last executing test programs: 6m36.768517062s ago: executing program 32 (id=105): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r0, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 6m28.87347238s ago: executing program 3 (id=154): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 6m27.88676849s ago: executing program 3 (id=159): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001900)='./file1\x00', 0x14090, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32], 0xfd, 0x1512, &(0x7f0000005080)="$eJzs3Au4TtX2MPA55pyLbbfxtpP7HHMs3rQx7SQJJcklSZKQ3BOSdpIkSWxyS25JyHUnuWw75J522u73S+5JO0eSJCEhyfyeXfqczul8zjn//p/z/+/xe571mONda8w1luF93zXX83i/6TaiZpNa1RoSkfh3qN8G8OsfyUKIGCHEICFEXiFEIIQoH18+Pmt/LgXJ/9ZJ2H+TRqlXuwJ2NXH/szfuf/bG/c/euP/ZG/c/e+P+Z2/c/+yN+89YtpZW6Fresu/Gz///h5P/lWT+/s8W4B/t4P7/b6P+paO5/9kb9z974/5nb9z/7Cy42gWwq4zf/9kb95+xbO1Pf6a84dzVfqbN27+wMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj/x+c85dpIcRv46tdF2OMMcYYY4wxxv48/r2rXQFjjDHGGGOMMcb++4GQQgktApFD5BQxIpeIFdeIOJFb5BF5RURcK+LFdSKfuF7kFwVEQVFIFBZFRFFhBAorSISimCguouIGUULcKBJESVFKlBZOlBGJ4iZRVtwsyolbRHlxq6ggbhMVRaVfzpnlTlFV3CWqibtFdVFD1BS1xD2itrhX1BH3ibriflFPPCDqiwdFA/GQaCgaicbiYdFEPCKaimaiuWghWopWovUV8lPy/lH+i6KneEn0Er1Fsugj+oqXRT/RXwwQA8Ug8YoYLF4VQ8RQMUwMFyPEa2KkeF2MEm+I0WKMGCveFOPEeDFBTBSTxGSRIt4SU8TbYqp455HcYrqYIWaKVDFLpIl3xWwxR8wV74l5Yr5YIFJyLRKLxRLxvlgqPhDp4kOxTHwkMsRysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEx2K72CF2il1it9gj9opPxD7xqdgvPhOZ8Pm/mH/29/miOwgQIEGCBg05IAfEQAzEQizEQRzkgTwQgQjEQzzkg3yQH/JDQSgIyVAYikJRQEAgICgGxSAKUSgBJSABEqAUlAIHDhIhEcrCzVAOykF5KA8VoAJUhEpQCW6H26EKVIGqUBWqQTWoDtWhJtSEe+AeuBfqQB2oC3WhHtSD+lAfGkADaAgNoTE0hibQBJpCU2gOzaEltITW0BraQBtoC22hPbSHDtABOkJHSIIk6ASdoDN0hi7QBbpCV+gG3aA7vAAvwIvwIrwEL0FvqC77QF/oC/2gHwyAgTAQXoHB8Cq8CkNhGAyHEfAavAavwyg4A6NhDIyFsVBFjocJMBFIToYUSIGcYgpMhakwDabDdJgJqTAL0iANZsMcmAPvwTyYD/NhISyExbAElsBS+ADSIR2WwVnIgOWwAlbCKlgNq2AtrIO1sAE2wgbYDJthK2yFj+Fj2AE7YBfsgj2wBz6BT+BT+BSGQSZkwgE4AAfhIByCQ3AYDsMROAJH4Sgcg2NwHI7DCTgJp+AknIbTcAbOwjkhxHk4DxfgAlyEi1lvfplFSy1zyBwyRsbIWBkr42SczCPzyIiMyHgZL/PJfDK/zC8LyoKysCwsi8qiEiVKkqEsJovJqIzKErKETJAJspQsJZ10MlEmyrKyrCwny8ny8lZZQd4mK8pKsp27Xd4uq8j2rqq8S1aT1WR1WUPWlLVkLVlb1pZ1ZB1ZV9aV9WQ9WV8+KBvIPjAAGsmszjSRw6GpHAHNZQvZUraSr8Ojso0cBW1lO9lePi7HwGjoKNu4JPmU7CQnQGf5jJwIz8qucjJ0k8/L7vIF2UO+KHvKtq6X7C2nQR/ZV86EfrK/HCAHytlQQ2Z1rKYcKl/MOVyOkK/JxfC6HCXfkKPlGDlWvinHyfFygpwoJ8nJMkW+JafIt+VU+Y6cJqfLGXKmTJWzZJp8V86Wc+Rc+Z6cJ+fLBXKhXCQXyyXyfblUfiDT5YdymfxIZsjlcoVcKVfJ1XKNXCvXyfVyg9woN8nNcovcKrfJj+V2uUPulLvkbrlH7pWfyH3yU7lffiYz5efygPyLPCi/kIfkl/Kw/EoekV/Lo/IbeUx+K4/L7+QJeVKekt/L0/IHeUaelefkj/K8/ElekD/Li9JLoUBJpZRWgcqhcqoYlUvFqmtUnMqt8qi8KqKuVfHqOpVPXa/yqwKqoC6kCqsiqqgyCpVVpEJVTBVXUXWDKqFuVAmqpCqlSiunyqhEdZMqq25W5dQtqry6VVVQt6mKqpKq7IW6Q1VRd6qq6i5VTd2tqqsaqqaqpe5RtdW9qo66T9VV96t66gFVXz2oGqiHVEPVSDVWD6sm6hHVVDVTzVUL1VK1Uq3Vo6qNeky1Ve1Ue/W46qCeUB3VkypJPaU6qadVZ/WM6qKeVV3Vc6qbel51Vy+oHupndVF51Uv1Vsmqj+qrXlb9VH81QA1Ug9QrarB6VQ1RQ9UwNVyNUK+pkep1NUq9oUarMWqselONU+PVBDVRTVKTVYp6S01Rb6up6h01TU1XM9RMlapmqQGXZpr7T+S//Qf5Q345+1a1TX2stqsdaqfapXarPWqv2qv2qX1qv9qvMlWmOqAOqIPqoDqkDqnD6rA6oo6oo+qoOqaOqePquDqhTqof1ffqtPpBnVFn1Vn1ozqvzqsLl/4OhAYttdJaBzqHzqljdC4dq6/RcTq3zqPz6oi+Vsfr63Q+fb3OrwvogrqQLqyL6KLaaNRWkw51MV1cR/UNuoS+USfokrqULq2dLqMT9U3/5fwr1ddat9ZtdBvdVrfV7XV73UF30B11R52kk3Qn3Ul31p11F91Fd9VddTfdTXfX3XUP3UP31D11L91LJ+tk3Ve/rPvp/nqAHqgH6Vf0YD1YD9FD9DA9TI/QI/RIPVKP0qP0aD1aj9Vj9Tg9Tk/QE/QkPUmn+Lx6ip6ip+qpepqepmcMyqtTdapO02l6tp6t5+q5ep6epxfoBXqRXqSX6CV6qV6q03W6XqaX6Qy9XC/XK/VKvVqv1mv1Wr1er9cb9Ua9WW/WGXqb3qa36+16p96pd+vdeq/eq/fpfXq/3q8zdaY+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqFP6FP6lD6tT+sz+ow+p8/p8/q8vqAv6Iv6YtZtXyADGehABzmCHEFMEBPEBrFBXBAX5AnyBJEgEsQH8UG+4Pogf1AgKBgUCgoHRYKigQkwsAEFYVAsKB5EgxuCEsGNQUJQMigVlA5cUCZIDG4KygY3B+WCW4Lywa1BheC2oGJQKagc3B7cEVQJ7gyqBncF1YK7g+pBjaBmUCu4J6gd3BvUCe4L6gb3B/WCB4L6wYNBg+ChoGHQKGgcPBw0CR4JmgbNguZBi6Bl0Cpo/afO7/2ZAo+5Xqa3STZ9TF/zsuln+psBZqAZZF4xg82rZogZaoaZ4WaEec2MNK+bUeYNM9qMMWPNm2acGW8mmIlmkplsUsxbZop520w175hpZrqZEcw0qWaWSTPvmtlmjplr3jPzzHyzwCw0i8xiA7/eEot086FZZj4yGWa5WWFWmlVmtVlj1pp1Zr3ZYDaaTWZz+cG/Hmq2mx1mp9lldps9Zq/5xOwzn5r95jOTaT43B8xfzEHzhTlkvjSHzVfmiPnaHDXfmGPmW3PcfGdOmJPmlPnenDY/mDPmrDlnfjTnzU/mgvnZXDQ+6+Y+6+sdNWrMgTkwBmMwFmMxDuMwD+bBCEYwHuMxH+bD/JgfC2JBLIyFsSgWxSyEhMWwGEYxiiWwBCZgApbCUujQYSImYlksi+WwHJbH8lgBK2BFrIiVsTLegXfgnXgn3oV34d14N9bAGlgLa2FtrI11sA7WxbpYD+thfayPDbABNsSG2BgbYxNsgk2xKTbH5tgSW2JrbI1tsA22xbbYHttjB+yAHbEjJmESdsJO2Bk7Yxfsgl2xK3bDbtgdu2MP7IE9sSf2wl6YjMnYF/tiP+yHA3AADsJBOBgH4xAcgsNwGI7AETgSR+IoHIWjcQyOxTdxHI7HCTgRJ+FkTMEUnIJTcCpOxWk4DWfgDEzFVEzDNJyNs3EuzsV5OA8X4AJchItwCS7BpbgU0zEdl+EyzMAMXIErcBWuwjW4BtfhOtyAG3ATbsItuAW34TbcjttxJ+7E3bgb9+Je3If7cD/ux0zMxAN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Ds/jT3gBf8aL6DHG5rKx9hobZ3PbPDav/du4oC1kC9sitqg1Nr8t8LsYrbUJtqQtZUtbZ8vYRHvTL7HJ+es/3Ky4oq1kK9vb7R22ir3TVrUVbS7x13Fte6+tY++zde39tpa953dxPfuArW8fsQ1sM9vQtrCNbSvbxD5im9pmtrltYVvaVraDfcJ2tE/aJPuU7WSf/rt4qf3ArrPr7Qa70e6zn9pz9kd71H5jz9ufbC/b2w6yr9jB9lU7xA61w+zw38dC2LH2TTvOjrcT7EQ7yU7+u3iGnWlT7SybZt+1s+2cv4uX2PftPJtuF9iFdpFd/EucVVO6/dAusx/ZDLvcrrAr7Sq72q6xa/9vrSvtZrvFbrV77Sd2u91hd9pddrfd80ucdR377Wc2035uj9iv7UH7hT1kj9nD9qtf4qzrO2a/tcftd/aEPWlP2e/tafuDPWPP/nL9Wdf+vf3ZXrTeCgKSpEhTQDkoJ8VQLoqlayiOclMeyksRupbi6TrKR9dTfipABakQFaYiVJQMIVkiCqkYFaco3UAl6EZKoJJUikqTozKUSDdRWbqZytEtVJ5upQp0G1WkSlSZbqc7qArdSVXpLqpGd1N1qkE1qRbdQ7XpXqpD91Fdup/q0QNUnx6kBvQQNaRG1Jgepib0CDWlZtScWlBLakWt6VFqQ49RW2pH7elx6kBPUEd6kpLoKepET1Nneoa60LPUlZ6jbvQ8dacXqAe9SD3pJepFvSmZ+lBfepn6UX8aQANpEL1Cg+lVGkJDaRgNpxH0Go2k12kUvUGjaQyNpTdpHI2nCTSRJtFkSqG3aAq9TVPpHZpG02kGzaRUmkVp9C7Npjk0l96jeTSfFtBCWkSLaQm9T0vpA0qnD2kZfUQZtJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW30MW2nHbSTdtFu2kN76RPaR5/SfvqMMulzOkB/oYP0BR2iL+kwfUVH6Gs6St/QMfqWjtN3dIJO0in6nk7TD3SGztI5+pHO0090gX6mi+RJhBDKUIU6DMIcYc4wJswVxobXhHFh7jBPmDeMhNeG8eF1Yb7w+jB/WCAsGBYKC4dFwqKhCTG0IYVhWCwsHkbDG8IS4Y1hQlgyLBWWDl1YJkwMbwrLhjeH5cJbwvLhrWGF8LawYlgprBzeHt4RVgnvDKuGd4XVwrvD6mGNsGZYK7wnrB3eG9YJ7wvrhveH5cIHwvrhg2GD8KGwYdgobBw+HDYJHwmbhs3C5mGLsGXYKmwdPhq2CR8L24btwvbh42GH8ImwY/hkmBQ+FXYKn768v2Tw64fS3+xPDvuE6tITsvvUouji6JLo+9Gl0Q+i6dEPo8uiH0UzosujK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Jbo97XyikcZC2EhXaBy+FyuhiXy8W6a1ycy+3yuLwu4q518e46l89d7/K7Aq6gK+QKuyKuqDMOnXXkQlfMFXdRd4Mr4W50Ca6kK+VKO+fKuETXyrV2rV0b95hr69q59u5x97h7wj3hnoy5VLjr7J5xXdyzrqt7zj3nnnfd3Quuh3vR9XQvuV6ut0t2ya6v6+v6uX5ugBvgBrlBbrAb7Ia4IW6YG+ZGuBFupBvpRrlRbrQb7ca6sW6cG+cmuAlukpvkUlyKm+KmuKluqpvmprkZboZLdakuzaW52W62m+vmunlunlvgFrhFbpFb4pa4pW6pS3fpbplb5jJchlvhVrhVbpVb49a4dW6d2wDCbXKb3Ba3xW1z29x2t93tdDvdbrfb7XV73T63z+13+12my3QH3AF30B10h9yX7rD7yh1xX7uj7ht3zH3rjrvv3Al30p1yXp12P7gz7qw75350591P7oL72V103qVE3opMibwdmRp5JzItMj0yIzIzkhqZFUmLvBuZHZkTmRt5LzIvMj+yILIwsiiyOLIk8n5kaeSDSHrkw8iyyEeRjMjyyIrIysiqyOqI90W2h76YL+6j/gZfwt/oE3xJX8qX9s6X8Yn+Jl/W3+zL+Vt8eX+rr+Bv8xV9JV/ZN/PNfQvf0rfyrf2jvo1/zLf17Xx7/7jv4J/wHf2TPsk/5Tv5p31n/4zv4p/1Xf1zvpt/fv6lLvue/iXfy/f2yb6P7+tf9v18fz/AD/SD/Ct+sH/VD/FD/TA/3I/wr/mR/nU/yr/hR/sxfqx/04/z4/0EP9FP8pN9in/LT/Fv+6n+HT/NT/cz/Eyf6mf5NP+un+3n+Ln+PT/Pz/cL/EK/yC/2S/z7fqn/wKf7D/0y/5HP8Mv9Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Mf++1+h9/pd/ndfo/f6z/x+/ynfr//zGf6z/0B/xd/0H/hD/kv/WH/lT/iv/ZH/Tf+mP/WH/ff+RP+pD/lv/en/Q/+jD/rz/kf/Xn/k7/gf/YX+f+sMcYYY4z9U9QV9vf5g9fkpS1LXyFE7h2FDv/tnJvy/zruL/d1uvTYRzzVu1ujrK1Ro+Tk5EuvZSgRFF8ohIhczv/l9wcuxctFe/GESBLtRNk/rK+/rOz/eu4/mj96qxCxQuT6LSdreRQr/nb+m//B/M3epyvNv1CIhOKXc7JO9Ft8ef5y/2D+PR2uMH+uL1KEaPtXOXHicnx5/kTxmHhaJP3uSMYYY4wxxhhj7Ff95fnuV1rfZq3PC+vLOVnr+d/iK63Pr6Dqn3ENjDHGGGOMMcYY+3979oUeTz6alNSuy//4wdB/vCvnf0aF/wEDEEL8B5TBg//8wdX+ZGKMMcYYY4z92S7f9F/tShhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsezr3/+FMPlPH3y1r5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi72v5PAAAA//+pllJE") r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x62) inotify_init() read$FUSE(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x306}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'}) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000000)=""/153, 0x99, 0x3, 0x5, 0x81, 0x2, 0x8}}, 0x120) 6m26.28382487s ago: executing program 3 (id=166): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6m25.947908787s ago: executing program 3 (id=169): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRES32], 0xfd, 0xc2d, &(0x7f0000001100)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 6m25.269176802s ago: executing program 3 (id=173): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 6m24.586978786s ago: executing program 33 (id=174): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89ba", 0x2) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)=""/210, 0xd2}], 0x1}, 0x1}], 0x1, 0x10020, 0x0) 6m24.465856042s ago: executing program 3 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}]}}) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m23.91305703s ago: executing program 34 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}]}}) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 6m8.207925371s ago: executing program 2 (id=244): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10, 0x0}, 0x0) 6m7.915535476s ago: executing program 2 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m6.394941893s ago: executing program 2 (id=251): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x5}]}, {0x0, [0x2e]}}, 0x0, 0x27, 0x0, 0x1}, 0x28) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)={0x14, 0x0, 0xc38, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f0000000200)=""/227, 0xe3) read$watch_queue(r2, &(0x7f0000002d40)=""/4095, 0xfff) 6m5.2678489s ago: executing program 2 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m4.86387956s ago: executing program 2 (id=256): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x3, &(0x7f0000000340)=0x0) io_submit(r2, 0x1, &(0x7f0000000a00)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000380)="06497c803872fa4674b8b246d8a47b1c3ad26e707fe06047e134cd091f5578900ed12e9d66a18fbb15da63783a4229231c7519308a1ffba50da612640632c1802f0e5f2f81281ea9", 0x48, 0x6fe9}]) 6m4.390433094s ago: executing program 2 (id=258): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0, 0x27}], 0x4b, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008091, &(0x7f000005ffe4)={0xa, 0x4e21, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x27}, 0x5}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x47}], 0xaaaaaaaaaaaaaaf, 0x7d, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m3.68196542s ago: executing program 35 (id=258): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0, 0x27}], 0x4b, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008091, &(0x7f000005ffe4)={0xa, 0x4e21, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x27}, 0x5}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec8ec02d1aa80000460f1c460041ae", 0x47}], 0xaaaaaaaaaaaaaaf, 0x7d, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m44.435907769s ago: executing program 7 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=@newqdisc={0x54, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "50b3"}]}}}]}, 0x54}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 5m42.367163114s ago: executing program 7 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./file0/file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) 5m42.003886372s ago: executing program 7 (id=378): setuid(0xee01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) listen(r0, 0x7) 5m41.511771737s ago: executing program 1 (id=380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1f4) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0x100, 0x0, 0x8, 0x7, 0x7}) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) 5m40.575323034s ago: executing program 7 (id=382): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x24ffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 5m38.739837797s ago: executing program 7 (id=391): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m38.29382051s ago: executing program 1 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x400000000, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x80084d17, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}) 5m37.922328088s ago: executing program 1 (id=396): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x2) 5m37.566876756s ago: executing program 1 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5m37.4717751s ago: executing program 7 (id=402): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0) 5m36.991685365s ago: executing program 36 (id=402): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0) 5m36.971981996s ago: executing program 1 (id=405): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5m36.787763085s ago: executing program 1 (id=408): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) readv(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m36.227850573s ago: executing program 37 (id=408): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x1c) readv(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m19.344418288s ago: executing program 0 (id=837): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) r2 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 4m19.090857611s ago: executing program 0 (id=838): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000800), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000001880)=ANY=[], 0x0) 4m16.215588516s ago: executing program 0 (id=851): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040015) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x80000000005df, 0xfbdb}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m15.645834495s ago: executing program 0 (id=856): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 4m15.303735872s ago: executing program 0 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}}, 0x24000091) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x48) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) 4m14.731735581s ago: executing program 0 (id=861): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 4m14.274267724s ago: executing program 38 (id=861): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) 11.214511805s ago: executing program 4 (id=2035): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.892878171s ago: executing program 6 (id=2048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x8a080, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x6, 0xb}, {0xd, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1db3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x3, 0x0, 0x9, 0x1}, {0x2, 0x448fb5d2ba34cfda, 0x6d1, 0x7, 0xfffd, 0xed4}, 0x8, 0x1, 0x1fcd}}, @TCA_TBF_BURST={0x8, 0x6, 0xafc5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x220000e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000180)='+', 0x1, 0x10, &(0x7f0000000200)={0x11, 0x15, r3, 0x1, 0x5, 0x6, @remote}, 0x14) 8.665924793s ago: executing program 8 (id=2049): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) sendto$inet6(r1, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 8.244662734s ago: executing program 8 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r6, 0x3, r0, 0x5}) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x400, 0x0) 8.231899585s ago: executing program 6 (id=2053): sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{0x15}, {0x84, 0x68, 0x0, 0x2}, {0x6}]}) 8.215463376s ago: executing program 5 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xf6, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa000800450300e8ffff0000002f907800000000e0000001248022eb000000000005000110000800000086dde8a27d98c71e58283e71e5a380690e06a02285a8de48fe2b48d871111a090469f7f2463b65d0769c353115bad27b567e11ae8ff15879f8116439968bec3215990c07d3964777389142e04b652a66b73d42d0c7d2cc20fa3d448de4a30e3c2daccca9c7a47a4021d19fee0d2d8e2fd36f9793526acad99c72071068777ffad349ca992a04df425c46418013c088a888be86ddffff10fe000001006b0000000000080022eb0000000020000000020000000000000900000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a00000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd290747bcbfe915cef1698d0d2c909ab1ad34e193a81d3e2cb6314ddd679f6e3b23ea7f34661692a7b17326e768c94703de7a95b670d9bf26865f1834ccb02dc1b0a42f82949fd1fbe09cbe618ccb8175636a0180cb5d2a2f5e44f22940f7153ff54449fd8ac7a0c4236d01bbc54d9206433a1e0700fa161f4d265d87bcb3de"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.794174707s ago: executing program 6 (id=2055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x4c, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0xc4) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x44, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x51}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @from_mac=@broadcast, @initial, {0x8, 0x1}, "", @value={0x0, 0x1, 0x0, 0x1, 