last executing test programs: 55m36.011346999s ago: executing program 32 (id=11): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000002c0)=[r1, 0xffffffffffffffff], 0x2) r2 = dup2(r0, r1) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 55m9.114112414s ago: executing program 33 (id=50): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) readv(r0, &(0x7f0000005040)=[{&(0x7f0000002480)=""/55, 0x37}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 54m53.071303864s ago: executing program 34 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) 54m2.604230925s ago: executing program 35 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r0, r1, 0x4, r2, r2) 53m16.223462815s ago: executing program 36 (id=167): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@usrquota}, {@lazytime}, {@nombcache}, {@i_version}]}, 0x1, 0x44a, &(0x7f0000000c00)="$eJzs3MtvG0UYAPBv7SQlfZBQlUcfQKAgyitp0lJ64AICiQNISHAox5CkVanboCZItKqgIFSOqBInLogjEn8BJ7gg4ITEFe6oUoVyaeFktPZuYju2E6dODPHvJ60zszvOzOfdWc/uZBNA3xpLX5KI3RHxe0SMVLP1BcaqP24vXZn5e+nKTBLl8pt/JZVyt5auzORF8/ftyjMDEYVPkzjYpN6FS5fPTZdKcxez/MTi+fcmFi5dfvbs+ekzc2fmLkydPHn82OTzJ6ae60qcaVy3Dnw4f2j/q29ff33m1PV3fv42yeNviKNLxtptfLxc7nJ1vbWnJp0M9LAhdKRY7aYxWOn/I1GMlZ03Eq980tPGAZuqXC6X72u9+WoZ2MaS6HULgN7Iv+jT6998Wc+4Ybg7w4+eu/li9QIojft2tlS3DEQhKzPYcH3bTWMRcerqP1+lS2zOfQgAgDrfp+OfZ5qN/wpRe1/o7mwOZTQi7omIvRFxIiL2RcS9EZWy90fEAx3W3zhJsnr8U7ixocDWKR3/vZDNbdWP//LRX4wWs9yeSvyDyemzpbmj2WdyJAZ3pPnJNnX88PJvn7faVjv+S5e0/nwsmLXjxsCO+vfMTi9O30nMtW5+HHFgoFn8yfJMQBIR+yPiwAbrOPvUN4dabVs7/ja6MM9U/jriier+vxoN8eeS9vOTE3dFae7oRH5UrPbLr9feaFX/HcXfBen+39n0+F+OfzSpna9d6OS3f/lk+nrtj89aXtNs9PgfSt6qW/fB9OLixcmIoeS1aqNr1081lJtaKZ/Gf+Rw8/6/N1Y+iYMRkR7ED0bEQxHxcNb2RyLi0Yg43OZT+Omlx97dePybK41/tqP9v5IYisY1zRPFcz9+V1fpaCfxp/v/eCV1JFuznvPfetrV6dEMAAAA/1eFiNgdSWF8OV0ojI9X/4Z/X+wslOYXFp8+Pf/+hdnqMwKjMVjI73SN1NwPncwu6/P8VEP+WHbf+IvicCU/PjNfmu118NDndrXo/6k/i71uHbDpPK8F/Uv/h/6l/0P/0v+hfzXp/9vl+T5gDc2+/z/qQTuArdfQ/037QR9x/Q/9ayP93zkDtoe2fXlo69oBbKmF4Vj7IXkJiVWJKPwnmtHdxHDEOv+pxbZP9PrMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B3/BgAA//8gcuXj") syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) io_uring_setup(0x4f73, 0x0) chdir(0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000300)) open(0x0, 0x20000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 52m58.715236257s ago: executing program 37 (id=193): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) 52m35.41218075s ago: executing program 38 (id=239): r0 = socket$inet(0x2, 0x80003, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x50, 0x0, &(0x7f0000000080)=0xff00) 52m16.924428946s ago: executing program 39 (id=277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@bridge_getneigh={0x28, 0x12, 0x1, 0x0, 0xffffffff, {0x7, 0x0, 0x0, 0x0, 0x1c022}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 51m19.111096782s ago: executing program 40 (id=427): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/131], 0x119) r1 = syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x800082, &(0x7f0000000000)=ANY=[], 0x0, 0xc66, &(0x7f0000001900)="$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") r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x6000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4c05, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x3c7) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000040)="a7ea", 0x2}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x2, 0x6) write(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, &(0x7f0000000000)=0xfff) r9 = dup3(r2, r0, 0x80000) ioctl$FITHAW(r1, 0xc0045878) read$msr(r9, &(0x7f0000000600)=""/175, 0xaf) 50m22.823963611s ago: executing program 41 (id=547): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x40010) 49m55.621277388s ago: executing program 42 (id=637): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000189000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xeb9c, 0xc000, 0x8, 0xc1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0, 0x0, 0x0, r1}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x9, 0xfffeffff, 0x0, 0x818, r3, 0x4, '\x00', 0x0, r4, 0x0, 0x1, 0x2, 0xd}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000040), &(0x7f0000000040)=""/164}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f00000002c0)={[{@gid}, {}]}) 49m51.841656739s ago: executing program 43 (id=657): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, &(0x7f0000000240), 0xb375) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) 47m11.248042477s ago: executing program 44 (id=1175): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000076000100000000000000000007517f00", @ANYRES32=0x0, @ANYBLOB="07000d80"], 0x24}, 0x1, 0x5502000000000000}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, 0x0, 0x0) shutdown(r6, 0x1) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) 43m38.075431552s ago: executing program 45 (id=1600): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f00000006c0)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") syz_emit_vhci(0x0, 0xe) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000180)='./file2\x00', 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="29c2be7478dc8fdb6d01047415165e5ef4a9b44da9eabc6bf17b88291746affa9c332d06663263b3fba0a9be191652b9b2cd1eabc1cbfc7492be547ae656e8748627ecd181738e64e1332d88d4"], 0x1, 0x1d3, &(0x7f0000000940)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 43m8.654884543s ago: executing program 46 (id=1702): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28) 41m41.646759134s ago: executing program 47 (id=1914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x1d, 0x0, 0x4, 0x0, 0x40, 0x20, 0x10}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 40m22.720407849s ago: executing program 48 (id=2060): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x1000009, 0x0) 40m20.787433706s ago: executing program 49 (id=2065): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) 39m13.614302917s ago: executing program 50 (id=2189): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) 36m52.923137139s ago: executing program 51 (id=2558): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0022130000002335ab9aa8153283"], 0x0}, 0x0) fchdir(0xffffffffffffffff) 35m45.053683277s ago: executing program 52 (id=2732): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 34m17.355788485s ago: executing program 53 (id=2903): mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@mmap}], [{@uid_lt}, {@uid_gt}, {@subj_role={'subj_role', 0x3d, '/'}}]}}) 27m10.888979757s ago: executing program 54 (id=3414): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setrlimit(0xa, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x50) 26m36.163683615s ago: executing program 55 (id=3448): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x78, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x804}, @device_b, @device_b, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x7984, 0x2, 0x2, 0x0, 0x2}}, 0x2810, 0x2, {0x0, 0x6, @default_ap_ssid}, @val, @val={0x2d, 0x1a, {0x1, 0x0, 0x4, 0x0, {0x2, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x4, 0xfe}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x78}, 0x1, 0x0, 0x0, 0x6a845ecb4f243e70}, 0x24008080) 24m14.495063687s ago: executing program 56 (id=3557): open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc2677"]) 23m27.413110001s ago: executing program 57 (id=3594): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000340)={0x148001000, 0x0, &(0x7f0000000040), 0x0, {0x31}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) 22m25.372790324s ago: executing program 58 (id=3639): syz_open_dev$usbfs(0x0, 0xb, 0x8041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) r5 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 20m43.045676972s ago: executing program 59 (id=3691): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) keyctl$search(0xa, 0x0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) setresgid(0x0, 0xee01, 0x0) syz_open_dev$sndpcmc(0x0, 0x7, 0x400000) 16m33.285573224s ago: executing program 5 (id=3920): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) unshare(0x2040400) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040880) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x7fffffff, @mcast1}, 0x1c) r2 = memfd_create(0x0, 0x2) ftruncate(r2, 0xffff) socket$packet(0x11, 0x2, 0x300) fcntl$addseals(r2, 0x409, 0x7) 16m17.668463268s ago: executing program 60 (id=3920): landlock_create_ruleset(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xffffffff, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) unshare(0x2040400) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x20040880) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x7fffffff, @mcast1}, 0x1c) r2 = memfd_create(0x0, 0x2) ftruncate(r2, 0xffff) socket$packet(0x11, 0x2, 0x300) fcntl$addseals(r2, 0x409, 0x7) 13m46.540912925s ago: executing program 61 (id=4073): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x9, 0x0, 0x7fff, 0x5, 0xffffffffffffffff}) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) getcwd(&(0x7f0000001040)=""/55, 0x37) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) 13m35.57314757s ago: executing program 62 (id=4086): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="4c00000011000f140011000200001b0002000000200000", 0x17) 13m28.058118975s ago: executing program 63 (id=4093): r0 = syz_open_dev$usbfs(0x0, 0xb, 0x8041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="2e000200"}) r6 = msgget$private(0x0, 0x1c0) msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) r7 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) write(r0, &(0x7f0000000340)="e2dd9920d2260e0c1382b5f36964101ac31621d53e7dbb85516396de5eae37216309c06bd2d9bf503192e4870418cf653ea84df3cecf3ec75efcd6af806bfd0f3b87634c853ef0e17185700eddf4e11c910fc879ab152946196f50649d1bb4e50861ecaaf2aef5006c436c737b132e9c1910e7871682e1675e8bad24835236da21a6bf25c380693e116f089a7d795b726e7caa9481e76afc4107fbe3", 0x9c) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) 13m26.657500448s ago: executing program 64 (id=4096): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0x16000000, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffefff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x4000020, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) gettid() timer_create(0x0, 0x0, 0x0) 12m53.629953596s ago: executing program 8 (id=4103): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 12m51.947167296s ago: executing program 8 (id=4105): syz_open_dev$usbfs(0x0, 0xb, 0x8041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="2e000200"}) r6 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) msgctl$IPC_RMID(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) 12m43.623631239s ago: executing program 65 (id=4111): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 12m43.59598087s ago: executing program 8 (id=4114): ioperm(0x4, 0x8, 0x5) unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\x00\x00', 0xc6a2, 0x0) 12m41.387865661s ago: executing program 8 (id=4115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e9", 0x1, 0x20008045, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 12m38.672561394s ago: executing program 8 (id=4118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 12m35.39311645s ago: executing program 6 (id=4120): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x4810, &(0x7f00000001c0)=ANY=[], 0x14, 0x693, &(0x7f0000000880)="$eJzs3c1vHGcdB/DvrNcvm0qO26ZpQJUwjVQQEYkdK4VwSUAIBalCVThwthqnseKkwXFR2gNxAYkrB/6AcggXOIEQEhJSpHKGW8XN4lQJiUtPaQ8MmtlZe+3u2ptXO/TziWaf55ln5pnf/OZlXyJrAnxuXTiR9t10cuHEa7eq9sadhZWNOwvXevUkk0laSbtbpLieFB8k59Od8oVqZjNcMWw7v14+e/HDjzc+6rba2RqveukMD7A9yl6sN1Nmk4w15UPYNt4bDzbe5Fa12MxMlbDjvcTBfhtPUm7z46NbPYOUY32Nodc78PQouu+bfbrX/0xyKMlU7w1tvdvZevIR7um+7kXrjy8OAAAAODAO37ud3Mr0fscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT5Pm+f9FM7V69dkUvef/T/Q9Y39in8MdbvfIpnqVu60nEQwAAAAAAAAAPF5fupffXSzL6V67LOr/83+5bhypX5/J27mZpazmZG5lMWtZy2rmk8z0DTRxa3FtbXW+t+anZVkOWfP0wDVPjxhw51HsNQAAAAAAAAD83zjXlD/LhUzvcywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNkYx1i3o60qvPpNVOMpVkolpuPflHr/40u7vfAQAAAMATcPhe7uVWpnvtsqi/8x+tv/dP5e1cz1qWs5aVLOVS/VtA91t/a+POwsrGnYVr1fTZcb/9n636H6f3DKMeMd3fHgZv+Vi9RCeXs1zPOZk38lZWcimtes3KsV48g+N6r4qpONdVlqMl6FJTVnv+q6Y8GGbqjIxvZmSuia3KxrO7Z6L/6DzAlubT2vzl58h95Pzcrlsp/ts7Jod6c5Jnvr93zsfva2ceys5MnO47+47unonkK3/6/Y+urFy/eqVYP3FwTqP7MPmvratmZyYW+jLx4siZuHzz6czETq28sFm/kO/lhzmR2bye1SznJ1nMWpYym+/WtcXmfK5eZ3bP1Pltrdf3imKiOS5jO2L68uFuuVtML9frTmc5P8hbuZSlvFr/O535fCNnciZn+47wCyNc9a0BV/2fhwd//KtNpZPkl015MFR5fbYvr/333Jm6r39OK+Vkd73nHtm9cVP7i02lOhI/b8qDYTMTU9l8l+hF93wvA+MDM/Gb+rZyc+X61dUrizd2jFusD97eK9m++wfnRlKdL89VB6tubT87qr7nB/bN131HNvtaO/t+29ns2+tKnWg+w312pNN134sD+xbqvmN9fVuftz4ty7L7eQuAA+/Q1w5NdP7d+Xvn/c4vOlc6r019Z/Kbky9NZPxv499qz4290nqp+EPez0+z9zd0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgTzffeffq4srK0uqOSlmWt4d0PZZK2sm2OX/9S98ySeqHAY0+YLX0+VZSz2mnqdxfYLcfbHfee9Ak/LM5Jk8k4Y+kMjX0/NlZ+aQsy4MR8yiVsnFQ4tmPyr7eloAn4NTatRunbr7z7teXry2+ufTm0vWzZ86cnTt75tWFU5eXV5bmuq/7HSXwOPR9AgcAAAAAAAAAAACeEqP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpxI+26KzM+dnKvaG3cWVqqpV99a8pMkrSTFbFJ8kJxPd8pM33DFsO2sJxc//Hjjo26r3Uz18q3d1hvNejNlNslYUw4wNWhmeXvYeEU9zo3h442o2NzDKmHHe4mD/fa/AAAA///tbhq7") r0 = syz_open_dev$vcsa(&(0x7f0000000240), 0x7, 0x82c0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket(0x10, 0x2, 0x2) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1, 0x40000000}, 0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x40}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000200)={{0x0, 0x2, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x200, 'syz0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000240)) rename(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000001780)=ANY=[@ANYRES32=0x0, @ANYBLOB="e3875d521f5532124979134cee223e3b811021bfe1f72c45dffda9ca1c0ed71b1140ce4294b7128da40685c173b8aef0a8d1deea7da01bcb5130b02b4d199c24d4f64a2cabf05df6cb8b5bb31f16f0b3242109414fa7d4117548b88b42e4aeee291a40d33563c7808461dc72cd2f6d6cc7b3c9ae9bf60362ad54bd3677a94fb74b6907d6d3d00e4385b2459f3fbf1a9512f9858a9342bd773a080587bf66016cf54549cb76958043b5d865b6435b56df4a2be99aff0f40456cb1fc14e35948a3db27be2c8f84e5276f", @ANYRES16, @ANYRES32, @ANYRESOCT], 0xff, 0x6de, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x0, 0xfb, 0x0, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501", @ANYRES16], 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) close_range(r6, 0xffffffffffffffff, 0x2) ftruncate(r6, 0x6000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r7, r8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r11, 0x0, 0x48) splice(r10, 0x0, r9, 0x0, 0x3000, 0x100000000000000d) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x0, 0x0) 12m35.095434008s ago: executing program 8 (id=4121): syz_open_dev$usbfs(0x0, 0xb, 0x8041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="2e000200"}) r6 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) msgctl$IPC_RMID(r6, 0x0) 12m34.021345242s ago: executing program 66 (id=4121): syz_open_dev$usbfs(0x0, 0xb, 0x8041) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @random="2e000200"}) r6 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) msgctl$IPC_RMID(r6, 0x0) 12m31.98555426s ago: executing program 6 (id=4123): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) 12m30.290301849s ago: executing program 6 (id=4124): shmctl$SHM_UNLOCK(0x0, 0xc) ioperm(0x0, 0x7c7, 0xff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000280)={0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0x9, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0x12, 0x5, 0xcc}, {0x804, 0x2, 0x1, 0x45, 0x3, 0x0, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x80, 0x3, 0x4, 0x3, 0x84, 0x7, 0x3, 0x50, 0x8, 0x1, 0x4, 0x9, 0x7ff}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x8, 0x1, 0x2004cb, 0x0, 0x0, 0x36aa, 0x6e1367a5, 0x9c9, 0x2, 0x400000000, 0x2, 0xf73c], 0xeeef0000, 0x800}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setreuid(0x0, 0xee01) setresuid(0xee01, 0x0, 0xffffffffffffffff) unshare(0x40400) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) shmctl$SHM_UNLOCK(0x0, 0xc) 12m27.6761817s ago: executing program 6 (id=4125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e9", 0x1, 0x20008045, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 12m26.711466663s ago: executing program 6 (id=4126): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x64eb2000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) open(0x0, 0x8000, 0x112) pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 12m24.827206097s ago: executing program 6 (id=4128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 12m23.896394518s ago: executing program 67 (id=4128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 10m36.624091905s ago: executing program 5 (id=4122): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200001, &(0x7f0000000180), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)=@v1={0x0, @aes128, 0x0, @desc2}) 10m35.946676001s ago: executing program 5 (id=4176): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000001ac0)=ANY=[@ANYBLOB='dmask=00000000000000000000006,umask=00000000000013325662516,keep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c646973636172642c666d61736b3d30303030303030303030303030303030303030313030312c666da98a67b51d1f305e61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d6d68636761656c69632c616c6c6f775f7574696d653d30303030303030303030303030303030303134373035372c726f6f74636f6e746578743d757365725f752c7569643e", @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfsfloor=G-,smackfstransmute=^,\x00'], 0x1, 