timeout [ 1523.883989][T21169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.908277][T21169] ext4 filesystem being mounted at /464/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.351691][T21181] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.4287: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1524.652902][T13767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.095340][T21186] loop5: detected capacity change from 0 to 32768 [ 1525.236089][T21186] JBD2: Ignoring recovery information on journal [ 1525.290801][T21186] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1527.288298][T19996] ocfs2: Unmounting device (7,5) on (node local) [ 1528.498253][T21216] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4295'. [ 1530.160181][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4297'. [ 1530.859868][T15344] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1531.511972][T15344] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1531.548987][T15344] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1531.557244][T15344] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1531.619760][T15344] usb 6-1: config 0 has no interface number 0 [ 1531.639119][T15344] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1531.680743][T15344] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1531.729614][T15344] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1531.738715][T15344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.773946][T15344] usb 6-1: Product: syz [ 1531.779202][T15344] usb 6-1: Manufacturer: syz [ 1531.989386][T15344] usb 6-1: SerialNumber: syz [ 1532.002003][T15344] usb 6-1: config 0 descriptor?? [ 1534.013690][T21263] loop0: detected capacity change from 0 to 512 [ 1534.273583][T21265] loop1: detected capacity change from 0 to 32768 [ 1534.316994][T21265] JBD2: Ignoring recovery information on journal [ 1534.366151][T21265] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1534.401818][T21263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1536.385623][T21263] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.352997][T21277] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4306'. [ 1538.108431][T21283] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.4298: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1538.186848][T13666] ocfs2: Unmounting device (7,1) on (node local) [ 1538.524160][T15344] usb 6-1: can't set config #0, error -110 [ 1539.786550][T13767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.502873][T15344] usb 6-1: USB disconnect, device number 4 [ 1542.793194][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4313'. [ 1543.740565][T21332] netlink: 596 bytes leftover after parsing attributes in process `syz.6.4316'. [ 1544.367421][T21336] loop5: detected capacity change from 0 to 32768 [ 1544.410505][T21339] loop6: detected capacity change from 0 to 512 [ 1544.437434][T21336] JBD2: Ignoring recovery information on journal [ 1544.509414][T21336] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1544.711622][T21339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1544.753939][T21339] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.118910][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.131424][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.392864][T21354] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.4318: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1547.729874][T20338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.794300][T19996] ocfs2: Unmounting device (7,5) on (node local) [ 1548.869293][T21378] loop0: detected capacity change from 0 to 32768 [ 1550.290966][T19194] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1550.645137][T19194] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1551.574085][T21395] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4326'. [ 1551.909334][T19194] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1552.030531][T19194] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1552.061923][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1552.089756][T19194] usb 7-1: config 0 has no interface number 0 [ 1552.132508][T19194] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1552.200125][T19194] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1552.880132][T21404] loop0: detected capacity change from 0 to 32768 [ 1552.946309][T21404] JBD2: Ignoring recovery information on journal [ 1552.974950][T19194] usb 7-1: string descriptor 0 read error: -71 [ 1552.996229][T21404] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1553.033649][T19194] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1553.073045][T19194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.127355][T19194] usb 7-1: config 0 descriptor?? [ 1553.223758][T19194] usb 7-1: can't set config #0, error -71 [ 1553.273838][T19194] usb 7-1: USB disconnect, device number 3 [ 1553.765583][T21418] loop6: detected capacity change from 0 to 512 [ 1553.938135][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1553.959817][T21418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1554.068761][T21418] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1554.487666][T21430] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.4330: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1555.967233][T21442] loop0: detected capacity change from 0 to 32768 [ 1556.035271][T20338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.905638][T21465] netlink: 512 bytes leftover after parsing attributes in process `syz.0.4337'. [ 1560.407867][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1560.582070][T20233] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1561.821220][T20233] usb 2-1: device descriptor read/all, error -71 [ 1562.101259][T21483] loop0: detected capacity change from 0 to 512 [ 1562.595386][T21486] loop6: detected capacity change from 0 to 32768 [ 1562.924143][T21486] JBD2: Ignoring recovery information on journal [ 1563.024193][T21483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1563.062984][T21486] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1563.174125][T21483] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.437035][T21499] loop1: detected capacity change from 0 to 32768 [ 1564.059159][T21502] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.4343: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1564.800850][T13767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.063104][T20338] ocfs2: Unmounting device (7,6) on (node local) [ 1569.596865][T21528] netlink: 512 bytes leftover after parsing attributes in process `syz.6.4348'. [ 1571.057364][T21414] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1571.214618][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4355'. [ 1571.275246][T21414] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1571.316284][T21414] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1571.341549][T21414] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1571.384013][T21414] usb 1-1: config 0 has no interface number 0 [ 1571.402560][T21414] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1571.433209][T21414] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1571.460998][T21414] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1571.488569][T21414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.508877][T21414] usb 1-1: Product: syz [ 1571.538804][T21414] usb 1-1: Manufacturer: syz [ 1571.563459][T21414] usb 1-1: SerialNumber: syz [ 1571.595331][T21414] usb 1-1: config 0 descriptor?? [ 1571.634639][T21414] asix: probe of 1-1:0.104 failed with error -22 [ 1572.554089][T21414] usb 1-1: USB disconnect, device number 8 [ 1572.615840][T21563] loop6: detected capacity change from 0 to 512 [ 1574.072726][T21563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.116991][T21563] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1574.529742][T21582] loop0: detected capacity change from 0 to 32768 [ 1574.840940][T21583] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.4356: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1575.416431][T21587] read_mapping_page failed! [ 1575.421705][T21587] ERROR: (device loop0): txCommit: [ 1575.421705][T21587] [ 1575.517247][T21587] ERROR: (device loop0): remounting filesystem as read-only [ 1575.780043][T20338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.034532][T21602] netlink: 512 bytes leftover after parsing attributes in process `syz.0.4363'. [ 1579.735282][T21150] Bluetooth: hci2: command 0x0406 tx timeout [ 1580.745003][T21630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4366'. [ 1582.295024][T19194] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1582.372973][T21639] loop5: detected capacity change from 0 to 512 [ 1582.560786][T21639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1582.580285][T19194] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1582.626933][T19194] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1582.667308][T21639] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1582.716076][T19194] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1582.764826][T19194] usb 7-1: config 0 has no interface number 0 [ 