0x4}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) 6.786325517s ago: executing program 9 (id=2056): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000440), &(0x7f0000000480)=r7}, 0x20) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) 6.776614838s ago: executing program 5 (id=2057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.667229914s ago: executing program 8 (id=2058): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 6.299557192s ago: executing program 9 (id=2059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xc, 0x6, 0x3, 0x9, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0x7, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xe, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.696401462s ago: executing program 5 (id=2060): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x6210}, {0x0, 0x30}], 0x2) 5.657812474s ago: executing program 4 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 5.496808013s ago: executing program 6 (id=2062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@wr_crn={0x67, 0x20, {0x0, 0x2e73}}, @in_dx={0x69, 0x20, {0x9a02, 0x4}}, @cpuid={0x64, 0x18, {0x1, 0x4}}], 0x58}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f00003f8000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 4.447680396s ago: executing program 4 (id=2063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) 4.206707607s ago: executing program 9 (id=2064): socket$l2tp6(0xa, 0x2, 0x73) getresgid(0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x4000, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 4.012936857s ago: executing program 8 (id=2065): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rename(0x0, 0x0) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) 3.96362402s ago: executing program 5 (id=2066): r0 = open(0x0, 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") r3 = creat(&(0x7f0000000080)='./file1\x00', 0x182) fallocate(r3, 0x0, 0x1, 0x2000402) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(0x0, 0x0, r4) lchown(&(0x7f0000000100)='./file1\x00', r1, r4) 3.600652648s ago: executing program 6 (id=2067): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) fchdir(r1) r2 = fanotify_init(0x1a, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r2, 0x541, 0x1023, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 2.96859197s ago: executing program 4 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x7, 0xd, 0x2, 0x4, 0x2, 0x4, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0xfffe, 0x4, 0x2, 0xd06, 0x6, 0x2, 0xb, 0x3, 0x5, 0x6, 0xfffd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x6, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x8, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.759701471s ago: executing program 9 (id=2069): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.669623065s ago: executing program 6 (id=2070): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x833, &(0x7f0000000080)={0x0, 0x92bc, 0x400}) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002680)=[{0x0}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x3000) 2.226148087s ago: executing program 4 (id=2071): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1100) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) read$FUSE(r4, &(0x7f0000001400)={0x2020}, 0x2020) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000040)="1578f6cb7df9d76af649be343f7c08382afb1893061fc577aa1fffd4534a76191022e80c74578b79e8e0524582a2db8908d0305d14990d97c966f8247dc34aa58be80b5dd18ff51d6ffb86d9e6f409c3f6f795d180446b1cf43a7e688531b1a92d9d0244db656dda0749fb58bb39b2b8b0092daf2f14e46f7a49fd8edc1376b45faed8593612565e408926c8fb2134be0656f86d6c416972eeebfe24e8d3621f", 0xa0, 0x1, 0x0, 0x1, r0}, &(0x7f0000000140)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000001780)) 2.18379318s ago: executing program 9 (id=2072): munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, 0x930, 0x4, 0x40032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000481000/0x1000)=nil, 0x1000) munmap(&(0x7f00007f5000/0x1000)=nil, 0x1000) munmap(&(0x7f00009f4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e4c000/0x4000)=nil, 0x4000) munmap(&(0x7f000047a000/0x3000)=nil, 0x3000) munmap(&(0x7f00007f5000/0xe000)=nil, 0xe000) munmap(&(0x7f0000d04000/0x1000)=nil, 0x1000) munmap(&(0x7f0000c12000/0x3000)=nil, 0x3000) munmap(&(0x7f0000d53000/0x2000)=nil, 0x2000) munmap(&(0x7f00007fd000/0x800000)=nil, 0x800000) 1.478205355s ago: executing program 5 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r3, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r5}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0) 1.448047427s ago: executing program 8 (id=2074): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 302.578674ms ago: executing program 5 (id=2075): setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xa523074a1b9ae8b9, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fanotify_init(0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x2000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, 0x0) mlockall(0x7) 163.211901ms ago: executing program 9 (id=2076): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], 0x0, 0x1d, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x51, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000eea2b8fd89780ee338e794004382c3ea7c91297fb610d032d41f6e950f4ef6fea49b7130a14dc0c7bb06238f2bb0d9e5627668684cf8ae4998a3dc2a74c81a874783bf93a74c191fd049bf4220733db2b03c807617a48781e750940aa37bc42e52b6cacbea69cc6fcecb52053b4a3e1f4ad83b26620301b27b23871b341f167a1e1250b7fe083b46df2faa737c22f1bdd92830746587e9a65773c970d2af8cea99b06d118411", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf09000000000000550901"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r2}, 0x38) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ec0)={0xa44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x717, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @random="40d62fb6f759", @from_mac=@device_b, {0x5, 0x5}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}, @NL80211_ATTR_FRAME={0x2de, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x327}, @broadcast, @broadcast, @random="74bc16be58b8", {0x0, 0x5}}, @void, @val={0x1, 0x5, [{0x0, 0x1}, {0x1, 0x1}, {0x30}, {0x60}, {0x1, 0x1}]}, @void, @void, @void, [{0xdd, 0x79, "360e1539fd65db030074c6da3d8e7bb2dde999d4f90e6e91a3ad0ee879da99c3b18d9ba7cb585693ed1b762026842c72f53daa4679d4eec66b8a2953449bef8c63da549ae437debddc00136fa1eabe313a1164d3b291bc0f5d15ab3ca576df3a1ae965d65efd797747b67ef1bbf40efe40d2cae4dbc68539a0"}, {0xdd, 0x98, "17703137510b7fbb6bef859c4a86090cdc8eb13626c0f5445aa944685bf19f8330a4219a948a179cd919b328283fe84137b3fdcc1e49fa18e6e3a870533e255b5311fc65c9afb39908ae6968c28f44665da3e239ed76a1e0631bb9c982b973eb02ae6e49284306b5583fbe363104d6ec8af68efba827a5c93cb39490fa5bfc90421da597beef07aed62066c527dc66554aefc93ec15847c0"}, {0xdd, 0x65, "f640dc48b668d2573b272f31bfe61acb78edc5d8014d67012ae4595a5467f8f5c161de0dbb395c91592c3e4ab8483e77f8912ae5739dd60e2c12a84c5162eaa7b8436bae8d95685029af6b55724e23d5f29c88d4a0c90f2c1ebb68a113e0839a058f2dea8e"}, {0xdd, 0x2d, "38f71d9dea7125108681b95ad83ad8984192fbbd497bcc88b99b8c2baf02c4a08e817d87ff96280baa24c6c381"}, {0xdd, 0x6c, "21f742f5de00d910d262e6722bbe49ebff76a4c1fa16cb661ad9a6a0cfa5ff2c696d3cd288496326d93319341ecf500482c07357b57a34dc9262ad7d48bf171b81f8d7e538b378925a46a14aa2403557c7fc407a03e979d4a6d9c8ab9ed8eadca7ea55a88310774fef3126d6"}, {0xdd, 0x39, "91b75318b0414102dfbebc33233576895ee4caa995a73b854e27453b27e24ab73deda72d0a46ec1b101b2d1248404f80bcb579a0aa704e7b63"}, {0xdd, 0x65, "91523869c0cf0269f7ac284f65698537f20c04f54b3ce4df528130c7ca0033f4ca92d66aa46c10fadb54f9c85d08e64cbe6b896b7d4c02bb8f8a46f823dbb786678e545a6744452bbbed01ae64bd3da9bfb25592ad2414bffd60f2f77c144c05b3f875d5fe"}]}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @broadcast, @device_b, {0xf, 0x1d5}, @broadcast}}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1b}]}, 0xa44}, 0x1, 0x0, 0x0, 0x44041}, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r2, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 146.356212ms ago: executing program 8 (id=2077): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x8080380, 0x16, 0x1, 0x1, 0x5}}, 0x50) mount$bpf(0x0, &(0x7f0000000240)='./file0/file1\x00', 0x0, 0x44, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fc, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0x1000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0x1000, 0x5, {0x2, 0x6, 0x1, 0xffff, 0x7, 0x8, 0x5, 0x6, 0x2007, 0xa000, 0x1, r2, r3, 0x1, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x2040020, 0x0, 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=2078): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504800000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 213.759736][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 213.803817][ T6570] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 213.930074][ T7222] fuse: Bad value for 'fd' [ 213.995573][ T6570] usb 9-1: config index 0 descriptor too short (expected 64882, got 72) [ 214.019582][ T6570] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.063443][ T6570] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.091935][ T6570] usb 9-1: Product: syz [ 214.107875][ T6570] usb 9-1: Manufacturer: syz [ 214.120210][ T6570] usb 9-1: SerialNumber: syz [ 214.161085][ T6570] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.242854][ T6570] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.467153][ T4769] usb 9-1: USB disconnect, device number 3 [ 214.830581][ T7247] fuse: Bad value for 'fd' [ 215.263232][ T7261] syz.6.706 sent an empty control message without MSG_MORE. [ 215.320686][ T7263] loop2: detected capacity change from 0 to 7 [ 215.353143][ T7263] Dev loop2: unable to read RDB block 7 [ 215.359205][ T6570] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 215.369442][ T6570] ath9k_htc: Failed to initialize the device [ 215.385103][ T7263] loop2: AHDI p1 p2 p3 [ 215.390698][ T4769] usb 9-1: ath9k_htc: USB layer deinitialized [ 215.394723][ T7263] loop2: partition table partially beyond EOD, truncated [ 215.415115][ T7263] loop2: p1 start 1818582900 is beyond EOD, truncated [ 215.464273][ T7263] loop2: p3 start 335544320 is beyond EOD, truncated [ 215.568286][ T7271] loop6: detected capacity change from 0 to 256 [ 215.618202][ T7271] FAT-fs (loop6): Unrecognized mount option "d" or missing value [ 218.041102][ T7341] loop9: detected capacity change from 0 to 512 [ 218.102247][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.730'. [ 218.120172][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.731'. [ 218.146884][ T7349] loop0: detected capacity change from 0 to 256 [ 218.160900][ T7341] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 218.197681][ T7341] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.245684][ T7349] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 218.343563][ T7347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.388684][ T7354] device ipip0 entered promiscuous mode [ 218.535542][ T7354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.542519][ T7354] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 218.651973][ T6097] EXT4-fs (loop9): unmounting filesystem. [ 218.677319][ T7354] bond1: (slave ipip0): Error -95 calling set_mac_address [ 218.707382][ T6097] EXT4-fs error (device loop9): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 2839219765 in block_group 0 [ 218.814673][ T6097] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 218.845212][ T6097] EXT4-fs error (device loop9): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 218.907453][ T6097] EXT4-fs error (device loop9): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 2839219765 in block_group 0 [ 218.953539][ T6097] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 219.017177][ T6097] EXT4-fs error (device loop9): ext4_quota_off:7141: inode #4: comm syz-executor: mark_inode_dirty error [ 219.318719][ T7382] loop9: detected capacity change from 0 to 4096 [ 219.505881][ T7387] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.874109][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 219.923463][ T7401] netlink: 'syz.5.742': attribute type 1 has an invalid length. [ 219.998254][ T7399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.741'. [ 220.132264][ T7405] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 220.166798][ T7410] loop6: detected capacity change from 0 to 512 [ 220.173237][ T7405] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 220.199705][ T7405] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 220.220673][ T7405] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 220.224850][ T7410] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.272436][ T7405] bond2: (slave geneve2): making interface the new active one [ 220.299634][ T7405] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 220.326877][ T7410] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 220.353361][ T7410] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.434040][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.742'. [ 220.510726][ T7408] bond2 (unregistering): (slave geneve2): Releasing active interface [ 220.530014][ T7410] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.745: Unrecognised inode hash code 20 [ 220.551070][ T7410] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.745: Corrupt directory, running e2fsck is recommended [ 220.569339][ T7408] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 220.587739][ T4259] udevd[4259]: incorrect ext4 checksum on /dev/loop6 [ 220.596922][ T7408] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 220.613113][ T7408] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 220.622804][ T7408] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 220.648120][ T7408] bond2 (unregistering): Released all slaves [ 220.684137][ T5075] EXT4-fs (loop6): unmounting filesystem. [ 221.269371][ T7440] fuse: Bad value for 'fd' [ 221.912649][ T26] audit: type=1804 audit(1774450041.717:47): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.755" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=46504 res=1 errno=0 [ 221.994350][ T4273] Bluetooth: hci1: command 0x0406 tx timeout [ 222.977758][ T7494] loop6: detected capacity change from 0 to 512 [ 222.979837][ T7488] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.040082][ T7494] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 223.107709][ T7494] EXT4-fs (loop6): 1 truncate cleaned up [ 223.113632][ T7494] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 223.250181][ T7470] loop0: detected capacity change from 0 to 40427 [ 223.301280][ T7470] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 223.347431][ T7470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 223.441601][ T7470] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.590142][ T5075] EXT4-fs (loop6): unmounting filesystem. [ 223.628390][ T7470] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 223.668439][ T7470] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 224.511922][ T7507] loop8: detected capacity change from 0 to 32768 [ 224.692506][ T7507] XFS (loop8): Mounting V5 Filesystem [ 224.859338][ T7507] XFS (loop8): Ending clean mount [ 225.226676][ T5445] XFS (loop8): Unmounting Filesystem [ 225.472655][ T7549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.782'. [ 225.512860][ T7549] netlink: 43 bytes leftover after parsing attributes in process `syz.0.782'. [ 225.534607][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.783'. [ 225.578469][ T7549] netlink: 'syz.0.782': attribute type 6 has an invalid length. [ 225.615118][ T7549] netlink: 'syz.0.782': attribute type 5 has an invalid length. [ 225.656084][ T7552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.682649][ T7555] fuse: Bad value for 'fd' [ 225.689504][ T7556] device macvlan2 entered promiscuous mode [ 225.695561][ T7549] netlink: 43 bytes leftover after parsing attributes in process `syz.0.782'. [ 225.757103][ T7556] device bond3 entered promiscuous mode [ 225.796405][ T7556] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.845084][ T7556] device bond3 left promiscuous mode [ 226.151692][ T7562] md: invalid raid superblock magic on ram0 [ 226.180592][ T7562] md: ram0 does not have a valid v0.0 superblock, not importing! [ 226.204338][ T7562] md: md_import_device returned -22 [ 226.747379][ T7586] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 227.476962][ T4273] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 228.177740][ T7622] tipc: Enabled bearer , priority 0 [ 228.407284][ T7622] device syzkaller0 entered promiscuous