0x152a, &(0x7f0000000400)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+nfM7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ86+mcP+zN+7//1nBv7IR9z974/5nV7FXugD2X4Df/9lBjn+6hvufvXH/GcvOrvT95yu9QOS/7Dk4kvNCY/6q42eMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxv4Cp/1lCgAujQFir3RpjDHGGGOMMcYY+5P4HFe6AsYYY4wxxhhjjP3vQxAgQUEAMZADYiEn5AIBAFdDHsgLEbgG4uBayAfXQX4oAAWhEMRDYSgCGgxYIAihKBSDKFwPxeEGKAEloRSUBgdlIAFuhLJwE5SDm6E83AIV4FaoCJWgMlSB26Aq3A7V4A6oDndCDagJtaA23AV14G6oC/dAPbgX6sN90ADuh4bwADSCB6ExPARN4GFoCo9AM2gOLaAltPof5T8PPeEF6AW9IQn6QF94EfpBfxgAL8FAeBkGwSswGF6FZBgCQ+E1GAavw3B4A0bASBgFb8JoeAvGwFgYB+MhBSbARHgbJsE7MBnehSkwFVJhGkyH92AGzIRZ8D7Mhg9gDsyFeTAf0uBDWAALIR0+gkXwMWTAYlgCS2EZLIcVsBJWwWpYA2thHayHDbARNsFm2AJbYRtshx3wCeyET2EX7IY98Bnshc//zfxT/5DfDQEBBQpUqDAGYzAWYzEX5sLcmBvzYB6MYATjMA7zYT7Mj/mxIBbEeIzHIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOkzABCyLN2E5LIflsTxWwApYESthJayCVbAqVsVqWA2rY3WsgTWwFtbCu/Au7IN1sS7Ww3pYH+tfuj2FjbARNsbG2ASbYFNsis2wGbbAFtgKW2FrbI1tsA22w3bYHttjB+yAiZiIHbEjdsJO2Bk7Yxfsgl2xK3bD7tg98/kcgC/gC9gba4g+2Bf7Yj9MzjEAX8KX8GUchK/gK/gqJuMQHIqv4Wv4Og7HkzgCR+IoHIVVxVs4BsciifGYgik4ESfiJJyEWYW+i1MxFafhdJyOM3AmzsT3cTZ+gB/gXJyL8zEN0zCAhZiO6bgIT2EGLsYluBSX4XJchitxFa7ENbgW1+B6XI8bcSNuxs24FbfidtyOn6ACwE9xN+7GZNyLe3Ef7sP9uB8P4AHMxEw8iAfxEB7Cw3gYj+ARPIrH8DgewxN4Ak/iKTyNp/EsnsVz+Gz8140/Kbk6GUQWJZSIETEiVsSKXCKXyC1yizwij4iIiIgTcSKfyCfyi/yioCgo4kW8KCKKCCOMIBHGAICIiqgoLoqLEqKEKCVKCSecSBAJoqwoK8qJcqK8uEVUELeKiqKSaOuqiCqiqmjnqok7RHVRXdQQNUUtUVvUFnVEHVFX1BX1RD1RX9QXDcT9oqHogwPwQZHVmSZiCDYVQ7GZaC7kxU+w1mI4thFtRTvxuBiJI7CDaO0SxVOioxiDncTfxFh8RnQR47GreE50E91FD/G86CnauF6it5iMfURfMRX7if5igHhJzMCa4n2cnbOWeFUkiyFiqHhNzMfXxXDxhhghRopR4k0xWrwlxoixYpwYL1LEBDFRvC0miXfEZPGumCKmilQxTUwX74kZYqaYJd4Xs8UHYo6YK+aJ+SJNfCgWiIUiXXwkFomPRYZYLJaIpWKZWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9gudohPxE7xqdgldos94jOxV3wu9okvxH7xpTggvhKZ4mtxUHwjDolvxWHxnTgivhdHxTFxXPwgTogfxUlxSpwWZ8RZ8ZM4J34W54UXIFEKKaWSgYyROWSszClzyatkbhlcfHavkXHyWplPXifzywKyoCwk42VhWURqaaSVJENZVBaTUXm9LC5vkCVkSVlKlpZOlpEJ8kZZVt4ky8mbZXl5i6wgb5UVZSVZWVaRt8mq8nYJkQv7qCFrylqytrxLJsHdsq68R9aT98r68j7ZQN4vG8oHZCP5oGwsH5JN5MOyqXxENpPNZQvZUraSj8rW8jHZRraV7eTjsr18QnaQT8pE+ZTsKP3Fl8gzsot8VnaVz8lusrvsIX+W56WXvWRvCX1A9pUvyn6yvxwQCwDyZTlIviIHy1dlshwih8rX5DD5uhwu35Aj5Eg5Sr4pR8u35Bg5Vo6T42WKnCAnyrflJPmOnCzflVPkVJkqp8kBcuAvM82S8g/z3/6d/MG/7H2j3CQ3yy1yq9wmt8sd8hO5U+6Uu+QuuUfukXvlXrlP7pP75X55QB6QmTJTHpQH5SF5SB6Wh+UReUQelcfkGfmDPCF/lCflKXlKnpFn5Vl57uJzAAqVUFIpFagYlUPFqpwql7pK5VZXqzwqr4qoa1SculblU9ep/KqAKqgKqXhVWBVRWhllFalQFVXFVFRdjxdfMKqUKq2cKqMS1I3/Tr4qrm5QJVTJX+Vfqi/pn9TXSrVSrVVr1Ua1Ue1UO9VetVcdVAeVqBJVR9VRdVKdVGfVWXVRXVRX1VV1U91UD9VD9VQ9VS/VSyWpJNVXvaj6qf5qgHpJDVQvq0FqkBqsBqtklayGqqFqmBqmhqvhaoQaoUapUWq0Gq3GqDFqnBqnUlSKmqgmqklqkpqsJqspaopKValqupquZqgZapaapWar2WqOmqPmqXkqTaWpBWqBSlfpapFapDLUYrVYLVVL1XK1XK1UK9VqtVqtVWvVerVeZahNapPaoraobWqb2qF2qJ1qp9qldqk9ao/aq/aqfWqf2q/2qwPqgMpUmeqgOqgOqUPqsDqsjqgj6qg6qo6r4+qEOqFOqpPqtDqtzqqz6pw6p86r81mnfYEIRKACFcQEMUFsEBvkCnIFuYPcQZ4gTxAJIkFcEBfkC64L8gcFgoJBoSA+KBwUCXRgAhuIi02PBtcHxYMbghJByaBUUDpwQZkgIbgxKBvcFJQLbg7KB7cEFYJbg4pBpaByUCW4Laga3B5UC+4Iqgd3BjWCmkGtoHZwV1AnuDuoG9wT1AvuDeoH9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo8EjQLmgctgpZBqz91fu9PFnjM9dK9dZLuo/vqF3U/3V8P0C/pgfplPUi/ogfrV3WyHqKH6tf0MP26Hq7f0CP0SD1Kv6lH67f0GD1Wj9PjdYqeoCfqt/Uk/Y6erN/VU/RUnaqn6en6PT1Dz9Sz9Pt6tv5Az9Fz9Tw9X6fpD/UCvVCn64/0Iv2xztCL9RK9VC/Ty/UKvVKv0qv1Gr1Wr9Pr9Qa9UW/Sm/UWvVVv09s1ACTt1J/qXXq33qM/08ee+Vzv01/o/fpLfUB/pTP11/qg/kYf0t/qw/o7fUR/r4/qY/q4/kGf0D/qk/qUPq3P6LP6J31O/6zPa591cp/19W6UUSbGxJhYE2tymVwmt8lt8pg8JmIiJs7EmXwmn8lv8puCpqCJN/GmiClispAhU9QUNVETNcVNcVPClDClTCnjjDMJJsGUNWVNOVPOlDflTQVTwVQ0FU1lU9ncZm4zt5vbzR3mDnOnudPUNDVNbVPb1DF1TF1T19Qz9Ux9U980MA1MQ9PQNDKNTGPT2DQxTUxT09Q0M81MC9PCtDKtTGvT2rQxbfK2M+1Me9PedDAdTKJJNB1NR9PJdDKdTWfTxXQxXU1X0810Mz1MD9PT9DS9TC+TZJJMX9PX9DP9zAAzwAw0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsk5UzVtmjBlrxpnxJsWkmIlmoplkJpnJZrKZYqaYVJNqppvpZoaZYWaZWWa2mW3mmDlmnpln0kyaWWAWmHSTbhaZRSbDZJglZolZZpaZFWaFWWVWmTVmjVkH68wGs8FsMpvMFrPFbDPbzA6zw+w0O80us8vsMXvMXrPX7DP7zH6z3xwwB0ymyTQHzUFzyBwyh81hc8QcMUfNUXPcHDcnzAlz0pw0p81pc9YUuPh96U2szWlz2atsbnu1zWPz2n+MC9pCNt4WtkWstvltgV/Fxlpbwpa0pWxp62wZm2Bv/E1c0VaylW0Ve5utam+31X4T17F327r2HlvP3mtr27t+Fde399kG9mHbEBHANreNbUvbxD5sm9pHbDPb3LawLW17+4TtYJ+0ifYp29E+/Zt4gV1oV9nVdo1da3fZ3fa0PWMP2W/tWfuT7WV724H2ZTvIvmIH21dtsh3ym3iUfdOOtm/ZMXasHWfH/yaeYqfaVDvNTrfv2Rl25m/iNPuhnW3T7Rw7186z83+Js2pKtx/ZRfZjm2EDWGKX2mV2uV1hV16q1ee16+0Gu9HutJ/aLXar3Wa32x2XToTtbrvHfmb32s/tQfuN3W+/tAfsYZtpv/4lzjq+w/Y7e8R+b4/aY/a4/cGesD+qS9lZx/6D/dmet94CIQFJUhRQDOWgWMpJuegqyk1XUx7KSxG6huLoWspH11F+KkAFqRDFU2EqQpoMWSIKqSgVoyhdT5fKK0WlyVEZSqAbqSzdROXoZipPt1AFupUqUiWqTFXoNqpKt1M1uoOq051Ug2pSLapNd1Edupvq0j1Uj+6l+nQfNaD7qSE9QI3oQWpMD1ETepia0iPUjJpTC2pJrehRak2PURtqS+3ocWpPT1AHepIS6SnqSE9TJ/obdaZnqAs9S13pOepG3akHPU896QXqRb0pifpQX3qR+lF/GkAv0UB6mQbRKzSYXqVkGkJD6TUaRq/TcHqDRtBIGkVv0mh6i8bQWBpH4ymFJtBEepsm0Ts0md6lKTSVUmkaTaf3aAbNpFn0Ps2mD2gOzaV5NJ/S6ENaQAspnT6iRfQxZdBiWkJLaRktpxW0klbRalpDa2kdracNtJE20WbaQltpG22nHfQJ7aRPaRftpj30Ge2lz2kffUH76Us6QF9RJn1NB+kbOkTf0mH6zvem7+koHaPj9AOdoB/pJJ2i03SGztJPdI5+pvPkCUIMRShDFQZhTJgjjA1zhrnCq8Lc4dVhnjBvGAmvCePCa8N84XVh/rBAWDAsFMaHhcMioQ5NaEMKw7BoWCyMhteHxcMbwhJhybBUWDp0YZkwIbwxLBveFJYLbw7Lh7eEFcJbw4phpfDhe6uEt4VVw9vDauEdYfXwzrBGWDOsFdYO7wrrhHeHdcN7wnrhvWG58L6wQXh/2DB8IGwUPhg2Dh8Km4QPh03DR8JmYfOwRdgybBU+GrYOHwvbhG3DduHjYfvwibBD+GSYGD4Vdgyf/mX9fQv/+fqksE/YN3wxfDH0/h45Lzo/mhb9MLogujCaHv0ouij6cTQjuji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Ibox6n3tHODQCSedcoGLcTlcrMvpcrmrXG53tcvj8rqIu8bFuWtdPnedy+8KuIKukIt3hV0Rp51x1pELXVFXzEXd9a64u8GVcCVdKVfaOVfGJbiWrpVr5Vq7x1wb19a1c4+7x90T7gn3pHvSPeU6uqddJ/c319k947q4Z92z7jnXzXV3PdzzrqebkOfCezLJ9XV9XT/Xzw1wA9xAN9ANcoPcYDfYJbtkN9QNdcPcMDfcDXcj3Ag3yo1yo91oN8aNcePcOJfiUtxEN9FNcpPcZDfZTXFTXKpLddPddDfDzXBVZ17Yyxw3x81z81yaS3MLXNY5Y7pb5Ba5DJfhlrglbplb5la4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6b2+Z2uB1up9vpdvm8FyZ1e90+t8/td/vdAfeVy3Rfu4PuG3fIfesOu+/cEfe9O+qOuePuB3fC/ehOulPutDvjzrqf3Dn3szvvvEuJTIhMjLwdmRR5JzI58m5kSmRqJDUyLTI98l5kRmRmZFbk/cjsyAeROZG5kXmR+ZG0yIeRBZGFkfTIR5FFkY8jGZHFkSWRpZFlkeUR7wtvCX1RX8xH/fW+uL/Bl/AlfSlf2jtfxif4G31Zf5Mv52/25f0tvoK/1Vf0lXxl/4hv5pv7Fr6lb+Uf9a39Y76Nb+vb+cd9e/+E7+Cf9In+Kd/RP+07+b/5zv4Z38U/67v653w339338M/7nv4F38v39km+j+/rX/T9fH8/wL/kB/qX/SD/ih/sX/XJfogf6l/zw/zrfrh/w4/wI/2omDf96EuXyDDep/gJfqJ/20/y7/jJ/l0/xU/1qX6an+7f8zP8TD/Lv+9n+w/8HD/Xz/PzfZr/0C/wC326/8gv8h/7DL/40k1lv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+k/9Lr/b7/Gf+b3+c7/Pf+H3+y/9Af+Vz/Rf+4P+G3/If+sP++/8Ef+9P+qP+eP+B3/C/+hP+lP+tD/jz/qf/Dn/sz//y++sMcYYY4yxPzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9wfzRWwBy/V1OLFyOL8//BQAm/c78jz4+akGF8HTc/2f+uQAlil3OyQmX48XQ7pf7K22h3D+pv0DrP6g/55cpAG3+Lic3XI4v158Aj8HTkPirLRljjDHGGGOMsQv6i8qdL11/XvqJz9+7Po9Xl3NywOX4j67PGWOMMcYYY4wxduU9073Hk48mJrbt/O8Pqv2Psv7lQVP435qZB7878B7g0iMKAP7DCQGyBvKvPIrNf8m+ki++df5x1bIzPoD/jlb+GYMr/MHEGGOMMcYY+9NdPun/9ePqShXEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ3/FnxO70sfIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWn/LwAA//+3VPzs") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x200081, &(0x7f00000000c0)=ANY=[]) io_uring_setup(0x539a, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x2, 0x2fb}) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) flock(r2, 0x2) flock(r1, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r4, 0x1) 10m33.341126501s ago: executing program 5 (id=4178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) 10m31.619504811s ago: executing program 5 (id=4179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) unlink(0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 10m28.257781469s ago: executing program 5 (id=4180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) write$cgroup_devices(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0xa01, 0x0, 0x0, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x20000000) 10m12.75639739s ago: executing program 68 (id=4180): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) write$cgroup_devices(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000200)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x18, 0xa01, 0x0, 0x0, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x20000000) 6m19.055988612s ago: executing program 9 (id=4419): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) 6m15.554599953s ago: executing program 9 (id=4424): r0 = getpgrp(0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000000)={0x7, 0xe, 0xffff, 0xb, 0x2a, "1b040f00403a4e5ef3ffffffff55cf00", 0x8001, 0x1}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xff) 6m14.909473138s ago: executing program 9 (id=4425): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xd3f, 0x5, 0x5, 0x80006, 0xfffffffe, 0x7}) 6m13.126514549s ago: executing program 9 (id=4427): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 6m12.308619968s ago: executing program 9 (id=4431): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000c6888240da0b7f3127a0010203010902240001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x0, 0x15, 0x4, "283bef2d"}, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x0, 0x12, {0x10, "afdb99e12dfb3432ef78d3411f64cdbb"}}, 0x0, 0x0}) 6m10.575055789s ago: executing program 9 (id=4434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x95, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 6m9.360781807s ago: executing program 69 (id=4434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x95, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 5m46.991407427s ago: executing program 4 (id=4463): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x4221030) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) 5m45.332782256s ago: executing program 4 (id=4464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054e", 0x4f, r1) keyctl$search(0xa, r1, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x40003) process_vm_writev(r3, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x1, &(0x7f0000000080)=[0xee00]) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r5, 0x0, 0x0) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmc(0x0, 0x7, 0x400000) r6 = getpid() prlimit64(r6, 0xe, &(0x7f0000000080)={0x31, 0x7}, &(0x7f00000000c0)) 5m43.901663219s ago: executing program 4 (id=4465): r0 = getpgrp(0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x7, 0xe, 0xffff, 0xb, 0x2a, "1b040f00403a4e5ef3ffffffff55cf00", 0x8001, 0x1}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff) 5m37.477958999s ago: executing program 4 (id=4469): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e9", 0x1, 0x20008045, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 5m34.759447742s ago: executing program 4 (id=4473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) syz_emit_ethernet(0x4e, &(0x7f0000007380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x7, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) 5m33.631339358s ago: executing program 2 (id=4474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 5m32.626059222s ago: executing program 4 (id=4475): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0xfffffffe, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 5m31.81541096s ago: executing program 70 (id=4475): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0xfffffffe, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x0, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 5m31.511733487s ago: executing program 2 (id=4478): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000e40)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x4010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x24008014) 5m28.739389612s ago: executing program 2 (id=4479): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) connect$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x8880, 0x85) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x11, 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0xe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) fsmount(0xffffffffffffffff, 0x0, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 5m25.539790297s ago: executing program 2 (id=4480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e9", 0x1, 0x20008045, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 5m21.717365415s ago: executing program 2 (id=4483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f00000000c0)={[{@i_version}, {@noauto_da_alloc}, {@oldalloc}], [{@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$eJzs3U1vG0UfAPD/bt7atE+TSs+Bl4sFSERCJE3aApVAIuLCoT3RA0es2C1RnQYlRqJVxItA3EAC8QHgAHwEjnDgO8AZOEClCOVAys1o7V3HxHbapA6ukt9PGnlmZ+2Z9XjW68nsJIBjqxQRL0fESESci4ipfHuah3i/FbL9trc2lv7e2lhKotF47c8kknxb8VpJ/ngqf4GZNCL9KInHe5S7fuv2jXKtVl3L03P1lbfm1m/dfnZ5pXy9er16c+G58xcuXnzh0sLzAzvWzZXkk6e+ufzbZx9XPv/pj++ns/qezvM6j2NQSlFqvye7XRp0YUN2oiOejA6xIgAA7CnNr/1Hm9f/UzESOxdvU/Hpj0OtHAAAADAQjUbxCAAAABxdid/+AAAAcMQV8wC2tzaWijDE6Qj8xzYXI2K61f5389DKGW3f0zu26/7eQSpFxKsnrixkIQ7pPmwAAACA4+yHxdbCf93jf2k80rHfyYiYLNb2G6DSrnT3+E96Z8BF0mFzMeLFiLjbNf6XFrtMj+Sp/zWHCseSa8u16rmIOBMRMzE2kaXn9yjj3SdufNsvr3P878tfX5/Pys8ed/ZI74xO/Ps5lXK9/CDHzI7NDyIeG+3V/kl7zLdzncyDeGN5+6V+eVn7Z+1dhO725zA1vop4umf/31m5NNl7fda55vlgLj8rTHSX8cvprz/sV35n/89CVn7xtwAOX9b/J/du/+Y6ue31etf3X8Z3f135uV/evdu/9/l/PLnarOB4vu2dcr2+Nh8xnlzu3u7T1Fa8H8X7lbX/zJO9v/+L678k/+4/07E+9H688t7Zq/3y9P/hytq/sq/+v//Im5OPzvQr//76/4VmZYoXcf13b/fbQMOuJwAAAAAAAACDkTbn9iXpbDueprOzrXm+/4/JtLa6Xn/m2urbNyutOYDTMZYW8z+nOuaDzrduI2+nF3alz0fE2Yj4YupkMz27tFqrDPvgAQAA4Jg41ef3f+b3g9zsAQAAADycpoddAQAAAODQ+f0PAAAAR9qDrOtfq64V/yLogE8XETlYZCT/4D0s9Tl6kSGelAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIfwIAAP//keS8Nw==") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1001000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x4000000003, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80, 0x6}, {0x5000, 0x9000, 0xa, 0x0, 0x42, 0x5, 0x5, 0x0, 0x5, 0x5, 0xfc, 0x89}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x7, 0x2, 0x7, 0x9b, 0xa4, 0x5, 0x5}, {0x1, 0x25000, 0xd, 0x9, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x40, 0x7}, {0x5000, 0x5000, 0x3, 0x5, 0x81, 0x82, 0x7, 0x3, 0x7, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xd, 0x5, 0xcd, 0x7, 0x1, 0x80, 0x2, 0x4c, 0xb0, 0x9}, {0x54000, 0x30}, {0x6000, 0x7}, 0x80010000, 0x0, 0x0, 0x412145, 0xb, 0x1500, 0x3000, [0x9, 0x7, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m13.527388806s ago: executing program 2 (id=4486): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000200)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000040)='./bus\x00') syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4a42, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r4, &(0x7f0000000000)='3', 0x4e) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140), &(0x7f00000001c0)='./proc/file0\x00', 0xd, 0x2) 5m12.636566207s ago: executing program 71 (id=4486): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000200)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000040)='./bus\x00') syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc4a42, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r4, &(0x7f0000000000)='3', 0x4e) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140), &(0x7f00000001c0)='./proc/file0\x00', 0xd, 0x2) 35.966816104s ago: executing program 3 (id=5061): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000340)={0x8000000, 0x0, 0x0, 0x0, {0x31}, &(0x7f0000000180)=""/84, 0x54, 0x0, &(0x7f0000000240)}, 0x58) 35.553831033s ago: executing program 3 (id=5063): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) waitid(0x2, r3, 0x0, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) 34.315629913s ago: executing program 3 (id=5065): r0 = getpgrp(0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_LINK(0xffffffffffffffff, 0x40044160, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x7, 0xe, 0xffff, 0xb, 0x2a, "1b040f00403a4e5ef3ffffffff55cf00", 0x8001, 0x1}) ioctl$TIOCSTI(r4, 0x5412, 0x0) 29.375584782s ago: executing program 3 (id=5083): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 21.903370632s ago: executing program 7 (id=5106): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 21.633382909s ago: executing program 3 (id=5110): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") write(r0, &(0x7f0000000500)="76640a4a3b53cf3e6c80386ccdb2ebae8c2c21f5", 0x14) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) 20.508834186s ago: executing program 3 (id=5113): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 19.721711715s ago: executing program 72 (id=5113): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 18.841538996s ago: executing program 7 (id=5119): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x1}, {0x40000000}}, 0x1) 17.771597352s ago: executing program 7 (id=5123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfff) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149224e01040800", 0x58}], 0x1) 16.056742743s ago: executing program 7 (id=5127): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x6, 0x7, 0x7fff0000}, {0x400, 0x5, 0x0, 0x2}]}) socket(0x2, 0xa, 0x4000) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f"], 0x0) keyctl$dh_compute(0x10, &(0x7f0000000100), 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0xf, 0x0, 0x0) 12.44946081s ago: executing program 7 (id=5141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 4.802361484s ago: executing program 0 (id=5163): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e2306010001000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40044) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.215485472s ago: executing program 7 (id=5164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x93, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x9, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "90"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xd2c, 0x4, 0xd, 0x8}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x80, 0x8, 0x10, 0x35, 0x6, 0x7}, @dmm={0x7, 0x24, 0x14, 0x4, 0x8}, @dmm={0x7, 0x24, 0x14, 0xfd0a, 0x7}, @country_functional={0xa, 0x24, 0x7, 0x6, 0x9, [0xd4f, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xd, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0xf3, 0x68}}}}}}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.105021155s ago: executing program 0 (id=5165): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.653949476s ago: executing program 0 (id=5167): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) 2.455561321s ago: executing program 0 (id=5168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfff) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) 2.196946857s ago: executing program 0 (id=5169): sync() sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) 1.153745392s ago: executing program 1 (id=5173): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="ec4969ce12aee5cbcb87448d7b8d39e591f0817d", 0x14}], 0x1}}], 0x1, 0x20000800) 923.574547ms ago: executing program 1 (id=5174): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d400)=[{0x0}], 0x1}, 0x0) r0 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x2, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f00000009c0)=""/89, 0x59}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 613.794625ms ago: executing program 1 (id=5175): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) 444.982459ms ago: executing program 1 (id=5176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xfff) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000), 0x0) 247.553904ms ago: executing program 1 (id=5177): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x5}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) setresuid(0xee00, 0xee01, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x8) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r1, &(0x7f0000000200), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) read(0xffffffffffffffff, 0x0, 0xdce7) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32, @ANYBLOB="60005080110001004abee339084eeef16f162471f400000008000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 56.415478ms ago: executing program 0 (id=5178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58428, 0x200}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = socket(0x1d, 0x2, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) bind$can_j1939(r2, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x74, r5, {0x0, 0xa}, {0xfff1, 0x9}, {0x9, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x46}, 