last executing test programs: 15m5.435132971s ago: executing program 32 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13m40.131840513s ago: executing program 5 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = epoll_create1(0x0) r3 = userfaultfd(0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 13m38.227897337s ago: executing program 5 (id=1176): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x24060400) r0 = creat(&(0x7f0000000500)='./bus\x00', 0x2) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x1, 0x6, 0x4, 0xf037, 0x5, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x10000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000140)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x80801) socket$netlink(0x10, 0x3, 0x4) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000500)='key_or_keyring\x00Z\t\xd1r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 13m26.669881395s ago: executing program 5 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = epoll_create1(0x0) r4 = userfaultfd(0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 13m21.694257807s ago: executing program 5 (id=1210): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4000000}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f0000000080), 0x4) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000000)) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) 13m16.304531859s ago: executing program 5 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200", 0x4}], 0x1}, 0x5) 13m1.122169931s ago: executing program 33 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x41}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200", 0x4}], 0x1}, 0x5) 12m30.235115937s ago: executing program 4 (id=1311): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4000000}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f0000000080), 0x4) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000000)) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 12m24.706840624s ago: executing program 4 (id=1317): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 12m23.691904423s ago: executing program 4 (id=1318): sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=ANY=[@ANYRES16, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000010c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x20}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12m22.602511374s ago: executing program 4 (id=1319): sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48, 0xff, 0x20, 0x2000}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12m21.966790742s ago: executing program 4 (id=1322): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="200a07000000070ff100f4"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x6, 0x2, 0x1, 0x7, 0x0, 0x3, {0x3, 0xfffffffffffffffc, 0xa, 0x8000, 0x8, 0xcca1, 0xffffffff, 0x200, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x7f}}, {0x0, 0x3}}}, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000380)) 12m16.809473618s ago: executing program 4 (id=1327): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 12m1.623669839s ago: executing program 34 (id=1327): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 11m57.173290046s ago: executing program 6 (id=1346): sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=ANY=[@ANYRES16, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x38}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m51.450834828s