mode [ 228.424350][ T7622] tipc: Resetting bearer [ 228.502443][ T7621] tipc: Resetting bearer [ 229.041466][ T7618] loop9: detected capacity change from 0 to 32768 [ 229.070339][ T7618] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.803 (7618) [ 229.140420][ T7618] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.178806][ T7618] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 229.211668][ T7618] BTRFS info (device loop9): force clearing of disk cache [ 229.234142][ T7618] BTRFS info (device loop9): force zlib compression, level 3 [ 229.262904][ T7618] BTRFS info (device loop9): enabling auto defrag [ 229.284628][ T7618] BTRFS info (device loop9): max_inline at 0 [ 229.304183][ T7618] BTRFS info (device loop9): turning on async discard [ 229.326689][ T7618] BTRFS info (device loop9): using free space tree [ 229.739036][ T7618] BTRFS info (device loop9): enabling ssd optimizations [ 229.747583][ T7618] BTRFS info (device loop9): rebuilding free space tree [ 230.677480][ T26] audit: type=1800 audit(1774450050.467:48): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.803" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 230.797025][ T4674] BTRFS info (device loop9): qgroup scan completed (inconsistency flag cleared) [ 230.843915][ T26] audit: type=1800 audit(1774450050.467:49): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.803" name="file0" dev="loop9" ino=258 res=0 errno=0 [ 231.121961][ T6097] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.790460][ T7693] loop0: detected capacity change from 0 to 512 [ 232.871944][ T7693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 233.097459][ T6122] EXT4-fs (loop0): unmounting filesystem. [ 234.710336][ T7621] tipc: Disabling bearer [ 234.719191][ T7629] netlink: 'syz.5.806': attribute type 10 has an invalid length. [ 234.738642][ T7629] team0: Device vxcan1 is of different type [ 234.949128][ T7726] loop6: detected capacity change from 0 to 512 [ 235.013105][ T7726] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.075576][ T7726] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 235.103555][ T7726] EXT4-fs (loop6): 1 truncate cleaned up [ 235.109894][ T7726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 235.211577][ T4259] udevd[4259]: incorrect ext4dev checksum on /dev/loop6 [ 235.384947][ T7726] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.827: Invalid inode table block 0 in block_group 0 [ 235.458501][ T7726] EXT4-fs (loop6): Remounting filesystem read-only [ 235.506078][ T7726] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.827: Invalid inode table block 0 in block_group 0 [ 235.602514][ T7726] EXT4-fs (loop6): Remounting filesystem read-only [ 235.613811][ T7726] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 235.653259][ T7726] EXT4-fs (loop6): Remounting filesystem read-only [ 235.670946][ T7726] EXT4-fs error (device loop6): ext4_dirty_inode:6133: inode #15: comm syz.6.827: mark_inode_dirty error [ 235.716631][ T7726] EXT4-fs (loop6): Remounting filesystem read-only [ 235.741530][ T7726] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.827: Invalid inode table block 0 in block_group 0 [ 235.783960][ T7726] EXT4-fs (loop6): Remounting filesystem read-only [ 235.808301][ T7726] EXT4-fs error (device loop6): ext4_get_max_inline_size:116: inode #15: comm syz.6.827: can't get inode location 15 [ 235.849148][ T7726] EXT4-fs (loop6): Remounting filesystem read-only [ 235.866161][ T7726] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.827: Invalid inode table block 0 in block_group 0 [ 235.883662][ T7726] EXT4-fs (loop6): Remounting filesystem read-only [ 235.961593][ T4641] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm kworker/u4:12: Invalid inode table block 0 in block_group 0 [ 236.010998][ T4641] EXT4-fs (loop6): Remounting filesystem read-only [ 236.056923][ T5075] EXT4-fs (loop6): unmounting filesystem. [ 236.215729][ T7763] loop6: detected capacity change from 0 to 256 [ 236.236734][ T7763] FAT-fs (loop6): Unrecognized mount option "./file1" or missing value [ 236.661230][ T7774] fuse: Bad value for 'fd' [ 236.808438][ T7778] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 236.894345][ T7782] fuse: Bad value for 'fd' [ 237.362845][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 238.133203][ T7792] Set syz1 is full, maxelem 1023 reached [ 239.057688][ T7753] device vlan3 entered promiscuous mode [ 239.072339][ T7784] netlink: 'syz.5.843': attribute type 4 has an invalid length. [ 239.164871][ T7785] netlink: 'syz.5.843': attribute type 4 has an invalid length. [ 239.361879][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 239.853796][ T4315] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 240.045212][ T4315] usb 10-1: too many configurations: 128, using maximum allowed: 8 [ 240.065000][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.118452][ T4315] usb 10-1: config 0 has no interfaces? [ 240.130952][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.192349][ T4315] usb 10-1: config 0 has no interfaces? [ 240.200046][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.234343][ T4315] usb 10-1: config 0 has no interfaces? [ 240.263855][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.289511][ T4315] usb 10-1: config 0 has no interfaces? [ 240.307036][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.334667][ T4315] usb 10-1: config 0 has no interfaces? [ 240.355669][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.386247][ T4315] usb 10-1: config 0 has no interfaces? [ 240.413398][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.443494][ T4315] usb 10-1: config 0 has no interfaces? [ 240.465463][ T4315] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.496358][ T4315] usb 10-1: config 0 has no interfaces? [ 240.509269][ T4315] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.546404][ T4315] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 240.572082][ T4315] usb 10-1: Manufacturer: syz [ 240.602954][ T4315] usb 10-1: config 0 descriptor?? [ 240.656942][ T7839] netlink: 'syz.8.860': attribute type 4 has an invalid length. [ 240.879299][ T4315] usb 10-1: USB disconnect, device number 2 [ 241.923682][ T7874] loop9: detected capacity change from 0 to 512 [ 242.001339][ T7874] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 242.059668][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.074025][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.082729][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.093343][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.109284][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 242.116818][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.166039][ T7874] EXT4-fs (loop9): 1 truncate cleaned up [ 242.171776][ T7874] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 242.317995][ T26] audit: type=1804 audit(1774450062.127:50): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.873" name="/newroot/67/file0/bus" dev="loop9" ino=18 res=1 errno=0 [ 242.602159][ T6097] EXT4-fs (loop9): unmounting filesystem. [ 242.609351][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.8.878'. [ 242.697656][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.8.878'. [ 242.791236][ T7877] chnl_net:caif_netlink_parms(): no params data found [ 242.863153][ T7908] netlink: 52 bytes leftover after parsing attributes in process `syz.9.880'. [ 242.951102][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.959120][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.017819][ T7913] netlink: 76 bytes leftover after parsing attributes in process `syz.9.880'. [ 243.044483][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.051824][ T7913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.059336][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.066514][ T7913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.208853][ T7913] netlink: 52 bytes leftover after parsing attributes in process `syz.9.880'. [ 243.249788][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.258448][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.361793][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.421096][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.432604][ T7877] device bridge_slave_0 entered promiscuous mode [ 243.475187][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.493503][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.527186][ T7877] device bridge_slave_1 entered promiscuous mode [ 243.654306][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.704762][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.824208][ T7877] team0: Port device team_slave_0 added [ 244.045415][ T7877] team0: Port device team_slave_1 added [ 244.235368][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 244.304546][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.331941][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.385220][ T7877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.437062][ T7877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.490136][ T7877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.564485][ T7877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.708509][ T7877] device hsr_slave_0 entered promiscuous mode [ 244.738688][ T7877] device hsr_slave_1 entered promiscuous mode [ 244.764928][ T7877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.815458][ T7877] Cannot create hsr debugfs directory [ 244.933917][ T32] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 245.133959][ T32] usb 10-1: Using ep0 maxpacket: 32 [ 245.141312][ T32] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 245.173607][ T32] usb 10-1: config 0 has no interface number 0 [ 245.183819][ T32] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 245.226304][ T32] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 245.256083][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.287418][ T32] usb 10-1: Product: syz [ 245.291765][ T32] usb 10-1: Manufacturer: syz [ 245.322803][ T32] usb 10-1: SerialNumber: syz [ 245.344842][ T32] usb 10-1: config 0 descriptor?? [ 245.351836][ T7957] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 245.589319][ T7957] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 245.879519][ T7984] netlink: 16 bytes leftover after parsing attributes in process `syz.6.900'. [ 246.314077][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 247.022795][ T7877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 247.138281][ T7877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 247.148626][ T7877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 247.158579][ T7877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 247.218423][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 247.240103][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.782353][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.870062][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.921007][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.959555][ T7877] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.990569][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.011211][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.030251][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.037508][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.070548][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.083534][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.102824][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.117979][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.125294][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.139433][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.170466][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.188494][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.206260][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.233216][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.252538][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.290527][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.332360][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.368593][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.448534][ T7877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.492088][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.524543][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.541793][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.776366][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 248.782650][ T32] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 248.794616][ T32] asix: probe of 10-1:0.188 failed with error -71 [ 248.804352][ T32] usb 10-1: USB disconnect, device number 3 [ 249.872239][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.896801][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.922139][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.254463][ T26] audit: type=1326 audit(1774450070.067:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.449329][ T26] audit: type=1326 audit(1774450070.067:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.492388][ T26] audit: type=1326 audit(1774450070.067:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.517409][ T26] audit: type=1326 audit(1774450070.067:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.577041][ T4273] Bluetooth: hci2: unexpected event 0x3e length: 263 > 260 [ 250.577079][ T4273] Bluetooth: hci2: unexpected subevent 0x0d length: 262 > 260 [ 250.594729][ T4273] Bluetooth: hci2: adv larger than maximum supported [ 250.594819][ T4273] Bluetooth: hci2: adv larger than maximum supported [ 250.609633][ T26] audit: type=1326 audit(1774450070.097:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.652591][ T26] audit: type=1326 audit(1774450070.097:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.703327][ T26] audit: type=1326 audit(1774450070.097:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.794381][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 250.894187][ T26] audit: type=1326 audit(1774450070.097:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 250.938710][ T26] audit: type=1326 audit(1774450070.097:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfcf79c42b code=0x7ffc0000 [ 250.960754][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.123042][ T26] audit: type=1326 audit(1774450070.097:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8057 comm="syz.8.