0x20004844) shutdown(r0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000100)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000400)={r8, @in={{0x2, 0x4e22, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x4, 0x203, 0x7, 0x6, 0xb942, 0x5, 0x1}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b0000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08", 0x1b}], 0x1}, 0x40400) 0s ago: executing program 1 (id=5179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x4, 0x203, 0x7, 0x6, 0xb942, 0x5, 0x1, r1}, 0x20) kernel console output (not intermixed with test programs): 230][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2941.831340][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2941.867333][T23112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2941.897275][T23112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2941.938781][T23112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2941.967511][T23112] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2941.990090][T23112] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2941.998866][T23112] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2942.029989][T23112] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2942.642509][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2942.664528][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2942.739634][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2942.767572][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2942.890623][T19563] Bluetooth: hci1: command tx timeout [ 2943.374079][T23218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2943.553560][T23218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2943.639847][T23218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2944.187737][T23250] input: syz0 as /devices/virtual/input/input28 [ 2944.920825][T23246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2945.151196][T23218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2945.435976][T23249] loop9: detected capacity change from 0 to 1024 [ 2946.680440][T23249] hfsplus: failed to load attributes file [ 2948.005386][T23218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2948.107634][T23218] 8021q: adding VLAN 0 to HW filter on device team0 [ 2948.168314][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 2948.175525][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2948.269156][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 2948.276465][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2948.320771][T23262] loop9: detected capacity change from 0 to 164 [ 2949.264567][T23218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2950.942442][T23285] input: syz0 as /devices/virtual/input/input29 [ 2951.559011][T23218] veth0_vlan: entered promiscuous mode [ 2951.627290][T23218] veth1_vlan: entered promiscuous mode [ 2951.707132][T23296] loop2: detected capacity change from 0 to 164 [ 2951.783027][T23218] veth0_macvtap: entered promiscuous mode [ 2951.839713][T23256] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2951.843656][T23218] veth1_macvtap: entered promiscuous mode [ 2951.962952][T23218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2952.008241][T23218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.038717][T23218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2952.060258][T23218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.080700][T23218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2952.098263][T23218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.121385][T23218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2952.141731][T23218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.182833][T23218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2952.196125][T23218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2952.207084][T23218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.250140][T20564] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2952.258211][T23218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2952.289147][T23218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.309669][T23218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2952.347286][T23218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.385350][T23218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2952.414483][T23218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2952.450665][T23218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2952.479864][T20564] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2952.491261][T20564] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2952.508568][T23218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2952.528148][T20564] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2952.535288][T23218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2952.561977][T20564] usb 4-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00 [ 2952.615976][T20564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2952.668072][T20564] usb 4-1: config 0 descriptor?? [ 2952.856825][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2952.871103][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2952.934482][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2952.950310][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2953.556803][T23308] input: syz0 as /devices/virtual/input/input30 [ 2954.215129][T23306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2954.727161][T20564] input: HID 12ba:074b as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:12BA:074B.0007/input/input31 [ 2954.998937][T20564] sony 0003:12BA:074B.0007: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.3-1/input0 [ 2955.075894][T20564] usb 4-1: USB disconnect, device number 9 [ 2956.227924][T23314] fido_id[23314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2956.434570][T23321] input: syz0 as /devices/virtual/input/input32 [ 2957.424310][T23328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4295'. [ 2957.747562][T23333] loop3: detected capacity change from 0 to 512 [ 2957.946453][T23333] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.4296: Invalid block bitmap block 0 in block_group 0 [ 2958.111859][T23333] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 2958.171603][T23333] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4296: attempt to clear invalid blocks 983261 len 1 [ 2958.276997][T23333] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4296: invalid indirect mapped block 2683928664 (level 0) [ 2958.375408][T23333] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.4296: Invalid inode table block 0 in block_group 0 [ 2958.491246][T23333] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 2958.565049][T23333] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 2958.605720][T23333] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.4296: Invalid inode table block 0 in block_group 0 [ 2958.706407][T23333] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 2958.746218][T23333] EXT4-fs error (device loop3): ext4_truncate:4302: inode #13: comm syz.3.4296: mark_inode_dirty error [ 2959.271498][T23338] input: syz0 as /devices/virtual/input/input33 [ 2959.904821][T23336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2960.200692][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2960.207003][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.330757][T23333] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 2960.400550][T23333] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz.3.4296: Invalid inode table block 0 in block_group 0 [ 2960.445753][T23333] EXT4-fs (loop3): 1 truncate cleaned up [ 2960.471476][T23333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2960.824264][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2961.106093][T23345] loop9: detected capacity change from 0 to 164 [ 2961.235881][T23351] loop3: detected capacity change from 0 to 256 [ 2961.289195][T23351] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 2963.851497][T23361] input: syz0 as /devices/virtual/input/input34 [ 2964.772890][T23366] loop9: detected capacity change from 0 to 1024 [ 2964.892607][T23366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2964.930149][T23366] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2965.062702][T23364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2965.321599][T23112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 2966.068906][T23373] input: syz0 as /devices/virtual/input/input35 [ 2966.810940][T23371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2967.889804][T23383] loop2: detected capacity change from 0 to 8 [ 2967.963545][T23383] SQUASHFS error: lzo decompression failed, data probably corrupt [ 2968.751516][T23383] SQUASHFS error: Failed to read block 0x91: -5 [ 2968.776486][T23383] SQUASHFS error: Unable to read metadata cache entry [8f] [ 2968.813685][T23383] SQUASHFS error: Unable to read inode 0x11f [ 2969.545212][T23388] loop2: detected capacity change from 0 to 256 [ 2969.601253][T23388] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 2969.709789][T23256] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2970.520728][T23396] loop3: detected capacity change from 0 to 164 [ 2972.582372][T23402] input: syz0 as /devices/virtual/input/input36 [ 2973.773911][T23405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2974.973882][T23408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2978.880466][T23421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2980.152227][T23433] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[23112] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[23433] [ 2981.159754][T23438] loop9: detected capacity change from 0 to 256 [ 2982.597178][T23438] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 2984.617412][T23450] FAULT_INJECTION: forcing a failure. [ 2984.617412][T23450] name failslab, interval 1, probability 0, space 0, times 0 [ 2984.630689][T23450] CPU: 0 PID: 23450 Comm: syz.3.4322 Not tainted syzkaller #0 [ 2984.638150][T23450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2984.648202][T23450] Call Trace: [ 2984.651518][T23450] [ 2984.654461][T23450] dump_stack_lvl+0x18c/0x250 [ 2984.659173][T23450] ? show_regs_print_info+0x20/0x20 [ 2984.664376][T23450] ? load_image+0x420/0x420 [ 2984.668890][T23450] ? __might_sleep+0xe0/0xe0 [ 2984.673489][T23450] ? __lock_acquire+0x7d80/0x7d80 [ 2984.678604][T23450] should_fail_ex+0x394/0x4c0 [ 2984.683377][T23450] should_failslab+0x9/0x20 [ 2984.687885][T23450] slab_pre_alloc_hook+0x59/0x300 [ 2984.692919][T23450] ? do_signalfd4+0x134/0x320 [ 2984.697732][T23450] __kmem_cache_alloc_node+0x53/0x250 [ 2984.703134][T23450] ? __lock_acquire+0x7d80/0x7d80 [ 2984.708161][T23450] ? do_signalfd4+0x134/0x320 [ 2984.712836][T23450] kmalloc_trace+0x2a/0xe0 [ 2984.717263][T23450] do_signalfd4+0x134/0x320 [ 2984.721785][T23450] __x64_sys_signalfd+0x132/0x170 [ 2984.726823][T23450] ? __ia32_sys_signalfd4+0x1a0/0x1a0 [ 2984.732225][T23450] ? lockdep_hardirqs_on+0x98/0x150 [ 2984.737486][T23450] do_syscall_64+0x55/0xb0 [ 2984.741936][T23450] ? clear_bhb_loop+0x40/0x90 [ 2984.746707][T23450] ? clear_bhb_loop+0x40/0x90 [ 2984.751400][T23450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2984.757326][T23450] RIP: 0033:0x7fdeb0d9e159 [ 2984.761743][T23450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2984.781359][T23450] RSP: 002b:00007fdeb1c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 2984.789790][T23450] RAX: ffffffffffffffda RBX: 00007fdeb1025fa0 RCX: 00007fdeb0d9e159 [ 2984.797770][T23450] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 2984.805745][T23450] RBP: 00007fdeb0e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2984.813901][T23450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2984.821885][T23450] R13: 00007fdeb1026038 R14: 00007fdeb1025fa0 R15: 00007ffe0e479708 [ 2984.829879][T23450] [ 2985.920678][T23458] loop3: detected capacity change from 0 to 8 [ 2986.470436][T23460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2986.888447][T23458] SQUASHFS error: Unable to read inode 0x11f [ 2987.062169][T23418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2987.402991][T23464] loop3: detected capacity change from 0 to 16 [ 2987.456367][T23464] erofs: (device loop3): mounted with root inode @ nid 36. [ 2987.960694][T20627] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2988.211905][T20627] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 2988.239422][T20627] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2988.269992][T20627] usb 3-1: config 1 has no interface number 0 [ 2988.276230][T20627] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b [ 2988.310217][T20627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2988.380236][T20627] usb 3-1: bad CDC descriptors [ 2988.409427][T20627] usb 3-1: bad CDC descriptors [ 2988.450522][T20627] cdc_acm 3-1:1.236: Zero length descriptor references [ 2988.478468][T20627] cdc_acm: probe of 3-1:1.236 failed with error -22 [ 2988.586055][T20627] usb 3-1: USB disconnect, device number 13 [ 2990.288262][T23477] loop4: detected capacity change from 0 to 164 [ 2990.563792][T23485] loop2: detected capacity change from 0 to 16 [ 2990.627542][T23485] erofs: (device loop2): mounted with root inode @ nid 36. [ 2991.943375][T23490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.707589][T23498] loop3: detected capacity change from 0 to 256 [ 2993.741494][T23498] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 2993.970068][T18250] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 2995.609201][T18250] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2995.649940][T18250] usb 10-1: not running at top speed; connect to a high speed hub [ 2995.731349][T18250] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 2995.780181][T18250] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2995.840230][T18250] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 2996.835466][T18250] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2996.845151][T18250] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.857581][T18250] usb 10-1: config 0 descriptor?? [ 2997.087291][T18250] usbhid 10-1:0.0: can't add hid device: -71 [ 2997.140021][T18250] usbhid: probe of 10-1:0.0 failed with error -71 [ 2997.175048][T18250] usb 10-1: USB disconnect, device number 11 [ 2997.483436][T23510] loop9: detected capacity change from 0 to 2048 [ 2997.600425][T23510] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 2997.820009][T23510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2998.935939][T23520] loop4: detected capacity change from 0 to 256 [ 2998.963892][T23520] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3000.549656][T23532] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4351'. [ 3002.228711][T23536] loop3: detected capacity change from 0 to 8 [ 3002.370640][T23536] SQUASHFS error: lzo decompression failed, data probably corrupt [ 3002.378707][T23536] SQUASHFS error: Failed to read block 0x91: -5 [ 3002.440946][T23536] SQUASHFS error: Unable to read metadata cache entry [8f] [ 3002.470790][T23536] SQUASHFS error: Unable to read inode 0x11f [ 3003.883612][T23552] loop2: detected capacity change from 0 to 16 [ 3003.947267][T23552] erofs: (device loop2): mounted with root inode @ nid 36. [ 3005.859459][T23560] loop3: detected capacity change from 0 to 164 [ 3009.803865][T23580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.055094][T23587] loop9: detected capacity change from 0 to 1024 [ 3011.184538][T23587] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3011.406078][T23112] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3011.686418][T23595] loop9: detected capacity change from 0 to 256 [ 3011.721508][T23595] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3011.814969][T23471] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3015.767673][T19563] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 3015.789994][T19563] CPU: 1 PID: 19563 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 3015.797720][T19563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3015.807835][T19563] Workqueue: hci1 hci_rx_work [ 3015.812653][T19563] Call Trace: [ 3015.815975][T19563] [ 3015.817939][T23620] loop4: detected capacity change from 0 to 736 [ 3015.818925][T19563] dump_stack_lvl+0x18c/0x250 [ 3015.829902][T19563] ? show_regs_print_info+0x20/0x20 [ 3015.835159][T19563] ? load_image+0x420/0x420 [ 3015.839726][T19563] sysfs_create_dir_ns+0x26e/0x2a0 [ 3015.844987][T19563] ? __lock_acquire+0x7d80/0x7d80 [ 3015.850053][T19563] ? sysfs_warn_dup+0xa0/0xa0 [ 3015.854781][T19563] ? do_raw_spin_unlock+0x121/0x230 [ 3015.860034][T19563] kobject_add_internal+0x617/0xc90 [ 3015.865366][T19563] kobject_add+0x164/0x240 [ 3015.869949][T19563] ? kobject_init+0x1d0/0x1d0 [ 3015.874673][T19563] ? get_device_parent+0x366/0x390 [ 3015.879828][T19563] device_add+0x3fa/0xc40 [ 3015.884177][T19563] hci_conn_add_sysfs+0xd5/0x1e0 [ 3015.889205][T19563] le_conn_complete_evt+0xe9f/0x1480 [ 3015.894504][T19563] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 3015.900767][T19563] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3015.906408][T19563] ? mutex_unlock+0x10/0x10 [ 3015.910913][T19563] ? skb_pull_data+0xf0/0x1f0 [ 3015.915616][T19563] hci_le_conn_complete_evt+0x187/0x440 [ 3015.921169][T19563] ? hci_remote_host_features_evt+0x150/0x150 [ 3015.927272][T19563] hci_event_packet+0x7b4/0x1280 [ 3015.932217][T19563] ? __lock_acquire+0x7d80/0x7d80 [ 3015.937247][T19563] ? lock_chain_count+0x20/0x20 [ 3015.942183][T19563] ? bis_list+0x290/0x290 [ 3015.946516][T19563] ? kcov_remote_start+0x513/0x810 [ 3015.951818][T19563] ? lockdep_hardirqs_on+0x98/0x150 [ 3015.957067][T19563] ? hci_send_to_monitor+0xd7/0x4f0 [ 3015.962300][T19563] hci_rx_work+0x43a/0xd60 [ 3015.966725][T19563] ? process_scheduled_works+0x975/0x1600 [ 3015.972453][T19563] process_scheduled_works+0xa60/0x1600 [ 3015.978025][T19563] ? worker_attach_to_pool+0x370/0x370 [ 3015.983488][T19563] ? assign_work+0x3cc/0x5d0 [ 3015.988091][T19563] worker_thread+0xa5e/0xfe0 [ 3015.992714][T19563] ? _raw_spin_unlock+0x40/0x40 [ 3015.997581][T19563] ? __kthread_parkme+0x71/0x1c0 [ 3016.002561][T19563] kthread+0x2fa/0x390 [ 3016.006636][T19563] ? pr_cont_work+0x550/0x550 [ 3016.011318][T19563] ? kthread_blkcg+0xd0/0xd0 [ 3016.015907][T19563] ret_from_fork+0x48/0x80 [ 3016.020367][T19563] ? kthread_blkcg+0xd0/0xd0 [ 3016.024955][T19563] ret_from_fork_asm+0x11/0x20 [ 3016.029737][T19563] [ 3016.040315][T19563] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 3016.054472][T19563] Bluetooth: hci1: failed to register connection device [ 3020.209073][T23636] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[22812] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[23636] [ 3020.872046][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.878438][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3023.243906][T19563] Bluetooth: hci1: command 0x0406 tx timeout [ 