ago: executing program 6 (id=1353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 11m49.817950935s ago: executing program 6 (id=1354): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000500)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x8000009, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x80000000, 0xa, 0x3c1b, 0x1, 0x24, 0x800000f, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x2, 0x8071, 0x2, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xa, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0xb, 0x3, 0xbc45, 0x3ff, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x4, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ioprio_get$pid(0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x70000, 0x0, 0xb0}) r3 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 11m43.251893931s ago: executing program 6 (id=1360): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 11m41.15598024s ago: executing program 6 (id=1365): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x20, 0x10, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000440)={0x0, 0xc, 0x2, "f5b9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000000022, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 11m36.983845499s ago: executing program 6 (id=1371): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000080000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x28, &(0x7f0000000540)=ANY=[@ANYBLOB="e4e8000000000000000000044c0000181100006823dc4a2630a19690a3cbb2761b975d", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186800000e000000000000000700000004900200760d000018150000", @ANYRES32=r1, @ANYBLOB="000000000000000095000000000000004e4a5c050600000085100000020000001853000009000000000000000000000018180000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02ba1c017fffff"], 0xf) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) 11m21.139883008s ago: executing program 35 (id=1371): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000080000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x28, &(0x7f0000000540)=ANY=[@ANYBLOB="e4e8000000000000000000044c0000181100006823dc4a2630a19690a3cbb2761b975d", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186800000e000000000000000700000004900200760d000018150000", @ANYRES32=r1, @ANYBLOB="000000000000000095000000000000004e4a5c050600000085100000020000001853000009000000000000000000000018180000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02ba1c017fffff"], 0xf) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) 9m53.183851445s ago: executing program 1 (id=1474): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x3, 0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 9m49.280138816s ago: executing program 1 (id=1479): open(0x0, 0x2000, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) write(r0, &(0x7f0000000340), 0x0) keyctl$session_to_parent(0x12) 9m47.769423979s ago: executing program 1 (id=1480): io_setup(0x8, &(0x7f0000004200)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0xd}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$uid(0x3, 0xffffffffffffffff) r2 = getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=cp874,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase\x00\x00,fmaskI00000000000100000000406,fmask=00000000000000000000011,fmask=00000000000000000000006,fm!sk=00000000000000000000003,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJMkOSTJIUmSJMkpIWmSLQmJIaekIQnJYUgOQ0gOE5PG+Xw+JCRJkyQhOSXrf0342+3a3977233bd31z/67ruaz7Xc+9nvW89/u8z8HMfNdlaM3Gtao1JCL4t+DFf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9exthf65HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nJfsu/Pw/O+Pz//8hmaXHfrW29I1dAWL+2RSuf/bG9f8/K/hnVuL6Z29c/+wq9mpPgP0vwMd/dpDj7/Zw/bM3rj9j2dnVfv58tReIZO/34Gp//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/BUKAC63r/a8GGOMMcYYY4wx9ufxOa72DBhjjDHGGGOMMfY/D0GABAUBxEAOiIWckAsEAFwLeeA6iMD1EAc3QF64EfJBfigABSEeCkFh0GAgBghCKAJFIQo3QTG4GYpDCSgJpcBBaUiAW6AM3Apl4TYoB7dDebgDKkBFqASV4U6oAndBVbgbqsE9UB1qQE2oBfdCbbgP6sD9UBcegHrwINSHh6ABPAwN4RFoBI9CY3gMmsDj0BSaQXNoAS3/W/kvQQ94GXpCL0iC3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAxDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8pMAEmAjvwiR4DybDFJgK0yAVpsMMeB9mwiyYDR/AHPgQ5sI8mA8LIA0+goWwCNLhY1gMn0AGLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJn8Iu+Ax2wx7YC5/DPvjiX8w//Tf5XREQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwL+bFfJgPC2ABjMd4LIyF0aBBQsIiWASjGMViWAyLY3EsiSXRocMETMAyeCuWxbJYDstheSyPFbAiVsTKWBmrYBWsilWxGlbD6lgda2JNvBfvxd5YB+tgXayL9bDe5cdT2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2wlbYGltjW2yL7bAdtsf2mIiJ2AE7YEfsiJ2wE3bGztgFu2BX7IbdMl/KAfgyvoy9sLrojX2wD/bF5Bz9cQAOwFdxEL6Gr+HrmIxDcCi+gW/gmzgcT+EIHImjcBRWEe/gGByLJMZjCqbgRJyIk3ASTsYpOAWnYSpOxxk4A2fiLJyFH+Ac/BA/xHk4DxdgGqbhQlyE6ZiOi/E0ZuASXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgpKgD8DPfgHkzGfbgP9+N+PIAH8CAexEzMxEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI8vxH/T6NMSa5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8oq8Ip/IJwqIAiJexIvCorAwwggSYQwAiKiIimKimCguiouSoqRwwokEkSDKiDKirCgryonbRXlxh6ggKoo2rrKoLKqItq6quFtUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPVFfPCQaiN7YHx8RWZVpLIZgEzEUm4pmQl76BmslhmNr0Ua0FU+JkTgC24tWLlE8KzqIMdhR/EWMxedFZzEeu4gXRVfRTXQXL4keorXrKXqJydhb9BHTsK/oJ/qLAWIm1hAf4JycNcXrIlkMEUPFG2IBvimGi7fECDFSjBJvi9HiHTFGjBXjxHiRIiaIieJdMUm8JyaLKWKqmCZSxXQxQ7wvZopZYrb4QMwRH4q5Yp6YLxaINPGRWCgWiXTxsVgsPhEZYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhW7xGdit9gj9orPxT7xhdgvvhQHxFfioPhaZIpvxCHxrTgsvhNHxPfiqPhBHBPHxQnxozgpfhKnxGlxRpwV58TP4rz4RVwQXoBEKaSUSgYyRuaQsTKnzCWvkbllcOndvV7GyRtkXnmjzCfzywKyoIyXhWRhqaWRVpIMZRFZVEblTbKYvFkWlyVkSVlKOllaJshbZBl5qywrb5Pl5O2yvLxDVpAVZSVZWd4pq8i7JEQubqO6rCFrylryXpkE98k68n5ZVz4g68kHZX35kGwgH5YN5SOykXxUNpaPySbycdlUNpPNZQvZUj4hW8knZWvZRraVT8l28mnZXj4jE+WzsoP0lz4iz8vO8gXZRb4ou8pusrv8RV6QXvaUvST0BtlHviL7yn6yvxwgB8pX5SD5mhwsX5fJcogcKt+Qw+Sbcrh8S46QI+Uo+bYcLd+RY+RYOU6Olylygpwo35WT5Htyspwip8ppMlVOl/0vjTRbyn+Y/+4f5A/+deub5Ga5RW6V2+R2uUPulJ/KXXKX3C13y71yr9wn98n9cr88IA/Ig/KgzJSZ8pA8JA/Lw/KIPCKPyqPymDwuz8of5Un5kzwlT8vT8qw8J8/J85feA1CohJJKqUDFqBwqVuVUudQ1Kre6VuVR16mIul7FqRtUXnWjyqfyqwKqoIpXhVRhpZVRVpEKVRFVVEXVTXjpA6NKqlLKqdIqQd3yr+SrYupmVVyV+E3+5fkl/Z35tVQtVSvVSrVWrVVb1Va1U+1Ue9VeJapE1UF1UB1VR9VJdVKdVWfVRXVRXVVX1V11Vz1UD9VT9VRJKkn1Ua+ovqqf6q8GqIHqVTVIDVKD1WCVrJLVUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVIpKURPVRDVJTVKT1WQ1VU1VqSpVzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpak0tVAtVOkqXS1Wi1WGWqKWqGVqmVqhVqhVapVao9aodWqd2qA2qAy1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVSZKlMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHrsi8QgQhUkHWmjQlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXCp6NLgpKBbcHBQPSgQlg1KBC0oHCcEtQZng1qBscFtQLrg9KB/cEVQIKgaVgsrBnUGV4K6ganB3UC24J6ge1AhqBrWCe4PawX1BneD+oG7wQFAveDCoHzwUNAgeDhoGjwSNgkeDxsFjQZPg8aBp0CxoHrQIWv6p43t/Kv+TrqfupZN0b91Hv6L76n66vx6gB+pX9SD9mh6sX9fJeogeqt/Qw/Sberh+S4/QI/Uo/bYerd/RY/RYPU6P1yl6gp6o39WT9Ht6sp6ip+ppOlVP1zP0+3qmnqVn6w/0HP2hnqvn6fl6gU7TH+mFepFO1x/rxfoTnaGX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpTvUt/pnfrPXqv/lzv01/o/fpLfUB/pQ/qr3Wm/kYf0t/qw/o7fUR/r4/qH/QxfVyf0D/qk/onfUqf1mf0WX1O/6zP61/0Be2zLu6zTu9GGWViTIyJNbEml8llcpvcJo/JYyImYuJMnMlr8pp8Jp8pYAqYeBNvCpvCJgsZMkVMERM1UVPMFDPFTXFT0pQ0zjiTYBJMGVPGlDVlTTlTzpQ35U0FU8FUMpXMneZOc5e5y9xt7jb3mHtMDVPD1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDfNTUvT0rQyrUxr09q0NW1NO9POtDftTaJJNB1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1Nd9PD9DA9TU+TZJJMH9PH9DV9TX/T3ww0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsg4f844ZY8aacWa8STEpZqKZaCaZSWaymWymmqkm1aSaGWaGmWlmmtlmtplj5pi5Zq6Zb+abNJNmFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bDerPRbDSbzWaz1Ww12812s9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDP5L50vvYm1OW0ue43Nba+1eex19m/jAragjbeFbGGrbT6b/zexsdYWtyVsSVvKOlvaJthbfhdXsBVtJVvZ3mmr2Lts1d/Fte19to6939a1D9ha9t7fxPXsg7a+fcw2QASwzWwj28I2to/ZJvZx29Q2s81tC9vOPm3b22dson3WdrDP/S5eaBfZ1XaNXWvX2d12jz1jz9rD9jt7zv5se9pedqB91Q6yr9nB9nWbbIf8Lh5l37aj7Tt2jB1rx9nxv4un2mk21U63M+z7dqad9bs4zX5k59h0O9fOs/Ptgl/jrDml24/tYvuJzbABLLXL7HK7wq60q/7/XJfZDXaj3WR32c/sVrvNbrc77M7LF8J2j91rP7f77Bf2kP3WHrBf2YP2iM203/waZ+3fEfu9PWp/sMfscXvC/mhP2p/U5eysff/R/mIvWG+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJenV5JKkaPSlEC3UBm6lcrSbVSObqfydAdVoIpUiSrTnVSF7qKqdDdVo3uoOtWgmlSL7qXadB/VofupLjxA9ehBqk8PUQN6mBrSI9SIHqXG9Bg1ocepKTWj5tSCWtIT1IqepNbUhtrSU9SOnqb29Awl0rPUgZ6jjvQX6kTPU2d6gbrQi9SVulF3eol60MvUk3pREvWmPvQK9aV+1J8G0EB6lQbRazSYXqdkGkJD6Q0aRm/ScHqLRtBIGkVv02h6h8bQWBpH4ymFJtBEepcm0Xs0mabQVJpGqTSdZtD7NJNm0Wz6gObQhzSX5tF8WkBp9BEtpEWUTh/TYvqEMmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqUdtFntJv20F76nPbRF7SfvqQD9BUdpK8pk76hQ/QtHabv6Ah973vRD3SMjtMJ+pFO0k90ik7TGTpL5+hnOk+/0AXyBCGGIpShCoMwJswRxoY5w1zhNWHu8NowT3hdGAmvD+PCG8K84Y1hvjB/WCAsGMaHhcLCoQ5NaEMKw7BIWDSMhjeFxcKbw+JhibBkWCp0YekwIbwlLBPeGpYNbwvLhbeH5cM7wgphxfCxByqHd4ZVwrvCquHdYbXwnrB6WCOsGdYK7w1rh/eFdcL7w7rhA2HZ8MGwfvhQ2CB8OGwYPhI2Ch8NG4ePhU3Cx8OmYbOwedgibBk+EbYKnwxbh23CtuFTYbvw6bB9+EyYGD4bdgif+7X/wUV/vz8p7B32CV8JXwm9v1/Ojy6IpkU/ii6MLoqmRz+OLo5+Es2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qLuJlfM3eyKuxKupCvlnCvtElwL19K1dK3ck661a+PauqfcU+5p97R7xj3jnnUd3HOuo/uL6+Sed53dC+4F96Lr6rq57u4l18NNyHPxmExyfVwf19f1df1dfzfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U91Ul+pS3Qw3w810M12VWRe3MtfNdfPdfJfm0txCl3XNmO4Wu8Uuw2W4pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrudbqfb5Xa53f66i4O6fW6/2+8OuAPuoPvaZbpv3CH3rTvsvnNH3PfuqPvBHXPH3Qn3ozvpfnKn3Gl3xp1159zP7rz7xV1w3qVEJkQmRt6NTIq8F5kcmRKZGpkWSY1Mj8yIvB+ZGZkVmR35IDIn8mFkbmReZH5kQSQt8lFkYWRRJD3ycWRx5JNIRmRJZGlkWWR5ZEXE+0JbQ1/EF/VRf5Mv5m/2xX0JX9KX8s6X9gn+Fl/G3+rL+tt8OX+7L+/v8BV8RV/JP+6b+ma+uW/hW/onfCv/pG/t2/i2/infzj/t2/tnfKJ/1nfwz/mO/i++k3/ed/Yv+C7+Rd/Vd/Pd/Uu+h3/Z9/S9fJLv7fv4V3xf38/39wP8QP+qH+Rf84P96z7ZD/FD/Rt+mH/TD/dv+RF+pB8V87YfffkWGcb7FD/BT/Tv+kn+PbjbT/FT/TSf6qf7Gf59P9PP8rP9B36O/9DP9fP8fL/Ap/mP/EK/yKf7j/1i/4nP8EsuP1T2K/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9p36X/8zv9nv8Xv+53+e/8Pv9l/6A/8of9F/7TP+NP+S/9Yf9d/6I/94f9T/4Y/64P+F/9Cf9T/6UP+3P+LP+nP/Zn/e/+Av8O2uMMcYYY/+UCVea4rc9Fx/n9/6DHPFXK/cBgGu3Fcz86/6sK8r1+S62+4n4dhEAeLZXl0cuL9WrJyUlXVo3Q0JQdB7A5f8JyhIDV+Il0BaehkRoA2X+cP79RLdz9A/Gj94OkOuvcmLhSnxl/C8BMOkPxn/iqVELy4dn4v6L8ecBFC96JScnXImXQNtfn6+0gbJ/Z/75W/2D+ef8KgWg9V/l5IYr8ZX5J8CT8Bwk/mZNxhhjjDHGGGPson6iUqfL95+Xf+Lzj+7P49WVnBxwJf5H9+eMMcYYY4wxxhi7+p7v1v2ZJxIT23T61xtV/1tZ/3SjCfxPjcyNP2x4D3D5FQUA/+aAAFkN+Z/ciy3/kW0lXzp0/rZr+VkfwP+OUv4Zjav8xcQYY4wxxhj701256P/t6+pqTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//8BsgGO") sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) preadv(r4, &(0x7f0000000500)=[{&(0x7f0000000400)=""/228, 0xe4}], 0x1, 0x58, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x0, 0x8, 0x805}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, 0x0, 0x32600) listen(r1, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r6, 0x2) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}], 0x2, 0x7, 0x20000000) 9m41.497580147s ago: executing program 1 (id=1486): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@nodioread_nolock}]}, 0xee, 0x2aa, &(0x7f0000001580)="$eJzs3T9oJFUYAPBvZncvF285Tm0E8Q+IiAbCWQiCjTYKB3IcIoIKJyJWciecd9jtWmlhobVKKpsgdkZL0SLYKLZRUySNhcHCIKLFyOzshnGzYePu7CTs/n6wzJuZb+a9hfnevE2YNwEsrAsR8WRENCJiJSJaEZGUA+4vPhf6q2vLm1cjsuy535NeXLFeGBx3LiK6EfF4RHOw79bGSzt/bj3z0Ps3Ww9+uvHicl3fL+LsQWlvZ/vZ/U8uv/vFpUdvpf1t7f6y/D2qlIzY1kwi7phFZadE0hwb8leWZbW0haNdefvzn/K8vzMiHujlfyvSfsp+cOPMN6145ONyfPla/vC3H++uu71AtbKsld8DuxmwcNLeGDhJVyOiKKfp6moxhv+5kcQb12+8tfL69ZvXXhvZfTRq77CAaST5b/P8B/jTXy19eW4o/39tFPl/LI/NuKXATLQjtp+/sv5LXt53F4fFcE+xyPN/5ZXOwyH/YeFMkf9nZ9UmoB7t3l/4Cu7/sFiM/2EOTJi7Q/n/TsWtAk6xcv4vnXRjgFoZ/8Mcaw0K3ZG75T/Mh/cmGMCX8/+HkceP2Og/fzAXhu7/NT6PC5y0cv4DAIslWxr7iPDu+X4oMF9Ouv8BAAAAAAAAAAAAAAAAAAAOW1vevDr41FXndx9F7D0VEc3/1l/MPNjovY94MOngbX8kediBtDhsKi/fN+UJpvRZxU9fX/6f80Ce3622/mPqDArf3zubCoZeZnHk3HadaxHdPPhis3n4+k/611+Mu9L65z9zaMftY9rZenVMQMWSofUnXvi2snN3Jjjmn/XKqp/Ipa2Ir/P+5+Ko/i+Nu3rL0f1PuzzF8oTe/HvKEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCbfwMAAP//rvtnHA==") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r2, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 9m39.480936474s ago: executing program 1 (id=1488): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x4000000}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f0000000080), 0x4) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000000)) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, 0x0, 0x20004056) 9m36.390336572s ago: executing program 1 (id=1489): open(0x0, 0x2000, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) write(r0, &(0x7f0000000340), 0x0) keyctl$session_to_parent(0x12) 9m20.345519767s ago: executing program 36 (id=1489): open(0x0, 0x2000, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004600)=""/102400, 0x19000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) write(r0, &(0x7f0000000340), 0x0) keyctl$session_to_parent(0x12) 4m46.497597137s ago: executing program 8 (id=1860): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f0000003b80)={0x2020}, 0x2020) signalfd4(r0, &(0x7f0000000340)={[0xfffffffffffffffe]}, 0x8, 0x800) 4m40.876009003s ago: executing program 8 (id=1872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) 4m40.463695926s ago: executing program 8 (id=1875): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x10, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") openat(0xffffffffffffffff, 0x0, 0x88842, 