last executing test programs: 6m23.856699609s ago: executing program 4 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x38, 0x6, [0x0, 0x1000, 0x4, 0x1d, 0x11a6, 0xd]}}) 6m22.52321181s ago: executing program 4 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0ed", 0x3, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 6m21.413905495s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0xa, 0x300) fsopen(&(0x7f0000000400)='pstore\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000000)=""/183) 6m19.731562207s ago: executing program 4 (id=581): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1010c10, &(0x7f0000000080)=ANY=[], 0x7, 0x150f, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 6m16.695272412s ago: executing program 4 (id=588): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003900)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ftruncate(r0, 0x84) 6m15.510358518s ago: executing program 4 (id=593): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m59.803061106s ago: executing program 32 (id=593): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.021282293s ago: executing program 5 (id=1337): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000003c0)=0x30) 20.572560641s ago: executing program 5 (id=1339): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) bind$unix(r5, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x3, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200200, 0x0) sendmsg$unix(r6, &(0x7f0000000680)={&(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r7], 0x30}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001400)="17000000020001000003be8c5e687a8a12002bf3010100ecff3f0000000300000a0001000098fc5a53d3", 0x2a) 20.566211521s ago: executing program 1 (id=1340): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getgroups(0x0, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000000)={[{@debug}, {@delalloc}, {@nodioread_nolock}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@data_err_abort}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x444, 0x526}, 0x25, [0xf5, 0x8, 0x80000001, 0x6, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x400007, 0x1, 0x71c, 0x38, 0xffffff7f, 0x40000ac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x2, 0xd1, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x6eb, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x9], [0x5, 0x2, 0xd91, 0x8, 0x3ff, 0xfffffff8, 0x4000000a, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x1, 0x8, 0x8, 0x2, 0x405, 0xffeffffe, 0x9, 0x1, 0x809, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x200, 0x10000000, 0xfffffff9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0x6, 0x101, 0xfff7ffff, 0x7f, 0x8, 0x3, 0xffffffff, 0xc, 0x0, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0xa, 0x2, 0xdf9e, 0x40004, 0x8, 0xf9b, 0x3, 0x7, 0x401, 0x7, 0x2, 0x2, 0x3, 0x2, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x9, 0x3, 0x2, 0x5, 0x7, 0x402, 0x9, 0xffff, 0x40, 0x80000000, 0x3, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0x6], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0x3, 0x8000, 0x8, 0x8, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x6, 0xfffffc00, 0x4, 0x9, 0x4, 0x2, 0x2, 0xc, 0x27, 0x200400, 0x70, 0x0, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xec, 0x9a2, 0x80000001, 0x3, 0x400, 0x4, 0x8, 0x5, 0x0, 0xfffffffe, 0x9, 0x6, 0xc3, 0x7, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x0, 0x10001, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) 20.268350361s ago: executing program 2 (id=1342): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x40}, 0x6e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x6, 0x0, 0xff, 0x0, 0x0, 0x9}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 19.374414088s ago: executing program 5 (id=1344): r0 = syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}}}}}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0x200ffff, 0x4) sendto$inet(r5, 0x0, 0x0, 0x200047fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001800010026bd7000fddbdf251d0100000800030001f7fdff"], 0x34}}, 0x404c004) 17.110887508s ago: executing program 0 (id=1345): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) syz_io_uring_setup(0x45, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000011) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b76120}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) sendmmsg$inet6(r4, 0x0, 0x0, 0x4c040) 17.109413698s ago: executing program 2 (id=1346): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_NAME(0xf, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x141a82, 0x104) sendfile(r3, r3, 0x0, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACETEARDOWN(r5, 0x40101288, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) r6 = io_uring_setup(0x12f1, &(0x7f0000000380)={0x0, 0x8000000, 0x40, 0x2, 0x112}) poll(&(0x7f0000000000)=[{r6, 0x11000}], 0x1, 0x7) getresuid(0xfffffffffffffffd, 0x0, 0x0) 16.844440407s ago: executing program 5 (id=1347): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r4, 0x0, 0x7}, 0x38) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x9, 0x0, 0xffffffff, 0x7fffffff}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x103, 0x5, {0xb7f, 0x8100000, 0x1, 0xf4b}}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000001c0)={0x9, 0x7ff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) r5 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x8, 0x9, 0x0, 0x5, 0x7]}, &(0x7f0000000180)=0x54) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x6, 0x102, 0x4, {0x6, 0x7, 0xc, 0xa688}}) 15.948451744s ago: executing program 2 (id=1348): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x400b, &(0x7f0000000040)=ANY=[], 0x2, 0x6af, &(0x7f00000000c0)="$eJzs3ctrHPcdAPDvjFYrrQuOktiJWwIVMaSlorYeyK16idtD0SGU4B5CSy+LvY6F10qQlCKb0qrvaw/5A9KDDoWcCr0b0tJTm1uuOpVAoZecdFOZ2ZndlVa71trSru18PjA7v5nfc77z2J0RYgL40lqdi8rDSGJ17q3tbHlvd6m5t7s0VWQ3IyJLpxGV1iyS9Yjkk4jr0Zriq9nKonzSr58P11ZufPbF3uetpUox5eXTQfVOZqeYYjYiJop5r8nHau9m3/YGq7dTSXsLs4BdLgMH43bQY2eY6k943gJPg6T1vdljJuJcREwXvwOiuDqkox3d6RvqKgcAAADPqBf2Yz+24/y4xwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPkuL9/0kxpWV6NpLy/f+VYl2mGhE30jGPeXhJO/VwrOMAAAAAAAAAgNPx9f3Yj+04Xy4ftP40Xsk/L+SfX4kPYjMasRFXYjvqsRVbsRELETHT1VB1u761tbEQrz+y5uKxNRdHsbUAAAAAAAAA8Nz6Tax2/v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPgyRiojXLpwtleibSSkRMR0Q1K7cT8WmZfkYkZaLWtfLheMYCAAAAj236uJWf/mNgnRf2Yz+243y5fJDk9/yv5PfL0/FBrMdWrMVWNKMRt4p76OyuP93bXWru7S7d29tdyjv+2UFLq53v/2+ooectRuvZw/E9X8pL1OJ2rOVrrsTNfDC3Is1rZi4V42lPhzv5dTam2puFE47sVjHPOvtT91OE05YOW2EmrzTZjsh8MbasoRcHR+KRe6cysKeFSNtPfi4M6KncpGTImJ8r60XEH47E/M3//OUnJ2zmDLQjkUYeicWuo++VdhSmjq/8jb99/M6d5vrdO7c3587sMBqVo8fEUlckXh189D3lkagMWX6+faS3NmU1fhg/jrmYjbdjI9bi55EdD40oroxRL8plnzNdUYroidT1Q0tvP2ok1WK/tK6iaVxs5/SOqR5b0YjZmMpT9Xg9r3s+1iKJ9+JWNOJaXGufesuxHCtde/hi3z2cV8ivtOlwZ/3lb3ZCGH888ph2oH+etODwWl+pWVxf7Ipr9zV3Js/rXtOJ0ksn+D4a8tpY+VqRyPr4bT7/6VPyEP5oJBa6IvHy4Ej8OT83Npvrdzfu1N/v0/7OkeU3Jjvp35/lN/PQsh3yUkwXV5LDR0eW93L7KnM4XtXiLy6tvLQn72KelyTlmfqjrjP1WizGQnynOFOrxW+43pYW87xXe/MmypFf6so79Hsr3vvXeOIJwJDOfetctfbf2r9rH9V+V7tTe2v6B1PfnXqtGpN/n/xeZX7ijfS15K/xUfyyc/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vs37D+7Wm83GxvGJtH/W6SaS4kU+/cpUohan1VfxwsJfdWVNxllv4P0H1d5N3jn1vmJE++vJEuWbq560nXeuj2DMExGjjGrMHHcWTJ1SxHoT2eaVayaik1V0eOzLRYHnwdWte+9f3bz/4Ntr9+rvNt5trE8uL6/MryxfW7p6e63ZmG99jnuUwFno/B7oV+Lj0Q4IAAAAAAAAAAAAeKRR/FdDV3ezY9xUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bm1OheVyUhiYf7KfLa8t7vUzKYy3SlZiYg0jUh+EZF8EnE9WlPMdDWX9Ovnw7WVG599sfd5p61KWT4dVK9UHZi7U0wxGxETxXxgGwcHJ27vZr/2Tixpb2EWsMtl4GDc/h8AAP//ZlAA0Q==") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x40d, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x14, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = syz_open_pts(0xffffffffffffffff, 0x200000) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0xd, 0x400, 0x4, 0x9, 0xd7, 0x818e}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 15.485310059s ago: executing program 5 (id=1349): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, 0x0, 0x0}, 0x20) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000019100)='net/igmp\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) 14.021492854s ago: executing program 0 (id=1351): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000003c0)=0x30) 14.020924084s ago: executing program 5 (id=1352): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)='tunl0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r4, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x24, 0xe, 0x87, 0x20, 0x11ba, 0x1001, 0x5403, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf2, 0xff, 0x1e06a499d5815fb9, 0x81, "", [{{0x9, 0x4, 0xc3, 0x8, 0x0, 0xbc, 0xe, 0x0, 0x7}}]}}]}}, 0x0) 10.901519611s ago: executing program 2 (id=1354): r0 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@errors_continue}, {@data_err_ignore}, {@nodiscard}]}, 0xff, 0x460, &(0x7f0000001300)="$eJzs3M1vFOUfAPDvTLctr7+Wn/gCglbRSHxpaXk9eMFo4kETEz1gPNW2EKRQpdUIIYoe8GhIvBuPJv4FnvRi1JOJV70bEmK4gCYma2Z2pizb3cLSwlbm80mmfb47s53nOzPP7DPz7DSAyhrJfiQRmyLit4gYaoQ3LjDS+HXtyrmpv66cm0qiXn/9zyRf7uqVc1PlouX7NjaCer2IB9us98JbEZOzszOni3hs4eS7Y/Nnzj53/OTksZljM6cmDh3at3fnwIGJ/auSZ5bX1e0fze3Y9vKbF1+dOnLx7Z++yeq7qZjfnMft2vLB2ANN4fqRxtZt68mVrmyN2dxUTmo9rAhd6YuIbHf15+1/KPpi/eK8oXjp055WDrij6vV6vd3nc+F8HbiHJdHrGgC9UX7QZ9e/5XSXuh5rwuXDEe8dbOR/rZgac2qRFsv0t1zfrqaRiDhy/u8vsymLrw5Wa/sDAHffd4cj4tl2/b80mgcz/leMoQxHxJaI+H9E3BcRWyPi/oh82Qcj4qEu1986QrK0/5leuq3EblHW/3u+GNta7P/9U8/zLwz3FdHmPP/+5Ojx2Zk9xTbZHf2DWTy+zDq+f/HXzzvNa+7/ZVO2/rIv2JBeqrXcoJueXJhcYdqLLn8Ssb3Wkn8uiXIYJ4mIbRGxvau/fP0K4/jTX+/otNTN81/GKowz1b+KeKqx/89HS/6lpOP45PjBAxP7x9bF7MyesfKoWOrnXy681mn9K8p/FWT7f0Pr8Z9bzH84WRcxf+bsiXy8dj5aR4hv6sLvn3W8prnd438geSMvDxSvfTi5sHB6PGIgeWXp6xPX31vEteb8d+9ql3+an+PKbB+OiOwg3hkRj0TEo0XdH4uIxyNi1zL5//jCE+90n/8yd+VXUZb/9M32fzTv/+4LfSd++Lb7/EvZ/t+Xl3YXryw5/7U5D9xqBVe6/QAAAOC/IM2/A5+ko4vlNB0dbXyHf2tsSGfn5heeOTr3/qnpxnflh6M/Le90DTXdDx0v7g2X8URLvLe4b/xF3/o8Hp2am53udfJQcRs7tP/MH329rh1wx3leC6pL+4fq0v6hurR/qC7tH6rrxvbfePDh4x7VBbi7fP5DdWn/UF3aP1SX9g+V1PHZ+HRFj/wr3POFSLt/Vy16Wueki38MsXYKtTtd58G2s3p9ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wYAAP//k2XqEA==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x17c04, r4, 0x200, 0x66fc, 0x48a, 0xfff}) 10.664534619s ago: executing program 0 (id=1355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r5, 0x0, r3, 0x0, 0x7ffff000, 0x1) readv(r4, 0x0, 0x0) 10.377269357s ago: executing program 3 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x164, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in=@local, {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x87282}, {0x0, 0x8, 0x80000001, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x0, 0x0, 0x35}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd29, 0x70bd2b, 0x70bd2b, 0x70bd2d, 0x9, [0x100]}}]}, 0x164}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a0001002dbd7000000000000a008000000000000000fb"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 9.583465912s ago: executing program 3 (id=1357): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) eventfd(0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 9.582714012s ago: executing program 0 (id=1358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x80}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000180)={0xfbfffff8, 0x1008, 0xfbfbfffd, 0x2, 0x0, "1fb73a6900f4ff0900000000000000d3861000", 0x1, 0x5}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xd) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x2, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="c0000000001400001400350077673200000000000000000000000000abb7f63ed35099e3411534493d89d5d38f5ddb4094e282a5183304e7a062258af3704cf100f2a91ec3acdf62b74dd0381a2de12ea13209d48c8d0f7d298d85267aae451eb08c563612a1ae92c48f3528332f468c387d5f6f90b4217fd363521bbabbe7c2d335a0282333c6cf40278321150a7f98cee666ac2680ebd8e41c1271cb36df89a1090eec507ba31eac1bbf6e82efbd0c7c9795ad"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 9.454288076s ago: executing program 2 (id=1359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000aae000/0x4000)=nil, 0x4000, 0x2000003) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x3ba7, &(0x7f0000019100)={0x0, 0x4215, 0x1000, 0x1, 0x2d6}) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet(0x2, 0xa, 0x0) sendmmsg$sock(r4, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) 9.224363843s ago: executing program 1 (id=1360): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.448974852s ago: executing program 3 (id=1361): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = fanotify_init(0x200, 0x0) readv(r0, 0x0, 0x0) 3.220744299s ago: executing program 1 (id=1362): syz_open_dev$sndctrl(&(0x7f0000000240), 0x5000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x200, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r2 = syz_open_procfs(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) sendmmsg$unix(r2, 0x0, 0x0, 0x4000800) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000480)={@private2, 0x65, r8}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20020000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) mount$9p_fd(0x0, 0x0, 0x0, 0x818000, &(0x7f0000000b00)=ANY=[]) 3.045238375s ago: executing program 3 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000340)={0xfff, 0x8, 0xe, 0x0, 0x40, 0xd}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x5, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x50000000}, [@map_fd]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 2.345984647s ago: executing program 0 (id=1364): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000ac0)={r3, 0xd0}, &(0x7f0000000b00)=0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r6 = io_uring_setup(0x4c7d, &(0x7f0000000000)={0x0, 0x14af, 0x1, 0x1, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000004c0)={0x300, 0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0xffffffffffffffff}, 0x20) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 2.340680097s ago: executing program 1 (id=1365): socket(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x4008000) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) r6 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000001580)=@overlay={0x800, 0x6, 0x4, 0x4, 0x8, {}, {0x2, 0x2, 0x1, 0x10, 0x1, 0xc0, "1fc0eec1"}, 0x7, 0x3, {}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300)="be4d27564dd575f9a807b5ddafbf809e2c342f878aeb00fcebf18bdb19ea9e736b9734669ddc397f5f50a1607d705d9693d7f1008afa862769324f2268acb83b4dd21b098531ac268502b38842efd43a2769b5b0bef368501c9444293912900bfc023529267b8b6618509350a1c401bf7de49a29b5f756bb56f93f151a77b254f04ec605c812efa1df6d5a17d38589e260a64dc0860204a57414d0149f48f65b8ceff0c15fda8ff25686a7d779a1c370907b384229e256022e16b4875c10b6908a05e15903c5faa9d6e56c259a0a533fec", 0xd1, 0x4001000, &(0x7f0000000400)=@generic={0x23, "4c4e5e79e37a03741c674fdd3d674dd94d92295e5028a25a3cfdf4982496e451c8b5c0c878524a984958a7356149375aa4e58e854be0451deda95f3ecfa87aba769b21bf95661fc4576bb09a3350eea4fbee78b9d583c1017af33c26d2e2361b615832c601192a43ff55db3231e7cc6c4ac4e2ceb19275a47fd762873e39"}, 0x80) 1.325371108s ago: executing program 3 (id=1366): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_open_dev$video4linux(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) 1.104067185s ago: executing program 2 (id=1367): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file0\x00', 0x842, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1536, &(0x7f0000003480)="$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") r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r8 = fanotify_init(0x81, 0x40000) fanotify_mark(r8, 0x105, 0x40001032, r7, 0x0) read$FUSE(r8, &(0x7f0000002300)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.103205555s ago: executing program 1 (id=1368): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") truncate(&(0x7f0000000080)='./file2\x00', 0x6030) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f00000001c0)=ANY=[@ANYBLOB="6368661112b272646c617865642c756e68696b2c756e686964652c6e6f6a6f6c6965742c636865636b3d72656c617865642c696f636861727365743d6d6163677242656b2c00"], 0x2, 0x55a, &(0x7f0000000300)="$eJzs3d1uE80ZwPFnQ9JYrpRWpUIoCjCEVgpSMGsbjCyOtuuxM2DvWrtrlByhiDgowoGKUKnJCc0JbaX2IuhhL6J3hNo76Kv9cD79QcjnG/1/Fsx4d7zzrGPNo0m8swIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMRya7ZdtKRpvM6yGs6tBX5r/2n26mMb5OGhYkS/Ilb8T3I5uZ1uuv3b/d234v/mZS59Nie5uMjJzi9v/fr5zcmJ/utHBHwi//rBI21t77xb7fW6H88qkCvozvTwfQ3tmdA3LaehlQl9Va1U7MdL9VDVTVOHK2GkW8oNtBP5gVpwH6pitVpWurDid7xGzWnq/sZnj0q2XVEvCm3tBKHvPX5RCN0l02war5G0iXfHbZ7FH8SXJlKRdlpKrW/0uuVxJxA3Kn5Po9K4RiW7VCoWS/8rVp5Wnz6z7clsQ2lvg32EHGtxdh9a/Dyd4egNnM5Elv+lKUY86ci0qIEPV2oSiC+tIfsz/fz/+8d6ZL8H838/y9/e3z0rSf6/mz67Oyz/D4nl4h5bsi078k5WpSc96crHS4/oYh8N0eKJkVB8MdISJ9misi1KqlKRitjyWpakPhX/EOtipClaQlmRUCLRySfKlUC0OBKJL4EoWRBXHoqSolSlKmVRoqUgK+JLRzxpSE2c5CjrspG872VR1rAY9xoVh55Gvv+560ppxNkeS+bkf5zYWQ7fwKn8v5//AQAAAADAtWUlv32P5/9Tciep1U1T25cdFgAAAAAAOEPJX/7n4iL5dtYdsZj/AwAAAABw3VjJNXaWiOTlXlpbFyu5XIpfAgAAAAAAcE0kf/+/GxfJGij3xNpbLoX5PwAAAAAA18Tfxq6xH7anrf/8V4JgytptL//O2kzW5nU2b6Svu3H0iFF91prJDpIUlbSYnHT1nJVLG+0tgvktK9bHxWHtB+DsBfCXkwRwc1L+IffTNvfX0nIt2/OrtJd83TT31i12ZiYivRz96f3GnyU5/b97rRkrJxu9buHNh95aEstu3HJ3M1tA8dg6iiNi+ZSst5BcczHwjKeSCzGyfvOWrG/0unZ7ebof3eZEWpk43OPnmRF9fpH5tNV8tuJtvr8n7TMX91ksPC+KM+jssyiKpzzzL/IgbfNg4UFaDIiiNC6K0sEoBr8Xp4+iPC6K8imjAIDLsj4mC1lyLO9+/yhnSTbK/Vh2lxNm9y+ykLZZmE0G1snZASO6PW5Et0+Z3f597B5Iw3Js3O8/j2TVr/ELvg7tN2yWrPgtvPFp849ya2t759HG5urb7tvu+1KpXLGf2PbTkkwlp5EV5B4AwAAH77FjDcz/Y+/CYz3JZtW7R2fVWcb7zd5XCgryRj5IT9ZkMbnaIPnGwcCj5g98DWFxzKw1n6TJ9A4viyNmdb9IrnLoH7c0su3hGMoX8aMAAODCzI/Jw9+T/xfHzLsP5/LRs+P8gbu1AQCA86GDb1Y++qsVBKb9ulitFp1oSavAd1+qwNQaWhkv0oG75HgNrdqBH/mu34wrr0xNhyrstNt+EKm6H6i2H5rlZPlAld36PdQtx4uMG7ab2gm1cn0vctxI1UzoqnbnD00TLukgeXHY1q6pG9eJjO+p0O8Eri4oFWp9oKGpaS8ydRNXPdUOTMsJcuqV3+y0tKrp0A1MO/LTA/b7Ml7dD1rJYQuX/WYDAHBFbG3vvFvt9bofz7EysOPchZ8qAADIjMnSAAAAAAAAAAAAAAAAAAAAAADgCriI6/+oXPNKfynoqxIPlTOojB06Pp/74ATgXP0UAAD//ziETRw=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, '\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x5, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0x9, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0xbb, 