3027.312819][T23654] loop2: detected capacity change from 0 to 2048 [ 3027.383376][T23654] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 3027.560094][T23654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3031.266394][T23673] loop3: detected capacity change from 0 to 1024 [ 3031.466005][T23673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3031.952105][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3033.130253][T19563] Bluetooth: hci0: command 0x0406 tx timeout [ 3033.616413][T23686] loop2: detected capacity change from 0 to 256 [ 3033.711318][T23686] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3033.781477][T23418] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3035.635674][T23698] loop4: detected capacity change from 0 to 2048 [ 3035.651351][T23698] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 3035.770887][T23471] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3037.848509][T23704] loop4: detected capacity change from 0 to 512 [ 3041.941575][T23718] loop2: detected capacity change from 0 to 16 [ 3042.020422][T23718] erofs: (device loop2): mounted with root inode @ nid 36. [ 3046.285747][T23734] loop3: detected capacity change from 0 to 256 [ 3046.363925][T23734] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3049.406257][T23744] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 3050.777313][T23752] loop3: detected capacity change from 0 to 256 [ 3050.871560][T23759] loop9: detected capacity change from 0 to 128 [ 3050.927310][T23759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 3050.939253][T23752] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3050.983899][T23759] System zones: 1-3, 19-19, 35-36 [ 3051.056780][T23759] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 3051.147696][T23759] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 3052.174577][T23759] EXT4-fs warning (device loop9): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 3052.473696][T23112] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3052.858478][T23772] loop9: detected capacity change from 0 to 2048 [ 3052.935852][T23772] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3053.102898][T23772] loop9: detected capacity change from 2048 to 0 [ 3053.151263][T23777] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag a200 [ 3053.306626][T23112] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag a200 [ 3053.360319][T23112] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag a200 [ 3053.414298][T23776] loop3: detected capacity change from 0 to 164 [ 3054.510520][T23112] syz-executor: attempt to access beyond end of device [ 3054.510520][T23112] loop9: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 3054.587376][T23112] Buffer I/O error on dev loop9, logical block 128, lost sync page write [ 3055.567921][ T2967] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3055.955072][ T2967] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3056.370390][ T2967] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3056.506590][T23799] loop3: detected capacity change from 0 to 256 [ 3056.527825][T23799] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3056.752296][ T2967] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3057.421038][T18273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3057.465044][T18273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3057.478609][T18273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3057.516034][T18273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3057.560264][T18273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3057.583739][T18273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3059.077116][T23214] Bluetooth: hci1: command 0x0406 tx timeout [ 3059.691393][T23214] Bluetooth: hci0: command tx timeout [ 3060.407710][T23824] loop3: detected capacity change from 0 to 1024 [ 3061.728154][T23418] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3061.772257][T23214] Bluetooth: hci0: command tx timeout [ 3062.779556][T23803] chnl_net:caif_netlink_parms(): no params data found [ 3064.859995][T18273] Bluetooth: hci0: command tx timeout [ 3065.780313][T23803] bridge0: port 1(bridge_slave_0) entered blocking state [ 3065.807989][T23803] bridge0: port 1(bridge_slave_0) entered disabled state [ 3065.843461][T23803] bridge_slave_0: entered allmulticast mode [ 3065.865944][T23803] bridge_slave_0: entered promiscuous mode [ 3065.913277][T23803] bridge0: port 2(bridge_slave_1) entered blocking state [ 3065.941666][T23803] bridge0: port 2(bridge_slave_1) entered disabled state [ 3065.948970][T23803] bridge_slave_1: entered allmulticast mode [ 3065.981757][T23803] bridge_slave_1: entered promiscuous mode [ 3066.190583][ T2967] hsr_slave_0: left promiscuous mode [ 3066.211079][ T2967] hsr_slave_1: left promiscuous mode [ 3066.231140][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3067.222483][T18273] Bluetooth: hci0: command tx timeout [ 3067.288278][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3067.361069][T23852] loop4: detected capacity change from 0 to 164 [ 3067.462383][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3067.469821][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3067.556060][ T2967] bridge_slave_1: left allmulticast mode [ 3067.599891][ T2967] bridge_slave_1: left promiscuous mode [ 3067.605813][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 3067.731170][ T2967] bridge_slave_0: left allmulticast mode [ 3067.736983][ T2967] bridge_slave_0: left promiscuous mode [ 3067.810045][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 3067.881870][ T2967] veth1_macvtap: left promiscuous mode [ 3067.887409][ T2967] veth0_macvtap: left promiscuous mode [ 3067.920329][ T2967] veth1_vlan: left promiscuous mode [ 3067.925772][ T2967] veth0_vlan: left promiscuous mode [ 3068.250628][T23860] loop3: detected capacity change from 0 to 256 [ 3068.281829][T23860] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3068.404022][T23471] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3075.450684][T23886] loop3: detected capacity change from 0 to 256 [ 3075.481121][T23886] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3075.534199][T23870] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3076.117693][T23890] loop3: detected capacity change from 0 to 256 [ 3076.173397][T23890] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 3076.573588][ T27] audit: type=1800 audit(2000002197.494:278): pid=23891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4460" name="file1" dev="loop3" ino=1049943 res=0 errno=0 [ 3076.608251][T23891] FAULT_INJECTION: forcing a failure. [ 3076.608251][T23891] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 3076.621532][T23891] CPU: 1 PID: 23891 Comm: syz.3.4460 Not tainted syzkaller #0 [ 3076.629008][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3076.639066][T23891] Call Trace: [ 3076.642350][T23891] [ 3076.645286][T23891] dump_stack_lvl+0x18c/0x250 [ 3076.649990][T23891] ? show_regs_print_info+0x20/0x20 [ 3076.655191][T23891] ? load_image+0x420/0x420 [ 3076.659699][T23891] ? __lock_acquire+0x7d80/0x7d80 [ 3076.664729][T23891] ? futex_wait_setup+0x270/0x270 [ 3076.669775][T23891] should_fail_ex+0x394/0x4c0 [ 3076.674480][T23891] strncpy_from_user+0x36/0x2f0 [ 3076.679353][T23891] path_setxattr+0x142/0x590 [ 3076.683967][T23891] ? vfs_write+0x5de/0x9a0 [ 3076.688435][T23891] ? simple_xattrs_free+0x150/0x150 [ 3076.693681][T23891] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 3076.699670][T23891] ? lock_chain_count+0x20/0x20 [ 3076.704546][T23891] __x64_sys_setxattr+0xbb/0xd0 [ 3076.709442][T23891] do_syscall_64+0x55/0xb0 [ 3076.714071][T23891] ? clear_bhb_loop+0x40/0x90 [ 3076.718770][T23891] ? clear_bhb_loop+0x40/0x90 [ 3076.723497][T23891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3076.729434][T23891] RIP: 0033:0x7fdeb0d9e159 [ 3076.733873][T23891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3076.753492][T23891] RSP: 002b:00007fdeb1c0e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 3076.761927][T23891] RAX: ffffffffffffffda RBX: 00007fdeb1026090 RCX: 00007fdeb0d9e159 [ 3076.769925][T23891] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 3076.777914][T23891] RBP: 00007fdeb0e35024 R08: 0000000000000002 R09: 0000000000000000 [ 3076.785912][T23891] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 3076.793907][T23891] R13: 00007fdeb1026128 R14: 00007fdeb1026090 R15: 00007ffe0e479708 [ 3076.801922][T23891] [ 3078.671419][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 3081.953213][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 3082.266453][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.273362][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.340339][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3082.658557][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3089.322515][ T2967] bond0 (unregistering): Released all slaves [ 3089.840238][T23913] netlink: 'syz.3.4462': attribute type 4 has an invalid length. [ 3090.008836][T23803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3090.053651][T23803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3090.323881][T23934] loop2: detected capacity change from 0 to 164 [ 3090.352934][T23803] team0: Port device team_slave_0 added [ 3090.437401][T23803] team0: Port device team_slave_1 added [ 3090.568896][T23803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3090.647149][T23803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3090.778486][T23803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3090.829754][T23803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3090.889891][T23803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3090.983662][T23803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3092.316171][T23803] hsr_slave_0: entered promiscuous mode [ 3092.381574][T23803] hsr_slave_1: entered promiscuous mode [ 3093.043259][ T2967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3093.443489][ T2967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3093.563438][ T6243] smpboot: CPU 1 is now offline [ 3095.042651][ T2967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3096.360679][ T2967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3096.980062][T23214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3096.991509][T23214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3097.001377][T23214] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3097.016003][T23214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3097.023653][T23214] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3097.031258][T23214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3098.023665][T23803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3098.089414][T23803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3098.424261][T23803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3099.756136][T23214] Bluetooth: hci1: command tx timeout [ 3099.850895][T23803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3099.914487][T23955] netlink: 'syz.2.4479': attribute type 4 has an invalid length. [ 3100.753354][T23958] loop3: detected capacity change from 0 to 164 [ 3101.346296][T23803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3102.330246][T18273] Bluetooth: hci1: command tx timeout [ 3102.346727][T23951] chnl_net:caif_netlink_parms(): no params data found [ 3102.452908][T23803] 8021q: adding VLAN 0 to HW filter on device team0 [ 3102.571472][T18368] bridge0: port 1(bridge_slave_0) entered blocking state [ 3102.578600][T18368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3102.676754][T18368] bridge0: port 2(bridge_slave_1) entered blocking state [ 3102.683990][T18368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3103.854181][ T2967] hsr_slave_0: left promiscuous mode [ 3103.900082][ T2967] hsr_slave_1: left promiscuous mode [ 3104.060123][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3104.067612][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3104.140494][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3104.147945][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3104.240423][ T2967] bridge_slave_1: left allmulticast mode [ 3104.246111][ T2967] bridge_slave_1: left promiscuous mode [ 3104.310082][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 3104.415998][T18273] Bluetooth: hci1: command tx timeout [ 3104.470498][ T2967] bridge_slave_0: left allmulticast mode [ 3104.476183][ T2967] bridge_slave_0: left promiscuous mode [ 3104.526572][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 3104.694535][ T2967] veth1_macvtap: left promiscuous mode [ 3104.730198][ T2967] veth0_macvtap: left promiscuous mode [ 3104.763656][ T2967] veth1_vlan: left promiscuous mode [ 3104.769001][ T2967] veth0_vlan: left promiscuous mode [ 3106.491111][T18273] Bluetooth: hci1: command tx timeout [ 3109.010487][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 3109.224712][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 3109.405165][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3109.607093][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3111.159723][ T2967] bond0 (unregistering): Released all slaves [ 3111.432647][T23951] bridge0: port 1(bridge_slave_0) entered blocking state [ 3111.439772][T23951] bridge0: port 1(bridge_slave_0) entered disabled state [ 3111.500040][T23951] bridge_slave_0: entered allmulticast mode [ 3111.530018][T23951] bridge_slave_0: entered promiscuous mode [ 3111.730849][T23951] bridge0: port 2(bridge_slave_1) entered blocking state [ 3111.738071][T23951] bridge0: port 2(bridge_slave_1) entered disabled state [ 3111.823547][T23951] bridge_slave_1: entered allmulticast mode [ 3111.876059][T23951] bridge_slave_1: entered promiscuous mode [ 3112.019242][T23803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3112.116181][T23951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3112.193588][T23951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3112.244476][T23986] loop3: detected capacity change from 0 to 512 [ 3112.356236][T23986] EXT4-fs: Ignoring removed mblk_io_submit option [ 3112.440091][T23986] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3112.459732][T23803] veth0_vlan: entered promiscuous mode [ 3112.591980][T23951] team0: Port device team_slave_0 added [ 3112.600143][T23986] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3112.620366][T23803] veth1_vlan: entered promiscuous mode [ 3112.689284][T23951] team0: Port device team_slave_1 added [ 3112.695502][T23986] EXT4-fs (loop3): orphan cleanup on readonly fs [ 3112.766885][T23986] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.4492: Attempting to read directory block (0) that is past i_size (256) [ 3112.884302][T23951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3112.923321][T23951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3112.961183][T23986] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 3113.021646][T23986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3113.082439][T23951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3113.162228][T23951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3113.169211][T23951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3113.350115][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3113.380090][T23951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3113.436864][T23803] veth0_macvtap: entered promiscuous mode [ 3113.662196][ T2967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3113.903897][T23803] veth1_macvtap: entered promiscuous mode [ 3114.032827][T23991] loop3: detected capacity change from 0 to 164 [ 3114.060755][T23214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3114.074860][T23214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3114.084060][T23214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3114.092653][T23214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3114.100436][T23214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3114.107622][T23214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3114.232538][ T2967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3114.337081][T23951] hsr_slave_0: entered promiscuous mode [ 3114.372425][T23951] hsr_slave_1: entered promiscuous mode [ 3114.452009][T23951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3114.459595][T23951] Cannot create hsr debugfs directory [ 3115.593295][ T2967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.707821][T23803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3115.753393][T23803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3115.793681][T23803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3115.850350][T23803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3115.889963][T23803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3115.930155][T23803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3115.968605][T23803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3116.082682][ T2967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3116.174510][T23214] Bluetooth: hci3: command tx timeout [ 3116.205703][T23803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3116.259910][T23803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3116.292831][T23803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3116.349947][T23803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3116.390968][T23803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3116.447056][T23803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3116.484776][T23803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3116.525940][T23803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3116.578018][T23803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3117.853089][T18273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3117.868145][T18273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3117.883055][T18273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3117.892400][T18273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3117.904786][T18273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3117.912050][T18273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3118.256557][T23214] Bluetooth: hci3: command tx timeout [ 3118.367571][T24007] loop3: detected capacity change from 0 to 2048 [ 3118.494001][T24007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3119.035337][T23994] chnl_net:caif_netlink_parms(): no params data found [ 3119.639921][ T6243] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 3119.796213][T23951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3119.870316][ T6243] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3119.900088][ T6243] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 3119.946632][T23951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3119.959730][ T6243] usb 4-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3119.993994][T23951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3120.012169][T23214] Bluetooth: hci4: command tx timeout [ 