1582.771000][T19194] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1582.976047][T21646] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4371: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1582.996274][T19194] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1583.012946][T19194] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1583.071998][T19194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.192791][T19194] usb 7-1: Product: syz [ 1583.209000][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.226946][T21622] loop0: detected capacity change from 0 to 32768 [ 1583.229461][T19194] usb 7-1: Manufacturer: syz [ 1583.263167][T19194] usb 7-1: SerialNumber: syz [ 1583.302241][T19194] usb 7-1: config 0 descriptor?? [ 1583.325082][T21622] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1583.325555][T21622] (syz.0.4367,21622,1):ocfs2_initialize_super:2285 ERROR: status = -12 [ 1583.327044][T19194] asix: probe of 7-1:0.104 failed with error -22 [ 1583.390828][T21622] (syz.0.4367,21622,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 1583.575849][ T5831] usb 7-1: USB disconnect, device number 4 [ 1586.319741][T21669] loop1: detected capacity change from 0 to 32768 [ 1589.930597][T21705] loop5: detected capacity change from 0 to 512 [ 1591.183632][T21413] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1591.249112][T21705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1591.265614][T21705] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.513452][T21413] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1591.534866][T21413] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1591.573582][T21413] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1591.601554][T21714] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4382: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1591.638239][T21413] usb 2-1: config 0 has no interface number 0 [ 1591.673541][T21413] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1591.709462][T21413] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1591.840827][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.851014][T21413] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1591.890101][T21413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.924063][T21413] usb 2-1: Product: syz [ 1591.933977][T21413] usb 2-1: Manufacturer: syz [ 1591.984614][T21413] usb 2-1: SerialNumber: syz [ 1592.000377][T21413] usb 2-1: config 0 descriptor?? [ 1592.017757][T21413] asix: probe of 2-1:0.104 failed with error -22 [ 1592.134497][T21707] loop0: detected capacity change from 0 to 32768 [ 1592.192009][T21707] JBD2: Ignoring recovery information on journal [ 1592.270536][T10497] usb 2-1: USB disconnect, device number 20 [ 1592.426260][T21707] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1594.130964][T21742] loop1: detected capacity change from 0 to 32768 [ 1594.360978][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1595.678691][T21759] netlink: 'syz.5.4391': attribute type 16 has an invalid length. [ 1598.417181][T20233] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1599.045459][T21794] loop1: detected capacity change from 0 to 1024 [ 1599.118398][T20233] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1599.118503][T21794] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 1599.118503][T21794] [ 1599.136191][T20233] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1599.245404][T20233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1599.254610][T20233] usb 6-1: config 0 has no interface number 0 [ 1599.261077][T20233] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1599.272502][T20233] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1599.870161][T20233] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1599.926279][T20233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.976283][T20233] usb 6-1: Product: syz [ 1599.980512][T20233] usb 6-1: Manufacturer: syz [ 1599.985138][T20233] usb 6-1: SerialNumber: syz [ 1600.009815][T20233] usb 6-1: config 0 descriptor?? [ 1600.018846][T20233] asix: probe of 6-1:0.104 failed with error -22 [ 1600.339354][T21811] loop1: detected capacity change from 0 to 32768 [ 1600.366562][ T5831] usb 6-1: USB disconnect, device number 5 [ 1603.686514][T21849] loop6: detected capacity change from 0 to 512 [ 1603.834783][T21849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.856995][T21849] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.909485][T21855] loop1: detected capacity change from 0 to 1024 [ 1603.928636][T21855] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 1603.928636][T21855] [ 1604.221422][T21859] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.4409: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1604.358364][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 1604.358394][ T28] audit: type=1326 audit(2000002151.350:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1604.619841][ T28] audit: type=1326 audit(2000002151.350:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1604.654447][ T28] audit: type=1326 audit(2000002151.360:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1604.679031][ T5831] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1604.687377][T20338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.707156][ T28] audit: type=1326 audit(2000002151.360:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1604.733250][ T28] audit: type=1326 audit(2000002151.360:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1604.762416][ T28] audit: type=1326 audit(2000002151.360:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1604.807173][ T28] audit: type=1326 audit(2000002151.360:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1605.458875][ T28] audit: type=1326 audit(2000002151.360:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1605.489637][ T28] audit: type=1326 audit(2000002151.360:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1605.514552][ T5831] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1606.746857][ T28] audit: type=1326 audit(2000002151.360:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21867 comm="syz.1.4413" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f275659de59 code=0x7ffc0000 [ 1606.782332][ T5831] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1606.796772][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1606.816211][ T5831] usb 1-1: config 0 has no interface number 0 [ 1606.826145][ T5831] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1606.868388][ T5831] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1606.895913][ T5831] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1606.920731][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.937119][ T5831] usb 1-1: Product: syz [ 1606.951685][ T5831] usb 1-1: Manufacturer: syz [ 1606.956340][ T5831] usb 1-1: SerialNumber: syz [ 1606.978977][ T5831] usb 1-1: config 0 descriptor?? [ 1607.150153][T21884] loop1: detected capacity change from 0 to 32768 [ 1607.187103][ T5831] asix: probe of 1-1:0.104 failed with error -22 [ 1608.163557][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.169998][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.238914][T19194] usb 1-1: USB disconnect, device number 9 [ 1608.482693][T21898] loop0: detected capacity change from 0 to 8 [ 1611.151097][T21915] binder: 21914:21915 ioctl c0306201 200000000000 returned -14 [ 1613.876492][T21931] loop1: detected capacity change from 0 to 8 [ 1614.545625][T21937] loop5: detected capacity change from 0 to 32768 [ 1617.555603][T21961] fuse: Bad value for 'fd' [ 1618.797782][T21965] Set syz1 is full, maxelem 6117 reached [ 1619.339588][T21972] loop1: detected capacity change from 0 to 8 [ 1619.841593][T21974] loop0: detected capacity change from 0 to 32768 [ 1621.946905][ T5831] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1622.230158][ T5831] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1622.258015][ T5831] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1622.283237][ T5831] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1622.298098][ T5831] usb 7-1: config 0 has no interface number 0 [ 1622.304412][ T5831] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1622.326010][ T5831] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1622.486376][ T5831] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1622.513904][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.557180][ T5831] usb 7-1: Product: syz [ 1622.561408][ T5831] usb 7-1: Manufacturer: syz [ 1622.567916][ T5831] usb 7-1: SerialNumber: syz [ 1622.575539][ T5831] usb 7-1: config 0 descriptor?? [ 1622.591430][ T5831] asix: probe of 7-1:0.104 failed with error -22 [ 1622.786270][ T5831] usb 7-1: USB disconnect, device number 5 [ 1623.029121][T22000] fuse: Bad value for 'fd' [ 1623.057261][T21998] loop0: detected capacity change from 0 to 32768 [ 1623.088719][T21998] JBD2: Ignoring recovery information on journal [ 1623.163420][T21998] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1623.525215][T22012] loop1: detected capacity change from 0 to 8 [ 1624.184138][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1625.516963][T20233] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1625.770723][T20233] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1625.779100][T20233] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1625.790628][T20233] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1625.801297][T20233] usb 7-1: config 0 has no interface number 