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfcf79c42b code=0x7ffc0000 [ 251.373862][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 252.079968][ T8105] netlink: 'syz.9.930': attribute type 1 has an invalid length. [ 252.167229][ T8105] device bond2 entered promiscuous mode [ 252.173153][ T8105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.208275][ T8105] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.216550][ T8105] device bond3 entered promiscuous mode [ 252.222927][ T8105] bond2: (slave bond3): Enslaving as a backup interface with a down link [ 252.392186][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.432023][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.483118][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.513053][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.549432][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.572033][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.593691][ T7877] device veth0_vlan entered promiscuous mode [ 252.646729][ T7877] device veth1_vlan entered promiscuous mode [ 252.738956][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.755837][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.788329][ T7877] device veth0_macvtap entered promiscuous mode [ 252.824925][ T7877] device veth1_macvtap entered promiscuous mode [ 252.891419][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.923823][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.967009][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.013999][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 253.033486][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 253.083526][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 253.119311][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 253.151839][ T8131] netlink: 24 bytes leftover after parsing attributes in process `syz.8.936'. [ 253.214101][ T7877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.243761][ T7877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.299252][ T7877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.371250][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.409089][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.457491][ T7877] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.503775][ T7877] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.522805][ T7877] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.562219][ T7877] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.948139][ T4660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.969715][ T4660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.999364][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.060771][ T4660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.087327][ T4660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.114125][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.765450][ T8163] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.943'. [ 254.765622][ T8150] loop6: detected capacity change from 0 to 40427 [ 254.788014][ T8163] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.943'. [ 254.851645][ T8150] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 254.995025][ T8150] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 255.081798][ T8150] F2FS-fs (loop6): invalid crc value [ 255.398504][ T8150] F2FS-fs (loop6): Found nat_bits in checkpoint [ 255.768297][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774703][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.799943][ T8150] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 255.807635][ T8150] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 256.508631][ T4680] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 256.550306][ T4680] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 256.711605][ T8197] loop8: detected capacity change from 0 to 128 [ 256.752828][ T8197] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 256.860014][ T8197] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 256.986312][ T8197] ext2 filesystem being mounted at /127/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.250001][ T8209] loop9: detected capacity change from 0 to 512 [ 257.291005][ T8209] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 257.365379][ T5445] EXT4-fs (loop8): unmounting filesystem. [ 257.495660][ T6097] EXT4-fs (loop9): unmounting filesystem. [ 257.838279][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 258.339089][ T8237] dccp_close: ABORT with 76 bytes unread [ 258.711160][ T8247] loop4: detected capacity change from 0 to 4096 [ 258.812370][ T8247] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.836274][ T8247] EXT4-fs (loop4): Test dummy encryption mode enabled [ 258.939777][ T8247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 259.073340][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 259.073357][ T26] audit: type=1800 audit(1774450078.877:109): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.967" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 259.288544][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 259.677070][ T8247] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 259.990469][ T8247] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 260.014205][ T8266] loop6: detected capacity change from 0 to 32768 [ 260.071663][ T8266] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.972 (8266) [ 260.198788][ T8266] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 260.238560][ T7877] EXT4-fs (loop4): unmounting filesystem. [ 260.244051][ T8266] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 260.329304][ T8266] BTRFS info (device loop6): setting nodatasum [ 260.367537][ T8266] BTRFS info (device loop6): using free space tree [ 260.697347][ T8266] BTRFS info (device loop6): enabling ssd optimizations [ 260.981690][ T8320] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 261.087067][ T8320] kvm: pic: level sensitive irq not supported [ 261.096389][ T8320] kvm: pic: non byte read [ 261.148891][ T8320] kvm: pic: level sensitive irq not supported [ 261.150644][ T8320] kvm: pic: non byte read [ 261.216502][ T8320] kvm: pic: level sensitive irq not supported [ 261.217253][ T8320] kvm: pic: non byte read [ 261.316096][ T8320] kvm: pic: level sensitive irq not supported [ 261.317272][ T8320] kvm: pic: non byte read [ 261.395206][ T8320] kvm: pic: level sensitive irq not supported [ 261.395328][ T8320] kvm: pic: non byte read [ 261.440444][ T8320] kvm: pic: level sensitive irq not supported [ 261.440529][ T8320] kvm: pic: non byte read [ 261.486303][ T8320] kvm: pic: level sensitive irq not supported [ 261.486653][ T8320] kvm: pic: non byte read [ 261.561048][ T8320] kvm: pic: level sensitive irq not supported [ 261.561421][ T8320] kvm: pic: non byte read [ 261.599092][ T8320] kvm: pic: level sensitive irq not supported [ 261.599420][ T8320] kvm: pic: non byte read [ 261.709729][ T5075] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 261.935526][ T4259] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop6 scanned by udevd (4259) [ 261.991213][ T8341] loop8: detected capacity change from 0 to 1024 [ 262.097905][ T8341] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 262.133898][ T8341] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 262.157275][ T8352] loop4: detected capacity change from 0 to 512 [ 262.196387][ T8341] netlink: 452 bytes leftover after parsing attributes in process `syz.8.986'. [ 262.248374][ T8352] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.275493][ T8352] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.340106][ T26] audit: type=1800 audit(1774450082.147:110): pid=8352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.989" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 262.527973][ T7877] EXT4-fs (loop4): unmounting filesystem. [ 263.495450][ T8363] Bluetooth: MGMT ver 1.22 [ 263.514140][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 263.722903][ T8372] netlink: 128 bytes leftover after parsing attributes in process `syz.8.994'. [ 264.391681][ T8393] fuse: Bad value for 'fd' [ 264.516230][ T26] audit: type=1804 audit(1774450084.307:111): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1001" name="/newroot/137/bus/file1" dev="overlay" ino=758 res=1 errno=0 [ 265.220875][ T8419] fuse: Bad value for 'fd' [ 265.647634][ T8433] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 265.730821][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 266.030181][ T8435] bond0: (slave bond_slave_0): Releasing backup interface [ 266.691871][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e61a800: rx timeout, send abort [ 266.943838][ T6569] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 267.145644][ T6569] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 267.165130][ T6569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.191981][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880557d0800: rx timeout, send abort [ 267.200611][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802e61a800: abort rx timeout. Force session deactivation [ 267.235168][ T6569] usb 10-1: config 0 descriptor?? [ 267.256037][ T6569] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 267.690400][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057425400: rx timeout, send abort [ 267.699366][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057425400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 267.717062][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880557d0800: abort rx timeout. Force session deactivation [ 267.936874][ T8475] dccp_close: ABORT with 76 bytes unread [ 268.879589][ T6569] usb 10-1: USB disconnect, device number 4 [ 269.847247][ T8521] x_tables: duplicate underflow at hook 2 [ 275.118125][ T8594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.230267][ T8594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.859084][ T8594] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.868440][ T8594] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.877871][ T8594] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.886904][ T8594] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.023633][ T8594] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.032778][ T8594] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.041763][ T8594] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.050720][ T8594] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.086838][ T8594] device bond2 left promiscuous mode [ 277.092232][ T8594] device bond3 left promiscuous mode [ 277.108630][ T8608] netlink: 'syz.4.1049': attribute type 3 has an invalid length. [ 277.131183][ T8608] netlink: 'syz.4.1049': attribute type 3 has an invalid length. [ 277.905788][ T8711] netlink: 'syz.9.1073': attribute type 1 has an invalid length. [ 278.060398][ T8711] bond4: (slave bridge1): making interface the new active one [ 278.119209][ T8711] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 278.136968][ T8719] netlink: 'syz.5.1076': attribute type 6 has an invalid length. [ 278.162342][ T8719] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1076'. [ 279.186943][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 279.246247][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 279.293266][ T8778] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 279.305416][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 279.351459][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 279.388477][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 279.451801][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 279.492368][ T8777] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 279.509287][ T8780] bridge0: port 3(syz_tun) entered blocking state [ 279.547344][ T8780] bridge0: port 3(syz_tun) entered disabled state [ 279.567630][ T8780] device syz_tun entered promiscuous mode [ 279.588404][ T8781] netlink: 'syz.9.1088': attribute type 10 has an invalid length. [ 279.641622][ T8781] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 283.354312][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 283.365099][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 283.434595][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 283.521864][ T8862] loop6: detected capacity change from 0 to 1024 [ 283.583670][ T8862] EXT4-fs (loop6): required journal recovery suppressed and not mounted read-only [ 284.234637][ T8850] loop4: detected capacity change from 0 to 32768 [ 284.353148][ T8850] XFS (loop4): Mounting V5 Filesystem [ 284.471207][ T8850] XFS (loop4): Ending clean mount [ 285.012475][ T7877] XFS (loop4): Unmounting Filesystem [ 285.412484][ T8901] tipc: Started in network mode [ 285.425814][ T8901] tipc: Node identity 8e742642133d, cluster identity 4711 [ 285.446672][ T8901] tipc: Enabled bearer , priority 0 [ 285.462269][ T8904] device batadv_slave_0 entered promiscuous mode [ 285.602404][ T8909] device syzkaller0 entered promiscuous mode [ 285.615828][ T8909] tipc: Resetting bearer [ 285.885403][ T8919] xt_connbytes: Forcing CT accounting to be enabled [ 286.604621][ T8900] tipc: Resetting bearer [ 288.232201][ T8938] binder_alloc: 8936: binder_alloc_buf size 16777216 failed, no address space [ 288.284165][ T8938] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 291.117581][ T8900] tipc: Disabling bearer [ 291.126608][ T8903] device batadv_slave_0 left promiscuous mode [ 291.133336][ T32] tipc: Node number set to 2638816834 [ 291.144209][ T8935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1131'. [ 291.595215][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1137'. [ 293.277548][ T8997] binder_alloc: 8996: binder_alloc_buf size 16777216 failed, no address space [ 293.299602][ T8997] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 293.637752][ T9004] fuse: Bad value for 'fd' [ 293.936999][ T9012] device ip6gretap1 entered promiscuous mode [ 293.943272][ T9012] bond2: (slave ip6gretap1): no link monitoring support [ 293.952992][ T9012] bond2: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 293.976432][ T9012] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 295.662408][ T9041] loop6: detected capacity change from 0 to 1024 [ 295.773604][ T9041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 295.967296][ T9041] EXT4-fs warning (device loop6): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 48142 [ 296.032466][ T9041] EXT4-fs warning (device loop6): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 48142 [ 296.078774][ T9055] EXT4-fs warning (device loop6): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 48142 [ 296.219088][ T5075] EXT4-fs (loop6): unmounting filesystem. [ 296.292505][ T9051] loop8: detected capacity change from 0 to 8192 [ 296.354930][ T9051] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 298.021367][ T9100] loop6: detected capacity change from 0 to 512 [ 298.089067][ T9100] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 298.150806][ T9100] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.353292][ T9100] EXT4-fs warning (device loop6): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 3123112107 [ 298.417166][ T4259] udevd[4259]: incorrect ext4 checksum on /dev/loop6 [ 298.515722][ T5075] EXT4-fs (loop6): unmounting filesystem. [ 298.533102][ T5075] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5929: Out of memory [ 298.578118][ T5075] EXT4-fs error (device loop6): ext4_quota_off:7141: inode #4: comm syz-executor: mark_inode_dirty error [ 298.851415][ T9121] ptrace attach of "./syz-executor exec"[5445] was attempted by ""[9121] [ 298.915839][ T9126] fuse: Bad value for 'fd' [ 299.775509][ T4273] Bluetooth: hci1: command 0x0409 tx timeout [ 300.621450][ T9151] netlink: 'syz.9.1185': attribute type 1 has an invalid length. [ 300.850212][ T9151] device bond5 entered promiscuous mode [ 300.873950][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 300.883985][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 300.905059][ T9151] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.021688][ T9158] bond5: (slave bridge2): making interface the new active one [ 301.067520][ T9158] device bridge2 entered promiscuous mode [ 301.126284][ T9158] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 301.213892][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 301.687763][ T9167] loop9: detected capacity change from 0 to 512 [ 304.449716][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1197'. [ 304.785961][ T9207] device bond4 entered promiscuous mode [ 304.822968][ T9207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 304.992124][ T9209] device veth3 entered promiscuous mode [ 305.070381][ T9209] bond4: (slave veth3): Enslaving as an active interface with an up link [ 305.152769][ T4655] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 305.322811][ T26] audit: type=1326 audit(1774450125.127:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.443804][ T26] audit: type=1326 audit(1774450125.127:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.534024][ T26] audit: type=1326 audit(1774450125.127:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.683586][ T26] audit: type=1326 audit(1774450125.127:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.853599][ T26] audit: type=1326 audit(1774450125.167:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.876604][ T26] audit: type=1326 audit(1774450125.167:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.899427][ T26] audit: type=1326 audit(1774450125.167:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.922773][ T26] audit: type=1326 audit(1774450125.167:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.945950][ T26] audit: type=1326 audit(1774450125.167:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 305.969972][ T26] audit: type=1326 audit(1774450125.167:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz.9.1198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db99c799 code=0x7ffc0000 [ 306.145662][ T9231] bond7 (unregistering): Released all slaves [ 308.993929][ T9310] fuse: Bad value for 'fd' [ 309.833775][ T4315] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 310.023759][ T4315] usb 10-1: Using ep0 maxpacket: 16 [ 310.140181][ T4315] usb 10-1: unable to get BOS descriptor or descriptor too short [ 310.151615][ T4273] block nbd9: Receive control failed (result -32) [ 310.195459][ T9328] block nbd9: shutting down sockets [ 310.215370][ T4315] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 310.223190][ T4315] usb 10-1: can't read configurations, error -71 [ 312.137198][ T9370] loop8: detected capacity change from 0 to 512 [ 312.275630][ T9370] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 312.286950][ T9370] ext4 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.319704][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 312.319720][ T26] audit: type=1800 