3120.029062][ T6243] usb 4-1: config 1 interface 0 has no altsetting 0 [ 3120.100955][ T6243] usb 4-1: New USB device found, idVendor=0525, idProduct=f8a1, bcdDevice=fa.8c [ 3120.116681][T23994] bridge0: port 1(bridge_slave_0) entered blocking state [ 3120.153547][ T6243] usb 4-1: New USB device strings: Mfr=171, Product=2, SerialNumber=3 [ 3120.169504][T23994] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.201914][ T6243] usb 4-1: Product: syz [ 3120.206114][ T6243] usb 4-1: Manufacturer: syz [ 3120.213228][T23994] bridge_slave_0: entered allmulticast mode [ 3120.259045][ T6243] usb 4-1: SerialNumber: syz [ 3120.267049][T23994] bridge_slave_0: entered promiscuous mode [ 3120.292245][T24012] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3120.309465][T23951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3120.329977][T23214] Bluetooth: hci3: command tx timeout [ 3120.439645][T24003] chnl_net:caif_netlink_parms(): no params data found [ 3120.484127][T23994] bridge0: port 2(bridge_slave_1) entered blocking state [ 3120.509992][T23994] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.537653][T23994] bridge_slave_1: entered allmulticast mode [ 3120.560502][ T6243] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 3120.591259][T23994] bridge_slave_1: entered promiscuous mode [ 3120.604236][ T6243] usb 4-1: USB disconnect, device number 10 [ 3120.753719][ T2967] hsr_slave_0: left promiscuous mode [ 3120.773280][ T2967] hsr_slave_1: left promiscuous mode [ 3120.792315][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3120.827070][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3120.845139][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3120.874616][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3120.900342][ T2967] bridge_slave_1: left allmulticast mode [ 3120.927322][ T2967] bridge_slave_1: left promiscuous mode [ 3120.946735][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.973680][ T2967] bridge_slave_0: left allmulticast mode [ 3120.999698][ T2967] bridge_slave_0: left promiscuous mode [ 3121.023867][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 3121.103922][ T2967] veth1_macvtap: left promiscuous mode [ 3121.109477][ T2967] veth0_macvtap: left promiscuous mode [ 3121.160072][ T2967] veth1_vlan: left promiscuous mode [ 3121.165449][ T2967] veth0_vlan: left promiscuous mode [ 3121.309495][T24020] Bluetooth: MGMT ver 1.22 [ 3122.095052][T23214] Bluetooth: hci4: command tx timeout [ 3122.138534][T24028] loop3: detected capacity change from 0 to 256 [ 3122.182927][T24028] exfat: Unknown parameter 'fm©Šgµ0^ask' [ 3122.229670][T23996] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 3122.410803][T23214] Bluetooth: hci3: command tx timeout [ 3124.059163][T24031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3124.176152][T23214] Bluetooth: hci4: command tx timeout [ 3125.401850][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 3125.693215][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 3125.975618][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3126.257065][T23214] Bluetooth: hci4: command tx timeout [ 3126.290972][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3126.887760][T24038] loop3: detected capacity change from 0 to 1024 [ 3128.164353][ T2967] bond0 (unregistering): Released all slaves [ 3128.454796][T23994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3128.493168][T23994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3128.803271][T23994] team0: Port device team_slave_0 added [ 3128.861179][T23994] team0: Port device team_slave_1 added [ 3128.994594][T23951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3129.069099][T24003] bridge0: port 1(bridge_slave_0) entered blocking state [ 3129.121777][T24003] bridge0: port 1(bridge_slave_0) entered disabled state [ 3129.128972][T24003] bridge_slave_0: entered allmulticast mode [ 3129.201514][T24003] bridge_slave_0: entered promiscuous mode [ 3129.259224][T23994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3129.295066][T23994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3129.399916][T23994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3129.457201][T23994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3129.469264][T23994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3129.543771][T23994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3129.581827][T24003] bridge0: port 2(bridge_slave_1) entered blocking state [ 3129.588960][T24003] bridge0: port 2(bridge_slave_1) entered disabled state [ 3129.625260][T24003] bridge_slave_1: entered allmulticast mode [ 3129.645531][T24003] bridge_slave_1: entered promiscuous mode [ 3129.765403][T24003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3129.816919][T23951] 8021q: adding VLAN 0 to HW filter on device team0 [ 3129.868071][T24003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3129.946988][T22033] bridge0: port 1(bridge_slave_0) entered blocking state [ 3129.954159][T22033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3130.085331][ T2967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.149341][T23994] hsr_slave_0: entered promiscuous mode [ 3130.183729][T23994] hsr_slave_1: entered promiscuous mode [ 3130.211473][T23994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3130.219066][T23994] Cannot create hsr debugfs directory [ 3130.267817][T22033] bridge0: port 2(bridge_slave_1) entered blocking state [ 3130.275037][T22033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3130.325994][T24003] team0: Port device team_slave_0 added [ 3130.371130][T24003] team0: Port device team_slave_1 added [ 3130.464616][ T2967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.635346][ T2967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3130.748072][T24003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3130.763755][T24003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3130.852775][T24003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3130.901425][T24003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3130.937285][T24003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3131.009876][T24003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3131.102583][ T2967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3131.271110][T24003] hsr_slave_0: entered promiscuous mode [ 3131.289022][T24003] hsr_slave_1: entered promiscuous mode [ 3131.310763][T24003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3131.349925][T24003] Cannot create hsr debugfs directory [ 3132.548010][T23951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3132.825485][T23951] veth0_vlan: entered promiscuous mode [ 3132.975670][T23951] veth1_vlan: entered promiscuous mode [ 3133.205713][T23994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3133.378952][T23994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3133.423291][T23994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3133.477053][T23994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3133.518565][T23951] veth0_macvtap: entered promiscuous mode [ 3133.540695][ T2967] hsr_slave_0: left promiscuous mode [ 3133.570326][ T2967] hsr_slave_1: left promiscuous mode [ 3133.588291][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3133.614671][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3133.638461][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3133.667200][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3133.702272][ T2967] bridge_slave_1: left allmulticast mode [ 3133.707958][ T2967] bridge_slave_1: left promiscuous mode [ 3133.740030][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 3133.766869][ T2967] bridge_slave_0: left allmulticast mode [ 3133.793762][ T2967] bridge_slave_0: left promiscuous mode [ 3133.799504][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 3133.878525][ T2967] veth1_macvtap: left promiscuous mode [ 3133.901496][ T2967] veth0_macvtap: left promiscuous mode [ 3133.907087][ T2967] veth1_vlan: left promiscuous mode [ 3133.943773][ T2967] veth0_vlan: left promiscuous mode [ 3136.400806][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 3136.614097][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 3136.810661][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3137.021495][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3138.287880][ T2967] bond0 (unregistering): Released all slaves [ 3138.648186][T23951] veth1_macvtap: entered promiscuous mode [ 3138.838934][T23951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3138.891391][T23951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3138.920612][T23951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3138.959912][T23951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.014969][T23951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3139.082001][T23951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3139.160507][T23951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3139.190887][T23951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3139.296354][T23951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3139.340061][T23951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3139.371642][T23951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3139.402950][T23951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3139.486315][T23994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3139.724726][T23994] 8021q: adding VLAN 0 to HW filter on device team0 [ 3139.778241][T24003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3139.814476][T24003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3139.852167][T23885] bridge0: port 1(bridge_slave_0) entered blocking state [ 3139.859319][T23885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3139.912523][T23885] bridge0: port 2(bridge_slave_1) entered blocking state [ 3139.919657][T23885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3139.989743][T24003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3140.089564][T24003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3140.198637][T18368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3140.240190][T18368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3140.322888][T23885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3140.373618][T23885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3140.579738][T24003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3140.707428][T24003] 8021q: adding VLAN 0 to HW filter on device team0 [ 3141.502156][T24061] loop3: detected capacity change from 0 to 512 [ 3141.606323][T23994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3141.616137][T24061] EXT4-fs (loop3): orphan cleanup on readonly fs [ 3141.671641][T24061] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 3141.684326][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state [ 3141.691506][ T3518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3141.762878][T24061] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 3141.774423][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state [ 3141.781564][ T3518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3141.859401][T24061] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.4506: Failed to acquire dquot type 1 [ 3141.994633][T24061] EXT4-fs (loop3): 1 truncate cleaned up [ 3142.058393][T24061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3142.333893][T24061] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 3142.423514][T24061] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 3142.692073][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3142.832031][T24003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3142.850905][T23994] veth0_vlan: entered promiscuous mode [ 3142.951407][T23994] veth1_vlan: entered promiscuous mode [ 3143.227780][T24003] veth0_vlan: entered promiscuous mode [ 3143.275394][T23994] veth0_macvtap: entered promiscuous mode [ 3143.327932][T23994] veth1_macvtap: entered promiscuous mode [ 3143.369619][T24075] kvm: kvm [24074]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 3143.408235][T23994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3143.494957][T24077] loop3: detected capacity change from 0 to 164 [ 3143.508326][T23994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3143.570246][T23994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3143.648704][T23994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3143.697264][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.703746][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.719332][T23994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3143.769277][T23994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3143.834731][T23994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3143.921677][T24003] veth1_vlan: entered promiscuous mode [ 3143.947958][T23994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3144.005262][T23994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3144.061363][T23994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3144.107054][T23994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3145.141531][T23994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3145.276912][T23994] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3145.332877][T23994] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3145.387688][T23994] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3145.422244][T23994] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3146.395997][T24086] loop3: detected capacity change from 0 to 512 [ 3146.429621][T24086] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3146.471724][T24086] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #11: comm syz.3.4504: casefold flag without casefold feature [ 3146.485301][T24086] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4504: couldn't read orphan inode 11 (err -117) [ 3146.499547][T24086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3146.515955][T24086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3146.763319][T24003] veth0_macvtap: entered promiscuous mode [ 3146.856668][T24003] veth1_macvtap: entered promiscuous mode [ 3147.051094][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.113116][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.160142][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.215320][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.269948][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.320129][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.373582][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3147.429937][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.498581][T24003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3147.566776][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.611206][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.674651][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.730239][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.771320][T24003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3147.829842][T24003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3147.883974][T24003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3147.986132][T24003] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.034893][T24003] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.090302][T24003] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.099028][T24003] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3148.179568][T22033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3148.222965][T22033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3148.376344][T23885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3148.459430][T23885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3148.662241][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3148.730735][T23885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3148.738630][T23885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3148.750068][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3152.282559][T24109] kvm: kvm [24108]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 3152.367590][T24111] loop1: detected capacity change from 0 to 164 [ 3156.458237][ T27] audit: type=1326 audit(2000002277.374:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3156.639884][ T27] audit: type=1326 audit(2000002277.374:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3156.829911][ T27] audit: type=1326 audit(2000002277.374:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3157.023363][ T27] audit: type=1326 audit(2000002277.374:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3157.209965][ T27] audit: type=1326 audit(2000002277.374:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3157.402841][ T27] audit: type=1326 audit(2000002277.374:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3157.580634][ T27] audit: type=1326 audit(2000002277.374:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3157.756794][ T27] audit: type=1326 audit(2000002277.404:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3157.958975][ T27] audit: type=1326 audit(2000002277.404:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3158.151098][ T27] audit: type=1326 audit(2000002277.404:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24123 comm="syz.0.4510" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3169.432699][T24191] loop7: detected capacity change from 0 to 164 [ 3176.032578][T24219] loop3: detected capacity change from 0 to 1024 [ 3176.056865][T24219] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 3176.099492][T24219] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.4535: lblock 2 mapped to illegal pblock 2 (length 1) [ 3176.115639][T24219] __quota_error: 27 callbacks suppressed [ 3176.115651][T24219] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 3176.129552][T24219] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.4535: lblock 0 mapped to illegal pblock 48 (length 1) [ 3176.143960][T24219] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 3176.152951][T24219] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.4535: Failed to acquire dquot type 0 [ 3176.167996][T24219] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 3176.204753][T24219] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4535: mark_inode_dirty error [ 3176.225119][T24219] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 3176.235459][T24219] EXT4-fs (loop3): 1 orphan inode deleted [ 3176.242002][T24219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3176.286398][ T1008] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 3176.500723][ T1008] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 3176.509215][ T1008] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 3177.761855][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3178.132914][T22812] EXT4-fs error (device loop3): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 3178.414969][T22812] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 3178.643378][T22812] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 