0x3ff, 0x4002, 0x2, 0xe, 0x5, 0x1, 0x88, 0x2, 0x6, 0x20000005, 0xffffffff, 0x0, 0x9, 0x1b9315a1, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa5, 0x6, 0x2, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x6, 0x0, 0x2, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x2, 0x4, 0x4, 0xf, 0xae9, 0x3, 0x2, 0x6, 0x9, 0x7, 0x0, 0x0, 0x7ff, 0x4, 0x6, 0x4, 0x9, 0x65, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x3, 0x8000000000000000, 0x800000000009, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x8, 0x8, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xffffffffffffffff, 0x7]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000b40)={{0x5, 0x5, 0x1, 0x10, 'syz0\x00'}, 0x0, [0x11, 0xfffffffffffffc9f, 0xa, 0xd, 0x3, 0x8, 0x7f, 0x5, 0x81, 0x8, 0x4, 0x5, 0xa3be, 0x8, 0xe9a6, 0x302, 0x200, 0x0, 0x5, 0x6, 0x800000000, 0x0, 0x1, 0x1bf, 0xbb, 0xcab, 0x8000000000000000, 0x4, 0x9, 0xffffffffffffffff, 0xffffffff, 0x2, 0x2, 0x7ff, 0xffffffffffffff86, 0x100, 0x7fff, 0x6, 0x96, 0x5, 0x8, 0x5, 0x8, 0x6aa80000000, 0x401, 0x1, 0xffffffffffffffff, 0x5, 0x5, 0xe06, 0x8, 0x0, 0x800, 0x7, 0x200, 0x1, 0x3, 0x1, 0x6, 0x5, 0x95, 0x7, 0x8000000000000001, 0x6, 0xfff, 0x1, 0xff, 0x7, 0x9, 0x9, 0xfffffffffffffffe, 0x5, 0x7, 0x3, 0x7ff, 0x43fc, 0x9, 0x7, 0x5, 0x8, 0x0, 0xffffffffffffff81, 0xffffffffffff2a1c, 0xc, 0x10001, 0x2, 0x7, 0x6, 0x8001, 0x6, 0x7fffffffffffffff, 0xfe00000000000000, 0x9, 0xbd, 0x3, 0xd5, 0x3ff, 0x0, 0x9, 0x400, 0xffffffffffffff01, 0xffffffff, 0xd1, 0x9, 0x4, 0x5, 0x0, 0x3, 0x85c, 0x80000001, 0x4, 0x800, 0x7, 0x80, 0x7, 0xffffffffffffffff, 0x6, 0x6, 0x1ff, 0x8000000, 0x2, 0xfffffffffffffcfc, 0x0, 0x3, 0xfffffffffffffff4, 0x37b, 0x9, 0x8]}) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 551.012482ms ago: executing program 1 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = fanotify_init(0x200, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r5, 0x0, r3, 0x0, 0x7ffff000, 0x1) readv(r4, 0x0, 0x0) 371.08µs ago: executing program 0 (id=1370): syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x9}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/191, 0x41}, 0x2ad6}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) unshare(0x24020400) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000001c00), 0x12) 0s ago: executing program 3 (id=1371): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d61703d61636f726e2c6e6f636f6d7073657373006e6f726f636b2c6f76657204922856b097d3e74272696465726f636b7065726d2c6d6117d78fb622703d6e6f726d616c275f75013d7d60a467b86376e2c62d060dd59d160537d205e3947ffb35db72b68ab36ab5b148a3e1e7909de4c967c40033c2174e98411fc7064da9ceb3c504e0900055cc52dc04621d525e767c99ee9466f0e79c977bbb134362c720fa7b782cabcaae94c06db359f69945d7ea85bbd8a9e16d9187cb455675164d4c1065004c406c7185194f023438c245a60591ef62cb4c953c5cf15a0d7a9909072b968f83d6f6cc37a620f966b58316889f8ec29944eb71024be0ea4fd1e5afa5680ec675504f016ba5a6a92701b4c3f35224957e426add6b83e1e65c4a2b7a43ee551a220fda76751f0df1528156f56650e85a9a3c755aa352f9db239401ed37f5b0ebd5ad4c4210", @ANYRESHEX=0x0, @ANYBLOB='Asession=0x0000000000000018,unhide,unhide,overriderockperm,cruft,map=normal,cruft,\x00'], 0x2, 0x6b1, &(0x7f0000000840)="$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") r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0), 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) ioperm(0x0, 0x2, 0x7e) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r3, r2, 0x0, 0xffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, 0x0) r7 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000100)='-1\x00', 0x2) kernel console output (not intermixed with test programs): Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.615121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.622832][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.638782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.708118][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.742261][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.766824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.814341][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.858036][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.931271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.952652][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.989145][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.002106][ T4277] loop0: detected capacity change from 0 to 1024 [ 65.042474][ T1431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.108327][ T4283] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.254467][ T26] audit: type=1800 audit(1778848423.160:2): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 65.282866][ T4286] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 65.316014][ T4277] attempt to access beyond end of device [ 65.316014][ T4277] loop0: rw=0, want=393286, limit=1024 [ 65.346763][ T4277] attempt to access beyond end of device [ 65.346763][ T4277] loop0: rw=0, want=5780, limit=1024 [ 65.359379][ T4277] Buffer I/O error on dev loop0, logical block 2889, async page read [ 65.370082][ T4277] attempt to access beyond end of device [ 65.370082][ T4277] loop0: rw=0, want=393218, limit=1024 [ 65.397396][ T4277] Buffer I/O error on dev loop0, logical block 196608, async page read [ 65.413581][ T4277] attempt to access beyond end of device [ 65.413581][ T4277] loop0: rw=0, want=393220, limit=1024 [ 65.428959][ T4277] Buffer I/O error on dev loop0, logical block 196609, async page read [ 65.733606][ T4277] attempt to access beyond end of device [ 65.733606][ T4277] loop0: rw=0, want=393222, limit=1024 [ 66.120229][ T4277] Buffer I/O error on dev loop0, logical block 196610, async page read [ 66.161190][ T1109] Bluetooth: hci0: command 0x0419 tx timeout [ 66.172054][ T4277] attempt to access beyond end of device [ 66.172054][ T4277] loop0: rw=0, want=393224, limit=1024 [ 66.184464][ T1109] Bluetooth: hci2: command 0x0419 tx timeout [ 66.194870][ T1109] Bluetooth: hci1: command 0x0419 tx timeout [ 66.209402][ T4277] Buffer I/O error on dev loop0, logical block 196611, async page read [ 66.218436][ T1109] Bluetooth: hci4: command 0x0419 tx timeout [ 66.255997][ T4277] attempt to access beyond end of device [ 66.255997][ T4277] loop0: rw=0, want=393226, limit=1024 [ 66.282088][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 66.290960][ T4277] Buffer I/O error on dev loop0, logical block 196612, async page read [ 66.307196][ T4277] attempt to access beyond end of device [ 66.307196][ T4277] loop0: rw=0, want=393228, limit=1024 [ 66.396399][ T4277] Buffer I/O error on dev loop0, logical block 196613, async page read [ 66.437233][ T4277] attempt to access beyond end of device [ 66.437233][ T4277] loop0: rw=0, want=393230, limit=1024 [ 66.482847][ T4277] Buffer I/O error on dev loop0, logical block 196614, async page read [ 66.525754][ T4277] attempt to access beyond end of device [ 66.525754][ T4277] loop0: rw=0, want=393232, limit=1024 [ 66.552833][ T4277] Buffer I/O error on dev loop0, logical block 196615, async page read [ 66.564801][ T4277] Buffer I/O error on dev loop0, logical block 196616, async page read [ 66.697913][ T4301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.867780][ T4303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.956127][ T1109] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 66.986678][ T4301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.073210][ T4311] device wg1 entered promiscuous mode [ 68.056910][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 68.113416][ T4322] device bridge_slave_1 left promiscuous mode [ 68.132871][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.191173][ T4322] device bridge_slave_0 left promiscuous mode [ 68.216014][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.758540][ T4316] loop3: detected capacity change from 0 to 32768 [ 68.798007][ T4316] ======================================================= [ 68.798007][ T4316] WARNING: The mand mount option has been deprecated and [ 68.798007][ T4316] and is ignored by this kernel. Remove the mand [ 68.798007][ T4316] option from the mount to silence this warning. [ 68.798007][ T4316] ======================================================= [ 68.895887][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.965061][ T4316] XFS (loop3): Mounting V5 Filesystem [ 69.114536][ T4316] XFS (loop3): Ending clean mount [ 69.256551][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.276959][ T4234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.313454][ T4234] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 69.340405][ T26] audit: type=1804 audit(1778848427.250:3): pid=4316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.14" name="/newroot/3/file0/bus" dev="loop3" ino=9289 res=1 errno=0 [ 69.355825][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.398343][ T4234] usb 1-1: config 0 descriptor?? [ 69.670074][ T4196] XFS (loop3): Unmounting Filesystem [ 69.863125][ T4234] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 69.891074][ T4234] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 69.929799][ T4234] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5 [ 69.998505][ T4234] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 70.100719][ T4234] usb 1-1: USB disconnect, device number 2 [ 70.216566][ T4339] fido_id[4339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 70.930915][ T4346] loop0: detected capacity change from 0 to 1024 [ 70.963549][ T4341] loop3: detected capacity change from 0 to 40427 [ 71.134952][ T4346] EXT4-fs (loop0): Invalid want_extra_isize 0 [ 71.144676][ T4341] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 71.187745][ T4341] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 71.216545][ T4346] process 'syz.0.24' launched 'à_QÐB‘ôÐËÊlfÓm³›_Ýt·ÝϦ}of6ï}wæûöÍÎ.@ßËþI#^ˆï’ˆ‘¦mƒ‘o[ÛoõÁµ™lI¢VûìŸ$’|]cÿ$ÿÿP^y%"þø&âdº±ÝÊòÊüt©T\ÌëãÕ…Ëã•å•S¦çŠsÅK“SSgÞ™š|ÿ½w;ë›çÿûñÓ;ùöøê¿Ý;r+‰³q8ßÖÇS¸Þ\‹±ü9Š³Oì8ÑÆzIÒí°+yžE6ŒÄ@žõ-ÕFže×€=öu–Ö@ŸJä?ô©Æ< qmß¡ëàçÆý×.€6Æ?¸öÞH ׯ®&]e×»£h?kã÷¿oßÊ–èÜû' with NULL argv: empty string added [ 71.986164][ T4341] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 71.999104][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.009504][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.029790][ T4341] F2FS-fs (loop3): invalid crc value [ 72.248169][ T4341] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.975726][ C0] sched: RT throttling activated [ 74.311079][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.407864][ T4370] device vlan2 entered promiscuous mode [ 74.510320][ T4372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 74.642840][ T4375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.34'. [ 74.756130][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 74.761879][ T4377] tipc: Started in network mode [ 74.782550][ T4377] tipc: Node identity -lug, cluster identity 4711 [ 74.852313][ T4233] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 74.935821][ T1109] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.032208][ T4233] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 75.056257][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.074773][ T4233] usb 5-1: Product: syz [ 75.079360][ T4233] usb 5-1: Manufacturer: syz [ 75.083971][ T4233] usb 5-1: SerialNumber: syz [ 75.274197][ T4379] loop3: detected capacity change from 0 to 32768 [ 75.295934][ T1109] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.312606][ T1109] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.324503][ T1109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.334746][ T1109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 75.356524][ T1109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 75.388557][ T4379] XFS (loop3): Mounting V5 Filesystem [ 75.435082][ T4386] device syzkaller0 entered promiscuous mode [ 75.496027][ T1109] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.515417][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.535805][ T1109] usb 1-1: Product: syz [ 75.540110][ T1109] usb 1-1: Manufacturer: syz [ 75.574146][ T4379] XFS (loop3): Ending clean mount [ 75.596974][ T1109] cdc_wdm 1-1:1.0: skipping garbage [ 75.605555][ T1109] cdc_wdm 1-1:1.0: skipping garbage [ 75.620262][ T1109] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 75.627607][ T1109] cdc_wdm 1-1:1.0: Unknown control protocol [ 75.826792][ T4234] usb 1-1: USB disconnect, device number 3 [ 75.833194][ T4196] XFS (loop3): Unmounting Filesystem [ 75.940284][ T4395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40'. [ 75.990310][ T4395] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 76.014024][ T4395] netlink: 260 bytes leftover after parsing attributes in process `syz.4.40'. [ 77.325446][ T4233] usb 5-1: USB disconnect, device number 2 [ 77.572869][ T4449] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4192] was attempted by ""[4449] [ 77.919437][ T4471] Set syz1 is full, maxelem 2 reached [ 78.055883][ T4471] batman_adv: batadv0: Adding interface: dummy0 [ 78.062272][ T4471] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.148704][ T4478] Set syz1 is full, maxelem 2 reached [ 78.184278][ T4471] batman_adv: batadv0: Interface activated: dummy0 [ 78.259772][ T4476] batadv0: mtu less than device minimum [ 78.267899][ T4476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.281252][ T4476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.294204][ T4476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.307104][ T4476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.320075][ T4476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.332817][ T4476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.345578][ T4476] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.919267][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 80.997271][ T4526] device bridge_slave_1 left promiscuous mode [ 81.062937][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.086445][ T4526] device bridge_slave_0 left promiscuous mode [ 81.105266][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.352955][ T1325] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.576274][ T1325] usb 3-1: device descriptor read/64, error -71 [ 81.641619][ T13] cfg80211: failed to load regulatory.db [ 82.076019][ T4510] loop1: detected capacity change from 0 to 32768 [ 82.136015][ T1325] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 82.190123][ T4510] XFS (loop1): Mounting V5 Filesystem [ 82.435855][ T1325] usb 3-1: device descriptor read/64, error -71 [ 83.675874][ T1109] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 83.846115][ T1325] usb usb3-port1: attempt power cycle [ 83.860713][ T4510] XFS (loop1): Ending clean mount [ 84.040706][ T4188] XFS (loop1): Unmounting Filesystem [ 84.905906][ T1109] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 84.914267][ T1109] usb 1-1: config 0 has no interface number 0 [ 84.933339][ T1109] usb 1-1: config 0 interface 41 has no altsetting 0 [ 85.245899][ T1109] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 85.256406][ T4562] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 86.230220][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.275286][ T1109] usb 1-1: Product: syz [ 86.301703][ T1109] usb 1-1: config 0 descriptor?? [ 86.335996][ T1109] usb 1-1: can't set config #0, error -71 [ 86.365912][ T1109] usb 1-1: USB disconnect, device number 4 [ 87.735926][ T1325] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.068088][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 88.169058][ T1325] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 88.184662][ T1325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.198509][ T4583] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 88.199215][ T1325] usb 3-1: config 0 has no interface number 1 [ 88.217555][ T1325] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 88.237860][ T1325] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 88.246749][ T4583] team0: Port device team_slave_0 removed [ 88.480388][ T1325] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 88.511246][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.519881][ T1325] usb 3-1: Product: syz [ 88.524078][ T1325] usb 3-1: Manufacturer: syz [ 88.533613][ T1325] usb 3-1: SerialNumber: syz [ 88.609616][ T1325] usb 3-1: config 0 descriptor?? [ 88.726439][ T4228] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 88.739223][ T1325] usb-storage 3-1:0.127: USB Mass Storage device detected [ 89.010761][ T4566] netlink: 100 bytes leftover after