audit(1774450132.127:142): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1240" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 312.383341][ T26] audit: type=1800 audit(1774450132.187:143): pid=9370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1240" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 312.440842][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1240'. [ 312.618269][ T5445] EXT4-fs (loop8): unmounting filesystem. [ 312.824442][ T9395] x_tables: unsorted underflow at hook 3 [ 313.709429][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1256'. [ 314.107694][ T4273] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 316.198723][ T9476] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 317.208308][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.214869][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.482895][ T9512] fuse: Bad value for 'fd' [ 318.446703][ T9522] fuse: Bad value for 'fd' [ 318.779177][ T9525] loop9: detected capacity change from 0 to 8192 [ 319.044018][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1279'. [ 319.385563][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1284'. [ 319.514617][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 320.378757][ T9572] netlink: 'syz.9.1290': attribute type 1 has an invalid length. [ 320.510406][ T9572] device bond7 entered promiscuous mode [ 320.568607][ T9572] 8021q: adding VLAN 0 to HW filter on device bond7 [ 320.690439][ T9575] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.727794][ T9575] bond7: (slave bond8): making interface the new active one [ 320.780292][ T9575] device bond8 entered promiscuous mode [ 320.794836][ T9575] bond7: (slave bond8): Enslaving as an active interface with an up link [ 320.804035][ T4665] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 321.050472][ T26] audit: type=1326 audit(1774450140.857:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.116191][ T9591] loop9: detected capacity change from 0 to 64 [ 321.139806][ T26] audit: type=1326 audit(1774450140.887:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.274322][ T26] audit: type=1326 audit(1774450140.887:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.377579][ T9600] netlink: 'syz.8.1300': attribute type 6 has an invalid length. [ 321.388552][ T26] audit: type=1326 audit(1774450140.887:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.472927][ T26] audit: type=1326 audit(1774450140.887:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.603519][ T26] audit: type=1326 audit(1774450140.887:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.727443][ T26] audit: type=1326 audit(1774450140.887:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.820241][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1301'. [ 321.826693][ T26] audit: type=1326 audit(1774450140.887:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 321.937532][ T26] audit: type=1326 audit(1774450140.887:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 322.022581][ T26] audit: type=1326 audit(1774450140.887:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz.8.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdfcf79c799 code=0x7ffc0000 [ 323.105418][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1308'. [ 323.171348][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1308'. [ 323.485805][ T9677] netlink: 'syz.6.1312': attribute type 1 has an invalid length. [ 323.596974][ T9677] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.711843][ T9677] bond5: (slave bridge3): making interface the new active one [ 323.731254][ T9677] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 323.747221][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 324.296671][ T9713] loop8: detected capacity change from 0 to 512 [ 324.381652][ T9713] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 324.394310][ T9713] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.886288][ T9736] loop4: detected capacity change from 0 to 1024 [ 325.775814][ T34] hfsplus: b-tree write err: -5, ino 25 [ 325.804808][ T34] hfsplus: b-tree write err: -5, ino 4 [ 325.810415][ T34] hfsplus: b-tree write err: -5, ino 2 [ 325.988791][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1336'. [ 326.101298][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1336'. [ 327.657287][ T5445] EXT4-fs (loop8): unmounting filesystem. [ 327.784642][ T9822] netlink: 'syz.8.1349': attribute type 10 has an invalid length. [ 328.053439][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1353'. [ 328.124449][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1353'. [ 329.065808][ T4273] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 329.279039][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1363'. [ 329.424952][ T9878] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 329.437121][ T9878] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 329.472012][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 329.561814][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 329.641465][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 329.711967][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 329.751462][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 329.783334][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 329.856255][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 329.919074][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 329.939260][ T9884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.100714][ T9876] device macvlan2 entered promiscuous mode [ 330.117612][ T9876] bond9: (slave macvlan2): Error -98 calling set_mac_address [ 330.156342][ T9901] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1369'. [ 330.253064][ T9902] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 330.669699][ T9908] loop4: detected capacity change from 0 to 32768 [ 330.774035][ T9908] XFS (loop4): Mounting V5 Filesystem [ 330.845820][ T9908] XFS (loop4): Ending clean mount [ 331.074701][ T9918] netlink: 'syz.6.1373': attribute type 10 has an invalid length. [ 331.265984][ T9918] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 332.410530][ T9934] Bluetooth: MGMT ver 1.22 [ 332.615755][ T7877] XFS (loop4): Unmounting Filesystem [ 333.330581][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.339991][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.766234][ T9989] loop2: detected capacity change from 0 to 7 [ 334.778883][ T4259] Dev loop2: unable to read RDB block 7 [ 334.784954][ T4259] loop2: unable to read partition table [ 334.790951][ T4259] loop2: partition table beyond EOD, truncated [ 334.802812][ T9989] Dev loop2: unable to read RDB block 7 [ 334.822501][ T9989] loop2: unable to read partition table [ 334.832604][ T9989] loop2: partition table beyond EOD, truncated [ 334.851641][ T9989] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 335.136281][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1394'. [ 337.461835][ T9935] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.471503][ T9935] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.480866][ T9935] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.490476][ T9935] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.690510][ T4651] bond0: (slave bond_slave_0): interface is now down [ 337.693125][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.717140][ T4651] bond0: (slave bond_slave_1): interface is now down [ 337.760637][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 337.801666][ T4679] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 337.850048][ T4679] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 337.911876][ T4679] bond0: now running without any active interface! [ 340.785029][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 340.785045][ T26] audit: type=1804 audit(1774450160.598:155): pid=10074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1418" name="/newroot/330/bus/file1" dev="overlay" ino=1786 res=1 errno=0 [ 340.912162][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1417'. [ 341.193912][T10070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 341.262580][T10086] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 342.178367][T10109] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1426'. [ 342.322999][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1426'. [ 342.515898][T10120] netlink: 'syz.9.1429': attribute type 4 has an invalid length. [ 342.524706][T10120] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1429'. [ 342.583335][T10122] fuse: Bad value for 'fd' [ 342.691145][T10120] .`: renamed from bond0 [ 343.782519][T10145] loop4: detected capacity change from 0 to 8 [ 343.795321][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1435'. [ 344.715139][T10158] netlink: 'syz.9.1438': attribute type 1 has an invalid length. [ 344.927530][T10158] device bond0 entered promiscuous mode [ 344.989361][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.166539][T10164] device bridge3 entered promiscuous mode [ 345.213138][T10164] bond0: (slave bridge3): Enslaving as a backup interface with an up link [ 345.286056][ T4317] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 345.336428][T10177] netlink: 'syz.4.1440': attribute type 10 has an invalid length. [ 345.362141][T10177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1440'. [ 345.389587][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 345.485154][ T4317] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 345.527077][T10124] overlayfs: './file2' not a directory [ 345.768106][T10199] loop4: detected capacity change from 0 to 512 [ 345.865898][T10199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 345.926332][T10199] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.236948][T10212] fuse: Bad value for 'fd' [ 346.399542][T10199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 346.470320][T10199] EXT4-fs error (device loop4): ext4_ext_tree_init:889: inode #18: comm syz.4.1443: mark_inode_dirty error [ 346.545386][T10199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 346.609906][T10199] EXT4-fs error (device loop4): __ext4_new_inode:1349: inode #18: comm syz.4.1443: mark_inode_dirty error [ 346.674399][T10199] EXT4-fs error (device loop4) in __ext4_new_inode:1351: Corrupt filesystem [ 346.718517][T10199] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 346.764236][T10199] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #18: comm syz.4.1443: mark_inode_dirty error [ 346.799981][T10199] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 347.461836][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1455'. [ 347.501368][ T7877] EXT4-fs (loop4): unmounting filesystem. [ 347.603882][T10248] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 348.537025][T10270] loop9: detected capacity change from 0 to 64 [ 348.736810][T10270] MINIX-fs: bad superblock or unable to read bitmaps [ 348.815452][T10271] loop8: detected capacity change from 0 to 40427 [ 348.837602][T10271] F2FS-fs (loop8): invalid crc value [ 348.845197][T10271] F2FS-fs (loop8): Found nat_bits in checkpoint [ 348.922120][T10271] F2FS-fs (loop8): Start checkpoint disabled! [ 348.946704][T10271] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 349.161040][ T26] audit: type=1800 audit(1774450168.983:156): pid=10286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1462" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 349.804722][ T4648] kworker/u4:15: attempt to access beyond end of device [ 349.804722][ T4648] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 349.960845][T10302] loop4: detected capacity change from 0 to 512 [ 350.016855][T10302] EXT4-fs: Ignoring removed nobh option [ 350.066338][T10304] loop9: detected capacity change from 0 to 256 [ 350.136716][T10302] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 350.192062][T10302] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.560883][ T7877] EXT4-fs (loop4): unmounting filesystem. [ 350.628230][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1469'. [ 352.937122][T10377] [ 353.337358][T10392] overlayfs: failed to clone upperpath [ 356.693312][T10472] loop9: detected capacity change from 0 to 2048 [ 356.807794][T10472] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 357.109758][ T6097] EXT4-fs (loop9): unmounting filesystem. [ 359.192188][T10528] loop4: detected capacity change from 0 to 32768 [ 359.243870][T10528] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1520 (10528) [ 359.298646][T10528] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 359.353283][T10528] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 359.394174][T10528] BTRFS info (device loop4): force zlib compression, level 3 [ 359.429370][T10528] BTRFS info (device loop4): force clearing of disk cache [ 359.459834][T10528] BTRFS info (device loop4): setting nodatasum [ 359.474563][T10528] BTRFS info (device loop4): allowing degraded mounts [ 359.481396][T10528] BTRFS info (device loop4): enabling disk space caching [ 359.523294][T10528] BTRFS info (device loop4): disk space caching is enabled [ 359.890381][T10566] x_tables: ip_tables: osf match: only valid for protocol 6 [ 360.878787][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1528'. [ 360.957797][T10528] BTRFS info (device loop4): rebuilding free space tree [ 361.026619][T10528] BTRFS info (device loop4): disabling free space tree [ 361.046006][T10528] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 361.092823][T10528] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 361.267206][T10528] BTRFS info (device loop4): balance: start -d -m -s [ 361.323331][T10528] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 361.359978][T10581] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1527'. [ 361.489819][T10528] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 361.587659][T10591] fuse: Bad value for 'fd' [ 361.887967][T10596] netlink: 'syz.6.1533': attribute type 1 has an invalid length. [ 362.160798][T10528] BTRFS info (device loop4): found 9 extents, stage: move data extents [ 362.493666][T10598] bond6: (slave gretap0): making interface the new active one [ 362.535217][T10528] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 362.558461][T10598] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 362.633640][T10602] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 362.895081][T10604] netlink: 'syz.5.1535': attribute type 12 has an invalid length. [ 362.925268][T10528] BTRFS info (device loop4): relocating block group 1048576 flags system [ 363.140043][T10528] BTRFS info (device loop4): balance: canceled [ 363.256364][T10622] 9pnet: p9_errstr2errno: server reported unknown error @®ï©?ã‹Òêß¾¡IÃ퉲rŠ ò6óÒ~º“D‡ómáÊ„!