3180.364424][ T27] audit: type=1326 audit(2000002301.274:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3180.585304][ T27] audit: type=1326 audit(2000002301.274:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3180.716718][T24238] FAULT_INJECTION: forcing a failure. [ 3180.716718][T24238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3180.769968][ T27] audit: type=1326 audit(2000002301.274:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3180.832976][T24238] CPU: 0 PID: 24238 Comm: syz.7.4555 Not tainted syzkaller #0 [ 3180.840472][T24238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3180.850546][T24238] Call Trace: [ 3180.853823][T24238] [ 3180.856776][T24238] dump_stack_lvl+0x18c/0x250 [ 3180.861468][T24238] ? show_regs_print_info+0x20/0x20 [ 3180.866683][T24238] ? load_image+0x420/0x420 [ 3180.871185][T24238] ? __lock_acquire+0x7d80/0x7d80 [ 3180.876335][T24238] should_fail_ex+0x394/0x4c0 [ 3180.881033][T24238] prepare_alloc_pages+0x1e1/0x5b0 [ 3180.886146][T24238] __alloc_pages+0x134/0x460 [ 3180.890733][T24238] ? zone_statistics+0x170/0x170 [ 3180.895669][T24238] ? __asan_memset+0x22/0x40 [ 3180.900266][T24238] ? lockdep_init_map_type+0x9c/0x8e0 [ 3180.905638][T24238] ? lockdep_softirqs_off+0x440/0x440 [ 3180.911035][T24238] __kmalloc_large_node+0x8c/0x1f0 [ 3180.916155][T24238] ? io_alloc_hash_table+0x2d/0xb0 [ 3180.921262][T24238] __kmalloc+0x114/0x240 [ 3180.925520][T24238] io_alloc_hash_table+0x2d/0xb0 [ 3180.930485][T24238] io_ring_ctx_alloc+0x132/0xc10 [ 3180.935454][T24238] io_uring_create+0x2df/0x1330 [ 3180.940407][T24238] ? __might_fault+0xc6/0x120 [ 3180.945087][T24238] ? __might_fault+0xaa/0x120 [ 3180.949789][T24238] __se_sys_io_uring_setup+0x29f/0x2b0 [ 3180.955259][T24238] ? __x64_sys_io_uring_setup+0x60/0x60 [ 3180.960818][T24238] ? lockdep_hardirqs_on+0x98/0x150 [ 3180.966108][T24238] do_syscall_64+0x55/0xb0 [ 3180.970530][T24238] ? clear_bhb_loop+0x40/0x90 [ 3180.975239][T24238] ? clear_bhb_loop+0x40/0x90 [ 3180.979944][T24238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3180.985868][T24238] RIP: 0033:0x7f0a4119e159 [ 3180.990296][T24238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3181.009926][T24238] RSP: 002b:00007f0a42157fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3181.018343][T24238] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f0a4119e159 [ 3181.026324][T24238] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000530f [ 3181.034319][T24238] RBP: 00007f0a41235024 R08: 0000000000000000 R09: 0000000000000000 [ 3181.042344][T24238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3181.050330][T24238] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd0302c88 [ 3181.058312][T24238] [ 3181.139880][ T27] audit: type=1326 audit(2000002301.334:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a4115e98e code=0x7ffc0000 [ 3181.270178][ T27] audit: type=1326 audit(2000002301.334:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a4115e98e code=0x7ffc0000 [ 3181.429872][ T27] audit: type=1326 audit(2000002301.334:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3181.587199][ T27] audit: type=1326 audit(2000002301.334:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3181.730127][ T27] audit: type=1326 audit(2000002301.344:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3181.877128][ T27] audit: type=1326 audit(2000002301.344:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3182.048435][ T27] audit: type=1326 audit(2000002301.344:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3182.228754][ T27] audit: type=1326 audit(2000002301.344:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3183.461959][ T27] audit: type=1326 audit(2000002301.344:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3184.547748][ T27] audit: type=1326 audit(2000002301.344:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24234 comm="syz.7.4553" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3187.970741][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4563'. [ 3199.341302][T24321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3199.420335][T24090] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 3199.650465][T24090] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3199.689892][T24090] usb 8-1: config 0 has no interfaces? [ 3199.712508][T24090] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3199.756585][T24327] loop1: detected capacity change from 0 to 2048 [ 3199.774115][T24090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3199.836978][T24327] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3199.930800][T24090] usb 8-1: config 0 descriptor?? [ 3201.000129][T24334] loop7: detected capacity change from 0 to 8192 [ 3201.025921][T24335] loop3: detected capacity change from 0 to 164 [ 3201.145626][T24334] loop7: p1 < > p4 < > [ 3201.836039][T24346] loop1: detected capacity change from 0 to 256 [ 3201.901574][T24346] FAT-fs (loop1): Directory bread(block 1285) failed [ 3202.915096][T24346] FAT-fs (loop1): Directory bread(block 1286) failed [ 3202.936975][ T6243] usb 8-1: USB disconnect, device number 30 [ 3203.049410][T24346] FAT-fs (loop1): Directory bread(block 1287) failed [ 3203.130583][T24346] FAT-fs (loop1): Directory bread(block 1288) failed [ 3203.224776][T24346] FAT-fs (loop1): Directory bread(block 1285) failed [ 3203.273849][T24346] FAT-fs (loop1): Directory bread(block 1286) failed [ 3203.350645][T24350] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 3203.400241][T24346] FAT-fs (loop1): Directory bread(block 1287) failed [ 3203.430127][T24346] FAT-fs (loop1): Directory bread(block 1288) failed [ 3203.497514][T24346] FAT-fs (loop1): Directory bread(block 1285) failed [ 3205.151724][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.158043][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.928157][T24366] loop1: detected capacity change from 0 to 164 [ 3209.048137][T24376] loop7: detected capacity change from 0 to 256 [ 3209.181588][T24376] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 3209.680325][T24380] loop7: detected capacity change from 0 to 256 [ 3209.750603][T24380] exfat: Unknown parameter 'u‡#cÍòušÍp7´id' [ 3211.078000][T24395] loop7: detected capacity change from 0 to 2048 [ 3211.157728][T24395] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 3211.251242][T24395] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 3211.258916][T24395] UDF-fs: Scanning with blocksize 512 failed [ 3211.348411][T24395] UDF-fs: warning (device loop7): udf_fill_super: No fileset found [ 3215.939038][T24416] input: syz1 as /devices/virtual/input/input50 [ 3216.171594][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 3216.171606][ T27] audit: type=1326 audit(2000002337.094:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3216.372999][ T27] audit: type=1326 audit(2000002337.124:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3218.483762][ T27] audit: type=1326 audit(2000002337.124:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3218.764552][ T27] audit: type=1326 audit(2000002337.134:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3218.959947][ T27] audit: type=1326 audit(2000002337.134:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3219.174785][ T27] audit: type=1326 audit(2000002337.134:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3219.360217][ T27] audit: type=1326 audit(2000002337.144:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3219.564272][ T27] audit: type=1326 audit(2000002337.144:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3219.751421][ T27] audit: type=1326 audit(2000002337.144:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3219.938102][ T27] audit: type=1326 audit(2000002337.144:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.0.4619" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f1ad0b9e159 code=0x7ffc0000 [ 3220.017144][T24446] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 3222.537569][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4636'. [ 3222.606321][T24456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4636'. [ 3222.695602][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4636'. [ 3223.080113][T18273] Bluetooth: hci1: command 0x0406 tx timeout [ 3225.638824][T24477] loop1: detected capacity change from 0 to 1024 [ 3225.722907][T24477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3225.951256][T24003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3226.440467][T24486] loop1: detected capacity change from 0 to 8 [ 3226.777003][T24489] loop1: detected capacity change from 0 to 128 [ 3226.838606][T24489] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3226.936312][T24489] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3227.142616][T24051] udevd[24051]: incorrect ext4 checksum on /dev/loop1 [ 3227.268082][T24003] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3230.197169][T24494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3232.191959][T24522] netlink: 'syz.1.4657': attribute type 6 has an invalid length. [ 3232.253071][T24522] netlink: 'syz.1.4657': attribute type 7 has an invalid length. [ 3232.289711][T24522] netlink: 'syz.1.4657': attribute type 8 has an invalid length. [ 3232.366932][T24526] loop7: detected capacity change from 0 to 256 [ 3234.990785][T24526] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 3235.114612][T24526] exFAT-fs (loop7): failed to load alloc-bitmap [ 3235.242315][T24526] exFAT-fs (loop7): failed to recognize exfat type [ 3237.936564][T23214] Bluetooth: hci3: command 0x0406 tx timeout [ 3238.060215][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'. [ 3238.844228][T24547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3238.941891][T24559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4665'. [ 3238.990149][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4665'. [ 3239.064140][T24563] FAULT_INJECTION: forcing a failure. [ 3239.064140][T24563] name failslab, interval 1, probability 0, space 0, times 0 [ 3239.201776][T24563] CPU: 0 PID: 24563 Comm: syz.7.4674 Not tainted syzkaller #0 [ 3239.209282][T24563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3239.219354][T24563] Call Trace: [ 3239.222658][T24563] [ 3239.225604][T24563] dump_stack_lvl+0x18c/0x250 [ 3239.230308][T24563] ? show_regs_print_info+0x20/0x20 [ 3239.235544][T24563] ? load_image+0x420/0x420 [ 3239.240053][T24563] ? __might_sleep+0xe0/0xe0 [ 3239.244652][T24563] ? __lock_acquire+0x7d80/0x7d80 [ 3239.249872][T24563] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 3239.256550][T24563] should_fail_ex+0x394/0x4c0 [ 3239.261235][T24563] should_failslab+0x9/0x20 [ 3239.265739][T24563] slab_pre_alloc_hook+0x59/0x300 [ 3239.270772][T24563] ? pcpu_alloc+0x11e7/0x1880 [ 3239.275448][T24563] ? percpu_ref_init+0xc3/0x340 [ 3239.280296][T24563] __kmem_cache_alloc_node+0x53/0x250 [ 3239.285670][T24563] ? percpu_ref_init+0xc3/0x340 [ 3239.290568][T24563] ? io_allocate_scq_urings+0x620/0x620 [ 3239.296137][T24563] kmalloc_trace+0x2a/0xe0 [ 3239.300576][T24563] percpu_ref_init+0xc3/0x340 [ 3239.305264][T24563] io_ring_ctx_alloc+0x205/0xc10 [ 3239.310232][T24563] io_uring_create+0x2df/0x1330 [ 3239.315101][T24563] ? __might_fault+0xc6/0x120 [ 3239.319788][T24563] ? __might_fault+0xaa/0x120 [ 3239.324463][T24563] __se_sys_io_uring_setup+0x29f/0x2b0 [ 3239.329933][T24563] ? __x64_sys_io_uring_setup+0x60/0x60 [ 3239.335489][T24563] ? lockdep_hardirqs_on+0x98/0x150 [ 3239.340704][T24563] do_syscall_64+0x55/0xb0 [ 3239.345127][T24563] ? clear_bhb_loop+0x40/0x90 [ 3239.349975][T24563] ? clear_bhb_loop+0x40/0x90 [ 3239.354680][T24563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3239.360585][T24563] RIP: 0033:0x7f0a4119e159 [ 3239.365027][T24563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3239.384667][T24563] RSP: 002b:00007f0a42157fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 3239.393093][T24563] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f0a4119e159 [ 3239.401087][T24563] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000530f [ 3239.409068][T24563] RBP: 00007f0a41235024 R08: 0000000000000000 R09: 0000000000000000 [ 3239.417046][T24563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3239.425057][T24563] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffdd0302c88 [ 3239.433041][T24563] [ 3240.072287][T24570] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3241.083597][T24574] loop1: detected capacity change from 0 to 256 [ 3241.166763][T24574] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 3241.370040][T24090] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 3241.591617][T24090] usb 4-1: Using ep0 maxpacket: 32 [ 3241.635573][T24090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3241.705925][T24090] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3241.766580][T24090] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3241.850027][T24090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3241.914485][T24090] usb 4-1: config 0 descriptor?? [ 3241.955955][T24090] hub 4-1:0.0: USB hub found [ 3242.989967][T24090] hub 4-1:0.0: 26 ports detected [ 3243.015628][T24090] hub 4-1:0.0: insufficient power available to use all downstream ports [ 3243.052956][T18273] Bluetooth: hci4: command 0x0406 tx timeout [ 3243.189867][T24574] FAULT_INJECTION: forcing a failure. [ 3243.189867][T24574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3243.203038][T24574] CPU: 0 PID: 24574 Comm: syz.1.4679 Not tainted syzkaller #0 [ 3243.210498][T24574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3243.220549][T24574] Call Trace: [ 3243.223854][T24574] [ 3243.226782][T24574] dump_stack_lvl+0x18c/0x250 [ 3243.231482][T24574] ? show_regs_print_info+0x20/0x20 [ 3243.236694][T24574] ? load_image+0x420/0x420 [ 3243.241211][T24574] ? __lock_acquire+0x7d80/0x7d80 [ 3243.246233][T24574] ? __virt_addr_valid+0x10c/0x380 [ 3243.251346][T24574] should_fail_ex+0x394/0x4c0 [ 3243.256024][T24574] _copy_to_user+0x2f/0xa0 [ 3243.260441][T24574] bpf_vlog_reverse_ubuf+0x2ad/0x3a0 [ 3243.265754][T24574] bpf_vlog_finalize+0x174/0x3e0 [ 3243.270706][T24574] btf_new_fd+0x4ca/0x9e0 [ 3243.275069][T24574] ? bpf_btf_show_fdinfo+0x80/0x80 [ 3243.280187][T24574] ? capable+0x88/0xe0 [ 3243.284256][T24574] __sys_bpf+0x670/0x890 [ 3243.288503][T24574] ? bpf_link_show_fdinfo+0x390/0x390 [ 3243.293883][T24574] ? lock_chain_count+0x20/0x20 [ 3243.298820][T24574] __x64_sys_bpf+0x7c/0x90 [ 3243.303230][T24574] do_syscall_64+0x55/0xb0 [ 3243.307640][T24574] ? clear_bhb_loop+0x40/0x90 [ 3243.312330][T24574] ? clear_bhb_loop+0x40/0x90 [ 3243.317012][T24574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3243.322902][T24574] RIP: 0033:0x7f0a5cb9e159 [ 3243.327312][T24574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3243.346937][T24574] RSP: 002b:00007f0a5da3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3243.355356][T24574] RAX: ffffffffffffffda RBX: 00007f0a5ce25fa0 RCX: 00007f0a5cb9e159 [ 3243.363331][T24574] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 3243.371302][T24574] RBP: 00007f0a5cc35024 R08: 0000000000000000 R09: 0000000000000000 [ 3243.379271][T24574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3243.387257][T24574] R13: 00007f0a5ce26038 R14: 00007f0a5ce25fa0 R15: 00007ffc0a437a48 [ 3243.395254][T24574] [ 3243.401816][T24090] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 3243.416265][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 3243.416277][ T27] audit: type=1800 audit(2000002364.104:351): pid=24574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4679" name="file1" dev="loop1" ino=1049966 res=0 errno=0 [ 3243.445732][T24090] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 3243.596189][T24090] usbhid 4-1:0.0: can't add hid device: -71 [ 3243.630208][T24090] usbhid: probe of 4-1:0.0 failed with error -71 [ 3243.729987][T24090] usb 4-1: USB disconnect, device number 11 [ 3243.882987][T24590] loop1: detected capacity change from 0 to 512 [ 3243.890143][T24590] EXT4-fs: Ignoring removed orlov option [ 3243.977476][T24590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3243.990264][T24590] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 3247.538711][T24593] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 3248.287809][T24003] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3250.565262][T24623] netlink: 592 bytes leftover after parsing attributes in process `syz.1.4694'. [ 3257.159513][T24640] loop1: detected capacity change from 0 to 4096 [ 3257.223848][T24640] EXT4-fs: Ignoring removed mblk_io_submit option [ 3257.287674][T24640] EXT4-fs: Ignoring removed orlov option [ 3257.376851][T24640] EXT4-fs (loop1): Test dummy encryption mode enabled [ 3257.493150][T24640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3257.945766][T24651] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3258.059976][T20253] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 3258.308331][T20253] usb 8-1: Using ep0 maxpacket: 32 [ 3258.359619][T20253] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3258.405645][T20253] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3258.494337][T20253] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3259.303277][T20253] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3259.330908][T24665] fuse: Bad value for 'fd' [ 3259.400964][T20253] hub 8-1:4.0: USB hub found [ 3259.649234][T20253] hub 8-1:4.0: 2 ports detected [ 3259.679586][T20253] usb 8-1: selecting invalid altsetting 1 [ 3259.711966][T20253] hub 8-1:4.0: Using single TT (err -22) [ 3260.689100][T20253] hub 8-1:4.0: hub_hub_status failed (err = -71) [ 3260.725295][T20253] hub 8-1:4.0: config failed, can't get hub status (err -71) [ 3260.820728][T20253] usb 8-1: USB disconnect, device number 31 [ 3266.580736][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.587058][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3272.536460][T24750] FAULT_INJECTION: forcing a failure. [ 3272.536460][T24750] name failslab, interval 1, probability 0, space 0, times 0 [ 3273.649915][T24750] CPU: 0 PID: 24750 Comm: syz.3.4736 Not tainted syzkaller #0 [ 3273.657429][T24750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3273.667484][T24750] Call Trace: [ 3273.670766][T24750] [ 3273.673807][T24750] dump_stack_lvl+0x18c/0x250 [ 3273.678532][T24750] ? show_regs_print_info+0x20/0x20 [ 3273.683760][T24750] ? load_image+0x420/0x420 [ 3273.688284][T24750] ? __might_sleep+0xe0/0xe0 [ 3273.692894][T24750] ? __lock_acquire+0x7d80/0x7d80 [ 3273.698015][T24750] ? mark_lock+0x94/0x320 [ 3273.702346][T24750] should_fail_ex+0x394/0x4c0 [ 3273.707030][T24750] should_failslab+0x9/0x20 [ 3273.711559][T24750] slab_pre_alloc_hook+0x59/0x300 [ 3273.716622][T24750] kmem_cache_alloc+0x5a/0x2c0 [ 3273.721408][T24750] ? mas_alloc_nodes+0x2f8/0x8c0 [ 3273.726391][T24750] mas_alloc_nodes+0x2f8/0x8c0 [ 3273.731175][T24750] mas_preallocate+0xa1f/0x1170 [ 3273.736059][T24750] ? lockdep_softirqs_off+0x440/0x440 [ 3273.741433][T24750] ? mas_destroy+0x20a0/0x20a0 [ 3273.746229][T24750] ? vma_iter_config+0xe6/0x270 [ 3273.751100][T24750] __split_vma+0x2dd/0xc20 [ 3273.755552][T24750] ? mmap_write_unlock+0x160/0x160 [ 3273.760702][T24750] ? read_lock_is_recursive+0x20/0x20 [ 3273.766132][T24750] do_vmi_align_munmap+0x3a3/0x16a0 [ 3273.771346][T24750] ? lockdep_hardirqs_on+0x98/0x150 [ 3273.776579][T24750] ? do_vmi_munmap+0x2d0/0x2d0 [ 3273.781352][T24750] ? mtree_range_walk+0x68c/0x7b0 [ 3273.786390][T24750] ? mas_find_setup+0x47f/0x590 [ 3273.791269][T24750] do_vmi_munmap+0x252/0x2d0 [ 3273.795869][T24750] mmap_region+0x8d9/0x2090 [ 3273.800384][T24750] ? futex_wait+0x4a7/0x5c0 [ 3273.804889][T24750] ? file_mmap_ok+0x170/0x170 [ 3273.809573][T24750] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 3273.815122][T24750] ? cap_mmap_addr+0x157/0x2b0 [ 3273.819899][T24750] do_mmap+0x98f/0x10a0 [ 3273.824066][T24750] ? mlock_future_ok+0xf0/0xf0 [ 3273.828850][T24750] ? down_write+0x200/0x200 [ 3273.833382][T24750] vm_mmap_pgoff+0x1c4/0x3f0 [ 3273.837994][T24750] ? account_locked_vm+0x200/0x200 [ 3273.843171][T24750] ? ksys_mmap_pgoff+0xf3/0x720 [ 3273.848144][T24750] ? syscall_user_dispatch+0x49/0x90 [ 3273.853450][T24750] ? __x64_sys_mmap+0x7a/0x130 [ 3273.858221][T24750] do_syscall_64+0x55/0xb0 [ 3273.862645][T24750] ? clear_bhb_loop+0x40/0x90 [ 3273.867320][T24750] ? clear_bhb_loop+0x40/0x90 [ 3273.872093][T24750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3273.877984][T24750] RIP: 0033:0x7fdeb0d9e159 [ 3273.882411][T24750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3273.902014][T24750] RSP: 002b:00007fdeb1c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3273.910532][T24750] RAX: ffffffffffffffda RBX: 00007fdeb1025fa0 RCX: 00007fdeb0d9e159 [ 3273.918520][T24750] RDX: 000000000000000e RSI: 0000000000b36000 RDI: 0000200000000000 [ 3273.926510][T24750] RBP: 00007fdeb0e35024 R08: ffffffffffffffff R09: 000000006a854000 [ 3273.934534][T24750] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 3273.942517][T24750] R13: 00007fdeb1026038 R14: 00007fdeb1025fa0 R15: 00007ffe0e479708 [ 3273.950505][T24750] [ 3275.232660][ T27] audit: type=1326 audit(2000002396.154:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3275.423286][ T27] audit: type=1326 audit(2000002396.154:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3275.582917][ T27] audit: type=1326 audit(2000002396.154:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3275.742534][ T27] audit: type=1326 audit(2000002396.194:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3275.923917][ T27] audit: type=1326 audit(2000002396.194:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3276.123474][ T27] audit: type=1326 audit(2000002396.194:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3276.221970][T24772] fuse: Bad value for 'fd' [ 3276.322849][ T27] audit: type=1326 audit(2000002396.194:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3277.494935][ T27] audit: type=1326 audit(2000002396.194:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3277.666142][ T27] audit: type=1326 audit(2000002396.194:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24763 comm="syz.3.4742" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdeb0d9e159 code=0x7ffc0000 [ 3278.676659][T24781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3280.644026][T24794] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4755'. [ 3280.993631][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4756'. [ 3281.955563][ T6243] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 3282.120169][ T6243] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3282.510969][T24805] fido_id[24805]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3285.143918][T24818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3285.406490][T24822] loop7: detected capacity change from 0 to 512 [ 3285.515718][T24822] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 3286.371346][T23994] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 3287.008404][T24835] loop7: detected capacity change from 0 to 164 [ 3287.038140][T24837] loop3: detected capacity change from 0 to 512 [ 3287.124747][T24837] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 3290.022978][T24860] loop3: detected capacity change from 0 to 128 [ 3290.210757][T24860] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3290.352877][T24860] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3290.771429][T22812] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3295.196258][T24885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3301.228419][T24923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3304.774254][T24934] loop3: detected capacity change from 0 to 512 [ 3304.882536][T24934] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 3304.980733][T24934] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 3305.094380][T24934] loop3: detected capacity change from 0 to 512 [ 3305.213341][T24934] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4800: inode has both inline data and extents flags [ 3305.360055][T24934] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4800: couldn't read orphan inode 15 (err -117) [ 3305.516673][T24934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3307.104263][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3309.975598][T24952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3310.374928][T24958] loop7: detected capacity change from 0 to 128 [ 3310.482036][T24958] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 3310.640203][T24958] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 3310.783407][T24958] fscrypt (loop7, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 3310.964886][T23994] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 3313.711038][T24979] loop3: detected capacity change from 0 to 8 [ 3313.761758][T24981] futex_wake_op: syz.1.4815 tries to shift op by -1; fix this program [ 3315.275590][T24987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3321.031025][T25029] loop7: detected capacity change from 0 to 8 [ 3321.111362][T25029] SQUASHFS error: Failed to read block 0x4de: -5 [ 3321.118030][T25029] SQUASHFS error: Failed to read block 0x4de: -5 [ 3321.208321][ T27] audit: type=1800 audit(2000002442.124:361): pid=25029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4833" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 3321.760075][T24090] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 3322.024088][T24090] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3322.041975][T24090] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 3322.111811][T24090] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 3322.157984][T24090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3322.214206][T24090] usb 8-1: config 0 descriptor?? [ 3323.825940][T24090] usb 8-1: Direct firmware load for ar3k/ramps_0x26c2c310_26.dfu failed with error -2 [ 3323.886969][T24090] usb 8-1: Falling back to sysfs fallback for: ar3k/ramps_0x26c2c310_26.dfu [ 3324.849634][T23214] Bluetooth: hci2: unexpected event for opcode 0x080b [ 3326.901705][T25069] loop3: detected capacity change from 0 to 128 [ 3327.024761][T25069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 3327.110008][T25069] FAT-fs (loop3): Filesystem has been set read-only [ 3327.160515][T25069] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52) [ 3327.217371][T25069] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52) [ 3328.416334][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3328.422785][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3330.288218][T25093] loop3: detected capacity change from 0 to 2048 [ 3330.384121][T25095] loop7: detected capacity change from 0 to 512 [ 3330.439533][T25093] loop3: p1 < > p2 p3 < > p4 < p5 > [ 3330.474338][T25093] loop3: partition table partially beyond EOD, truncated [ 3330.501066][T25095] EXT4-fs error (device loop7): __ext4_iget:5079: inode #11: block 1: comm syz.7.4860: invalid block [ 3330.554608][T25093] loop3: p1 start 3405774849 is beyond EOD, truncated [ 3330.603596][T25095] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.4860: couldn't read orphan inode 11 (err -117) [ 3330.648170][T25093] loop3: p2 start 53543428 is beyond EOD, truncated [ 3330.712528][T25093] loop3: p3 start 4284289 is beyond EOD, truncated [ 3330.720472][T25095] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3330.774150][T25093] loop3: p5 start 53543428 is beyond EOD, truncated [ 3331.042075][T23994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3331.338574][T25105] loop7: detected capacity change from 0 to 1024 [ 3331.483674][T25105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3331.641009][ T27] audit: type=1800 audit(2000002452.564:362): pid=25105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4861" name="file1" dev="loop7" ino=19 res=0 errno=0 [ 3331.814613][ T27] audit: type=1800 audit(2000002452.594:363): pid=25105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4861" name="file1" dev="loop7" ino=19 res=0 errno=0 [ 3333.113909][T23994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3333.854790][T25131] loop7: detected capacity change from 0 to 2048 [ 3333.865695][T25123] loop3: detected capacity change from 0 to 164 [ 3333.923313][T25131] loop7: p1 < > p2 p3 < > p4 < p5 > [ 3333.966038][T25131] loop7: partition table partially beyond EOD, truncated [ 3334.027451][T25131] loop7: p1 start 3405774849 is beyond EOD, truncated [ 3334.074939][T25131] loop7: p2 start 53543428 is beyond EOD, truncated [ 3334.111001][T25131] loop7: p3 start 4284289 is beyond EOD, truncated [ 3334.156858][T25131] loop7: p5 start 53543428 is beyond EOD, truncated [ 3334.754884][T25136] loop3: detected capacity change from 0 to 2048 [ 3334.880373][T25136] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3337.229146][T25166] loop7: detected capacity change from 0 to 1024 [ 3337.300493][T20253] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 3337.529947][T20253] usb 4-1: Using ep0 maxpacket: 32 [ 3337.579970][T20253] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 3337.614994][T20253] usb 4-1: config 0 has no interface number 0 [ 3337.658176][T20253] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3337.711637][T20253] usb 4-1: config 0 interface 85 has no altsetting 0 [ 3337.757734][T20253] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 3337.804873][T20253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.858126][T20253] usb 4-1: Product: syz [ 3337.885276][T20253] usb 4-1: Manufacturer: syz [ 3337.915772][T20253] usb 4-1: SerialNumber: syz [ 3337.955990][T20253] usb 4-1: config 0 descriptor?? [ 3338.516730][T20253] appletouch 4-1:0.85: Geyser mode initialized. [ 3338.574850][T20253] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input53 [ 3338.838658][ C0] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 3339.049447][T18792] usb 4-1: USB disconnect, device number 12 [ 3339.128036][T18792] appletouch 4-1:0.85: input: appletouch disconnected [ 3339.515290][ T27] audit: type=1326 audit(2000002460.434:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25195 comm="syz.0.4901" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ad0b9e159 code=0x0 [ 3339.865408][T25205] loop3: detected capacity change from 0 to 256 [ 3340.053583][T25205] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 3341.150420][T25222] fuse: Bad value for 'fd' [ 3341.806314][T23214] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 3342.173257][T25250] loop3: detected capacity change from 0 to 512 [ 3342.288130][T25250] ext4: Unknown parameter 'audit' [ 3342.508370][T25250] loop3: detected capacity change from 0 to 2048 [ 3342.619192][T25250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 3343.228421][T25269] loop3: detected capacity change from 0 to 512 [ 3343.314583][T25269] EXT4-fs: Ignoring removed mblk_io_submit option [ 3343.424984][T25269] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3343.526376][T25269] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 3348.688182][T25323] xt_hashlimit: max too large, truncated to 1048576 [ 3353.425651][T24053] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 3353.682930][T24053] usb 4-1: config 4 has an invalid interface number: 116 but max is 0 [ 3353.721692][T24053] usb 4-1: config 4 has no interface number 0 [ 3353.727826][T24053] usb 4-1: config 4 interface 116 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 3353.825566][T25359] loop7: detected capacity change from 0 to 256 [ 3353.852313][T24053] usb 4-1: config 4 interface 116 has no altsetting 0 [ 3353.892841][T24053] usb 4-1: New USB device found, idVendor=7392, idProduct=e822, bcdDevice=d5.77 [ 3353.925825][T25359] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 3353.962174][T24053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.012768][T25359] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 3354.039792][T24053] usb 4-1: Product: syz [ 3354.053225][T24053] usb 4-1: Manufacturer: syz [ 3354.098436][T25359] exFAT-fs (loop7): failed to load alloc-bitmap [ 3354.105576][T24053] usb 4-1: SerialNumber: syz [ 3354.147996][T25359] exFAT-fs (loop7): failed to recognize exfat type [ 3354.305033][T25359] loop7: detected capacity change from 0 to 512 [ 3354.400174][T24053] usb 4-1: USB disconnect, device number 13 [ 3354.520143][T25359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3354.627134][T25359] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 3355.161556][T23994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3355.325813][T25365] loop3: detected capacity change from 0 to 2048 [ 3355.433467][T25365] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 3356.497624][T25365] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 3359.281018][T25382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4977'. [ 3359.345095][T25382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4977'. [ 3359.392761][T25382] tc_dump_action: action bad kind [ 3369.669035][T25471] loop7: detected capacity change from 0 to 1024 [ 3369.800309][T25471] syz.7.4996: attempt to access beyond end of device [ 3369.800309][T25471] loop7: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 3369.920481][T25471] syz.7.4996: attempt to access beyond end of device [ 3369.920481][T25471] loop7: rw=1, sector=262, nr_sectors = 2048 limit=1024 [ 3370.019029][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.019029][T25471] loop7: rw=1, sector=2310, nr_sectors = 2048 limit=1024 [ 3370.104370][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.104370][T25471] loop7: rw=1, sector=4358, nr_sectors = 2048 limit=1024 [ 3370.210369][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.210369][T25471] loop7: rw=1, sector=6406, nr_sectors = 2048 limit=1024 [ 3370.295206][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.295206][T25471] loop7: rw=1, sector=8454, nr_sectors = 2048 limit=1024 [ 3370.367124][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.367124][T25471] loop7: rw=1, sector=10502, nr_sectors = 2048 limit=1024 [ 3370.447053][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.447053][T25471] loop7: rw=1, sector=12550, nr_sectors = 2048 limit=1024 [ 3370.529312][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.529312][T25471] loop7: rw=1, sector=14598, nr_sectors = 2048 limit=1024 [ 3370.622985][T25471] syz.7.4996: attempt to access beyond end of device [ 3370.622985][T25471] loop7: rw=1, sector=16646, nr_sectors = 2048 limit=1024 [ 3373.897582][T25502] loop3: detected capacity change from 0 to 2048 [ 3374.074687][T25502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3374.533252][T25502] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 3374.624753][T25502] File: /195/file1/file1 PID: 25502 Comm: syz.3.5005 [ 3375.793729][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3376.584138][T25521] loop3: detected capacity change from 0 to 512 [ 3376.733570][T25521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 3377.085591][T22812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3378.211909][T25529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3378.341500][T25538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 3384.354617][T24090] Bluetooth: Configuration file not found ar3k/ramps_0x26c2c310_26.dfu [ 3384.413277][T24090] Bluetooth: Loading sysconfig file failed [ 3384.453554][T24090] ath3k: probe of 8-1:0.0 failed with error -110 [ 3384.545846][T24090] usb 8-1: USB disconnect, device number 32 [ 3384.661403][T23214] Bluetooth: to_multiplier 4184 > 3200 [ 3386.032233][ T27] audit: type=1326 audit(2000002506.954:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.7.5047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3386.230527][ T27] audit: type=1326 audit(2000002506.954:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.7.5047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3386.419983][ T27] audit: type=1326 audit(2000002506.994:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.7.5047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3386.599848][ T27] audit: type=1326 audit(2000002506.994:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.7.5047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3386.734572][T23214] Bluetooth: hci3: command 0x0406 tx timeout [ 3386.770271][ T27] audit: type=1326 audit(2000002506.994:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.7.5047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3386.980302][ T27] audit: type=1326 audit(2000002506.994:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25576 comm="syz.7.5047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4119e159 code=0x7ffc0000 [ 3389.526211][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.534007][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3393.085756][T25633] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 3393.581611][T25641] loop7: detected capacity change from 0 to 8 [ 3394.269977][T24053] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 3394.480099][T24053] usb 8-1: Using ep0 maxpacket: 8 [ 3394.509377][T24053] usb 8-1: config 1 has an invalid interface number: 2 but max is 0 [ 3394.552691][T24053] usb 8-1: config 1 has no interface number 0 [ 3394.558817][T24053] usb 8-1: config 1 interface 2 has no altsetting 0 [ 3394.592733][T23214] Bluetooth: hci4: unexpected event for opcode 0x200f [ 3394.623039][T24053] usb 8-1: New USB device found, idVendor=0870, idProduct=0001, bcdDevice=3b.fe [ 3394.651086][T24053] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3394.684645][T24053] usb 8-1: Product: syz [ 3394.700042][T24053] usb 8-1: Manufacturer: syz [ 3394.714905][T24053] usb 8-1: SerialNumber: syz [ 3394.973552][T24053] usb 8-1: USB disconnect, device number 33 [ 3397.358697][T25673] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5088'. [ 3400.075599][T25696] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5095'. [ 3400.208232][T25700] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5095'. [ 