parsing attributes in process `syz.2.70'. [ 89.058410][ T1325] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 89.294180][ T4601] loop3: detected capacity change from 0 to 256 [ 89.314437][ T1325] usb-storage 3-1:0.0: USB Mass Storage device detected [ 89.319678][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 89.321786][ T4228] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 89.355679][ T4228] usb 5-1: config 0 has no interface number 0 [ 89.365205][ T4228] usb 5-1: config 0 interface 41 has no altsetting 0 [ 89.381041][ T1325] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 89.391318][ T4601] FAT-fs (loop3): Directory bread(block 64) failed [ 89.413972][ T4601] FAT-fs (loop3): Directory bread(block 65) failed [ 89.423205][ T4601] FAT-fs (loop3): Directory bread(block 66) failed [ 89.429190][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'. [ 89.430174][ T4601] FAT-fs (loop3): Directory bread(block 67) failed [ 89.449479][ T4601] FAT-fs (loop3): Directory bread(block 68) failed [ 89.457668][ T4601] FAT-fs (loop3): Directory bread(block 69) failed [ 89.464426][ T4601] FAT-fs (loop3): Directory bread(block 70) failed [ 89.471781][ T4601] FAT-fs (loop3): Directory bread(block 71) failed [ 89.478783][ T4601] FAT-fs (loop3): Directory bread(block 72) failed [ 89.488502][ T1325] usb 3-1: USB disconnect, device number 5 [ 89.495673][ T4601] FAT-fs (loop3): Directory bread(block 73) failed [ 89.566085][ T4228] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 89.595843][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.622392][ T4228] usb 5-1: Product: syz [ 89.627596][ T4228] usb 5-1: Manufacturer: syz [ 89.795379][ T4228] usb 5-1: SerialNumber: syz [ 89.802550][ T4228] usb 5-1: config 0 descriptor?? [ 90.732868][ T4628] net_ratelimit: 12 callbacks suppressed [ 90.732890][ T4628] Set syz1 is full, maxelem 2 reached [ 91.283969][ T4628] Set syz1 is full, maxelem 2 reached [ 91.381218][ T4228] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 91.845729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 91.885720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 91.905720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.915732][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.925727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 91.945729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 91.955721][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 91.965719][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 91.975734][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 92.101043][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'. [ 92.211154][ T4643] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 92.229580][ T4643] team0: Port device team_slave_0 removed [ 93.935992][ T4228] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 93.975973][ T4671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 93.996709][ T4228] CoreChips: probe of 5-1:0.41 failed with error -71 [ 94.091501][ T4228] usb 5-1: USB disconnect, device number 3 [ 97.786212][ T4704] device wg1 entered promiscuous mode [ 99.270683][ T4711] ‰çî, [ 103.583690][ T4727] fuse: Invalid rootmode [ 103.856032][ T4230] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.844953][ T4760] device syzkaller0 entered promiscuous mode [ 104.856645][ T4230] usb 3-1: Using ep0 maxpacket: 32 [ 104.875656][ T4758] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 104.975932][ T4230] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.984217][ T4230] usb 3-1: config 0 has no interface number 0 [ 105.045739][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 105.908359][ T4767] device wg1 entered promiscuous mode [ 106.086078][ T4230] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 106.095365][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.189331][ T4230] usb 3-1: config 0 descriptor?? [ 106.221543][ T4230] usb 3-1: can't set config #0, error -71 [ 106.232695][ T4230] usb 3-1: USB disconnect, device number 6 [ 106.306796][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'. [ 107.269587][ T4782] device syzkaller0 entered promiscuous mode [ 107.269825][ T4784] netlink: 'syz.0.132': attribute type 16 has an invalid length. [ 107.283625][ T4227] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.318550][ T4782] 0: reclassify loop, rule prio 0, protocol 800 [ 107.325322][ T4784] netlink: 'syz.0.132': attribute type 3 has an invalid length. [ 107.354119][ T4784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.132'. [ 107.575379][ T4790] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.675489][ T4795] loop3: detected capacity change from 0 to 4096 [ 107.706167][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.732192][ T4227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 107.749349][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 107.785788][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 107.941569][ T4799] Zero length message leads to an empty skb [ 107.976244][ T4227] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 108.006212][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 108.037765][ T4227] usb 2-1: Product: syz [ 108.042049][ T4227] usb 2-1: Manufacturer: syz [ 108.086720][ T4227] usb 2-1: SerialNumber: syz [ 108.109219][ T4227] usb 2-1: config 0 descriptor?? [ 108.149741][ T4227] usb 2-1: no audio or video endpoints found [ 108.231993][ T4793] loop0: detected capacity change from 0 to 32768 [ 108.412253][ T4793] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.819446][ T4813] device syzkaller0 entered promiscuous mode [ 109.044465][ T4814] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.114382][ T4192] ocfs2: Unmounting device (7,0) on (node local) [ 109.654663][ T4815] syz.4.141 (4815) used greatest stack depth: 18512 bytes left [ 110.665857][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.700344][ T4841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.147'. [ 111.046549][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.315901][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.375872][ T21] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 111.442092][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.471204][ T4845] binder: BINDER_SET_CONTEXT_MGR already set [ 111.485933][ T4845] binder: 4844:4845 ioctl 4018620d 200000004a80 returned -16 [ 111.505568][ T21] usb 1-1: config 0 descriptor?? [ 111.658222][ T4851] device syzkaller0 entered promiscuous mode [ 111.756095][ T4234] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.061304][ T21] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 112.106061][ T21] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 112.118342][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 112.204223][ T4860] sctp: [Deprecated]: syz.4.156 (pid 4860) Use of int in maxseg socket option. [ 112.204223][ T4860] Use struct sctp_assoc_value instead [ 112.928394][ T21] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 112.947567][ T21] usb 1-1: USB disconnect, device number 5 [ 112.970052][ T21] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 113.006004][ T4234] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.025755][ T4234] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.041511][ T4863] fido_id[4863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 113.065761][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.082912][ T4234] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 113.116339][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.207247][ T4234] usb 3-1: config 0 descriptor?? [ 113.615425][ T4868] loop0: detected capacity change from 0 to 512 [ 113.713600][ T4868] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.158: inode has both inline data and extents flags [ 113.757460][ T4868] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.158: couldn't read orphan inode 15 (err -117) [ 113.800944][ T4868] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 113.898607][ T4234] hid-generic 0003:1E71:2009.0004: unknown main item tag 0x0 [ 113.917190][ T4234] hid-generic 0003:1E71:2009.0004: unknown main item tag 0x0 [ 113.924640][ T4234] hid-generic 0003:1E71:2009.0004: unknown main item tag 0x0 [ 113.955819][ T4234] hid-generic 0003:1E71:2009.0004: unknown main item tag 0x0 [ 113.976946][ T4234] hid-generic 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 114.105875][ T4870] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 114.152696][ T4233] usb 3-1: USB disconnect, device number 7 [ 115.495082][ T4890] device syzkaller0 entered promiscuous mode [ 115.585811][ T4233] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.640187][ T4892] qfq: no options [ 115.835832][ T4233] usb 3-1: Using ep0 maxpacket: 8 [ 115.957314][ T4233] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.974146][ T4233] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.991775][ T4261] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 116.146065][ T4233] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 116.160906][ T4233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.181628][ T4233] usb 3-1: Product: syz [ 116.192569][ T4233] usb 3-1: Manufacturer: syz [ 116.205795][ T4233] usb 3-1: SerialNumber: syz [ 116.264835][ T4232] usb 2-1: USB disconnect, device number 2 [ 116.897419][ T4233] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 117.503631][ T4233] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 117.513728][ T4233] usb 3-1: USB disconnect, device number 8 [ 117.536557][ T4907] device syzkaller0 entered promiscuous mode [ 117.591750][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.646032][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.745848][ T4261] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 117.763989][ T4261] usb 5-1: can't read configurations, error -71 [ 117.855814][ T4234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.945962][ T4227] usb 4-1: Using ep0 maxpacket: 16 [ 118.066118][ T4227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.075877][ T4233] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 118.076587][ T4227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.091843][ T4927] loop4: detected capacity change from 0 to 1024 [ 118.099630][ T4234] usb 2-1: Using ep0 maxpacket: 8 [ 118.141765][ T4927] hfsplus: failed to load catalog file [ 118.171397][ T4927] device syzkaller0 entered promiscuous mode [ 118.217175][ T4234] usb 2-1: config 162 has an invalid interface number: 79 but max is 1 [ 118.232532][ T4234] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 118.243725][ T4234] usb 2-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 118.254116][ T4234] usb 2-1: config 162 has no interface number 0 [ 118.260696][ T4234] usb 2-1: config 162 interface 79 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.276037][ T4227] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.285344][ T4234] usb 2-1: config 162 interface 79 has no altsetting 0 [ 118.336067][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.347020][ T4227] usb 4-1: Product: syz [ 118.348785][ T4233] usb 3-1: Using ep0 maxpacket: 32 [ 118.351574][ T4227] usb 4-1: Manufacturer: syz [ 118.361663][ T4227] usb 4-1: SerialNumber: syz [ 118.456710][ T4234] usb 2-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 118.480012][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.506757][ T4233] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.521161][ T4234] usb 2-1: Product: syz [ 118.525360][ T4234] usb 2-1: Manufacturer: syz [ 118.540911][ T4233] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.555856][ T4234] usb 2-1: SerialNumber: syz [ 118.676062][ T4233] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.689687][ T4233] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 118.708723][ T4233] usb 3-1: Product: syz [ 118.711705][ T4227] usb 4-1: 0:2 : does not exist [ 118.712941][ T4233] usb 3-1: Manufacturer: syz [ 118.758153][ T4233] hub 3-1:4.0: USB hub found [ 118.771540][ T4227] usb 4-1: USB disconnect, device number 2 [ 118.975935][ T4233] hub 3-1:4.0: 2 ports detected [ 119.253938][ T4234] pl2303 2-1:162.79: required endpoints missing [ 119.466901][ T4234] usb 2-1: USB disconnect, device number 3 [ 120.078785][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.132476][ T4940] loop3: detected capacity change from 0 to 1024 [ 120.166314][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.235910][ T4940] EXT4-fs (loop3): Ignoring removed orlov option [ 120.428968][ T4940] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 120.646334][ T4233] hub 3-1:4.0: activate --> -90 [ 121.078873][ T4234] usb 3-1: USB disconnect, device number 9 [ 121.095957][ T4233] usb 3-1-port2: config error [ 121.326125][ T4951] device syzkaller0 entered promiscuous mode [ 122.070064][ T4966] device syzkaller0 entered promiscuous mode [ 123.596240][ T4985] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 124.590098][ T4992] loop3: detected capacity change from 0 to 64 [ 124.838191][ T4996] xt_CONNSECMARK: invalid mode: 66 [ 126.016447][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.070136][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.107318][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.114242][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.132604][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.140706][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.174423][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.225405][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.241983][ T5021] hfs: request for non-existent node 131072 in B*Tree [ 126.251774][ T5021] hfs: request for non-existent node 131072 in B*Tree [ 126.253209][ T5019] netlink: 88 bytes leftover after parsing attributes in process `syz.2.202'. [ 126.264300][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.393835][ T4992] hfs: request for non-existent node 131072 in B*Tree [ 126.543287][ T4233] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.584122][ T4992] hfs: request for non-existent node 12 in B*Tree [ 126.607392][ T4992] hfs: request for non-existent node 12 in B*Tree [ 126.655440][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.672181][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.683676][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.694639][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.706151][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.718652][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.731182][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.742729][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 126.754457][ T5028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.203'. [ 127.374996][ T4992] hfs: request for non-existent node 13 in B*Tree [ 127.381556][ T4992] hfs: request for non-existent node 13 in B*Tree [ 127.390093][ T4992] hfs: request for non-existent node 14 in B*Tree [ 127.416226][ T4992] hfs: request for non-existent node 14 in B*Tree [ 127.497017][ T5032] binder_alloc: 5031: pid 5031 spamming oneway? 