0 [ 1625.809184][T20233] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1625.825468][T20233] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1625.840590][T20233] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1625.850137][T20233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.914332][T20233] usb 7-1: Product: syz [ 1625.946880][T20233] usb 7-1: Manufacturer: syz [ 1625.959711][T20233] usb 7-1: SerialNumber: syz [ 1625.979691][T20233] usb 7-1: config 0 descriptor?? [ 1626.008093][T20233] asix: probe of 7-1:0.104 failed with error -22 [ 1626.065052][T22043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4460'. [ 1626.197118][T20233] usb 7-1: USB disconnect, device number 6 [ 1626.495679][T22052] fuse: Bad value for 'fd' [ 1626.699109][T22056] loop0: detected capacity change from 0 to 8 [ 1627.186143][T22054] loop1: detected capacity change from 0 to 32768 [ 1627.223215][T22054] JBD2: Ignoring recovery information on journal [ 1627.377971][T22054] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1630.633169][T13666] ocfs2: Unmounting device (7,1) on (node local) [ 1631.931695][T22091] fuse: Bad value for 'fd' [ 1633.265622][T22099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4470'. [ 1633.857436][T22109] loop6: detected capacity change from 0 to 8 [ 1634.427940][T22118] loop5: detected capacity change from 0 to 32768 [ 1634.472664][T22118] JBD2: Ignoring recovery information on journal [ 1634.505102][T22120] loop0: detected capacity change from 0 to 128 [ 1634.513140][T22118] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1634.846547][T22120] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1635.320250][T22120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1635.491551][T22130] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4482'. [ 1635.839433][T19996] ocfs2: Unmounting device (7,5) on (node local) [ 1636.537296][T22141] loop5: detected capacity change from 0 to 128 [ 1636.562292][T22141] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1636.619085][T22141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1637.870961][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4484'. [ 1638.295006][T22153] fuse: Bad value for 'fd' [ 1643.466859][T10497] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1643.718804][T10497] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1644.986727][T10497] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1644.995331][T10497] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1645.096786][T10497] usb 2-1: config 0 has no interface number 0 [ 1645.126791][T10497] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1645.184395][T10497] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1645.197603][T10497] usb 2-1: string descriptor 0 read error: -71 [ 1645.206857][T10497] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1645.215928][T10497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.293847][T10497] usb 2-1: config 0 descriptor?? [ 1645.307305][T10497] usb 2-1: can't set config #0, error -71 [ 1645.338174][T10497] usb 2-1: USB disconnect, device number 21 [ 1645.608818][T22190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4496'. [ 1645.706620][T22193] loop1: detected capacity change from 0 to 512 [ 1645.728969][T22193] EXT4-fs: Ignoring removed oldalloc option [ 1645.786992][T22193] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1645.904615][T22193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1647.864958][T22193] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1649.421780][T22209] sit1: entered allmulticast mode [ 1650.024730][T13666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.260253][T22212] loop1: detected capacity change from 0 to 512 [ 1650.307808][T22212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1650.478622][T22212] EXT4-fs (loop1): 1 truncate cleaned up [ 1650.485602][T22212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1650.715662][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 1650.715675][ T28] audit: type=1800 audit(2000002453.714:375): pid=22212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4502" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1650.922649][ T28] audit: type=1800 audit(2000002453.924:376): pid=22212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4502" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1651.018281][T13666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.780548][T22220] loop1: detected capacity change from 0 to 8 [ 1653.141216][T22220] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1653.198060][T22220] SQUASHFS error: Failed to read block 0x9b: -5 [ 1653.206297][T22220] SQUASHFS error: Unable to read metadata cache entry [99] [ 1654.499071][T22220] SQUASHFS error: Unable to read inode 0x127 [ 1655.045853][T10497] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1655.300818][T10497] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1655.321532][T10497] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1655.346866][T10497] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1655.355807][T10497] usb 6-1: config 0 has no interface number 0 [ 1655.383332][T10497] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1655.412007][T10497] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1655.439382][T10497] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1655.449707][T10497] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.467175][T10497] usb 6-1: Product: syz [ 1655.471385][T10497] usb 6-1: Manufacturer: syz [ 1655.475996][T10497] usb 6-1: SerialNumber: syz [ 1655.518304][T10497] usb 6-1: config 0 descriptor?? [ 1655.540972][T10497] asix: probe of 6-1:0.104 failed with error -22 [ 1655.800415][T10497] usb 6-1: USB disconnect, device number 6 [ 1657.163341][T22243] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4507'. [ 1657.778742][T22258] loop5: detected capacity change from 0 to 512 [ 1657.819795][T22258] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1657.826627][T22258] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1657.935030][T22258] EXT4-fs error (device loop5): ext4_orphan_get:1430: comm syz.5.4513: bad orphan inode 131083 [ 1657.965903][T22258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1658.310163][T22258] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1658.499812][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.571548][T22266] loop0: detected capacity change from 0 to 32768 [ 1658.659422][T22266] JBD2: Ignoring recovery information on journal [ 1658.705301][T22266] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1663.367126][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1663.618476][T22282] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4519'. [ 1665.075935][T22292] binder: 22287:22292 ioctl c0306201 200000000000 returned -14 [ 1666.676002][T22297] loop1: detected capacity change from 0 to 32768 [ 1666.939889][T22299] loop6: detected capacity change from 0 to 1024 [ 1666.947913][T22299] EXT4-fs: Ignoring removed nobh option [ 1666.963218][T22299] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1666.979478][T22299] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1666.979478][T22299] [ 1669.117340][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.123701][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.306814][ T3061] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1669.520581][ T3061] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1669.537430][ T3061] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1669.557190][ T3061] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1669.566112][ T3061] usb 1-1: config 0 has no interface number 0 [ 1669.586866][ T3061] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1669.613495][ T3061] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1669.629271][ T3061] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1669.827946][ T3061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.836596][ T3061] usb 1-1: Product: syz [ 1669.841434][ T3061] usb 1-1: Manufacturer: syz [ 1669.847159][ T3061] usb 1-1: SerialNumber: syz [ 1669.855731][ T3061] usb 1-1: config 0 descriptor?? [ 1669.864164][ T3061] asix: probe of 1-1:0.104 failed with error -22 [ 1671.126130][ T3061] usb 1-1: USB disconnect, device number 10 [ 1671.411514][T22314] loop1: detected capacity change from 0 to 32768 [ 1671.478262][T22314] JBD2: Ignoring recovery information on journal [ 1671.529857][T22314] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1672.499264][T13666] ocfs2: Unmounting device (7,1) on (node local) [ 1672.557940][T22320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4528'. [ 1676.184811][T22338] loop5: detected capacity change from 0 to 2048 [ 1676.255373][T22338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1676.400714][T22341] binder: 22339:22341 ioctl c0306201 200000000000 returned -14 [ 1676.985257][T22345] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1680.666539][T22359] loop5: detected capacity change from 0 to 1024 [ 1680.666824][ T3061] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1680.715361][T22359] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1680.715361][T22359] [ 1680.898765][ T3061] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1680.907968][ T3061] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1680.916169][ T3061] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1680.969301][ T3061] usb 1-1: config 0 has no interface number 0 [ 1680.975490][ T3061] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1681.062796][ T3061] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1681.128603][ T3061] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1681.174309][ T3061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.196814][ T3061] usb 1-1: Product: syz [ 1681.201019][ T3061] usb 1-1: Manufacturer: syz [ 1681.213214][ T3061] usb 1-1: SerialNumber: syz [ 1681.222160][ T3061] usb 1-1: config 0 descriptor?? [ 1681.232868][ T3061] asix: probe of 1-1:0.104 failed with error -22 [ 1682.006274][ T3061] usb 1-1: USB disconnect, device number 11 [ 1682.346915][T22367] loop6: detected capacity change from 0 to 32768 [ 1687.900266][T22395] loop5: detected capacity change from 0 to 2048 [ 1687.992911][T22395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1688.197224][T22398] binder: 22396:22398 ioctl c0306201 200000000000 returned -14 [ 1691.286978][ T5808] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1691.488718][ T5808] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1691.506875][ T5808] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1691.515107][ T5808] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1691.524122][ T5808] usb 1-1: config 0 has no interface number 0 [ 1691.530319][ T5808] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1691.542075][ T5808] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1691.551793][ T5808] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1691.577633][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.585677][ T5808] usb 1-1: Product: syz [ 1691.607947][ T5808] usb 1-1: Manufacturer: syz [ 1691.624703][ T5808] usb 1-1: SerialNumber: syz [ 1691.651219][ T5808] usb 1-1: config 0 descriptor?? [ 1691.672886][ T5808] asix: probe of 1-1:0.104 failed with error -22 [ 1691.943644][ T5808] usb 1-1: USB disconnect, device number 12 [ 1696.844072][T22450] loop1: detected capacity change from 0 to 512 [ 1696.881746][T22450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1696.940693][T22450] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1697.343709][T22455] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.4552: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1697.975014][T13666] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.483882][T22468] loop1: detected capacity change from 0 to 2048 [ 1700.740322][T22468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1712.647665][T22518] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4573'. [ 1718.268287][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4581'. [ 1719.827975][T22555] fuse: Bad value for 'fd' [ 1719.873497][T22559] loop0: detected capacity change from 0 to 512 [ 1719.984976][T22559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1720.021668][T22559] ext4 filesystem being mounted at /544/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1722.596787][T22565] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.4584: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1722.757010][T13767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1727.114766][T22594] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4592'. [ 1729.663977][T22603] fuse: Bad value for 'fd' [ 1730.677767][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.684365][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.472562][T22630] loop5: detected capacity change from 0 to 32768 [ 1735.544526][T22630] JBD2: Ignoring recovery information on journal [ 1735.579913][T22630] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1737.960232][T19996] ocfs2: Unmounting device (7,5) on (node local) [ 1738.351574][T22649] fuse: Bad value for 'fd' [ 1745.657491][T22675] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1750.466378][T22698] fuse: Bad value for 'fd' [ 1751.758952][T22706] loop5: detected capacity change from 0 to 512 [ 1752.108509][T22706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1753.218018][T22706] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1754.169899][T22717] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4613: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1754.402829][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.313460][T10497] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1755.567132][T10497] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1755.575605][T10497] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1755.614353][T10497] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1755.645546][T10497] usb 1-1: config 0 has no interface number 0 [ 1755.657545][T10497] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1755.707663][T10497] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1755.738827][T10497] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1755.748348][T10497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.756377][T10497] usb 1-1: Product: syz [ 1755.797180][T10497] usb 1-1: Manufacturer: syz [ 1755.801840][T10497] usb 1-1: SerialNumber: syz [ 1756.997918][T10497] usb 1-1: config 0 descriptor?? [ 1757.086879][T10497] usb 1-1: can't set config #0, error -71 [ 1757.119029][T10497] usb 1-1: USB disconnect, device number 13 [ 1760.896127][T22755] binder: 22752:22755 ioctl c0306201 200000000000 returned -14 [ 1764.295750][T22765] fuse: Bad value for 'fd' [ 1765.256979][ T3061] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1765.470487][ T3061] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1765.487377][ T3061] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1765.495777][ T3061] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1765.496434][T22787] loop5: detected capacity change from 0 to 512 [ 1765.505695][ T3061] usb 7-1: config 0 has no interface number 0 [ 1765.526928][ T3061] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1765.554186][ T3061] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1765.565785][ T3061] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1765.585396][ T3061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.597239][ T3061] usb 7-1: Product: syz [ 1765.601457][ T3061] usb 7-1: Manufacturer: syz [ 1765.606277][ T3061] usb 7-1: SerialNumber: syz [ 1765.618039][ T3061] usb 7-1: config 0 descriptor?? [ 1765.620708][T22787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1765.625340][ T3061] asix: probe of 7-1:0.104 failed with error -22 [ 1765.647163][T22787] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1765.872431][T21414] usb 7-1: USB disconnect, device number 7 [ 1766.494579][T22796] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4629: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1767.373537][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1769.534017][T21150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1769.562255][T21150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1769.570978][T21150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1769.580005][T21150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1769.608382][T21150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1769.617293][T21150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1769.943785][ T6315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.437126][T21150] Bluetooth: hci3: command tx timeout [ 1772.530565][ T6315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.849697][ T6315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.067702][ T6315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.162517][T22827] loop5: detected capacity change from 0 to 512 [ 1773.277280][T22827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1773.355034][T22827] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1773.408573][T22834] binder: 22832:22834 ioctl c0306201 200000000000 returned -14 [ 1773.630744][T22809] chnl_net:caif_netlink_parms(): no params data found [ 1774.120533][T22838] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4642: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1774.361114][T22844] fuse: Bad value for 'fd' [ 1774.394152][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.466951][T21150] Bluetooth: hci3: command tx timeout [ 1774.483405][ T6315] bridge0: port 3(macvlan2) entered disabled state [ 1774.606373][ T6315] macvlan2 (unregistering): left allmulticast mode [ 1775.829943][ T6315] macvlan2 (unregistering): left promiscuous mode [ 1775.836503][ T6315] bridge0: port 3(macvlan2) entered disabled state [ 1775.852871][T22858] loop5: detected capacity change from 0 to 256 [ 1775.964919][T22858] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdec3b213, utbl_chksum : 0xe619d30d) [ 1776.253488][T22863] loop0: detected capacity change from 0 to 32768 [ 1776.348032][T22863] JBD2: Ignoring recovery information on journal [ 1776.548449][T21150] Bluetooth: hci3: command tx timeout [ 1776.652051][T22863] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1777.197005][T22809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.250892][T22809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.295673][T22809] bridge_slave_0: entered allmulticast mode [ 1777.333003][T22809] bridge_slave_0: entered promiscuous mode [ 1778.689927][T21150] Bluetooth: hci3: command tx timeout [ 1778.775852][T22809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.809025][T22809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.816321][T22809] bridge_slave_1: entered allmulticast mode [ 1778.869011][T22809] bridge_slave_1: entered promiscuous mode [ 1779.035304][T22809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1779.138935][T22809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1780.161399][ T6315] gretap0 (unregistering): left allmulticast mode [ 1780.305731][T22809] team0: Port device team_slave_0 added [ 1780.329404][T22809] team0: Port device team_slave_1 added [ 1780.597492][T22809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1780.604492][T22809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.686766][T22809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1780.745372][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1780.866526][T22809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1780.886784][T22809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1780.945077][T22809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1781.242215][T22809] hsr_slave_0: entered promiscuous mode [ 1781.273541][T22809] hsr_slave_1: entered promiscuous mode [ 1781.327399][T22809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1781.335107][T22809] Cannot create hsr debugfs directory [ 1782.103907][ T6315] hsr_slave_0: left promiscuous mode [ 1782.112109][ T6315] hsr_slave_1: left promiscuous mode [ 1782.121423][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1782.153432][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1782.207655][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1782.241972][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1782.307494][ T6315] bridge_slave_1: left allmulticast mode [ 1782.313207][ T6315] bridge_slave_1: left promiscuous mode [ 1782.345139][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.427784][ T6315] bridge_slave_0: left allmulticast mode [ 1782.433490][ T6315] bridge_slave_0: left promiscuous mode [ 1782.470574][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.599660][ T6315] veth1_macvtap: left promiscuous mode [ 1782.618367][ T6315] veth0_macvtap: left promiscuous mode [ 1782.628170][ T6315] veth1_vlan: left promiscuous mode [ 1782.635872][ T6315] veth0_vlan: left promiscuous mode [ 1783.805482][T22916] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4653'. [ 1784.080877][ T6315] bond1 (unregistering): Released all slaves [ 1790.673035][T22937] loop0: detected capacity change from 0 to 1024 [ 1790.697253][T22937] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1790.697253][T22937] [ 1793.007184][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.013487][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.078590][ T6315] team0 (unregistering): Port device team_slave_1 removed [ 1793.196901][ T3061] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1793.298112][ T6315] team0 (unregistering): Port device team_slave_0 removed [ 1793.378318][ T3061] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1793.410095][ T3061] usb 7-1: config 0 has an invalid interface number: 104 but max is 1 [ 1793.427125][ T3061] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1793.466649][ T3061] usb 7-1: config 0 has no interface number 0 [ 1793.472903][ T3061] usb 7-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1793.507085][ T3061] usb 7-1: config 0 interface 104 has no altsetting 1 [ 1793.520557][ T3061] usb 7-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1793.535111][ T3061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.551888][ T3061] usb 7-1: Product: syz [ 1793.561840][ T3061] usb 7-1: Manufacturer: syz [ 1793.579818][ T3061] usb 7-1: SerialNumber: syz [ 1793.597176][ T3061] usb 7-1: config 0 descriptor?? [ 1793.618361][ T3061] asix: probe of 7-1:0.104 failed with error -22 [ 1793.630613][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.851884][ T3061] usb 7-1: USB disconnect, device number 8 [ 1793.934583][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.621300][ T6315] bond0 (unregistering): Released all slaves [ 1794.955304][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4660'. [ 1795.364567][T22969] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4662'. [ 1797.821185][T22985] loop6: detected capacity change from 0 to 2048 [ 1798.971672][T22985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1800.782093][T22809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1800.827532][T10497] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1800.849853][T22809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1800.919513][T22809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1800.970952][T22809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1801.079350][T10497] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1801.106797][T10497] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1801.115020][T10497] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1801.163830][T10497] usb 1-1: config 0 has no interface number 0 [ 1801.190382][T10497] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1801.247226][T10497] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1801.269874][T22809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1801.305215][T10497] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1801.327730][T10497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.349639][T22809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1801.366510][T10497] usb 1-1: Product: syz [ 1801.376625][T10497] usb 1-1: Manufacturer: syz [ 1801.406982][T10497] usb 1-1: SerialNumber: syz [ 1801.414507][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.421700][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.454373][T10497] usb 1-1: config 0 descriptor?? [ 1801.473342][T10497] asix: probe of 1-1:0.104 failed with error -22 [ 1801.488556][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.495677][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.357919][T10497] usb 1-1: USB disconnect, device number 14 [ 1802.985024][T22809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1803.206351][T22809] veth0_vlan: entered promiscuous mode [ 1803.276335][T22809] veth1_vlan: entered promiscuous mode [ 1803.389686][T22809] veth0_macvtap: entered promiscuous mode [ 1803.434102][T22809] veth1_macvtap: entered promiscuous mode [ 1803.556602][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.589799][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.618731][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.642132][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.658336][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.706843][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.737235][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1803.776725][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1803.812970][T22809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1805.172760][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.232215][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.287238][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.320886][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.346775][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.386791][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.388084][T23028] loop6: detected capacity change from 0 to 1024 [ 1805.396656][T22809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.413649][T22809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.479039][T22809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1805.500675][T22809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.519029][T22809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.536730][T22809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.550439][T23028] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1805.550439][T23028] [ 1805.557198][T22809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.903068][T15698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1805.944402][T15698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.021089][T15698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.053518][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4670'. [ 1806.053813][T15698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.656646][T23042] loop6: detected capacity change from 0 to 2048 [ 1807.800346][T23042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1807.815904][T23050] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4675'. [ 1808.468911][T23056] loop0: detected capacity change from 0 to 32768 [ 1808.599079][T23056] JBD2: Ignoring recovery information on journal [ 1808.955410][T23056] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1809.446924][T23033] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1809.592736][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1809.719595][T23033] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1809.747498][T23033] usb 6-1: config 0 has an invalid interface number: 104 but max is 1 [ 1809.786408][T23033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1809.817356][T23033] usb 6-1: config 0 has no interface number 0 [ 1809.833025][T23033] usb 6-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1809.874888][T23033] usb 