\ [ 363.391480][ T7877] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 365.340886][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 367.921127][T10704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1560'. [ 369.256643][T10744] netlink: 'syz.5.1571': attribute type 10 has an invalid length. [ 369.314287][T10744] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 369.400378][T10747] device syzkaller0 entered promiscuous mode [ 369.620598][T10750] team0: Port device vlan3 added [ 369.880680][T10765] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 369.949092][T10765] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 370.941268][T10788] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 371.048809][T10788] kvm: pic: level sensitive irq not supported [ 371.048974][T10788] kvm: pic: non byte read [ 371.100630][T10788] kvm: pic: level sensitive irq not supported [ 371.100716][T10788] kvm: pic: non byte read [ 371.147569][T10788] kvm: pic: level sensitive irq not supported [ 371.147647][T10788] kvm: pic: non byte read [ 371.193549][T10788] kvm: pic: level sensitive irq not supported [ 371.193626][T10788] kvm: pic: non byte read [ 371.226148][T10788] kvm: pic: level sensitive irq not supported [ 371.226236][T10788] kvm: pic: non byte read [ 371.255226][T10788] kvm: pic: level sensitive irq not supported [ 371.255304][T10788] kvm: pic: non byte read [ 373.257438][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1592'. [ 373.291244][T10814] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.300125][T10814] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.308962][T10814] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.317891][T10814] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.429628][T10814] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 373.456415][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1592'. [ 373.485821][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 373.646138][ T4315] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 373.738454][T10812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.845918][ T4315] usb 9-1: Using ep0 maxpacket: 32 [ 373.856167][ T4315] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 373.894057][T10812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.905963][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.939836][T10812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.976601][ T4315] usb 9-1: config 0 descriptor?? [ 374.100357][T10839] loop9: detected capacity change from 0 to 512 [ 374.188215][ T4315] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 374.211660][T10839] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 374.235517][ T4315] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 374.258303][ T4315] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 374.275701][ T4315] usb 9-1: media controller created [ 374.298815][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.311824][T10839] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 374.589215][ T4315] DVB: Unable to find symbol dib7000p_attach() [ 374.616229][ T4315] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 374.915446][ T4315] rc_core: IR keymap rc-dib0700-rc5 not found [ 374.923851][ T4315] Registered IR keymap rc-empty [ 374.942291][ T4315] dvb-usb: could not initialize remote control. [ 374.975371][ T4315] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 375.025543][ T4315] usb 9-1: USB disconnect, device number 4 [ 375.126891][ T4315] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 375.293851][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1603'. [ 377.016404][T10882] binder: 10877:10882 ioctl c0306201 2000000003c0 returned -14 [ 378.629596][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.636411][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.366908][ T6097] EXT4-fs (loop9): unmounting filesystem. [ 379.407967][T10901] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1613'. [ 380.547532][T10913] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 381.396019][T10910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1615'. [ 381.686731][T10923] overlayfs: statfs failed on './file0' [ 382.298436][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 382.439576][T10950] device bond1 entered promiscuous mode [ 382.564925][T10950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 382.719374][T10952] device gretap1 entered promiscuous mode [ 382.776723][T10952] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 382.822043][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 385.054788][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1639'. [ 385.390890][ T4669] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.421050][ T4669] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.441230][ T75] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.460365][ T4379] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.502910][ T4669] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.542429][ T4669] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.582251][ T4669] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.600151][ T4317] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.642455][ T4662] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.691709][ T4662] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.703282][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 385.728680][T11009] device bridge_slave_1 left promiscuous mode [ 385.746353][T11009] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.755538][ T4662] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.798410][T11009] device bridge_slave_0 left promiscuous mode [ 385.804935][ T4317] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.820388][T11009] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.860045][ T4379] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.900083][ T4379] bond1: (slave ip6gretap1): link status up again after 0 ms [ 385.961290][ T4379] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.011536][ T4662] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.051001][ T4674] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.089970][ T4379] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.110314][ T4662] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.134354][ T4379] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.169813][ T4379] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.200762][ T4662] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.231942][ T4662] bond1: (slave ip6gretap1): link status up again after 0 ms [ 386.258802][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.383636][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 386.634998][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.630834][T11034] xt_CT: No such helper "snmp_trap" [ 387.750261][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.963645][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 387.982557][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1650'. [ 388.090090][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.209558][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.328323][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.458649][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 388.482524][T11048] loop9: detected capacity change from 0 to 4096 [ 388.649309][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 389.104426][T11048] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 389.472304][T11048] ntfs3: loop9: Failed to load $Extend. [ 389.912723][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1660'. [ 390.044260][T11077] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.053119][T11077] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.062044][T11077] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.070909][T11077] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.245040][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1658'. [ 390.505145][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1660'. [ 391.153588][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1670'. [ 391.268642][ T4657] net_ratelimit: 15 callbacks suppressed [ 391.268661][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.321820][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1671'. [ 391.488152][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.607061][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 391.762552][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.443451][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.637721][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.747715][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.857630][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 392.910403][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1678'. [ 393.007977][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 393.149371][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 394.762529][ T4276] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 395.014381][T11175] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1687'. [ 395.106776][T11175] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 395.675475][ T7] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 395.771764][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1691'. [ 395.868775][ T7] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.910930][ T7] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.941780][ T7] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 396.021257][ T7] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.081065][ T7] usb 10-1: config 0 descriptor?? [ 396.330484][ T4657] net_ratelimit: 23 callbacks suppressed [ 396.330505][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 396.527196][ T4665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.419855][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.480112][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.519446][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.545512][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.563516][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.574136][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.580920][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.602520][ T7] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.659790][ T7] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 397.704000][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.758492][ T7] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 397.824066][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 397.975071][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.006859][ T7] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 398.090420][ T7] usb 10-1: USB disconnect, device number 7 [ 398.103866][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.266119][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.413819][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 398.554690][ T4665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 399.114359][T11244] fido_id[11244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 401.548859][ T4674] net_ratelimit: 14 callbacks suppressed [ 401.548879][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.712222][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 401.903113][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.012954][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.131806][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 402.202417][T11306] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1717'. [ 402.259564][T11306] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1717'. [ 402.292089][T11308] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1718'. [ 402.304285][T11308] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 402.537870][T11314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1718'. [ 402.550204][T11314] bond4: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 403.046751][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.294548][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.502243][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 403.632276][ T4653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 404.570661][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 406.325116][T11380] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 407.373871][T11396] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.383474][T11396] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.392467][T11396] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.401523][T11396] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.492426][T11402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.532783][T11402] team0: Port device bond0 added [ 407.545278][T11404] netlink: 'syz.6.1741': attribute type 16 has an invalid length. [ 407.565762][T11404] netlink: 'syz.6.1741': attribute type 17 has an invalid length. [ 407.651454][ T4679] bond1: (slave ip6gretap1): link status up again after 0 ms [ 407.683097][ T4676] bond1: (slave ip6gretap1): link status up again after 0 ms [ 407.720876][ T4676] bond1: (slave ip6gretap1): link status up again after 0 ms [ 407.764158][ T4676] bond1: (slave ip6gretap1): link status up again after 0 ms [ 407.792916][ T4676] net_ratelimit: 9 callbacks suppressed [ 407.792931][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.940238][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 407.969283][ T4777] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 408.069402][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.181318][ T4777] usb 10-1: Using ep0 maxpacket: 32 [ 408.193504][ T4777] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 408.218871][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.242157][ T4777] usb 10-1: config 0 has no interface number 0 [ 408.255252][ T4777] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 408.321132][ T4777] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 408.345258][ T4777] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.367399][ T4777] usb 10-1: Product: syz [ 408.378243][ T4777] usb 10-1: Manufacturer: syz [ 408.391690][ T4777] usb 10-1: SerialNumber: syz [ 408.411853][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.432689][ T4777] usb 10-1: config 0 descriptor?? [ 408.438902][T11415] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 408.549793][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.694278][T11415] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 408.708933][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.819704][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 408.927719][T11447] netlink: 'syz.5.1752': attribute type 29 has an invalid length. [ 409.197055][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1752'. [ 409.218580][ T4653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 409.665688][T11447] netlink: 'syz.5.1752': attribute type 29 has an invalid length. [ 409.876128][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1752'. [ 409.924249][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 410.273540][ T3653] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 410.340283][ T26] audit: type=1804 audit(1774450486.180:157): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1760" name="bus" dev="ramfs" ino=60510 res=1 errno=0 [ 410.408306][ T26] audit: type=1804 audit(1774450486.230:158): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1760" name="bus" dev="ramfs" ino=60510 res=1 errno=0 [ 410.470062][ T3653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.492595][ T3653] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 410.535637][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.576740][ T3653] usb 5-1: config 0 descriptor?? [ 410.811164][ T3653] usbhid 5-1:0.0: can't add hid device: -71 [ 410.817689][ T3653] usbhid: probe of 5-1:0.0 failed with error -71 [ 410.857668][ T3653] usb 5-1: USB disconnect, device number 3 [ 411.347696][ T4777] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 411.392686][ T4777] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 411.434522][ T4777] asix: probe of 10-1:0.188 failed with error -71 [ 411.448308][ T3653] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 411.476241][ T4777] usb 10-1: USB disconnect, device number 8 [ 411.640255][ T3653] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.668250][ T3653] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.701718][ T3653] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.742256][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.768078][ T3653] usb 5-1: config 0 descriptor?? [ 412.135421][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1764'. [ 412.192289][ T3653] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 412.253354][ T3653] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 412.338106][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1765'. [ 412.378058][T11507] device ip6gre1 entered promiscuous mode [ 412.503492][T11516] netlink: 'syz.6.1765': attribute type 6 has an invalid length. [ 412.557561][T11516] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1765'. [ 412.734348][ T3653] usb 5-1: USB disconnect, device number 4 [ 412.839485][ T4676] net_ratelimit: 21 callbacks suppressed [ 412.839504][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 412.901252][T11531] device ip6gretap1 left promiscuous mode [ 412.941161][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 412.959861][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 413.108528][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.228453][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.348712][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.400931][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1773'. [ 413.446004][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 413.659012][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 413.723486][ T4760] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 413.749746][ T4676] bond0: (slave bridge3): link status up again after 0 ms [ 413.828440][ T4676] bond0: (slave bridge3): link status up again after 0 ms [ 413.828474][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 413.852784][ T4676] bond0: (slave bridge3): link status up again after 0 ms [ 414.118479][ T4760] usb 5-1: Using ep0 maxpacket: 32 [ 414.124635][ T4674] bond0: (slave bridge3): link status up again after 0 ms [ 414.169679][ T4760] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 414.200946][ T4674] bond0: (slave bridge3): link status up again after 0 ms [ 414.335905][ T4760] usb 5-1: config 0 has no interface number 0 [ 414.346973][ T4674] bond0: (slave bridge3): link status up again after 0 ms [ 414.612334][ T4674] bond0: (slave bridge3): link status up again after 0 ms [ 414.670915][ T4760] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 414.684514][ T4760] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 414.693686][ T4760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.731651][ T4760] usb 5-1: Product: syz [ 414.735894][ T4760] usb 5-1: Manufacturer: syz [ 414.758510][ T4317] bond0: (slave bridge3): link status up again after 0 ms [ 414.784289][ T4317] bond0: (slave bridge3): link status up again after 0 ms [ 414.847177][ T4317] bond0: (slave bridge3): link status up again after 0 ms [ 414.989125][ T4669] bond0: (slave bridge3): link status up again after 0 ms [ 415.068534][ T4669] bond0: (slave bridge3): link status up again after 0 ms [ 415.248238][ T4669] bond0: (slave bridge3): link status up again after 0 ms [ 415.298350][ T4669] bond0: (slave bridge3): link status up again after 0 ms [ 415.323788][ T4660] bond0: (slave bridge3): link status up again after 0 ms [ 415.430785][ T4760] usb 5-1: SerialNumber: syz [ 415.437933][ T4760] usb 5-1: config 0 descriptor?? [ 415.447793][T11547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.478234][ T4662] bond0: (slave bridge3): link status up again after 0 ms [ 415.508487][ T4662] bond0: (slave bridge3): link status up again after 0 ms [ 415.516916][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.568346][ T4676] bond0: (slave bridge3): link status up again after 0 ms [ 415.598267][ T4676] bond0: (slave bridge3): link status up again after 0 ms [ 415.638971][ T34] bond0: (slave bridge3): link status up again after 0 ms [ 415.646208][ T34] bond0: (slave bridge3): failed to get link speed/duplex [ 415.668053][T11547] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.728283][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.878332][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 415.889173][ T4676] bond0: (slave bridge3): failed to get link speed/duplex [ 417.640832][ T4760] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 417.725756][ T4760] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 417.746952][ T4760] asix: probe of 5-1:0.188 failed with error -71 [ 417.759912][ T4760] usb 5-1: USB disconnect, device number 5 [ 417.998977][ T4674] net_ratelimit: 16 callbacks suppressed [ 417.998996][ T4674] bond0: (slave bridge3): failed to get link speed/duplex [ 418.068500][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.086351][T11596] netlink: 'syz.8.1788': attribute type 11 has an invalid length. [ 418.149622][ T4317] bond0: (slave bridge3): failed to get link speed/duplex [ 418.189322][ T4653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.299480][ T4653] bond0: (slave bridge3): failed to get link speed/duplex [ 418.338689][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.429471][ T4317] bond0: (slave bridge3): failed to get link speed/duplex [ 418.482742][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 418.561602][ T4653] bond0: (slave bridge3): failed to get link speed/duplex [ 418.638460][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 419.588991][T11615] loop8: detected capacity change from 0 to 512 [ 419.596132][T11615] EXT4-fs: Ignoring removed i_version option [ 419.672737][T11615] EXT4-fs: Ignoring removed oldalloc option [ 419.734489][T11615] EXT4-fs (loop8): Test dummy encryption mode enabled [ 419.832793][T11615] EXT4-fs (loop8): 1 truncate cleaned up [ 419.839467][T11615] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 420.415751][ T5445] EXT4-fs (loop8): unmounting filesystem. [ 420.806544][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1801'. [ 421.237763][T11654] netlink: 'syz.6.1804': attribute type 8 has an invalid length. [ 421.348056][T11656] loop9: detected capacity change from 0 to 2048 [ 421.397059][T11656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.418523][ T4760] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 421.649520][ T4760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 421.668372][ T4760] usb 5-1: not running at top speed; connect to a high speed hub [ 421.709790][ T4760] usb 5-1: config 1 has an invalid interface number: 36 but max is 2 [ 421.733877][ T4760] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.788377][ T4760] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.808332][ T4760] usb 5-1: config 1 has no interface number 0 [ 421.814516][ T4760] usb 5-1: config 1 interface 36 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 421.848004][ T4760] usb 5-1: config 1 interface 36 has no altsetting 0 [ 421.891793][ T4760] usb 5-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice= 0.40 [ 421.922658][ T4760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.948353][ T4760] usb 5-1: Product: syz [ 421.952603][ T4760] usb 5-1: Manufacturer: syz [ 421.957240][ T4760] usb 5-1: SerialNumber: syz [ 422.320958][ T4760] usb 5-1: USB disconnect, device number 6 [ 422.815046][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.36/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.030406][ T4639] net_ratelimit: 55 callbacks suppressed [ 423.030797][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.238441][ T4317] bond0: (slave bridge3): failed to get link speed/duplex [ 423.320460][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.418301][ T4639] bond0: (slave bridge3): failed to get link speed/duplex [ 423.508319][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.529261][ T4317] bond0: (slave bridge3): failed to get link speed/duplex [ 423.618410][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.629434][ T26] audit: type=1326 audit(1774450499.480:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 423.710594][ T4317] bond0: (slave bridge3): failed to get link speed/duplex [ 423.728111][T11701] overlayfs: failed to clone upperpath [ 423.787500][ T26] audit: type=1326 audit(1774450499.530:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 423.816107][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 423.880033][ T4660] bond0: (slave bridge3): failed to get link speed/duplex [ 423.975796][ T26] audit: type=1326 audit(1774450499.530:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 424.008542][ T26] audit: type=1326 audit(1774450499.530:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 424.101089][ T26] audit: type=1326 audit(1774450499.540:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 424.149059][ T26] audit: type=1326 audit(1774450499.540:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 424.175624][ T26] audit: type=1326 audit(1774450499.540:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 424.201169][ T26] audit: type=1326 audit(1774450499.550:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6ccdb9b607 code=0x7ffc0000 [ 424.227870][T11711] netlink: 'syz.9.1822': attribute type 32 has an invalid length. [ 424.273179][ T26] audit: type=1326 audit(1774450499.570:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 424.296058][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1822'. [ 424.336495][T11711] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 424.372497][ T26] audit: type=1326 audit(1774450499.570:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.6.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 427.341984][T11753] device syzkaller0 entered promiscuous mode [ 427.449816][T11761] overlayfs: failed to clone upperpath [ 428.630119][T11796] loop4: detected capacity change from 0 to 256 [ 430.904540][T11813] loop8: detected capacity change from 0 to 4096 [ 430.962503][T11813] NILFS (loop8): invalid segment: Checksum error in segment payload [ 430.996006][T11813] NILFS (loop8): trying rollback from an earlier position [ 431.084411][T11813] NILFS (loop8): recovery complete [ 431.127268][T11817] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 432.984935][T11840] loop8: detected capacity change from 0 to 512 [ 432.992640][T11840] EXT4-fs: Ignoring removed oldalloc option [ 433.005111][T11840] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 433.063684][T11840] EXT4-fs (loop8): 1 truncate cleaned up [ 433.076178][T11840] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 433.672788][ T5445] EXT4-fs (loop8): unmounting filesystem. [ 434.180017][T11851] overlayfs: statfs failed on './file0' [ 435.268376][ T4314] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 435.319419][ T4379] net_ratelimit: 37 callbacks suppressed [ 435.319439][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 435.408477][ T4662] bond0: (slave bridge3): failed to get link speed/duplex [ 435.460270][ T4314] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.497383][ T4314] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.542898][ T4314] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.562664][ T4314] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.574160][ T4314] usb 9-1: SerialNumber: syz [ 435.618303][ T4676] bond0: (slave bridge3): failed to get link speed/duplex [ 435.818581][ T4314] usb 9-1: 0:2 : does not exist [ 435.872456][ T4314] usb 9-1: USB disconnect, device number 5 [ 437.062332][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.223874][T11864] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.233345][T11864] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.242371][T11864] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.251344][T11864] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.333715][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.355683][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1864'. [ 437.646413][T11890] bond0: (slave bond_slave_0): Releasing backup interface [ 437.679443][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.729951][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1869'. [ 437.778369][T11904] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1869'. [ 437.848309][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 437.998248][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.119505][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.667428][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 438.888272][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 439.489029][T11922] device syzkaller0 entered promiscuous mode [ 439.845297][T11932] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1876'. [ 439.908863][T11932] unsupported nlmsg_type 40 [ 440.042320][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049445][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.245862][T11942] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1879'. [ 440.348640][ T4317] net_ratelimit: 5 callbacks suppressed [ 440.348659][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.348353][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.459318][ T4680] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.568357][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.688867][ T34] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 441.799415][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.013888][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 442.806133][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.027404][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 443.256145][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 444.238538][ T4674] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 448.856357][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1905'. [ 448.890956][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1905'. [ 448.919100][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1905'. [ 449.998396][ T4314] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 450.252053][ T4314] usb 5-1: Using ep0 maxpacket: 8 [ 450.279737][ T4314] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.289808][ T4314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.300723][ T4314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.311112][ T4314] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.324612][ T4314] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.334869][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.566393][ T4314] usb 5-1: GET_CAPABILITIES returned 0 [ 450.572210][ T4314] usbtmc 5-1:16.0: can't read capabilities [ 450.895600][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.919169][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.928344][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.937422][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.946496][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.962682][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.971835][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.980965][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.990300][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 450.999434][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.025223][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.034385][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.056342][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.065517][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.074707][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 451.083927][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 452.397479][T12050] netlink: 'syz.5.1904': attribute type 1 has an invalid length. [ 452.421562][T12053] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 452.468323][ T4669] net_ratelimit: 7 callbacks suppressed [ 452.468343][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.603223][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.739542][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.830480][ T4314] usb 5-1: USB disconnect, device number 7 [ 452.879068][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 452.988943][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.758871][ T4653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 453.983906][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.149232][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.259532][ T4653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.332142][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1922'. [ 454.439162][ T4653] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 454.518065][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1922'. [ 454.580848][T12131] binder_alloc: 12128: pid 12128 spamming oneway? 2 buffers allocated for a total size of 5120 [ 456.635151][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1933'. [ 457.003239][T12165] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 457.240448][T12172] lo: Caught tx_queue_len zero misconfig [ 457.246205][T12172] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 457.509925][ T4637] net_ratelimit: 18 callbacks suppressed [ 457.509947][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.659102][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.788436][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 457.921404][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 459.444672][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 459.588203][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 459.698328][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 459.809435][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 459.918851][ T4662] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 460.035093][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 460.136107][T12208] loop9: detected capacity change from 0 to 512 [ 460.212394][T12208] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 460.314639][T12208] EXT4-fs (loop9): group descriptors corrupted! [ 464.075251][ T4669] net_ratelimit: 22 callbacks suppressed [ 464.075272][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 464.240392][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 464.308038][T12321] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1969'. [ 464.482226][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 464.660224][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 464.850339][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 465.151963][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 465.198006][T12325] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1970'. [ 465.217026][T12324] device syzkaller0 entered promiscuous mode [ 465.338308][ T4660] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 465.465722][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 465.608468][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 465.720955][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 466.340695][T12358] --map-set only usable from mangle table [ 468.128784][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 468.128798][ T26] audit: type=1326 audit(1774450543.980:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 468.157983][ T26] audit: type=1326 audit(1774450544.000:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 468.206044][ T26] audit: type=1326 audit(1774450544.050:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 468.244710][ T26] audit: type=1326 audit(1774450544.050:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 468.472647][ T26] audit: type=1326 audit(1774450544.080:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 468.495970][ T26] audit: type=1326 audit(1774450544.080:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 468.538749][ T26] audit: type=1326 audit(1774450544.080:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 468.563070][ T26] audit: type=1326 audit(1774450544.080:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 469.146314][ T4669] net_ratelimit: 19 callbacks suppressed [ 469.146334][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 469.257348][T12393] vivid-002: disconnect [ 469.288605][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 469.333540][T12385] vivid-002: reconnect [ 469.419138][ T26] audit: type=1326 audit(1774450544.080:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 469.467222][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 469.541278][ T26] audit: type=1326 audit(1774450544.080:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.4.