3400.385431][T25696] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5095'. [ 3400.500532][T25703] syz.0.5097(25703): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 3400.547952][T25700] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5095'. [ 3403.980232][T25736] FAULT_INJECTION: forcing a failure. [ 3403.980232][T25736] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3404.096157][T25736] CPU: 0 PID: 25736 Comm: syz.7.5106 Not tainted syzkaller #0 [ 3404.103682][T25736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3404.113756][T25736] Call Trace: [ 3404.117038][T25736] [ 3404.119970][T25736] dump_stack_lvl+0x18c/0x250 [ 3404.124659][T25736] ? show_regs_print_info+0x20/0x20 [ 3404.129887][T25736] ? load_image+0x420/0x420 [ 3404.134401][T25736] should_fail_ex+0x394/0x4c0 [ 3404.139091][T25736] get_futex_key+0x136/0x1030 [ 3404.143768][T25736] ? futex_unqueue+0xcb/0xf0 [ 3404.148357][T25736] ? futex_wait+0x4a7/0x5c0 [ 3404.152862][T25736] ? futex_setup_timer+0xc0/0xc0 [ 3404.157831][T25736] futex_wake+0x127/0x4f0 [ 3404.162166][T25736] ? futex_wake_mark+0x150/0x150 [ 3404.167129][T25736] ? file_end_write+0x159/0x250 [ 3404.171991][T25736] ? vfs_write+0x5de/0x9a0 [ 3404.176414][T25736] do_futex+0x35d/0x3e0 [ 3404.180600][T25736] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3404.186498][T25736] __se_sys_futex+0x3a9/0x440 [ 3404.191183][T25736] ? __x64_sys_futex+0xf0/0xf0 [ 3404.195952][T25736] ? __x64_sys_futex+0x21/0xf0 [ 3404.200808][T25736] do_syscall_64+0x55/0xb0 [ 3404.205229][T25736] ? clear_bhb_loop+0x40/0x90 [ 3404.209916][T25736] ? clear_bhb_loop+0x40/0x90 [ 3404.214606][T25736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3404.220499][T25736] RIP: 0033:0x7f0a4119e159 [ 3404.224918][T25736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3404.244527][T25736] RSP: 002b:00007f0a421580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3404.252942][T25736] RAX: ffffffffffffffda RBX: 00007f0a41425fa8 RCX: 00007f0a4119e159 [ 3404.260913][T25736] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a41425fac [ 3404.268881][T25736] RBP: 00007f0a41425fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 3404.276848][T25736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3404.284837][T25736] R13: 00007f0a41426038 R14: 00007ffdd0302ba0 R15: 00007ffdd0302c88 [ 3404.292822][T25736] [ 3405.787255][T22033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3406.311344][T22033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3406.721025][T22033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3407.412397][T22033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3407.564902][T25771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3407.575799][T25771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3407.584703][T25771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3407.593663][T25771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3407.671129][T25771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3407.678385][T25771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3407.792465][T25774] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 3409.772843][T25771] Bluetooth: hci0: command tx timeout [ 3410.264218][T25770] chnl_net:caif_netlink_parms(): no params data found [ 3410.272243][T24090] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 3410.469966][T24090] usb 8-1: Using ep0 maxpacket: 8 [ 3410.550041][T24090] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 3410.596748][T24090] usb 8-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 3410.692769][T24090] usb 8-1: config 179 has no interface number 0 [ 3410.760203][T24090] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3410.850055][T24090] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3410.941693][T24090] usb 8-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 3411.051426][T24090] usb 8-1: config 179 interface 65 has no altsetting 0 [ 3411.058355][T24090] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3411.168301][T24090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3411.661007][T25770] bridge0: port 1(bridge_slave_0) entered blocking state [ 3411.719879][T25770] bridge0: port 1(bridge_slave_0) entered disabled state [ 3411.727079][T25770] bridge_slave_0: entered allmulticast mode [ 3411.829365][T25770] bridge_slave_0: entered promiscuous mode [ 3411.852278][T25771] Bluetooth: hci0: command tx timeout [ 3412.342072][T25770] bridge0: port 2(bridge_slave_1) entered blocking state [ 3412.388220][T25770] bridge0: port 2(bridge_slave_1) entered disabled state [ 3412.443430][T25770] bridge_slave_1: entered allmulticast mode [ 3412.494917][T25770] bridge_slave_1: entered promiscuous mode [ 3412.934352][T25770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3413.042015][T25770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3413.091694][T24090] usb 8-1: USB disconnect, device number 34 [ 3413.929768][T25771] Bluetooth: hci0: command tx timeout [ 3415.222755][T22033] hsr_slave_0: left promiscuous mode [ 3415.329960][T22033] hsr_slave_1: left promiscuous mode [ 3415.355098][T22033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3415.419909][T22033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3415.467033][T22033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3415.521533][T22033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3415.558503][T22033] bridge_slave_1: left allmulticast mode [ 3415.583617][T22033] bridge_slave_1: left promiscuous mode [ 3415.631806][T22033] bridge0: port 2(bridge_slave_1) entered disabled state [ 3415.694767][T22033] bridge_slave_0: left allmulticast mode [ 3415.729780][T22033] bridge_slave_0: left promiscuous mode [ 3415.757351][T22033] bridge0: port 1(bridge_slave_0) entered disabled state [ 3415.946100][T22033] veth1_macvtap: left promiscuous mode [ 3415.975662][T22033] veth0_macvtap: left promiscuous mode [ 3416.010157][T25771] Bluetooth: hci0: command tx timeout [ 3416.017014][T22033] veth1_vlan: left promiscuous mode [ 3416.038471][T22033] veth0_vlan: left promiscuous mode [ 3417.601858][T25862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5155'. [ 3419.353179][T22033] team0 (unregistering): Port device team_slave_1 removed [ 3419.565851][T22033] team0 (unregistering): Port device team_slave_0 removed [ 3419.792270][T22033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3420.005521][T22033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3421.965958][T22033] bond0 (unregistering): Released all slaves [ 3422.286546][T25770] team0: Port device team_slave_0 added [ 3422.310906][T25833] netlink: 140 bytes leftover after parsing attributes in process `syz.7.5141'. [ 3422.350088][T25880] netlink: 'syz.0.5163': attribute type 2 has an invalid length. [ 3422.382141][T25770] team0: Port device team_slave_1 added [ 3422.581548][T25770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3422.630802][T25770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3422.722602][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5166'. [ 3422.770194][T18792] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 3422.793677][T25770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3422.823317][T25889] pim6reg: entered allmulticast mode [ 3422.871877][T25770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3422.878858][T25770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3423.011884][T18792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3423.045841][T18792] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3423.078429][T25770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3423.108117][T18792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3423.179051][T18792] usb 8-1: config 0 descriptor?? [ 3423.463965][T18792] usbhid 8-1:0.0: can't add hid device: -71 [ 3423.526105][T18792] usbhid: probe of 8-1:0.0 failed with error -71 [ 3423.588833][T18792] usb 8-1: USB disconnect, device number 35 [ 3423.607900][T25770] hsr_slave_0: entered promiscuous mode [ 3423.671249][T25770] hsr_slave_1: entered promiscuous mode [ 3424.059935][T18792] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 3424.294090][T18792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3424.346637][T18792] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 3424.398819][T18792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3424.463355][T18792] usb 8-1: config 0 descriptor?? [ 3424.736963][T25771] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 3424.747427][T25771] Bluetooth: hci1: Injecting HCI hardware error event [ 3424.757536][T25771] Bluetooth: hci1: hardware error 0x00 [ 3424.910324][T25884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3424.919591][T25884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3424.951022][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ca91800: rx timeout, send abort [ 3425.052620][T25770] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3425.093545][T25770] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3425.148256][T25770] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3425.205500][T25770] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3425.442172][T18792] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 3425.460650][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ca91800: abort rx timeout. Force session deactivation [ 3425.514589][T18792] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input55 [ 3425.527114][T25770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3425.627653][ C0] ================================================================================ [ 3425.637079][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 3425.645669][ C0] index 2312 is out of range for type 'const int[34]' [ 3425.652423][ C0] CPU: 0 PID: 5433 Comm: dhcpcd Not tainted syzkaller #0 [ 3425.659442][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3425.669519][ C0] Call Trace: [ 3425.672799][ C0] [ 3425.675646][ C0] dump_stack_lvl+0x18c/0x250 [ 3425.680338][ C0] ? show_regs_print_info+0x20/0x20 [ 3425.685535][ C0] ? load_image+0x420/0x420 [ 3425.690039][ C0] ? kcov_remote_start+0x29f/0x810 [ 3425.695167][ C0] ubsan_epilogue+0xa/0x30 [ 3425.699597][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 3425.705322][ C0] aiptek_irq+0x1eb8/0x2920 [ 3425.709908][ C0] ? usb_unanchor_urb+0xa5/0xc0 [ 3425.714789][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 3425.720509][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 3425.725942][ C0] dummy_timer+0xa58/0x34e0 [ 3425.730530][ C0] ? dummy_free_streams+0x520/0x520 [ 3425.735747][ C0] ? dummy_free_streams+0x520/0x520 [ 3425.740945][ C0] __hrtimer_run_queues+0x525/0xc10 [ 3425.746155][ C0] ? hrtimer_interrupt+0x980/0x980 [ 3425.751262][ C0] ? read_tsc+0x9/0x20 [ 3425.755337][ C0] hrtimer_run_softirq+0x177/0x290 [ 3425.760449][ C0] handle_softirqs+0x27d/0x820 [ 3425.765224][ C0] ? read_tsc+0x9/0x20 [ 3425.769290][ C0] ? ktime_get+0x24b/0x280 [ 3425.773707][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 3425.778470][ C0] ? do_softirq+0x1a0/0x1a0 [ 3425.782973][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 3425.788192][ C0] __irq_exit_rcu+0xd3/0x190 [ 3425.792784][ C0] ? irq_exit_rcu+0x20/0x20 [ 3425.797306][ C0] irq_exit_rcu+0x9/0x20 [ 3425.801546][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3425.807184][ C0] [ 3425.810135][ C0] [ 3425.813077][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3425.819246][ C0] RIP: 0010:kasan_check_range+0x52/0x290 [ 3425.824890][ C0] Code: f9 49 c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 ff 01 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 <4d> 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d [ 3425.844539][ C0] RSP: 0018:ffffc90003717808 EFLAGS: 00000283 [ 3425.850613][ C0] RAX: ffffffff81cf2301 RBX: 0000000000000020 RCX: ffffffff81cf240f [ 3425.858579][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0001ff33f4 [ 3425.866543][ C0] RBP: ffffc90003717ab0 R08: ffffea0001ff33f7 R09: 000000000001ffff [ 3425.874527][ C0] R10: dffffc0000000000 R11: fffff940003fe67e R12: ffffea0001ff33c8 [ 3425.882511][ C0] R13: dffffc0000000000 R14: ffffea0001ff33f4 R15: 1ffffd40003fe67e [ 3425.890500][ C0] ? change_protection+0x1471/0x31e0 [ 3425.895790][ C0] ? change_protection+0x157f/0x31e0 [ 3425.901084][ C0] ? vm_normal_page+0x99/0x1e0 [ 3425.905867][ C0] change_protection+0x157f/0x31e0 [ 3425.911001][ C0] ? can_change_pte_writable+0x810/0x810 [ 3425.916680][ C0] ? mas_ascend+0x713/0x830 [ 3425.921220][ C0] ? tlb_gather_mmu+0x22e/0x2f0 [ 3425.926084][ C0] change_prot_numa+0xfd/0x190 [ 3425.930850][ C0] ? mmap_write_unlock+0x160/0x160 [ 3425.936056][ C0] ? mas_find_setup+0x47f/0x590 [ 3425.940914][ C0] task_numa_work+0xb84/0x1350 [ 3425.945685][ C0] ? init_numa_balancing+0x400/0x400 [ 3425.950967][ C0] ? __might_sleep+0xe0/0xe0 [ 3425.955556][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3425.960750][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3425.965978][ C0] task_work_run+0x1d4/0x260 [ 3425.970589][ C0] ? task_work_cancel+0x220/0x220 [ 3425.976086][ C0] ? ksys_write+0x1f2/0x260 [ 3425.980627][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 3425.986098][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 3425.991415][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 3425.996978][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 3426.002574][ C0] do_syscall_64+0x61/0xb0 [ 3426.007044][ C0] ? clear_bhb_loop+0x40/0x90 [ 3426.011735][ C0] ? clear_bhb_loop+0x40/0x90 [ 3426.016417][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3426.022322][ C0] RIP: 0033:0x7f55aedc2407 [ 3426.026738][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 3426.046376][ C0] RSP: 002b:00007ffc9cd9f210 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 3426.054808][ C0] RAX: 000000000000003b RBX: 00007f55aed38740 RCX: 00007f55aedc2407 [ 3426.062793][ C0] RDX: 000000000000003b RSI: 00007ffc9cd9f270 RDI: 0000000000000005 [ 3426.070759][ C0] RBP: 000055bd18b60168 R08: 0000000000000000 R09: 0000000000000000 [ 3426.078732][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc9cd9f6a0 [ 3426.086704][ C0] R13: 000055bd2b407100 R14: 000055bd2b3ba3b0 R15: 000055bd2b406ec0 [ 3426.094681][ C0] [ 3426.097704][ C0] ================================================================================ [ 3426.107063][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 3426.114269][ C0] CPU: 0 PID: 5433 Comm: dhcpcd Not tainted syzkaller #0 [ 3426.121317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3426.131392][ C0] Call Trace: [ 3426.134704][ C0] [ 3426.137636][ C0] dump_stack_lvl+0x18c/0x250 [ 3426.142322][ C0] ? show_regs_print_info+0x20/0x20 [ 3426.147522][ C0] ? load_image+0x420/0x420 [ 3426.152035][ C0] panic+0x2ca/0x720 [ 3426.155935][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 3426.160444][ C0] check_panic_on_warn+0x84/0xa0 [ 3426.165379][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 3426.171113][ C0] aiptek_irq+0x1eb8/0x2920 [ 3426.175705][ C0] ? usb_unanchor_urb+0xa5/0xc0 [ 3426.180554][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 3426.186293][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 3426.191666][ C0] dummy_timer+0xa58/0x34e0 [ 3426.196249][ C0] ? dummy_free_streams+0x520/0x520 [ 3426.201443][ C0] ? dummy_free_streams+0x520/0x520 [ 3426.206651][ C0] __hrtimer_run_queues+0x525/0xc10 [ 3426.211872][ C0] ? hrtimer_interrupt+0x980/0x980 [ 3426.216996][ C0] ? read_tsc+0x9/0x20 [ 3426.221117][ C0] hrtimer_run_softirq+0x177/0x290 [ 3426.226275][ C0] handle_softirqs+0x27d/0x820 [ 3426.231041][ C0] ? read_tsc+0x9/0x20 [ 3426.235110][ C0] ? ktime_get+0x24b/0x280 [ 3426.239548][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 3426.244311][ C0] ? do_softirq+0x1a0/0x1a0 [ 3426.248820][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 3426.254127][ C0] __irq_exit_rcu+0xd3/0x190 [ 3426.258717][ C0] ? irq_exit_rcu+0x20/0x20 [ 3426.263238][ C0] irq_exit_rcu+0x9/0x20 [ 3426.267495][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3426.273241][ C0] [ 3426.276187][ C0] [ 3426.279133][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3426.285128][ C0] RIP: 0010:kasan_check_range+0x52/0x290 [ 3426.290766][ C0] Code: f9 49 c1 e9 2f 41 81 f9 ff ff 01 00 0f 82 ff 01 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 <4d> 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d [ 3426.310389][ C0] RSP: 0018:ffffc90003717808 EFLAGS: 00000283 [ 3426.316476][ C0] RAX: ffffffff81cf2301 RBX: 0000000000000020 RCX: ffffffff81cf240f [ 3426.324473][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0001ff33f4 [ 3426.332466][ C0] RBP: ffffc90003717ab0 R08: ffffea0001ff33f7 R09: 000000000001ffff [ 3426.340453][ C0] R10: dffffc0000000000 R11: fffff940003fe67e R12: ffffea0001ff33c8 [ 3426.348430][ C0] R13: dffffc0000000000 R14: ffffea0001ff33f4 R15: 1ffffd40003fe67e [ 3426.356410][ C0] ? change_protection+0x1471/0x31e0 [ 3426.361792][ C0] ? change_protection+0x157f/0x31e0 [ 3426.367118][ C0] ? vm_normal_page+0x99/0x1e0 [ 3426.372093][ C0] change_protection+0x157f/0x31e0 [ 3426.377254][ C0] ? can_change_pte_writable+0x810/0x810 [ 3426.382901][ C0] ? mas_ascend+0x713/0x830 [ 3426.387422][ C0] ? tlb_gather_mmu+0x22e/0x2f0 [ 3426.392276][ C0] change_prot_numa+0xfd/0x190 [ 3426.397072][ C0] ? mmap_write_unlock+0x160/0x160 [ 3426.402187][ C0] ? mas_find_setup+0x47f/0x590 [ 3426.407067][ C0] task_numa_work+0xb84/0x1350 [ 3426.411841][ C0] ? init_numa_balancing+0x400/0x400 [ 3426.417125][ C0] ? __might_sleep+0xe0/0xe0 [ 3426.421748][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3426.426959][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3426.432159][ C0] task_work_run+0x1d4/0x260 [ 3426.436845][ C0] ? task_work_cancel+0x220/0x220 [ 3426.441987][ C0] ? ksys_write+0x1f2/0x260 [ 3426.446501][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 3426.451983][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 3426.457300][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 3426.462866][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 3426.468335][ C0] do_syscall_64+0x61/0xb0 [ 3426.472753][ C0] ? clear_bhb_loop+0x40/0x90 [ 3426.477448][ C0] ? clear_bhb_loop+0x40/0x90 [ 3426.482124][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3426.488033][ C0] RIP: 0033:0x7f55aedc2407 [ 3426.492447][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 3426.512068][ C0] RSP: 002b:00007ffc9cd9f210 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 3426.520492][ C0] RAX: 000000000000003b RBX: 00007f55aed38740 RCX: 00007f55aedc2407 [ 3426.528462][ C0] RDX: 000000000000003b RSI: 00007ffc9cd9f270 RDI: 0000000000000005 [ 3426.536443][ C0] RBP: 000055bd18b60168 R08: 0000000000000000 R09: 0000000000000000 [ 3426.544424][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc9cd9f6a0 [ 3426.552409][ C0] R13: 000055bd2b407100 R14: 000055bd2b3ba3b0 R15: 000055bd2b406ec0 [ 3426.560401][ C0] [ 3426.563468][ C0] Kernel Offset: disabled [ 3426.567806][ C0] Rebooting in 86400 seconds..