6-1: config 0 interface 104 has no altsetting 1 [ 1809.912478][T23033] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1809.950245][T23033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.987516][T23033] usb 6-1: Product: syz [ 1810.002380][T23033] usb 6-1: Manufacturer: syz [ 1810.016739][T23033] usb 6-1: SerialNumber: syz [ 1810.032914][T23033] usb 6-1: config 0 descriptor?? [ 1810.053372][T23033] asix: probe of 6-1:0.104 failed with error -22 [ 1810.862784][T23033] usb 6-1: USB disconnect, device number 7 [ 1811.160699][T23084] loop0: detected capacity change from 0 to 1024 [ 1811.174014][T23084] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1811.174014][T23084] [ 1813.875826][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4682'. [ 1814.321298][T23106] loop5: detected capacity change from 0 to 2048 [ 1814.344171][T23106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1815.437015][T23112] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4687'. [ 1816.876865][T23128] loop0: detected capacity change from 0 to 8 [ 1818.446582][T19194] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1818.690667][T19194] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1818.726965][T19194] usb 1-1: config 0 has an invalid interface number: 104 but max is 1 [ 1818.775782][T19194] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1818.823320][T19194] usb 1-1: config 0 has no interface number 0 [ 1818.842895][T19194] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1818.894225][T19194] usb 1-1: config 0 interface 104 has no altsetting 1 [ 1818.925409][T19194] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1818.958296][T19194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.986101][T19194] usb 1-1: Product: syz [ 1819.005752][T19194] usb 1-1: Manufacturer: syz [ 1819.021248][T19194] usb 1-1: SerialNumber: syz [ 1819.049255][T19194] usb 1-1: config 0 descriptor?? [ 1819.075353][T19194] asix: probe of 1-1:0.104 failed with error -22 [ 1819.314409][T23033] usb 1-1: USB disconnect, device number 15 [ 1822.459209][T23155] kvm: kvm [23154]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf1fa [ 1823.030384][T23171] loop6: detected capacity change from 0 to 2048 [ 1823.118745][T23171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1825.247004][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1825.591283][T23188] loop1: detected capacity change from 0 to 256 [ 1825.666786][ T28] audit: type=1800 audit(2000002628.654:377): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4695" name="file1" dev="loop1" ino=1048798 res=0 errno=0 [ 1825.668558][T23188] exFAT-fs (loop1): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 1825.699785][T23188] exFAT-fs (loop1): Filesystem has been set read-only [ 1825.717002][T23188] exFAT-fs (loop1): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 1827.896199][T23201] loop6: detected capacity change from 0 to 128 [ 1828.038116][T23199] loop5: detected capacity change from 0 to 1024 [ 1828.105639][T23199] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1828.105639][T23199] [ 1831.286807][ T5808] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1832.869059][ T5808] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1832.928595][ T5808] usb 2-1: config 0 has an invalid interface number: 104 but max is 1 [ 1832.937438][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1832.946317][ T5808] usb 2-1: config 0 has no interface number 0 [ 1832.955030][ T5808] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 65535, setting to 64 [ 1832.966267][ T5808] usb 2-1: config 0 interface 104 has no altsetting 1 [ 1833.021388][ T5808] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 1833.030576][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.050430][ T5808] usb 2-1: Product: syz [ 1833.054648][ T5808] usb 2-1: Manufacturer: syz [ 1833.067041][ T5808] usb 2-1: SerialNumber: syz [ 1833.075777][ T5808] usb 2-1: config 0 descriptor?? [ 1833.091538][ T5808] asix: probe of 2-1:0.104 failed with error -22 [ 1833.347768][ T5808] usb 2-1: USB disconnect, device number 22 [ 1835.671395][T23241] loop6: detected capacity change from 0 to 1024 [ 1835.769689][T23241] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1835.769689][T23241] [ 1838.914634][T23260] loop6: detected capacity change from 0 to 2048 [ 1839.114469][T23260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1840.994479][T23267] loop6: detected capacity change from 0 to 32768 [ 1841.044697][T23269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1841.065976][T23267] JBD2: Ignoring recovery information on journal [ 1841.257505][T23267] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1842.087174][T20338] ocfs2: Unmounting device (7,6) on (node local) [ 1842.345111][T23277] loop1: detected capacity change from 0 to 1024 [ 1842.448058][T23277] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 1842.448058][T23277] [ 1842.653245][T22996] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1842.753412][T23288] loop0: detected capacity change from 0 to 512 [ 1842.921023][T23288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1844.246829][T23288] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1846.370659][T23302] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.4722: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1846.528486][T13767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1846.879104][T23305] loop6: detected capacity change from 0 to 32768 [ 1846.974704][T23305] JBD2: Ignoring recovery information on journal [ 1847.067634][T23305] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1847.808567][T20338] ocfs2: Unmounting device (7,6) on (node local) [ 1848.582523][T23319] loop5: detected capacity change from 0 to 1024 [ 1848.850981][T23321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4728'. [ 1849.199572][T23330] loop6: detected capacity change from 0 to 1024 [ 1849.232463][T23330] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1849.232463][T23330] [ 1849.552210][T23339] loop6: detected capacity change from 0 to 512 [ 1850.873200][T23343] loop0: detected capacity change from 0 to 512 [ 1850.927742][T23343] ext4: Unknown parameter '"' [ 1850.936243][T23339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1851.001301][T23339] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1851.209636][T22996] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1851.328671][T23348] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #2: block 3: comm syz.6.4734: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1851.768635][T20338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.791402][T23343] syzkaller0: entered promiscuous mode [ 1851.797162][T23343] syzkaller0: entered allmulticast mode [ 1852.103507][T23351] loop6: detected capacity change from 0 to 2048 [ 1852.170589][T23351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1853.432979][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.438797][T23366] loop1: detected capacity change from 0 to 512 [ 1853.439570][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.474539][T23366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1853.568941][T23366] EXT4-fs (loop1): 1 truncate cleaned up [ 1853.680971][T23369] loop6: detected capacity change from 0 to 1024 [ 1853.688012][T23366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1853.736904][T23369] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1853.736904][T23369] [ 1853.776763][ T28] audit: type=1800 audit(2000002656.774:378): pid=23366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4736" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1854.271980][ T28] audit: type=1800 audit(2000002657.004:379): pid=23372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4736" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1855.963020][T22809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.036899][T23033] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1856.296917][T23033] usb 6-1: Using ep0 maxpacket: 32 [ 1856.313483][T23033] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1856.344520][T23033] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1856.386816][T23033] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1856.625357][T23033] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1856.676807][T23033] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.684966][T23033] usb 6-1: Product: syz [ 1856.699571][T23033] usb 6-1: Manufacturer: syz [ 1856.704191][T23033] usb 6-1: SerialNumber: syz [ 1856.749255][T23033] cdc_ncm 6-1:1.0: skipping garbage [ 1856.787240][T23033] cdc_ncm 6-1:1.0: skipping garbage [ 1856.896815][T23033] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1856.969565][T23033] cdc_ncm 6-1:1.0: bind() failure [ 1857.023489][T23033] usb 6-1: USB disconnect, device number 8 [ 1861.529276][T23415] loop6: detected capacity change from 0 to 1024 [ 1862.346861][T23415] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1862.346861][T23415] [ 1869.921559][T23453] loop1: detected capacity change from 0 to 1024 [ 1871.267140][T23453] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 1871.267140][T23453] [ 1876.412914][T23494] loop0: detected capacity change from 0 to 32768 [ 1876.487799][T23494] JBD2: Ignoring recovery information on journal [ 