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f2af879c799 code=0x7ffc0000 [ 469.618680][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 469.738792][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 469.868665][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 470.018483][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 470.148666][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 470.338336][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 470.398419][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1991'. [ 470.488224][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 471.224115][T12437] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 471.667911][T12436] device syzkaller0 entered promiscuous mode [ 473.470797][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2004'. [ 474.238337][ T4679] net_ratelimit: 22 callbacks suppressed [ 474.238355][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.388527][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.512421][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.648372][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.745831][T12498] loop4: detected capacity change from 0 to 512 [ 474.759676][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.763335][T12494] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 474.763335][T12494] The task syz.9.2013 (12494) triggered the difference, watch for misbehavior. [ 474.798650][T12498] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 474.878768][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 474.927639][T12498] EXT4-fs (loop4): group descriptors corrupted! [ 474.989315][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 475.118305][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 475.252109][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 475.418406][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 477.298906][T12514] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 479.339987][ T4679] net_ratelimit: 29 callbacks suppressed [ 479.340152][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.638710][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 479.828500][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 480.038417][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 480.270689][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 480.509435][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 480.714869][ T4676] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 480.812832][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2025'. [ 480.825460][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 480.825477][ T26] audit: type=1326 audit(1774450556.680:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 480.899308][ T26] audit: type=1326 audit(1774450556.680:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 480.954575][T12546] bridge4: port 1(geneve2) entered blocking state [ 480.984992][ T26] audit: type=1326 audit(1774450556.710:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 481.032675][T12546] bridge4: port 1(geneve2) entered disabled state [ 481.065534][T12546] device geneve2 entered promiscuous mode [ 481.079128][ T26] audit: type=1326 audit(1774450556.710:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 481.150172][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.271350][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 481.299910][ T26] audit: type=1326 audit(1774450556.710:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 481.329596][ T26] audit: type=1326 audit(1774450556.710:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 482.241235][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 482.249062][T12561] xt_hashlimit: max too large, truncated to 1048576 [ 482.478443][ T26] audit: type=1326 audit(1774450556.710:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 482.783810][ T26] audit: type=1326 audit(1774450556.710:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 484.154749][ T26] audit: type=1326 audit(1774450556.710:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 484.177961][ T26] audit: type=1326 audit(1774450556.710:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12541 comm="syz.6.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ccdb9c799 code=0x7ffc0000 [ 484.390379][ T4379] net_ratelimit: 8 callbacks suppressed [ 484.390399][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 484.648850][ T4777] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 485.190325][ T4276] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 485.200593][ T4276] Bluetooth: hci4: Injecting HCI hardware error event [ 485.213458][ T4273] Bluetooth: hci4: hardware error 0x00 [ 485.663099][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 485.733353][T12597] netlink: 'syz.6.2039': attribute type 1 has an invalid length. [ 485.793904][ T4777] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 485.812060][T12600] .`: (slave bridge0): Error: Slave device does not support XDP [ 485.820086][ T4777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.839259][ T4777] usb 5-1: Product: syz [ 485.849051][ T4777] usb 5-1: Manufacturer: syz [ 485.874189][ T4777] usb 5-1: SerialNumber: syz [ 485.890145][ T4777] usb 5-1: config 0 descriptor?? [ 485.929553][T12602] device macvlan2 entered promiscuous mode [ 485.947313][T12602] device bond8 entered promiscuous mode [ 485.955254][T12602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 485.993738][T12602] device bond8 left promiscuous mode [ 486.114776][ T4777] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 486.153460][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 486.232860][T12608] netlink: 'syz.9.2042': attribute type 1 has an invalid length. [ 486.280118][T12612] device syzkaller0 entered promiscuous mode [ 486.325292][T12614] fuse: Bad value for 'fd' [ 486.453113][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 486.809324][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 486.939779][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.049509][ T4637] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.158311][ T4639] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.268384][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 487.389345][ T4317] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 488.659801][ T4273] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 488.682540][ T4777] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 488.692779][ T4777] usb 5-1: USB disconnect, device number 8 [ 489.409831][ T4680] net_ratelimit: 9 callbacks suppressed [ 489.411960][ T4680] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.117712][T12672] loop8: detected capacity change from 0 to 40427 [ 490.171042][T12672] F2FS-fs (loop8): invalid crc value [ 490.200245][T12672] F2FS-fs (loop8): Found nat_bits in checkpoint [ 490.242121][T12672] F2FS-fs (loop8): Start checkpoint disabled! [ 490.409172][T12672] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 490.568401][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 490.661689][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.671423][T12685] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.692473][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.702136][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.711279][T12685] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.722752][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.732258][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.741422][T12685] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.752464][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.762061][T12685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2061'. [ 490.965244][ T4379] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.035897][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 491.035958][ T26] audit: type=1800 audit(1774450566.880:274): pid=12689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2058" name="bus" dev="loop8" ino=10 res=0 errno=0 [ 491.111137][T12689] syz.8.2058: attempt to access beyond end of device [ 491.111137][T12689] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 491.298413][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.409302][ T4655] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.519587][ T4669] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.707077][ T4655] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.747368][ T4657] kworker/u4:19: attempt to access beyond end of device [ 491.747368][ T4657] loop8: rw=1, sector=45104, nr_sectors = 56 limit=40427 [ 491.829312][ T4655] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 491.970285][ T4655] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.190262][ T4655] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 492.332957][ T4657] kworker/u4:19: attempt to access beyond end of device [ 492.332957][ T4657] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 492.458869][ T4657] kworker/u4:19: attempt to access beyond end of device [ 492.458869][ T4657] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 492.591741][T12703] netlink: 'syz.6.2067': attribute type 11 has an invalid length. [ 494.499462][ T4679] net_ratelimit: 17 callbacks suppressed [ 494.499567][ T4679] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 494.768679][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 494.919721][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.080407][ T4665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.248328][ T4657] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.380937][ T9] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.508452][ T4665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.560719][ T4672] ------------[ cut here ]------------ [ 495.567182][ T4672] WARNING: CPU: 0 PID: 4672 at io_uring/io_uring.c:2890 io_ring_exit_work+0x336/0x763 [ 495.576961][ T4672] Modules linked in: [ 495.581031][ T4672] CPU: 0 PID: 4672 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 495.588796][ T4672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.599060][ T4672] Workqueue: events_unbound io_ring_exit_work [ 495.605202][ T4672] RIP: 0010:io_ring_exit_work+0x336/0x763 [ 495.611616][ T4672] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 bb 2c 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 fc 16 5d f7 e9 16 fe ff ff e8 f2 16 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1 [ 495.631577][ T4672] RSP: 0018:ffffc90005d37ac0 EFLAGS: 00010293 [ 495.637801][ T4672] RAX: ffffffff8a255d9e RBX: ffff8880669b5018 RCX: ffff88802c53d940 [ 495.645896][ T4672] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 495.653960][ T4672] RBP: ffffc90005d37c30 R08: ffffc90005d37a47 R09: 1ffff92000ba6f48 [ 495.662130][ T4672] R10: dffffc0000000000 R11: fffff52000ba6f49 R12: dffffc0000000000 [ 495.670408][ T4672] R13: ffff8880669b5000 R14: 0000000100004bad R15: 0000000100004bb0 [ 495.678465][ T4672] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 495.687458][ T4672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.694156][ T4672] CR2: 00002000006c8000 CR3: 0000000061237000 CR4: 00000000003506f0 [ 495.702219][ T4672] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 495.710301][ T4672] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 495.718362][ T4672] Call Trace: [ 495.721783][ T4672] [ 495.724766][ T4672] ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6 [ 495.730683][ T4672] ? _raw_spin_unlock_irq+0x1f/0x40 [ 495.735949][ T4672] ? process_one_work+0x7b0/0x1160 [ 495.741159][ T4672] process_one_work+0x8a2/0x1160 [ 495.746179][ T4672] ? worker_detach_from_pool+0x240/0x240 [ 495.751910][ T4672] ? _raw_spin_lock_irq+0xb7/0xf0 [ 495.756990][ T4672] ? _raw_spin_lock_irqsave+0x100/0x100 [ 495.762627][ T4672] ? kthread_data+0x4b/0xc0 [ 495.767286][ T4672] worker_thread+0xaa2/0x1270 [ 495.772079][ T4672] kthread+0x29d/0x330 [ 495.776211][ T4672] ? worker_clr_flags+0x1a0/0x1a0 [ 495.781437][ T4672] ? kthread_blkcg+0xd0/0xd0 [ 495.786091][ T4672] ret_from_fork+0x1f/0x30 [ 495.790703][ T4672] [ 495.793818][ T4672] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 495.801135][ T4672] CPU: 0 PID: 4672 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 495.808811][ T4672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.818917][ T4672] Workqueue: events_unbound io_ring_exit_work [ 495.825050][ T4672] Call Trace: [ 495.828366][ T4672] [ 495.831903][ T4672] dump_stack_lvl+0x188/0x24e [ 495.837078][ T4672] ? memcpy+0x3c/0x60 [ 495.841117][ T4672] ? show_regs_print_info+0x12/0x12 [ 495.846563][ T4672] ? load_image+0x400/0x400 [ 495.851179][ T4672] panic+0x2e5/0x730 [ 495.855218][ T4672] ? bpf_jit_dump+0xd0/0xd0 [ 495.859788][ T4672] ? ret_from_fork+0x1f/0x30 [ 495.864443][ T4672] __warn+0x2f8/0x4f0 [ 495.868509][ T4672] ? io_ring_exit_work+0x336/0x763 [ 495.871384][ T4665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 495.881055][ T4672] ? io_ring_exit_work+0x336/0x763 [ 495.886221][ T4672] report_bug+0x2ba/0x4f0 [ 495.890606][ T4672] ? io_ring_exit_work+0x336/0x763 [ 495.895770][ T4672] handle_bug+0x3a/0x70 [ 495.899984][ T4672] exc_invalid_op+0x16/0x40 [ 495.904556][ T4672] asm_exc_invalid_op+0x16/0x20 [ 495.909555][ T4672] RIP: 0010:io_ring_exit_work+0x336/0x763 [ 495.915345][ T4672] Code: 89 de 48 8b 7c 24 30 48 8b 74 24 10 e8 bb 2c 11 00 48 85 c0 48 8b 5c 24 28 75 3b e8 fc 16 5d f7 e9 16 fe ff ff e8 f2 16 5d f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c7 44 89 f1 80 e1 07 80 c1 [ 495.935186][ T4672] RSP: 0018:ffffc90005d37ac0 EFLAGS: 00010293 [ 495.941400][ T4672] RAX: ffffffff8a255d9e RBX: ffff8880669b5018 RCX: ffff88802c53d940 [ 495.949536][ T4672] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: 0000000000000000 [ 495.957553][ T4672] RBP: ffffc90005d37c30 R08: ffffc90005d37a47 R09: 1ffff92000ba6f48 [ 495.965660][ T4672] R10: dffffc0000000000 R11: fffff52000ba6f49 R12: dffffc0000000000 [ 495.973684][ T4672] R13: ffff8880669b5000 R14: 0000000100004bad R15: 0000000100004bb0 [ 495.981716][ T4672] ? io_ring_exit_work+0x336/0x763 [ 495.986894][ T4672] ? io_ring_ctx_wait_and_kill+0x2e6/0x2e6 [ 495.992760][ T4672] ? _raw_spin_unlock_irq+0x1f/0x40 [ 495.998010][ T4672] ? process_one_work+0x7b0/0x1160 [ 496.003175][ T4672] process_one_work+0x8a2/0x1160 [ 496.008174][ T4672] ? worker_detach_from_pool+0x240/0x240 [ 496.013861][ T4672] ? _raw_spin_lock_irq+0xb7/0xf0 [ 496.018930][ T4672] ? _raw_spin_lock_irqsave+0x100/0x100 [ 496.021282][ T4665] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 496.031902][ T4672] ? kthread_data+0x4b/0xc0 [ 496.036745][ T4672] worker_thread+0xaa2/0x1270 [ 496.041497][ T4672] kthread+0x29d/0x330 [ 496.045620][ T4672] ? worker_clr_flags+0x1a0/0x1a0 [ 496.051135][ T4672] ? kthread_blkcg+0xd0/0xd0 [ 496.055858][ T4672] ret_from_fork+0x1f/0x30 [ 496.060352][ T4672] [ 496.063979][ T4672] Kernel Offset: disabled [ 496.068423][ T4672] Rebooting in 86400 seconds..