1 buffers allocated for a total size of 6144 [ 127.541559][ T5032] binder: 5031:5032 ioctl c0306201 200000000680 returned -14 [ 127.565826][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 127.589537][ T5035] device syzkaller0 entered promiscuous mode [ 127.851537][ T4233] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 127.862024][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.870584][ T4233] usb 5-1: Product: syz [ 127.875539][ T4233] usb 5-1: Manufacturer: syz [ 127.882808][ T4233] usb 5-1: SerialNumber: syz [ 127.895012][ T5049] loop0: detected capacity change from 0 to 512 [ 127.903278][ T4233] usb 5-1: config 0 descriptor?? [ 127.948100][ T4233] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 127.966796][ T5050] loop2: detected capacity change from 0 to 4096 [ 128.011111][ T5050] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 128.081453][ T5049] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #11: block 10: comm syz.0.211: lblock 0 mapped to illegal pblock 10 (length 1) [ 128.104230][ T5049] EXT4-fs (loop0): Remounting filesystem read-only [ 128.132563][ T5049] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 128.152741][ T5049] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.211: iget: bad extra_isize 90 (inode size 256) [ 128.189323][ T5049] EXT4-fs (loop0): Remounting filesystem read-only [ 128.226217][ T5049] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.211: error while reading EA inode 11 err=-117 [ 128.263417][ T5049] EXT4-fs (loop0): Remounting filesystem read-only [ 128.301270][ T26] audit: type=1326 audit(1778848486.210:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.3.216" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ceea12e59 code=0x0 [ 128.302145][ T5049] EXT4-fs (loop0): 1 orphan inode deleted [ 128.391037][ T5049] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,auto_da_alloc,. Quota mode: none. [ 128.585993][ T1325] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.833495][ T26] audit: type=1326 audit(1778848486.740:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5067 comm="syz.0.218" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ff970ce59 code=0x0 [ 128.986124][ T1325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 129.004550][ T1325] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 129.016121][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.044023][ T1325] usb 3-1: config 0 descriptor?? [ 129.985159][ T1325] smsusb:smsusb_probe: board id=8, interface number 0 [ 130.006078][ T1325] smsusb:smsusb_probe: Device initialized with return code -19 [ 130.385555][ T1325] usb 3-1: USB disconnect, device number 10 [ 130.386052][ T4233] gspca_ov534_9: sccb_write failed [ 130.475918][ T4228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.766078][ T4228] usb 2-1: Using ep0 maxpacket: 8 [ 130.906005][ T4228] usb 2-1: config 0 has no interfaces? [ 130.911544][ T4228] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 130.962685][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.001402][ T4228] usb 2-1: config 0 descriptor?? [ 131.526098][ T1325] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 131.545858][ T4233] gspca_ov534_9: reg_w failed -110 [ 132.006616][ T1325] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.014797][ T5100] loop0: detected capacity change from 0 to 512 [ 132.067212][ T5101] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 132.076497][ T5100] EXT4-fs (loop0): Ignoring removed nobh option [ 132.095256][ T1325] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 132.107316][ T5098] device syzkaller0 entered promiscuous mode [ 132.119426][ T5076] usb 2-1: USB disconnect, device number 4 [ 132.160422][ T5100] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 132.214597][ T5100] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.255979][ T4233] gspca_ov534_9: Unknown sensor 0000 [ 132.256492][ T4233] ov534_9: probe of 5-1:0.0 failed with error -22 [ 132.325970][ T1325] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 132.335887][ T1325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.341087][ T4233] usb 5-1: USB disconnect, device number 6 [ 132.344214][ T1325] usb 3-1: Product: syz [ 132.356086][ T1325] usb 3-1: Manufacturer: syz [ 132.360944][ T1325] usb 3-1: SerialNumber: syz [ 132.675255][ T1325] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 132.823348][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.834391][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.898173][ T1325] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 132.907281][ T5114] device syzkaller0 entered promiscuous mode [ 133.047696][ T5116] device syzkaller0 entered promiscuous mode [ 133.066314][ T4227] syzkaller0: tun_net_xmit 76 [ 133.096279][ T5111] syzkaller0: create flow: hash 3654402947 index 1 [ 133.306132][ T4232] syzkaller0: tun_net_xmit 76 [ 133.392043][ T5113] syzkaller0: delete flow: hash 3654402947 index 1 [ 133.524157][ T5124] loop1: detected capacity change from 0 to 256 [ 134.566123][ T5076] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.835972][ T5076] usb 1-1: Using ep0 maxpacket: 16 [ 134.956161][ T5076] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 135.976925][ T5076] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.279816][ T1325] usb 3-1: USB disconnect, device number 11 [ 136.335810][ T5076] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.506058][ T5076] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 136.531732][ T5076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.565850][ T5076] usb 1-1: Product: syz [ 136.595825][ T5076] usb 1-1: Manufacturer: syz [ 136.621099][ T5076] usb 1-1: SerialNumber: syz [ 136.929814][ T5135] loop2: detected capacity change from 0 to 1024 [ 136.938981][ T5076] usb 1-1: config 0 descriptor?? [ 136.960846][ T5076] usb 1-1: can't set config #0, error -71 [ 136.994841][ T5076] usb 1-1: USB disconnect, device number 7 [ 137.020514][ T5135] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 137.039411][ T5135] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.162049][ T5135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6840c01c, mo2=0003] [ 137.238418][ T5135] System zones: 0-1, 3-36 [ 137.367389][ T5135] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noinit_itable,,errors=continue. Quota mode: writeback. [ 137.578104][ T5150] device syzkaller0 entered promiscuous mode [ 139.435411][ T26] audit: type=1800 audit(1778848497.340:6): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.237" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 140.367459][ T5165] binder: 5164:5165 ioctl c0306201 0 returned -14 [ 140.394614][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.467352][ T5169] binder: 5164:5169 unknown command 1074553619 [ 140.480808][ T5169] binder: 5164:5169 ioctl c0306201 200000000040 returned -22 [ 140.544866][ T5169] syz.3.246 uses obsolete (PF_INET,SOCK_PACKET) [ 142.683856][ T5214] loop2: detected capacity change from 0 to 64 [ 142.794265][ T5216] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 143.076243][ T5193] loop3: detected capacity change from 0 to 32768 [ 143.142717][ T5193] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.250 (5193) [ 143.239561][ T5224] loop2: detected capacity change from 0 to 256 [ 143.293988][ T5193] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 143.314277][ T5193] BTRFS info (device loop3): setting nodatacow, compression disabled [ 143.329799][ T5193] BTRFS info (device loop3): force clearing of disk cache [ 143.345748][ T5193] BTRFS info (device loop3): enabling ssd optimizations [ 143.363154][ T5193] BTRFS info (device loop3): using spread ssd allocation scheme [ 143.469110][ T5193] BTRFS info (device loop3): turning off barriers [ 143.475660][ T5193] BTRFS info (device loop3): disabling free space tree [ 143.482793][ T5193] BTRFS info (device loop3): not using ssd optimizations [ 143.490542][ T5193] BTRFS info (device loop3): not using spread ssd allocation scheme [ 143.505831][ T5193] BTRFS info (device loop3): has skinny extents [ 144.573218][ T5240] device syzkaller0 entered promiscuous mode [ 144.608390][ T5224] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 144.699864][ T5224] exFAT-fs (loop2): Filesystem has been set read-only [ 144.735305][ T5224] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805f8b1b60 iblock : 8, err : -5) [ 144.749265][ T5224] exFAT-fs (loop2): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 144.828399][ T5193] BTRFS info (device loop3): clearing free space tree [ 144.837383][ T5193] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 144.853025][ T5260] loop1: detected capacity change from 0 to 512 [ 144.895883][ T5193] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.958437][ T5260] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 145.015852][ T5260] EXT4-fs (loop1): Unrecognized mount option "fsmagic=0xfffffffffffffffd" or missing value [ 145.056029][ T5266] loop0: detected capacity change from 0 to 512 [ 145.161157][ T5266] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.184253][ T5265] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.518036][ T5260] loop1: detected capacity change from 0 to 2048 [ 145.629933][ T5260] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 145.705946][ T5260] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.625254][ T5298] overlayfs: failed to clone upperpath [ 146.760289][ T5303] loop0: detected capacity change from 0 to 1024 [ 146.767363][ T4266] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.869680][ T5303] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 146.878350][ T5303] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 8192 [ 148.266039][ T4266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.278726][ T4266] usb 4-1: config 0 has no interfaces? [ 148.284456][ T4266] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 148.294251][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.316276][ T4266] usb 4-1: config 0 descriptor?? [ 148.375806][ T21] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 148.655853][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 149.115876][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.095942][ T21] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 150.108955][ T21] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 150.110822][ T5324] netlink: 'syz.0.281': attribute type 12 has an invalid length. [ 150.122038][ T4230] usb 4-1: USB disconnect, device number 3 [ 150.276079][ T21] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 150.296373][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.305620][ T21] usb 3-1: Product: syz [ 150.310950][ T21] usb 3-1: Manufacturer: syz [ 150.315648][ T21] usb 3-1: SerialNumber: syz [ 150.550556][ T5334] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 150.572453][ T5309] udc-core: couldn't find an available UDC or it's busy [ 150.599619][ T5309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.641863][ T5309] udc-core: couldn't find an available UDC or it's busy [ 150.673410][ T5309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.704043][ T5309] udc-core: couldn't find an available UDC or it's busy [ 150.719340][ T5309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.830200][ T21] usb 3-1: USB disconnect, device number 12 [ 152.381720][ T5348] binder_alloc: 5347: pid 5347 spamming oneway? 2 buffers allocated for a total size of 5120 [ 152.444419][ T5346] loop0: detected capacity change from 0 to 4096 [ 152.444418][ T5350] binder_alloc: 5347: pid 5347 spamming oneway? 3 buffers allocated for a total size of 5128 [ 152.584064][ T5346] EXT4-fs (loop0): inline encryption not supported [ 152.612764][ T5346] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 152.642159][ T5346] EXT4-fs (loop0): Ignoring removed bh option [ 152.677794][ T5346] EXT4-fs (loop0): Mount option "dax=inode" incompatible with ext3 [ 153.972198][ T5359] loop1: detected capacity change from 0 to 1024 [ 154.201074][ T5375] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 154.296561][ T4448] hfsplus: b-tree write err: -5, ino 25 [ 154.310178][ T4448] hfsplus: b-tree write err: -5, ino 4 [ 154.339566][ T4448] hfsplus: b-tree write err: -5, ino 2 [ 154.472460][ T5381] device syzkaller0 entered promiscuous mode [ 154.895231][ T5394] __nla_validate_parse: 1 callbacks suppressed [ 154.895253][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 156.108216][ T5400] loop1: detected capacity change from 0 to 32768 [ 156.220897][ T5400] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 156.237166][ T5400] JBD2: Ignoring recovery information on journal [ 156.291729][ T5400] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 156.430009][ T5400] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 156.447693][ T5400] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 156.457688][ T5400] OCFS2: File system is now read-only. [ 156.463176][ T5400] (syz.1.304,5400,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 156.471682][ T5400] (syz.1.304,5400,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 156.479498][ T5400] (syz.1.304,5400,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 156.488062][ T5400] (syz.1.304,5400,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 156.496498][ T5400] (syz.1.304,5400,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 156.504602][ T5400] (syz.1.304,5400,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 156.512828][ T5400] (syz.1.304,5400,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 156.521491][ T5400] (syz.1.304,5400,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 156.530216][ T5400] (syz.1.304,5400,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 156.539654][ T5400] (syz.1.304,5400,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 156.549578][ T5400] (syz.1.304,5400,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 156.558392][ T5400] (syz.1.304,5400,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 156.567703][ T5400] (syz.1.304,5400,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 156.576994][ T5400] (syz.1.304,5400,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 156.589910][ T5400] (syz.1.304,5400,1):ocfs2_symlink:1911 ERROR: status = -30 [ 156.598797][ T5400] (syz.1.304,5400,1):ocfs2_symlink:2065 ERROR: status = -30 [ 156.728391][ T5414] device syzkaller0 entered promiscuous mode [ 156.754532][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 156.861243][ T5416] loop1: detected capacity change from 0 to 64 [ 157.122790][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 157.196256][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 157.267121][ T5425] loop0: detected capacity change from 0 to 8 [ 157.459258][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 157.684719][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 157.984060][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 158.052406][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 158.122759][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 158.171091][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 158.223181][ T5432] hfs: request for non-existent node 131072 in B*Tree [ 158.258705][ T5432] hfs: request for non-existent node 131072 in B*Tree [ 158.281621][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 158.289093][ T5416] hfs: request for non-existent node 131072 in B*Tree [ 158.458296][ T5436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 158.544990][ T5436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.315'. [ 158.572908][ T5416] hfs: request for non-existent node 12 in B*Tree [ 158.598200][ T5416] hfs: request for non-existent node 12 in B*Tree [ 158.639022][ T5416] hfs: request for non-existent node 13 in B*Tree [ 158.663792][ T5438] device syzkaller0 entered promiscuous mode [ 158.678486][ T5416] hfs: request for non-existent node 13 in B*Tree [ 158.724000][ T5432] hfs: request for non-existent node 14 in B*Tree [ 158.765961][ T5432] hfs: request for non-existent node 14 in B*Tree [ 158.809270][ T5441] device syzkaller0 entered promiscuous mode [ 159.432474][ T5450] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 160.509828][ T5450] kvm: pic: non byte read [ 160.738876][ T5465] binder_alloc: 5463: pid 5463 spamming oneway? 2 buffers allocated for a total size of 5120 [ 160.740456][ T5466] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 160.818047][ T5470] loop1: detected capacity change from 0 to 64 [ 160.854176][ T5468] device syzkaller0 entered promiscuous mode [ 160.903764][ T5474] loop2: detected capacity change from 0 to 64 [ 161.446455][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 161.597096][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.057221][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.067100][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.131381][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.275878][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.322777][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.330850][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.339990][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.354813][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.383828][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.396773][ T5474] hfs: request for non-existent node 131072 in B*Tree [ 162.476998][ T5474] hfs: request for non-existent node 12 in B*Tree [ 162.490766][ T5474] hfs: request for non-existent node 12 in B*Tree [ 162.512644][ T5474] hfs: request for non-existent node 13 in B*Tree [ 162.519872][ T5474] hfs: request for non-existent node 13 in B*Tree [ 162.529048][ T5474] hfs: request for non-existent node 14 in B*Tree [ 162.535579][ T5474] hfs: request for non-existent node 14 in B*Tree [ 162.607617][ T5496] loop0: detected capacity change from 0 to 64 [ 162.650004][ T5499] loop3: detected capacity change from 0 to 512 [ 162.877237][ T5499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.371394][ T5521] loop0: detected capacity change from 0 to 256 [ 164.560890][ T5521] exfat: Deprecated parameter 'utf8' [ 164.608530][ T5521] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 165.659725][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 165.705988][ T1109] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 165.733570][ T5532] loop4: detected capacity change from 0 to 64 [ 165.846137][ T5530] device syzkaller0 entered promiscuous mode [ 165.976787][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 165.985857][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 166.061266][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.073990][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.085349][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.096415][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.107380][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.118656][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.129628][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.141062][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.152259][ T5535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.345'. [ 166.797066][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 166.846005][ T1109] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.877425][ T1109] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.907290][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.009138][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.025944][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.054947][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.092168][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.104372][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.112622][ T1109] usb 2-1: config 0 descriptor?? [ 167.141027][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.158330][ T1109] pwc: Askey VC010 type 2 USB webcam detected. [ 167.162017][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.178375][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.214591][ T5532] hfs: request for non-existent node 131072 in B*Tree [ 167.933359][ T1109] pwc: send_video_command error -71 [ 167.940958][ T1109] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 167.948976][ T1109] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 167.986181][ T1109] usb 2-1: USB disconnect, device number 5 [ 167.987267][ T5553] loop2: detected capacity change from 0 to 256 [ 168.101153][ T5551] device syzkaller0 entered promiscuous mode [ 168.112136][ T5532] hfs: request for non-existent node 12 in B*Tree [ 168.119444][ T5532] hfs: request for non-existent node 12 in B*Tree [ 168.128520][ T5532] hfs: request for non-existent node 13 in B*Tree [ 168.135141][ T5532] hfs: request for non-existent node 13 in B*Tree [ 168.140397][ T5553] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 168.155810][ T5532] hfs: request for non-existent node 14 in B*Tree [ 168.196556][ T5532] hfs: request for non-existent node 14 in B*Tree [ 168.248300][ T5557] device syzkaller0 entered promiscuous mode [ 168.310585][ T26] audit: type=1800 audit(1778848526.220:7): pid=5553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.349" name="bus" dev="loop2" ino=1048608 res=0 errno=0 [ 169.625306][ T5560] loop0: detected capacity change from 0 to 32768 [ 169.663705][ T5560] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.352 (5560) [ 172.009677][ T5597] loop4: detected capacity change from 0 to 512 [ 172.050237][ T5560] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 172.080616][ T5560] BTRFS info (device loop0): using free space tree [ 172.214750][ T5597] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 172.246505][ T5560] BTRFS info (device loop0): has skinny extents [ 172.278673][ T5597] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0xfffffffffffffffd" or missing value [ 172.388094][ T5560] BTRFS error (device loop0): open_ctree failed: -12 [ 173.055082][ T5597] loop4: detected capacity change from 0 to 2048 [ 173.170656][ T5597] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,data_err=abort,,errors=continue. Quota mode: writeback. [ 173.193203][ T5597] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.214726][ T5636] loop1: detected capacity change from 0 to 128 [ 175.520976][ T5636] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.678580][ T5636] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.517073][ T5647] loop0: detected capacity change from 0 to 64 [ 176.597825][ T5636] fscrypt: Error allocating hmac(sha512): -2 [ 176.603548][ T5640] ODEBUG: Out of memory. ODEBUG disabled [ 176.735002][ T5653] Illegal XDP return value 4294967262, expect packet loss! [ 176.761925][ T5640] syz.2.373 (5640): drop_caches: 2 [ 176.867660][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 176.928997][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 176.998078][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 177.030295][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 177.065312][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 177.072816][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 177.082616][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 177.089974][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 177.099210][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 177.106152][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 178.280202][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 178.287443][ T5647] hfs: request for non-existent node 131072 in B*Tree [ 179.226460][ T5647] hfs: request for non-existent node 12 in B*Tree [ 179.245870][ T5647] hfs: request for non-existent node 12 in B*Tree [ 179.342701][ T5647] hfs: request for non-existent node 13 in B*Tree [ 179.365778][ T5647] hfs: request for non-existent node 13 in B*Tree [ 179.436808][ T5676] hfs: request for non-existent node 14 in B*Tree [ 179.443295][ T5676] hfs: request for non-existent node 14 in B*Tree [ 179.716083][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 180.170708][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.276032][ T1107] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 180.506437][ T1107] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 180.550680][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.654038][ T1107] usb 4-1: Product: syz [ 180.696074][ T1107] usb 4-1: Manufacturer: syz [ 180.734269][ T1107] usb 4-1: SerialNumber: syz [ 181.270927][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 181.272035][ T5675] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 181.601768][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 181.608434][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 181.614614][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 182.129313][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.444754][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.767804][ T5718] loop0: detected capacity change from 0 to 64 [ 182.924840][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 182.954723][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 182.967915][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 182.975052][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 182.992026][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.001810][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.020435][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.030972][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.044079][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.055024][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.068955][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.076358][ T5718] hfs: request for non-existent node 131072 in B*Tree [ 183.105795][ T1107] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 183.175150][ T5718] hfs: request for non-existent node 12 in B*Tree [ 183.196609][ T1107] usb 4-1: device reset changed ep0 maxpacket size! [ 183.235051][ T1107] usb 4-1: USB disconnect, device number 4 [ 183.241253][ T5718] hfs: request for non-existent node 12 in B*Tree [ 183.272278][ T5718] hfs: request for non-existent node 13 in B*Tree [ 183.315806][ T5718] hfs: request for non-existent node 13 in B*Tree [ 183.334352][ T5724] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 183.341273][ T5718] hfs: request for non-existent node 14 in B*Tree [ 183.398001][ T5725] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.447203][ T1107] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 183.466262][ T5718] hfs: request for non-existent node 14 in B*Tree [ 183.785981][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 183.967293][ T1107] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 183.992049][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.036411][ T1107] usb 4-1: config 0 descriptor?? [ 184.078496][ T1107] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 184.385279][ T5736] netlink: 'syz.4.400': attribute type 13 has an invalid length. [ 185.321294][ T5744] binder: 5739:5744 ioctl c00c620f 200000000340 returned -22 [ 187.296336][ T1107] gspca_sonixj: reg_r err -110 [ 187.308501][ T1107] sonixj: probe of 4-1:0.0 failed with error -110 [ 187.352927][ T1107] usb 4-1: USB disconnect, device number 5 [ 187.612214][ T5751] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 187.842971][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.850498][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.221694][ T5736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.262970][ T5736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.616027][ T5736] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.624925][ T5736] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.634071][ T5736] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.643459][ T5736] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.756325][ T5749] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 188.765605][ T5749] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 188.803765][ T5749] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 189.139166][ T5768] loop3: detected capacity change from 0 to 4096 [ 190.482223][ T5782] __nla_validate_parse: 12 callbacks suppressed [ 190.482240][ T5782] netlink: 72 bytes leftover after parsing attributes in process `syz.4.413'. [ 190.624493][ T5768] loop3: detected capacity change from 0 to 32768 [ 190.644644][ T5787] device syzkaller0 entered promiscuous mode [ 190.838736][ T5768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.409 (5768) [ 190.933014][ T5768] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 191.497480][ T5768] BTRFS info (device loop3): turning off barriers [ 191.863721][ T5768] BTRFS info (device loop3): setting nodatasum [ 191.885138][ T5768] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 191.970530][ T5768] BTRFS info (device loop3): use zstd compression, level 3 [ 191.978118][ T5768] BTRFS info (device loop3): using free space tree [ 191.984658][ T5768] BTRFS info (device loop3): has skinny extents [ 191.997180][ T5797] device syzkaller0 entered promiscuous mode [ 192.255875][ T5768] BTRFS error (device loop3): open_ctree failed: -12 [ 192.422589][ T5800] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 193.622927][ T5849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 193.763812][ T5854] device syzkaller0 entered promiscuous mode [ 195.067492][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.073838][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.280458][ T5867] device syzkaller0 entered promiscuous mode [ 195.617070][ T5874] device syzkaller0 entered promiscuous mode [ 195.721749][ T5875] device syzkaller0 entered promiscuous mode [ 195.750543][ T5879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.436'. [ 195.777381][ T5879] unsupported nlmsg_type 40 [ 196.657846][ T5891] device syzkaller0 entered promiscuous mode [ 196.676328][ T5892] device syzkaller0 entered promiscuous mode [ 196.835850][ T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 197.106196][ T4266] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.285855][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.355832][ T4266] usb 4-1: Using ep0 maxpacket: 8 [ 197.476158][ T4266] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.517061][ T4266] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 197.746369][ T4266] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 197.810824][ T4266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.835811][ T13] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 197.858379][ T4266] usb 4-1: Product: syz [ 197.876731][ T4266] usb 4-1: Manufacturer: syz [ 197.881857][ T4266] usb 4-1: SerialNumber: syz [ 197.918056][ T5912] fuse: Invalid rootmode [ 198.157180][ T5919] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 198.164860][ T5919] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.653481][ T4266] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 198.801505][ T4266] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 198.842565][ T5172] udevd[5172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.886730][ T4266] usb 4-1: USB disconnect, device number 6 [ 198.905833][ T13] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 198.922728][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.945023][ T13] usb 3-1: Product: syz [ 198.958706][ T5921] device syzkaller0 entered promiscuous mode [ 198.964834][ T13] usb 3-1: Manufacturer: syz [ 198.975038][ T13] usb 3-1: SerialNumber: syz [ 199.016015][ T13] usb 3-1: can't set config #3, error -71 [ 199.033900][ T13] usb 3-1: USB disconnect, device number 13 [ 199.924483][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 201.563940][ T5940] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.573175][ T5940] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.582046][ T5940] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.590796][ T5940] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.879546][ T5940] team0: Port device vxlan0 added [ 202.516516][ T5948] device bridge1 entered promiscuous mode [ 206.480447][ T5984] device syzkaller0 entered promiscuous mode [ 211.235838][ T5076] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 211.565757][ T5076] usb 5-1: Using ep0 maxpacket: 16 [ 211.686523][ T5076] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.711039][ T5076] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.826857][ T5076] usb 5-1: config 0 interface 0 has no altsetting 0 [ 211.834312][ T5076] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 211.848864][ T5076] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.956027][ T5076] usb 5-1: config 0 descriptor?? [ 213.635841][ T5076] usbhid 5-1:0.0: can't add hid device: -71 [ 213.642042][ T5076] usbhid: probe of 5-1:0.0 failed with error -71 [ 213.661840][ T5076] usb 5-1: USB disconnect, device number 7 [ 213.806635][ T4232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 214.106126][ T6057] tipc: Enabled bearer , priority 0 [ 214.136414][ T6057] device syzkaller0 entered promiscuous mode [ 214.196629][ T6057] tipc: Resetting bearer [ 214.255884][ T4232] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.277653][ T6056] tipc: Resetting bearer [ 214.301697][ T4232] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.312685][ T6056] tipc: Disabling bearer [ 214.318681][ T4232] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.329760][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.376700][ T6042] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 216.108497][ T6072] device syzkaller0 entered promiscuous mode [ 217.394698][ T5076] usb 1-1: USB disconnect, device number 8 [ 217.552619][ T6080] device syzkaller0 entered promiscuous mode [ 222.961067][ T4232] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.686884][ T6108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 223.745771][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 223.865835][ T4232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.902110][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.100452][ T4232] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.125475][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.134449][ T4232] usb 1-1: Product: syz [ 225.152850][ T4232] usb 1-1: Manufacturer: syz [ 225.159140][ T4232] usb 1-1: SerialNumber: syz [ 225.226456][ T4232] usb 1-1: can't set config #1, error -71 [ 225.256035][ T4232] usb 1-1: USB disconnect, device number 9 [ 225.309797][ T6130] device syzkaller0 entered promiscuous mode [ 226.046978][ T4266] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 226.212565][ T6157] device syzkaller0 entered promiscuous mode [ 226.416632][ T4266] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 226.450985][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.607048][ T4266] usb 1-1: config 0 descriptor?? [ 226.922518][ T6147] udc-core: couldn't find an available UDC or it's busy [ 226.998753][ T6147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.433618][ T6166] udc-core: couldn't find an available UDC or it's busy [ 227.573168][ T6166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 228.483110][ T4266] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0f [ 228.490839][ T4266] hackrf 1-1:0.0: Could not detect board [ 228.497045][ T4266] hackrf: probe of 1-1:0.0 failed with error -110 [ 231.167452][ T4228] usb 1-1: USB disconnect, device number 10 [ 231.959025][ T6195] loop4: detected capacity change from 0 to 40427 [ 231.991408][ T6195] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 232.048691][ T6195] F2FS-fs (loop4): invalid crc value [ 232.245962][ T6195] F2FS-fs (loop4): Found nat_bits in checkpoint [ 232.635337][ T6195] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 232.893802][ T6220] netlink: 76 bytes leftover after parsing attributes in process `syz.1.534'. [ 233.298716][ T6231] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 233.665875][ T26] audit: type=1107 audit(1778848591.290:8): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 234.176259][ T6240] device syzkaller0 entered promiscuous mode [ 234.212040][ T6242] Set syz1 is full, maxelem 2 reached [ 234.449735][ T6248] loop4: detected capacity change from 0 to 512 [ 234.671585][ T6254] IPVS: Error connecting to the multicast addr [ 235.979789][ T6248] EXT4-fs (loop4): 1 truncate cleaned up [ 236.000087][ T6248] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 239.241604][ T4232] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 239.336602][ T4197] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 239.418100][ T4197] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 239.535737][ T4197] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 242.637459][ T6300] device syzkaller0 entered promiscuous mode [ 242.694877][ T6301] 0: reclassify loop, rule prio 0, protocol 800 [ 242.908463][ T6309] netlink: 'syz.4.560': attribute type 39 has an invalid length. [ 245.558510][ T6343] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 245.590543][ T6343] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.633645][ T6343] bond2: (slave ip6gretap1): making interface the new active one [ 245.644378][ T6343] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 245.655028][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 245.675661][ C1] hrtimer: interrupt took 55450 ns [ 245.705859][ T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 245.741506][ T6347] loop2: detected capacity change from 0 to 128 [ 246.096114][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 246.976279][ T4266] Bluetooth: hci4: command 0x0411 tx timeout [ 247.227571][ T13] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 247.965871][ T13] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 247.975260][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.993878][ T13] usb 4-1: Product: syz [ 248.008483][ T13] usb 4-1: Manufacturer: syz [ 248.013163][ T13] usb 4-1: SerialNumber: syz [ 248.039507][ T13] usb 4-1: config 0 descriptor?? [ 248.088150][ T13] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 249.256001][ T13] gspca_zc3xx: reg_w_i err -110 [ 249.941189][ T6376] tipc: Enabling of bearer rejected, failed to enable media [ 251.152453][ T6385] loop4: detected capacity change from 0 to 256 [ 251.205861][ T13] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 251.212204][ T13] gspca_zc3xx: probe of 4-1:0.0 failed with error -110 [ 251.267170][ T6385] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 251.303126][ T13] usb 4-1: USB disconnect, device number 7 [ 253.097655][ T6408] device syzkaller0 entered promiscuous mode [ 253.181966][ T6406] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.277471][ T6406] kvm: pic: level sensitive irq not supported [ 253.277637][ T6406] kvm: pic: non byte read [ 253.335061][ T6406] kvm: pic: level sensitive irq not supported [ 253.335152][ T6406] kvm: pic: non byte read [ 253.374446][ T6406] kvm: pic: level sensitive irq not supported [ 253.374887][ T6406] kvm: pic: non byte read [ 253.418917][ T6406] kvm: pic: level sensitive irq not supported [ 253.420131][ T6406] kvm: pic: non byte read [ 253.469796][ T6406] kvm: pic: level sensitive irq not supported [ 253.469878][ T6406] kvm: pic: non byte read [ 253.652131][ T6406] kvm: pic: level sensitive irq not supported [ 253.652241][ T6406] kvm: pic: non byte read [ 253.671395][ T6406] kvm: pic: level sensitive irq not supported [ 253.671472][ T6406] kvm: pic: non byte read [ 253.682738][ T6406] kvm: pic: level sensitive irq not supported [ 253.682833][ T6406] kvm: pic: non byte read [ 253.721637][ T4232] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 254.136399][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 254.365851][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.398915][ T4232] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 254.484224][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.588623][ T4232] usb 4-1: config 0 descriptor?? [ 255.070720][ T4232] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 255.619816][ T6419] netlink: 68 bytes leftover after parsing attributes in process `syz.3.589'. [ 255.665563][ T4232] usb 4-1: USB disconnect, device number 8 [ 255.695970][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.703535][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.163318][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'. [ 262.459219][ T6506] binder: 6505:6506 ioctl c0306201 200000000280 returned -14 [ 269.770144][ T6533] fuse: Bad value for 'rootmode' [ 271.871243][ T6549] futex_wake_op: syz.3.622 tries to shift op by -1; fix this program [ 272.552966][ T6551] netlink: 'syz.1.620': attribute type 10 has an invalid length. [ 272.928513][ T6551] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.694909][ T4271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.909581][ T4271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.971338][ T6590] tipc: Started in network mode [ 275.978792][ T6590] tipc: Node identity 9e64bd72c679, cluster identity 4711 [ 275.999641][ T6590] tipc: Enabled bearer , priority 0 [ 276.022117][ T6591] device syzkaller0 entered promiscuous mode [ 277.196146][ T6600] loop3: detected capacity change from 0 to 131072 [ 277.207799][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 277.217738][ T4271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.444561][ T6597] tipc: Resetting bearer [ 277.474150][ T4232] tipc: Node number set to 1478344050 [ 277.488597][ T6588] tipc: Resetting bearer [ 277.538929][ T6588] tipc: Disabling bearer [ 277.587996][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 277.683400][ T6600] F2FS-fs (loop3): Found nat_bits in checkpoint [ 277.735944][ T6600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 277.800783][ T4271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.555063][ T4227] Bluetooth: hci5: command 0x041b tx timeout [ 283.137706][ T4232] Bluetooth: hci5: command 0x040f tx timeout [ 283.346865][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.364297][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.449965][ T6574] device bridge_slave_0 entered promiscuous mode [ 283.493120][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.530070][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.586387][ T6574] device bridge_slave_1 entered promiscuous mode [ 283.739100][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.818806][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.982468][ T6574] team0: Port device team_slave_0 added [ 284.033222][ T6574] team0: Port device team_slave_1 added [ 284.156543][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.202627][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.343737][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.036078][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.036096][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.036121][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.198746][ T6574] device hsr_slave_0 entered promiscuous mode [ 285.225887][ T4228] Bluetooth: hci5: command 0x0419 tx timeout [ 285.233249][ T6574] device hsr_slave_1 entered promiscuous mode [ 285.246483][ T6574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.246556][ T6574] Cannot create hsr debugfs directory [ 285.763764][ T6643] device syzkaller0 entered promiscuous mode [ 286.099381][ T6574] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.120737][ T6574] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.173916][ T6650] overlayfs: missing 'lowerdir' [ 286.200330][ T6574] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.220418][ T6574] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.409842][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.506938][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.536589][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.578918][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.746797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.778058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.814731][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.821877][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.857430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.893373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.922309][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.929657][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.009098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.041998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.084064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.215578][ T6678] loop3: detected capacity change from 0 to 764 [ 288.228165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.261238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.293491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.626279][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.638702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.150065][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.215484][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.439214][ T6574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.483136][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.533064][ T6690] device syzkaller0 entered promiscuous mode [ 289.571898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.150253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.549374][ T26] audit: type=1326 audit(1778848648.460:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.3.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ceea12e59 code=0x7ffc0000 [ 290.582741][ T26] audit: type=1326 audit(1778848648.470:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.3.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ceea12e59 code=0x7ffc0000 [ 290.619196][ T26] audit: type=1326 audit(1778848648.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.3.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ceea12e59 code=0x7ffc0000 [ 291.461458][ T26] audit: type=1326 audit(1778848648.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6704 comm="syz.3.656" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ceea12e59 code=0x7ffc0000 [ 294.381536][ T4271] device hsr_slave_0 left promiscuous mode [ 294.507024][ T4271] device hsr_slave_1 left promiscuous mode [ 294.591114][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.680901][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.890698][ T4271] device bridge_slave_1 left promiscuous mode [ 294.902466][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.657319][ T4271] device bridge_slave_0 left promiscuous mode [ 299.668241][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.728947][ T4271] team0 (unregistering): Port device vxlan0 removed [ 300.082754][ T6743] binder_alloc: 6741: pid 6741 spamming oneway? 2 buffers allocated for a total size of 5120 [ 300.885578][ T6743] binder_alloc: 6741: pid 6741 spamming oneway? 3 buffers allocated for a total size of 5216 [ 302.474413][ T4271] team0 (unregistering): Port device team_slave_1 removed [ 302.504372][ T4271] team0 (unregistering): Port device team_slave_0 removed [ 302.535279][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.581441][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.766289][ T4271] bond0 (unregistering): Released all slaves [ 302.873599][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.896363][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.916423][ T6769] netlink: 'syz.1.668': attribute type 2 has an invalid length. [ 302.944318][ T6777] loop2: detected capacity change from 0 to 128 [ 302.959118][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.996837][ T6777] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 306.793721][ T6813] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.153525][ T6823] device syzkaller0 entered promiscuous mode [ 307.167855][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'. [ 307.460720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.681874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.263386][ T6574] device veth0_vlan entered promiscuous mode [ 308.316584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.345097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.389436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.416784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.482369][ T6574] device veth1_vlan entered promiscuous mode [ 308.500637][ T6843] device syzkaller0 entered promiscuous mode [ 308.576199][ T4232] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 308.759342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.789592][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.830436][ T6574] device veth0_macvtap entered promiscuous mode [ 308.880280][ T6574] device veth1_macvtap entered promiscuous mode [ 308.936010][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 308.973857][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.005818][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 309.042745][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.063035][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.104121][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.155022][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.185474][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.284944][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.339020][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.361466][ T4232] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 309.378429][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.386532][ T4232] usb 4-1: Product: syz [ 309.390724][ T4232] usb 4-1: Manufacturer: syz [ 309.395464][ T4232] usb 4-1: SerialNumber: syz [ 309.402172][ T4232] usb 4-1: config 0 descriptor?? [ 309.431749][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.460269][ T4232] hub 4-1:0.0: bad descriptor, ignoring hub [ 309.469950][ T4232] hub: probe of 4-1:0.0 failed with error -5 [ 309.501333][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.627893][ T4232] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 309.683452][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.834561][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.285808][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.392011][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.456410][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.498813][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.542327][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.593822][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.623139][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.636297][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.656634][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.684279][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.713361][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.741325][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.802118][ T6574] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.825917][ T6574] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.851111][ T6574] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.885374][ T6574] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.078023][ T4455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.120512][ T4455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.177643][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.213938][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.234313][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.265451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.336903][ T21] usb 4-1: USB disconnect, device number 9 [ 312.340810][ T6907] overlayfs: failed to clone upperpath [ 312.419939][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.618'. [ 312.460193][ T6903] device syzkaller0 left promiscuous mode [ 312.497154][ T6899] netlink: 'syz.5.618': attribute type 10 has an invalid length. [ 312.529934][ T6899] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 312.557442][ T6919] (unnamed net_device) (uninitialized): up delay (1073744714) is not a multiple of miimon (100), value rounded to 1073744700 ms [ 312.730952][ T6922] device bond_slave_0 entered promiscuous mode [ 312.737773][ T6922] device bond_slave_1 entered promiscuous mode [ 312.756725][ T6922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.791928][ T6922] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 312.850466][ T6925] netlink: 14 bytes leftover after parsing attributes in process `syz.2.697'. [ 312.872137][ T6925] device bond_slave_0 left promiscuous mode [ 312.906009][ T6925] device bond_slave_1 left promiscuous mode [ 313.066307][ T6925] bond3: (slave macvlan2): Releasing active interface [ 313.123072][ T6925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.184895][ T6925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.230476][ T6925] bond0 (unregistering): Released all slaves [ 316.925588][ T6985] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 317.073386][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 317.143538][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.155624][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.522838][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 318.715871][ T4227] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 320.013221][ T7036] device syzkaller0 entered promiscuous mode [ 320.125932][ T4227] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 320.145515][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.201874][ T4227] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 320.230630][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.284369][ T4227] usb 2-1: config 0 descriptor?? [ 320.557247][ T7063] loop3: detected capacity change from 0 to 2048 [ 320.585770][ T4227] usb 2-1: string descriptor 0 read error: -71 [ 320.625258][ T7064] syz.5.727 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 320.650459][ T4227] usb 2-1: USB disconnect, device number 6 [ 320.706608][ T7063] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000000,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 321.687406][ T6776] udevd[6776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.975381][ T26] audit: type=1804 audit(1778848679.880:13): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.736" name="bus" dev="ramfs" ino=43826 res=1 errno=0 [ 322.334333][ T26] audit: type=1804 audit(1778848679.910:14): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.736" name="bus" dev="ramfs" ino=43826 res=1 errno=0 [ 323.234409][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'. [ 323.363725][ T7107] team0 (unregistering): Port device team_slave_1 removed [ 323.789834][ T7137] device syzkaller0 entered promiscuous mode [ 324.065752][ T5754] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 324.356101][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 324.515969][ T5754] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.431814][ T5754] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 325.480298][ T7148] crypto_alloc_aead failed rc=-2 [ 325.588864][ T5754] usb 3-1: can't read configurations, error -71 [ 327.494223][ T7182] lo speed is unknown, defaulting to 1000 [ 327.506966][ T7182] lo speed is unknown, defaulting to 1000 [ 327.533796][ T7182] lo speed is unknown, defaulting to 1000 [ 327.693976][ T7182] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 327.777536][ T7194] device syzkaller0 entered promiscuous mode [ 328.623795][ T7182] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 329.789795][ T7210] netlink: 96 bytes leftover after parsing attributes in process `syz.0.755'. [ 330.531571][ T7182] lo speed is unknown, defaulting to 1000 [ 330.588439][ T7182] lo speed is unknown, defaulting to 1000 [ 330.619658][ T7214] device syzkaller0 entered promiscuous mode [ 330.648751][ T7182] lo speed is unknown, defaulting to 1000 [ 330.652817][ T7214] 0: reclassify loop, rule prio 0, protocol 700 [ 330.670374][ T7182] lo speed is unknown, defaulting to 1000 [ 330.690206][ T7182] lo speed is unknown, defaulting to 1000 [ 337.127275][ T5131] Bluetooth: hci0: command 0x0c20 tx timeout [ 338.413403][ T7324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 352.543876][ T7466] device syzkaller0 entered promiscuous mode [ 354.243852][ T7484] device syzkaller0 entered promiscuous mode [ 357.263677][ T7531] device syzkaller0 entered promiscuous mode [ 357.416271][ T7538] loop3: detected capacity change from 0 to 512 [ 357.817553][ T7428] Set syz1 is full, maxelem 65536 reached [ 359.447585][ T7538] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 359.500415][ T7538] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.876394][ T7571] x_tables: duplicate underflow at hook 3 [ 361.486360][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.833'. [ 361.596074][ T7582] device syzkaller0 entered promiscuous mode [ 366.981216][ T7629] binder: 7626:7629 ioctl c0285840 0 returned -22 [ 367.942901][ T7627] device syzkaller0 entered promiscuous mode [ 368.535735][ T5754] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 368.805776][ T5754] usb 4-1: Using ep0 maxpacket: 16 [ 368.925993][ T5754] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.995210][ T5754] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.266360][ T5754] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.325313][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.424130][ T5754] usb 4-1: Product: syz [ 369.474901][ T5754] usb 4-1: Manufacturer: syz [ 369.541088][ T5754] usb 4-1: SerialNumber: syz [ 369.966302][ T5754] usb 4-1: 0:2 : does not exist [ 370.012776][ T5754] usb 4-1: USB disconnect, device number 10 [ 370.060717][ T6776] udevd[6776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.271683][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 372.271754][ T7698] block device autoloading is deprecated and will be removed. [ 373.299582][ T7711] device vlan1 entered promiscuous mode [ 374.535848][ T7719] kvm [7718]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xd200 [ 378.518862][ T7782] netlink: 'syz.3.874': attribute type 1 has an invalid length. [ 379.016466][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.023109][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.689054][ T7797] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 379.748921][ T7802] netlink: 44 bytes leftover after parsing attributes in process `syz.5.879'. [ 382.379758][ T7832] IPVS: rr: FWM 3 0x00000003 - no destination available [ 384.470945][ T7850] loop3: detected capacity change from 0 to 512 [ 385.737219][ T7850] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 385.872175][ T7855] device syzkaller0 entered promiscuous mode [ 386.112881][ T7859] netlink: 84 bytes leftover after parsing attributes in process `syz.5.889'. [ 386.470974][ T7859] loop5: detected capacity change from 0 to 40427 [ 386.564519][ T7859] F2FS-fs (loop5): invalid crc value [ 386.630374][ T7859] F2FS-fs (loop5): Found nat_bits in checkpoint [ 386.723328][ T7859] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 386.750517][ T26] audit: type=1800 audit(1778848744.660:15): pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.889" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 387.180178][ T6574] handle_bad_sector: 127 callbacks suppressed [ 387.180199][ T6574] attempt to access beyond end of device [ 387.180199][ T6574] loop5: rw=2049, want=45104, limit=40427 [ 388.535105][ T7900] device syzkaller0 entered promiscuous mode [ 390.180656][ T7934] device wg1 entered promiscuous mode [ 392.760817][ T7952] binder: BINDER_SET_CONTEXT_MGR already set [ 392.798006][ T7952] binder: 7951:7952 ioctl 4018620d 200000000040 returned -16 [ 393.010413][ T7956] tipc: Enabling of bearer rejected, failed to enable media [ 394.625686][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 396.188103][ T5828] usb 2-1: Using ep0 maxpacket: 16 [ 396.295968][ T5828] usb 2-1: device descriptor read/all, error -71 [ 397.054787][ T5621] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 397.066162][ T7981] netlink: 'syz.1.918': attribute type 4 has an invalid length. [ 397.406784][ T5621] usb 6-1: Using ep0 maxpacket: 16 [ 397.545872][ T5621] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 397.554969][ T5621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.594232][ T5621] usb 6-1: config 0 descriptor?? [ 397.641310][ T5621] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 397.946170][ T5621] gspca_sonixj: reg_w1 err -71 [ 397.951648][ T5621] sonixj: probe of 6-1:0.0 failed with error -71 [ 399.246902][ T5621] usb 6-1: USB disconnect, device number 2 [ 401.392893][ T8001] loop2: detected capacity change from 0 to 256 [ 401.530021][ T7990] loop3: detected capacity change from 0 to 32768 [ 401.946051][ T8001] FAT-fs (loop2): Directory bread(block 64) failed [ 402.164027][ T8001] FAT-fs (loop2): Directory bread(block 65) failed [ 402.212476][ T8001] FAT-fs (loop2): Directory bread(block 66) failed [ 402.301524][ T8001] FAT-fs (loop2): Directory bread(block 67) failed [ 402.308668][ T8001] FAT-fs (loop2): Directory bread(block 68) failed [ 402.322157][ T8001] FAT-fs (loop2): Directory bread(block 69) failed [ 402.329377][ T8001] FAT-fs (loop2): Directory bread(block 70) failed [ 402.342307][ T8001] FAT-fs (loop2): Directory bread(block 71) failed [ 402.372386][ T8001] FAT-fs (loop2): Directory bread(block 72) failed [ 402.434555][ T8001] FAT-fs (loop2): Directory bread(block 73) failed [ 402.662938][ T8025] fuse: Bad value for 'fd' [ 402.714922][ T8027] tipc: Enabled bearer , priority 0 [ 402.824739][ T8027] tipc: Resetting bearer [ 403.757008][ T5621] tipc: Node number set to 54687079 [ 409.701553][ T8063] binder: 8062:8063 ioctl c0306201 200000000280 returned -14 [ 409.726326][ T8070] device syzkaller0 entered promiscuous mode [ 412.725676][ T8103] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 413.891436][ T8102] kvm: pic: level sensitive irq not supported [ 413.891527][ T8102] kvm: pic: non byte read [ 415.776615][ T8141] Set syz1 is full, maxelem 2 reached [ 416.429482][ T8138] loop5: detected capacity change from 0 to 64 [ 417.997204][ T4234] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 418.592331][ T4234] usb 3-1: Using ep0 maxpacket: 16 [ 420.512738][ T8182] (unnamed net_device) (uninitialized): up delay (1073744714) is not a multiple of miimon (100), value rounded to 1073744700 ms [ 420.583880][ T4234] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 420.591538][ T4234] usb 3-1: can't read configurations, error -71 [ 420.750646][ T8182] device bond_slave_0 entered promiscuous mode [ 420.756962][ T8182] device bond_slave_1 entered promiscuous mode [ 420.763208][ T8182] device wlan1 entered promiscuous mode [ 420.873205][ T8182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.006461][ T8192] IPVS: rr: FWM 3 0x00000003 - no destination available [ 423.036324][ T8182] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 423.097331][ T8190] netlink: 14 bytes leftover after parsing attributes in process `syz.1.972'. [ 423.148252][ T8190] device bond_slave_0 left promiscuous mode [ 423.292388][ T8190] device bond_slave_1 left promiscuous mode [ 423.298405][ T8190] device wlan1 left promiscuous mode [ 424.034813][ T8190] bond1: (slave macvlan2): Releasing active interface [ 424.063256][ T8190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.095440][ T8216] loop2: detected capacity change from 0 to 256 [ 424.112261][ T8190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.429663][ T8190] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 424.694419][ T8190] bond0 (unregistering): Released all slaves [ 424.938844][ T8196] tipc: Enabling of bearer rejected, failed to enable media [ 425.032983][ T8221] loop5: detected capacity change from 0 to 128 [ 426.335455][ T8224] loop3: detected capacity change from 0 to 131072 [ 427.650058][ T8224] F2FS-fs (loop3): Found nat_bits in checkpoint [ 427.724809][ T8224] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 429.171383][ T5828] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 432.775919][ T8289] loop2: detected capacity change from 0 to 8 [ 433.549569][ T8289] SQUASHFS error: lzo decompression failed, data probably corrupt [ 433.557875][ T8289] SQUASHFS error: Failed to read block 0x91: -5 [ 433.564590][ T8289] SQUASHFS error: Unable to read metadata cache entry [8f] [ 433.571908][ T8289] SQUASHFS error: Unable to read inode 0x11f [ 436.011349][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1006'. [ 442.933071][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.948043][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.158335][ T8396] netlink: 'syz.5.1019': attribute type 10 has an invalid length. [ 445.958641][ T8414] loop3: detected capacity change from 0 to 16 [ 446.060403][ T4229] Bluetooth: hci5: command 0x0406 tx timeout [ 446.104199][ T8414] erofs: Unknown parameter 'ãé' [ 446.269695][ T8418] binder: BINDER_SET_CONTEXT_MGR already set [ 446.285671][ T8418] binder: 8416:8418 ioctl 4018620d 2000000002c0 returned -16 [ 449.419124][ T8454] tipc: Enabling of bearer rejected, already enabled [ 452.440931][ T8490] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1045'. [ 453.072880][ T8491] hub 8-0:1.0: USB hub found [ 453.081023][ T8491] hub 8-0:1.0: 1 port detected [ 454.587112][ T8504] loop5: detected capacity change from 0 to 131072 [ 454.665456][ T8504] F2FS-fs (loop5): invalid crc value [ 454.743887][ T8504] F2FS-fs (loop5): Found nat_bits in checkpoint [ 454.797196][ T8504] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 458.709649][ T8569] loop5: detected capacity change from 0 to 16 [ 458.949480][ T8569] erofs: Unknown parameter 'ãé' [ 464.415821][ T8619] loop3: detected capacity change from 0 to 2048 [ 465.467117][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1078'. [ 466.409701][ T8636] loop2: detected capacity change from 0 to 128 [ 466.442974][ T8619] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 466.735344][ T8619] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1077: bg 0: block 234: padding at end of block bitmap is not set [ 466.763248][ T8619] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 466.777542][ T8619] EXT4-fs (loop3): This should not happen!! Data will be lost [ 466.777542][ T8619] [ 466.787328][ T8619] EXT4-fs (loop3): Total free blocks count 0 [ 466.793391][ T8619] EXT4-fs (loop3): Free/Dirty block details [ 466.799374][ T8619] EXT4-fs (loop3): free_blocks=0 [ 466.804463][ T8619] EXT4-fs (loop3): dirty_blocks=8192 [ 466.809796][ T8619] EXT4-fs (loop3): Block reservation details [ 466.816033][ T8619] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 467.168871][ T8636] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 467.270330][ T154] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 467.357318][ T154] EXT4-fs (loop3): This should not happen!! Data will be lost [ 467.357318][ T154] [ 468.394201][ T8653] loop2: detected capacity change from 0 to 16 [ 468.445629][ T8653] erofs: Unknown parameter 'ãé' [ 473.316727][ T8682] loop2: detected capacity change from 0 to 512 [ 474.711279][ T8694] device syzkaller0 entered promiscuous mode [ 474.830295][ T8694] tc action pedit offset must be on 32 bit boundaries [ 479.339686][ T8743] trusted_key: encrypted_key: insufficient parameters specified [ 479.354649][ T8742] device syzkaller0 entered promiscuous mode [ 479.508498][ T8735] loop2: detected capacity change from 0 to 4096 [ 480.836212][ T8735] EXT4-fs (loop2): inline encryption not supported [ 481.472636][ T8763] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 481.786210][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 481.878577][ T8735] fscrypt: Error allocating hmac(sha512): -2 [ 481.893389][ T8735] EXT4-fs (loop2): Error processing option "test_dummy_encryption" [-2] [ 484.784177][ T8791] device syzkaller0 entered promiscuous mode [ 491.888883][ T8835] loop3: detected capacity change from 0 to 128 [ 496.026398][ T8849] loop3: detected capacity change from 0 to 1024 [ 496.376101][ T8849] EXT4-fs (loop3): Ignoring removed bh option [ 497.436368][ T8849] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 502.587811][ T8890] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1145'. [ 508.995434][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.001766][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.113128][ T8958] loop2: detected capacity change from 0 to 128 [ 509.329529][ T8961] Cannot find del_set index 1 as target [ 511.141039][ T8958] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 511.213448][ T8958] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 513.441003][ T4460] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 515.988920][ T9007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 516.984316][ T9011] device syzkaller0 entered promiscuous mode [ 517.096281][ T9011] 0: reclassify loop, rule prio 0, protocol 800 [ 528.083994][ T9058] loop5: detected capacity change from 0 to 128 [ 533.596719][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 533.605925][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1191'. [ 533.645171][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 533.654310][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1191'. [ 533.856920][ T9093] loop2: detected capacity change from 0 to 256 [ 533.973406][ T9093] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 534.246192][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 534.261146][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 534.271571][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 534.282735][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 534.292783][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 536.113692][ T9115] loop2: detected capacity change from 0 to 128 [ 540.620274][ T9144] loop2: detected capacity change from 0 to 256 [ 540.838727][ T9144] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 540.855014][ T9144] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 541.847151][ T9144] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 543.993595][ T9140] kvm [9139]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xaac0 [ 544.014222][ T9140] kvm [9139]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0xaac1 [ 544.024153][ T9140] kvm [9139]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x108 [ 544.053982][ T9140] kvm [9139]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x109 [ 544.290160][ T9140] kvm [9139]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xaac0 [ 544.556617][ T9140] kvm [9139]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xaac1 [ 544.576432][ T9140] kvm [9139]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xaac0 [ 544.585765][ T9140] kvm [9139]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x186 data 0xaac1 [ 544.595247][ T9140] kvm [9139]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8 [ 544.604328][ T9140] kvm [9139]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0x187 data 0x9 [ 547.261559][ T9188] loop3: detected capacity change from 0 to 1024 [ 547.349542][ T9188] hfsplus: invalid btree flag [ 547.355155][ T9188] hfsplus: failed to load attributes file [ 547.821094][ T26] audit: type=1326 audit(1778848895.616:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.5.1221" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f374006de59 code=0x0 [ 548.241439][ T9198] loop5: detected capacity change from 0 to 128 [ 549.200940][ T9162] Process accounting resumed [ 549.310085][ T9198] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 549.384250][ T9198] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 549.436578][ T9210] autofs4:pid:9210:autofs_fill_super: called with bogus options [ 549.682456][ T9210] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 556.039907][ T9255] loop2: detected capacity change from 0 to 512 [ 557.049895][ T9255] EXT4-fs (loop2): 1 truncate cleaned up [ 557.055640][ T9255] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 559.425739][ T9279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 561.917670][ T9307] loop3: detected capacity change from 0 to 128 [ 566.367159][ T9325] loop5: detected capacity change from 0 to 128 [ 566.437005][ T9330] device hsr0 entered promiscuous mode [ 566.442924][ T9331] loop2: detected capacity change from 0 to 128 [ 566.495041][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 566.524078][ T9331] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 566.567940][ T9331] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 567.458883][ T9325] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 567.498127][ T9325] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 567.660653][ T9325] syz.5.1255 (pid 9325) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 569.147130][ T9343] Invalid ELF header type: 3 != 1 [ 569.269840][ T9325] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 569.357875][ T9325] fscrypt (loop5, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 570.608621][ T9378] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 574.452567][ T4232] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 574.591686][ T9417] loop3: detected capacity change from 0 to 1024 [ 574.733810][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 574.876674][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.884903][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.795371][ T4232] usb 6-1: device descriptor read/all, error -71 [ 575.989285][ T9427] overlayfs: failed to clone upperpath [ 578.566521][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1281'. [ 578.577519][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1281'. [ 580.406170][ T9454] fuse: Unknown parameter '00000000000000000000' [ 581.129698][ T9461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1295'. [ 581.959588][ T9456] comedi comedi3: comedi_test: 7 microvolt, 2046 microsecond waveform attached [ 582.339890][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1287'. [ 584.548430][ T9491] loop5: detected capacity change from 0 to 2048 [ 585.191283][ T9496] loop2: detected capacity change from 0 to 128 [ 585.577890][ T9491] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback. [ 585.595937][ T9491] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.695861][ T9496] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 585.758669][ T9496] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 588.907314][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1303'. [ 593.549524][ T9583] netlink: 'syz.3.1315': attribute type 10 has an invalid length. [ 595.077916][ T9594] overlayfs: failed to clone upperpath [ 595.981565][ T9583] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 596.771005][ T9604] loop2: detected capacity change from 0 to 512 [ 597.137595][ T9604] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 597.188337][ T9604] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 597.225431][ T9604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 597.252596][ T9604] System zones: 1-12 [ 597.508021][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1322'. [ 598.835947][ T9604] EXT4-fs (loop2): 1 truncate cleaned up [ 598.841704][ T9604] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none. [ 599.041890][ T9627] devtmpfs: Unknown parameter 'debug' [ 601.812041][ T9640] loop3: detected capacity change from 0 to 512 [ 602.034216][ T9640] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1329: bg 0: block 473: padding at end of block bitmap is not set [ 602.120700][ T9640] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 602.140577][ T9640] EXT4-fs (loop3): 1 orphan inode deleted [ 602.179596][ T9640] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 602.301339][ T9640] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.409093][ T9667] loop5: detected capacity change from 0 to 128 [ 603.531473][ T9667] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 603.622891][ T9667] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 614.151574][ T4232] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 615.632714][ T9748] loop2: detected capacity change from 0 to 1024 [ 619.244790][ T9781] loop2: detected capacity change from 0 to 512 [ 619.779614][ T9781] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 619.883794][ T9781] EXT4-fs (loop2): 1 truncate cleaned up [ 619.889722][ T9781] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,errors=continue,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 626.550724][ T9815] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 626.558232][ T9815] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 626.878803][ T4227] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 627.203578][ T4227] usb 6-1: Using ep0 maxpacket: 32 [ 627.339190][ T9821] capability: warning: `syz.3.1363' uses deprecated v2 capabilities in a way that may be insecure [ 627.355487][ T4227] usb 6-1: config 242 has an invalid interface number: 195 but max is 0 [ 627.376117][ T4227] usb 6-1: config 242 has no interface number 0 [ 627.404789][ T4227] usb 6-1: config 242 interface 195 has no altsetting 0 [ 628.546954][ T4227] usb 6-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03 [ 628.557727][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.574918][ T9838] loop2: detected capacity change from 0 to 256 [ 628.608555][ T4227] usb 6-1: Product: syz [ 628.613041][ T4227] usb 6-1: Manufacturer: syz [ 628.617748][ T4227] usb 6-1: SerialNumber: syz [ 628.809289][ T9838] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 628.857033][ T9847] Core dump to core aborted: cannot preserve file permissions [ 630.091390][ C1] ------------[ cut here ]------------ [ 630.097095][ C1] WARNING: CPU: 1 PID: 9860 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 630.107248][ C1] Modules linked in: [ 630.111176][ C1] CPU: 1 PID: 9860 Comm: syz.0.1370 Not tainted syzkaller #0 [ 630.118627][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.123135][ T9861] loop3: detected capacity change from 0 to 164 [ 630.128853][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 630.128904][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 5d 12 2a f8 0f 0b e9 03 ef ff ff e8 51 12 2a f8 <0f> 0b e9 76 f2 ff ff e8 55 a7 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 630.128987][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 630.129006][ C1] RAX: ffffffff894f223f RBX: ffff88805ff3e268 RCX: ffff888078f55940 [ 630.129019][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.129030][ C1] RBP: ffffc90000dd0b08 R08: ffff888078f55940 R09: 0000000000000003 [ 630.191749][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888077b89800 [ 630.200060][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 630.208101][ C1] FS: 00007f7ff79456c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 630.217135][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.223752][ C1] CR2: 00007f9cee9a2080 CR3: 0000000075765000 CR4: 00000000003506e0 [ 630.231806][ C1] Call Trace: [ 630.235106][ C1] [ 630.238011][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 630.244022][ C1] ? verify_lock_unused+0x140/0x140 [ 630.249268][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 630.255150][ C1] ? mark_lock+0x94/0x320 [ 630.259723][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 630.265238][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 630.270810][ C1] __iterate_interfaces+0x243/0x500 [ 630.276049][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 630.282383][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 630.288660][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 630.295774][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 630.301014][ C1] ? hw_scan_work+0xed0/0xed0 [ 630.305735][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 630.310951][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 630.316093][ C1] hrtimer_run_softirq+0x176/0x240 [ 630.321205][ C1] handle_softirqs+0x339/0x830 [ 630.325986][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 630.330843][ C1] ? do_softirq+0x210/0x210 [ 630.335372][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 630.340567][ C1] __irq_exit_rcu+0x13b/0x230 [ 630.345247][ C1] ? irq_exit_rcu+0x20/0x20 [ 630.349753][ C1] irq_exit_rcu+0x5/0x20 [ 630.353985][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 630.359620][ C1] [ 630.362556][ C1] [ 630.365488][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.371511][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 630.378036][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 5f 39 8c f7 65 8b 05 f0 36 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 630.397685][ C1] RSP: 0018:ffffc9000326f5c0 EFLAGS: 00000206 [ 630.403789][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 270e7ec81b55d300 [ 630.411786][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: 0000000000000001 [ 630.419761][ C1] RBP: ffffc9000326f650 R08: ffffffff901d5177 R09: 1ffffffff203aa2e [ 630.427755][ C1] R10: dffffc0000000000 R11: fffffbfff203aa2f R12: dffffc0000000000 [ 630.435734][ C1] R13: 0000000000000000 R14: ffff8880621dcec0 R15: 1ffff9200064deb8 [ 630.443743][ C1] ? _raw_spin_unlock+0x40/0x40 [ 630.448596][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 630.453633][ C1] __wake_up_sync_key+0x128/0x190 [ 630.458650][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 630.464637][ C1] ? sock_load_diag_module+0x130/0x130 [ 630.470108][ C1] __unix_dgram_recvmsg+0x4c0/0xd90 [ 630.475350][ C1] ? unix_unhash+0x10/0x10 [ 630.479812][ C1] ? mark_lock+0x94/0x320 [ 630.484162][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 630.489221][ C1] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 630.494593][ C1] ____sys_recvmsg+0x2cd/0x5e0 [ 630.499380][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 630.504418][ C1] ? import_iovec+0x6f/0xa0 [ 630.508962][ C1] ___sys_recvmsg+0x21a/0x5c0 [ 630.513649][ C1] ? __sys_recvmsg+0x280/0x280 [ 630.518438][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 630.523460][ C1] ? __might_fault+0xb3/0x110 [ 630.528144][ C1] do_recvmmsg+0x382/0x850 [ 630.532574][ C1] ? __sys_recvmmsg+0x290/0x290 [ 630.537423][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 630.542465][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 630.547479][ C1] ? do_recvmmsg+0x850/0x850 [ 630.552162][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 630.557527][ C1] do_syscall_64+0x4c/0xa0 [ 630.561946][ C1] ? clear_bhb_loop+0x30/0x80 [ 630.566626][ C1] ? clear_bhb_loop+0x30/0x80 [ 630.571306][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 630.577199][ C1] RIP: 0033:0x7f7ff970ce59 [ 630.581606][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.601348][ C1] RSP: 002b:00007f7ff7945028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 630.609798][ C1] RAX: ffffffffffffffda RBX: 00007f7ff9986090 RCX: 00007f7ff970ce59 [ 630.617791][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 630.625849][ C1] RBP: 00007f7ff97a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 630.633824][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 630.641802][ C1] R13: 00007f7ff9986128 R14: 00007f7ff9986090 R15: 00007ffe35d315d8 [ 630.649788][ C1] [ 630.652798][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 630.660064][ C1] CPU: 1 PID: 9860 Comm: syz.0.1370 Not tainted syzkaller #0 [ 630.667421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.677564][ C1] Call Trace: [ 630.680836][ C1] [ 630.683671][ C1] dump_stack_lvl+0x188/0x250 [ 630.688340][ C1] ? show_regs_print_info+0x20/0x20 [ 630.693650][ C1] ? load_image+0x400/0x400 [ 630.698145][ C1] panic+0x2e5/0x810 [ 630.702034][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 630.706533][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 630.712256][ C1] __warn+0x248/0x2b0 [ 630.716313][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 630.722020][ C1] report_bug+0x1b7/0x2e0 [ 630.726341][ C1] handle_bug+0x3a/0x70 [ 630.730488][ C1] exc_invalid_op+0x16/0x40 [ 630.734982][ C1] asm_exc_invalid_op+0x16/0x20 [ 630.739823][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 630.746223][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 5d 12 2a f8 0f 0b e9 03 ef ff ff e8 51 12 2a f8 <0f> 0b e9 76 f2 ff ff e8 55 a7 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 630.766091][ C1] RSP: 0018:ffffc90000dd08e0 EFLAGS: 00010246 [ 630.772163][ C1] RAX: ffffffff894f223f RBX: ffff88805ff3e268 RCX: ffff888078f55940 [ 630.780119][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.788171][ C1] RBP: ffffc90000dd0b08 R08: ffff888078f55940 R09: 0000000000000003 [ 630.796224][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888077b89800 [ 630.804203][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001ba12c [ 630.812189][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 630.817936][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 630.823922][ C1] ? verify_lock_unused+0x140/0x140 [ 630.829120][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 630.834929][ C1] ? mark_lock+0x94/0x320 [ 630.839259][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 630.844727][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 630.850196][ C1] __iterate_interfaces+0x243/0x500 [ 630.855410][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 630.861673][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 630.867926][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 630.874957][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 630.880156][ C1] ? hw_scan_work+0xed0/0xed0 [ 630.884823][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 630.890022][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 630.895129][ C1] hrtimer_run_softirq+0x176/0x240 [ 630.900250][ C1] handle_softirqs+0x339/0x830 [ 630.905006][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 630.909883][ C1] ? do_softirq+0x210/0x210 [ 630.914498][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 630.919692][ C1] __irq_exit_rcu+0x13b/0x230 [ 630.924366][ C1] ? irq_exit_rcu+0x20/0x20 [ 630.928868][ C1] irq_exit_rcu+0x5/0x20 [ 630.933203][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 630.938848][ C1] [ 630.941783][ C1] [ 630.944714][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.950694][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 630.957199][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 5f 39 8c f7 65 8b 05 f0 36 3c 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 630.976897][ C1] RSP: 0018:ffffc9000326f5c0 EFLAGS: 00000206 [ 630.982954][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 270e7ec81b55d300 [ 630.990923][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2800 RDI: 0000000000000001 [ 630.998885][ C1] RBP: ffffc9000326f650 R08: ffffffff901d5177 R09: 1ffffffff203aa2e [ 631.006845][ C1] R10: dffffc0000000000 R11: fffffbfff203aa2f R12: dffffc0000000000 [ 631.014804][ C1] R13: 0000000000000000 R14: ffff8880621dcec0 R15: 1ffff9200064deb8 [ 631.022774][ C1] ? _raw_spin_unlock+0x40/0x40 [ 631.027633][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 631.032682][ C1] __wake_up_sync_key+0x128/0x190 [ 631.037825][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 631.043826][ C1] ? sock_load_diag_module+0x130/0x130 [ 631.049287][ C1] __unix_dgram_recvmsg+0x4c0/0xd90 [ 631.054494][ C1] ? unix_unhash+0x10/0x10 [ 631.058931][ C1] ? mark_lock+0x94/0x320 [ 631.063251][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 631.068270][ C1] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 631.073635][ C1] ____sys_recvmsg+0x2cd/0x5e0 [ 631.078397][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 631.083504][ C1] ? import_iovec+0x6f/0xa0 [ 631.088023][ C1] ___sys_recvmsg+0x21a/0x5c0 [ 631.092712][ C1] ? __sys_recvmsg+0x280/0x280 [ 631.097489][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 631.102511][ C1] ? __might_fault+0xb3/0x110 [ 631.107182][ C1] do_recvmmsg+0x382/0x850 [ 631.111595][ C1] ? __sys_recvmmsg+0x290/0x290 [ 631.116440][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 631.121459][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 631.126472][ C1] ? do_recvmmsg+0x850/0x850 [ 631.131053][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 631.136243][ C1] do_syscall_64+0x4c/0xa0 [ 631.140737][ C1] ? clear_bhb_loop+0x30/0x80 [ 631.145398][ C1] ? clear_bhb_loop+0x30/0x80 [ 631.150064][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 631.156163][ C1] RIP: 0033:0x7f7ff970ce59 [ 631.160761][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.180375][ C1] RSP: 002b:00007f7ff7945028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 631.188782][ C1] RAX: ffffffffffffffda RBX: 00007f7ff9986090 RCX: 00007f7ff970ce59 [ 631.196757][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 631.204736][ C1] RBP: 00007f7ff97a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 631.212717][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 631.220770][ C1] R13: 00007f7ff9986128 R14: 00007f7ff9986090 R15: 00007ffe35d315d8 [ 631.229001][ C1] [ 631.232305][ C1] Kernel Offset: disabled [ 631.238725][ C1] Rebooting in 86400 seconds..