1876.539049][T23494] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1877.394154][T13767] ocfs2: Unmounting device (7,0) on (node local) [ 1881.010572][T23516] loop0: detected capacity change from 0 to 1024 [ 1881.110561][T23516] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1881.110561][T23516] [ 1884.400765][T13667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1884.415849][T13667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1884.425536][T13667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1884.434208][T13667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1884.441729][T13667] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1884.449198][T13667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1884.733747][ T6320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.789603][ T6320] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1885.139504][ T6320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.174714][ T6320] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1885.417568][ T6320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.431832][ T6320] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1886.634377][T13667] Bluetooth: hci0: command tx timeout [ 1886.902440][ T6320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.951950][ T6320] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1888.039361][T23557] loop1: detected capacity change from 0 to 512 [ 1888.304348][T23557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1888.352853][T23537] chnl_net:caif_netlink_parms(): no params data found [ 1888.406898][T23557] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1888.685720][ T6320] tipc: Left network mode [ 1888.706824][T13667] Bluetooth: hci0: command tx timeout [ 1888.862610][T23570] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 3: comm syz.1.4794: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1889.179814][T23537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1889.219120][T23537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.226398][T23537] bridge_slave_0: entered allmulticast mode [ 1889.347552][T23537] bridge_slave_0: entered promiscuous mode [ 1889.385153][T23537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1889.411858][T23537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.414496][T22809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.420721][T23537] bridge_slave_1: entered allmulticast mode [ 1889.436568][T23537] bridge_slave_1: entered promiscuous mode [ 1890.785606][T23581] Set syz1 is full, maxelem 6117 reached [ 1890.791746][T13667] Bluetooth: hci0: command tx timeout [ 1890.799744][ T6320] bridge0: port 3(macvlan2) entered disabled state [ 1891.010686][ T6320] macvlan2 (unregistering): left allmulticast mode [ 1891.044389][ T6320] macvlan2 (unregistering): left promiscuous mode [ 1891.088677][ T6320] bridge0: port 3(macvlan2) entered disabled state [ 1892.853231][T23537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.868220][T13667] Bluetooth: hci0: command tx timeout [ 1892.889954][T23537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.102635][T23537] team0: Port device team_slave_0 added [ 1893.261089][T23537] team0: Port device team_slave_1 added [ 1893.406270][T23609] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4797'. [ 1893.568110][T23537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1893.575227][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.667773][T23537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1893.781758][T23537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1893.802142][T23537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1893.876876][T23537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1896.572146][T23537] hsr_slave_0: entered promiscuous mode [ 1896.606129][T23537] hsr_slave_1: entered promiscuous mode [ 1896.637741][T23537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1896.645357][T23537] Cannot create hsr debugfs directory [ 1897.189185][ T6320] hsr_slave_0: left promiscuous mode [ 1897.226837][ T6320] hsr_slave_1: left promiscuous mode [ 1897.271176][T21150] Bluetooth: hci3: command 0x0406 tx timeout [ 1897.279442][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.290435][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.347766][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.355256][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.407732][ T6320] bridge_slave_1: left allmulticast mode [ 1897.413445][ T6320] bridge_slave_1: left promiscuous mode [ 1897.457500][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.549847][ T6320] bridge_slave_0: left allmulticast mode [ 1897.555562][ T6320] bridge_slave_0: left promiscuous mode [ 1897.606929][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1898.505718][T23640] loop6: detected capacity change from 0 to 8 [ 1898.551560][T23640] SQUASHFS error: Unable to read inode 0x11f [ 1898.580750][ T6320] veth1_macvtap: left promiscuous mode [ 1898.586345][ T6320] veth0_macvtap: left promiscuous mode [ 1898.607537][ T6320] veth1_vlan: left promiscuous mode [ 1898.615767][T22931] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1898.626211][ T6320] veth0_vlan: left promiscuous mode [ 1900.454394][ T6320] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1902.406859][ T6320] bond1 (unregistering): Released all slaves [ 1905.217579][ T6320] team0 (unregistering): Port device team_slave_1 removed [ 1905.336959][ T6320] team0 (unregistering): Port device team_slave_0 removed [ 1905.462156][ T6320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1905.595045][ T6320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1906.549871][ T6320] bond0 (unregistering): Released all slaves [ 1906.800061][T23665] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4809'. [ 1908.627529][T23691] loop1: detected capacity change from 0 to 2048 [ 1908.966326][T23691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1910.592299][T23537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1911.925915][T23537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1911.979342][T23537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1912.027309][T23537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1913.415984][T23537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1913.471793][T23537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1913.499466][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.506613][ T6320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1913.564123][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.571322][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1913.963815][T23727] loop5: detected capacity change from 0 to 1024 [ 1914.034129][T23727] EXT4-fs: Ignoring removed nobh option [ 1914.118580][T23727] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1914.208299][T23727] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1914.208299][T23727] [ 1915.489795][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.496151][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.521700][T23537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1915.757681][T23537] veth0_vlan: entered promiscuous mode [ 1915.804101][T23537] veth1_vlan: entered promiscuous mode [ 1915.889391][T23537] veth0_macvtap: entered promiscuous mode [ 1915.930655][T23537] veth1_macvtap: entered promiscuous mode [ 1916.083138][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.106856][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.136939][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.157176][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.206764][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.243222][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.305968][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1916.317525][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.329878][T23537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.358521][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.391291][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.426209][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.437316][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.448032][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.485436][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.505749][T23537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1916.532261][T23537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1916.572653][T23537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1916.622143][T23747] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4821'. [ 1916.642805][T23537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.685149][T23537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.724798][T23537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.757714][T23537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.807169][T23752] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1917.032100][T15698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.065255][T15698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.081337][T23756] kvm: kvm [23755]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a [ 1917.104346][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.126810][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.269092][T23765] binder: 23763:23765 ioctl 4018620d 0 returned -22 [ 1917.315923][T23767] loop5: detected capacity change from 0 to 1024 [ 1917.408635][T23771] binder: 23763:23771 ioctl c0306201 200000000000 returned -14 [ 1917.586215][T23769] loop0: detected capacity change from 0 to 32768 [ 1917.647221][T23767] hfsplus: b-tree write err: -5, ino 26 [ 1917.706565][T23769] JBD2: Ignoring recovery information on journal [ 1917.798023][T23769] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1917.829295][T15698] hfsplus: b-tree write err: -5, ino 25 [ 1917.861042][T15698] hfsplus: b-tree write err: -5, ino 4 [ 1918.059939][T15698] hfsplus: b-tree write err: -5, ino 2 [ 1919.607854][T23537] ocfs2: Unmounting device (7,0) on (node local) [ 1919.777579][T23790] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4832'. [ 1921.052953][T23804] loop0: detected capacity change from 0 to 1024 [ 1921.108401][T23804] EXT4-fs: Ignoring removed nobh option [ 1921.128463][T23804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1921.195552][T23804] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1921.195552][T23804] [ 1923.003472][T23821] loop6: detected capacity change from 0 to 8 [ 1923.061669][T23821] SQUASHFS error: Unable to read inode 0x11f [ 1923.168938][T22931] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1923.468275][T23827] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1925.011031][ T5808] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1925.260372][ T5808] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1925.308328][ T5808] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1925.351247][ T5808] usb 7-1: can't read configurations, error -71 [ 1926.370660][T23851] Set syz1 is full, maxelem 6117 reached [ 1927.966895][T23875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1929.273917][T23890] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4851'. [ 1929.880526][T23901] Set syz1 is full, maxelem 6117 reached [ 1930.106244][T23905] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1930.167713][T23909] loop5: detected capacity change from 0 to 512 [ 1930.219641][T23909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1930.246974][T23909] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1930.577204][T23917] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1931.153117][T23918] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.4855: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1931.362618][T23923] loop6: detected capacity change from 0 to 32768 [ 1931.643021][T19996] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1931.690121][T23926] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4860'. [ 1933.256789][T20958] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1934.624959][T20958] usb 2-1: device descriptor read/64, error -71 [ 1935.429432][T23954] loop5: detected capacity change from 0 to 16 [ 1935.441335][T23954] erofs: Unknown parameter '' [ 1936.096791][T20958] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1936.220606][T22931] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1938.708203][T23966] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1942.606960][T15344] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1942.836990][T15344] usb 7-1: device descriptor read/64, error -71 [ 1943.133424][T15344] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1943.316938][T15344] usb 7-1: device descriptor read/64, error -71 [ 1943.420541][T23996] loop0: detected capacity change from 0 to 128 [ 1943.447113][T15344] usb usb7-port1: attempt power cycle [ 1943.480163][T23996] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1944.346990][T23996] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1944.620574][T24004] loop5: detected capacity change from 0 to 32768 [ 1944.697019][T15344] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1944.811249][T24008] BUG: unable to handle page fault for address: ffffffffffffffec [ 1944.819033][T24008] #PF: supervisor read access in kernel mode [ 1944.825018][T24008] #PF: error_code(0x0000) - not-present page [ 1944.831016][T24008] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 1944.837035][T24008] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1944.842404][T24008] CPU: 0 PID: 24008 Comm: syz.0.4882 Not tainted syzkaller #0 [ 1944.849867][T24008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1944.859937][T24008] RIP: 0010:ext4_free_ext_path+0x42/0x100 [ 1944.865726][T24008] Code: 85 db 0f 84 a4 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 9d 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 04 24 31 ed 48 8d 43 28 4c [ 1944.885359][T24008] RSP: 0018:ffffc9000b4e7700 EFLAGS: 00010246 [ 1944.891446][T24008] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 1944.899433][T24008] RDX: ffffc90012206000 RSI: 000000000000f24c RDI: ffffffffffffffec [ 1944.907428][T24008] RBP: ffffc9000b4e7810 R08: ffff88805da7961f R09: 1ffff1100bb4f2c3 [ 1944.915416][T24008] R10: dffffc0000000000 R11: ffffed100bb4f2c4 R12: ffff88805da796b0 [ 1944.923403][T24008] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 1944.931392][T24008] FS: 00007fa9b4e5f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1944.940335][T24008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1944.946930][T24008] CR2: ffffffffffffffec CR3: 0000000062a3f000 CR4: 00000000003506f0 [ 1944.954920][T24008] Call Trace: [ 1944.958204][T24008] [ 1944.961150][T24008] finish_range+0x230/0x340 [ 1944.965718][T24008] ? update_tind_extent_range+0x3e0/0x3e0 [ 1944.971458][T24008] ? update_dind_extent_range+0x1c5/0x1e0 [ 1944.977198][T24008] ext4_ext_migrate+0xdc4/0x1060 [ 1944.982165][T24008] ? mb_regenerate_buddy+0x510/0x510 [ 1944.987468][T24008] ? down_read_killable+0x340/0x340 [ 1944.992686][T24008] ? sb_start_write+0x110/0x1c0 [ 1944.997561][T24008] ? mnt_want_write_file+0x16a/0x200 [ 1945.002880][T24008] ext4_ioctl+0x1ede/0x3b70 [ 1945.007398][T24008] ? ext4_fileattr_set+0x16e0/0x16e0 [ 1945.012701][T24008] ? mark_lock+0x94/0x320 [ 1945.017045][T24008] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1945.023045][T24008] ? do_vfs_ioctl+0x156c/0x1cc0 [ 1945.027918][T24008] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 1945.033570][T24008] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1945.039223][T24008] ? __lock_acquire+0x7d80/0x7d80 [ 1945.044265][T24008] ? slab_free_freelist_hook+0x130/0x1a0 [ 1945.049914][T24008] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 1945.055563][T24008] ? __kmem_cache_free+0xba/0x1f0 [ 1945.060614][T24008] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 1945.066265][T24008] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1945.071924][T24008] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1945.077421][T24008] ? __fget_files+0x28/0x460 [ 1945.082039][T24008] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1945.086990][T24008] ? security_file_ioctl+0x80/0xa0 [ 1945.092118][T24008] ? ext4_fileattr_set+0x16e0/0x16e0 [ 1945.097416][T24008] __se_sys_ioctl+0xfd/0x170 [ 1945.102025][T24008] do_syscall_64+0x55/0xb0 [ 1945.106463][T24008] ? clear_bhb_loop+0x40/0x90 [ 1945.111153][T24008] ? clear_bhb_loop+0x40/0x90 [ 1945.115846][T24008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1945.121770][T24008] RIP: 0033:0x7fa9b3f9de59 [ 1945.126198][T24008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1945.126747][T15344] usb 7-1: Using ep0 maxpacket: 16 [ 1945.145802][T24008] RSP: 002b:00007fa9b4e5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1945.145828][T24008] RAX: ffffffffffffffda RBX: 00007fa9b4226090 RCX: 00007fa9b3f9de59 [ 1945.145841][T24008] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 1945.145857][T24008] RBP: 00007fa9b4033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1945.145867][T24008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1945.145877][T24008] R13: 00007fa9b4226128 R14: 00007fa9b4226090 R15: 00007ffe6e768828 [ 1945.145896][T24008] [ 1945.145913][T24008] Modules linked in: [ 1945.145927][T24008] CR2: ffffffffffffffec [ 1945.145937][T24008] ---[ end trace 0000000000000000 ]--- [ 1945.145946][T24008] RIP: 0010:ext4_free_ext_path+0x42/0x100 [ 1945.189426][T15344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1945.191286][T24008] Code: 85 db 0f 84 a4 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 9d 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 04 24 31 ed 48 8d 43 28 4c [ 1945.215737][T15344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1945.221439][T24008] RSP: 0018:ffffc9000b4e7700 EFLAGS: 00010246 [ 1945.221461][T24008] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000 [ 1945.221472][T24008] RDX: ffffc90012206000 RSI: 000000000000f24c RDI: ffffffffffffffec [ 1945.221485][T24008] RBP: ffffc9000b4e7810 R08: ffff88805da7961f R09: 1ffff1100bb4f2c3 [ 1945.221498][T24008] R10: dffffc0000000000 R11: ffffed100bb4f2c4 R12: ffff88805da796b0 [ 1945.221511][T24008] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000 [ 1945.221524][T24008] FS: 00007fa9b4e5f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1945.221542][T24008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1945.221556][T24008] CR2: ffffffffffffffec CR3: 0000000062a3f000 CR4: 00000000003506f0 [ 1945.221647][T24008] Kernel panic - not syncing: Fatal exception [ 1945.221923][T24008] Kernel Offset: disabled