0x30) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unshare(0x800) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000001300)}, 0x2}], 0x1, 0x40010100, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000400) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 4m36.705490952s ago: executing program 8 (id=1882): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008014, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x14fe, &(0x7f00000020c0)="$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") syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000e40)={0x2020}, 0x2020) 4m35.011533498s ago: executing program 8 (id=1885): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20080058) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[], 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m32.699879045s ago: executing program 8 (id=1889): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) unshare(0x2040600) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x6) 4m32.175925792s ago: executing program 37 (id=1889): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) unshare(0x2040600) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0xc0844123, &(0x7f0000000000)=0x6) 32.845102419s ago: executing program 3 (id=2189): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 26.008965867s ago: executing program 2 (id=2198): gettid() openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000380)={0x591003, 0x1b0, 0xc}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x6, 0x80000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$hfsplus(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x100c400, &(0x7f0000000080)=ANY=[], 0x88, 0x697, &(0x7f0000001240)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0) 24.758538298s ago: executing program 7 (id=2200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000001140)={0x80, 0x20, 0x3, 0x80000007}) 21.789170217s ago: executing program 7 (id=2201): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f393b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07420936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) socket$inet(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r6, 0x1000) unshare(0x26020480) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback={0x0, 0x7ffffffe}, 0x23}, 0x1c) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) 21.214366415s ago: executing program 2 (id=2203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x14, @void}, 0x10) preadv2(r1, 0x0, 0x0, 0x9, 0x4, 0x14) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r4, &(0x7f00000046c0)={0x2020}, 0x2020) 19.757752134s ago: executing program 2 (id=2204): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x3, 0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 19.674461407s ago: executing program 0 (id=2205): socket$nl_route(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() msgget$private(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) socketpair(0x28, 0x1, 0x28, &(0x7f0000001400)) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 19.535899191s ago: executing program 3 (id=2206): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) syz_clone(0x80080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 18.099590689s ago: executing program 3 (id=2207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x402, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f0, &(0x7f0000000f80)="$eJzs3ctrE0EcwPFf3klrTQ8iIgpDBVGkSxPw5sEiLYgBpW0EKwhbu9WQbVKyoRAR24Pg1bOHHjyKIII3LyJee/Ev8HXrpTcLFlc2u5umyZqmlT79fg7NdOf325ndme1j2uyuXHk+W5yxtF92VJr1S1giXnlRLn5a+np2/OMx93OlRocnMlmlwiJy9/HrgQ/V3tvvjr9PyHL/vZXV7I/lMxMivyceSlgVLFWybdtWU+VyNeQkTxesoqbULdPQLUMVSpZRqSq9Xq9PmYaaMctzczWll6b7euYqhmUpvVRTRaOmqmVVrdSU/kAvlJSmaaqvR1AfLF+4rS7UKTH/as22ZdUZoMSi2LYdEL3oF2Lea+LfOouDpGX8O8a2TY7IbvYMe2HNjjbGP77F+OPoca//by+6uf5x9IzfmbwxnMuNjCmVFJl9Np+fz7uvbv2XXimIKYYsjV2aXBdnjngk5HwcvZ4bGVJ1/XJ+dsHLX5jPu98chme8/IyknZ9TmvLFz8+4+Wpzfkx6mvOzkpYTwflZP1/CTflxuXCuKV+TtHy+L2UxZVqc3I38Jxmlrt3MtbSfqscBAAAAAAAAAHAYaaphY/0+1PhTb0rTEvX/+GjUp5zNTpwb0FhfH5K0rAevzw8Fru9H5XR0Hw8cAAAAAID/iFV7VNRN06jsTiHyMtWhiZiIOAWRpwNOZzru8KTX4+5aj4tIe1WkcxObCqnLbntvxryOyW6eqB0WwiLSvMV9s4Zz8OZbPyYlQenhbU2AwXjgmU/u6SFLN8GS3NnETnQ9tVoLoXV/y6nAGDu09X5s3Yy5W/wLc6vWr27rcvhrIdl6oga/u/s1O3zR+NlY4gMAAABwiDT94gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbJjm4e5t+3f3OVeI+Ib78lW+tz4rnvPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAD6E8AAAD//+b9sCg=") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406"], 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) dup(r2) r4 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5c1041, 0x0, 0x14}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1, 0x3, 0x10, 0x7fc, r1}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000000b40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4004200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000180)={0x14, r5, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000280)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x6}, 0x3, 0x40, 0x9, 0x0, 0x20, 'syz1\x00', "92493f5902462c4d814e612652debc18ba3c738e9db8065cc41757d6739657fd", "c09c02c9fe79c56b9494a9dc68d36e1c88a4b798d74998c05d0ab989dd53da4b", [{0x2, 0x4, {0x3, 0x7fff}}, {0x200, 0x6, {0x3, 0x6}}, {0x0, 0x59, {0x1, 0x1}}, {0x800, 0x89d, {0x3, 0x6}}, {0xfffa, 0x5, {0x0, 0x5}}, {0xfffe, 0x4, {0x3, 0x7f}}, {0x3, 0x2, {0x2, 0xc6}}, {0xe44, 0x7, {0x2}}, {0x8, 0x98a4, {0x1, 0xfffffff9}}, {0x9, 0xff, {0x2, 0x7}}, {0xffff, 0x2, {0x1, 0x6}}, {0x9, 0xea5, {0x3, 0x4e7a}}, {0x800, 0x97f0, {0x2, 0x4}}, {0x559, 0x7, {0x3, 0x4}}, {0x9, 0x7, {0x2, 0xbfb8}}, {0x8000, 0x2, {0x0, 0x7ff}}, {0x1, 0x68c, {0x0, 0x3}}, {0xb345, 0x1, {0x2, 0x1}}, {0x5, 0x7, {0x1}}, {0x3, 0xfffe, {0x3, 0xa}}, {0x81, 0x6, {0x2, 0xffffffff}}, {0x6, 0x48, {0x2, 0xcc3}}, {0x4, 0xd7, {0x3, 0x1}}, {0xfff9, 0xfffd, {0x2, 0x7}}, {0x3ff, 0x6, {0x2, 0x8}}, {0x6, 0x5, {0x1, 0xc0}}, {0x1, 0xfff9, {0x0, 0xfbb}}, {0x200, 0xd0fd}, {0x0, 0x7, {0x3, 0x40}}, {0x7f, 0xe7, {0x0, 0xeb}}, {0xa, 0xfffa, {0x3, 0x800}}, {0x5, 0x8b, {0x1, 0xb}}, {0x1, 0x9, {0x1, 0xd}}, {0x8000, 0xeb3, {0x3, 0xe2}}, {0x3, 0x2, {0x0, 0x7}}, {0x5, 0x1, {0x1, 0x80000000}}, {0x9, 0x1, {0x0, 0x4}}, {0xffff, 0x3, {0x3, 0x43}}, {0x8, 0xfffb, {0x1, 0x2}}, {0x0, 0x6, {0x3, 0xde7}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6(0xa, 0x3, 0x81) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x800, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77r0], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14.027646994s ago: executing program 7 (id=2211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000001140)={0x80, 0x20, 0x3, 0x80000007}) 12.695843868s ago: executing program 9 (id=2212): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0xd}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$uid(0x3, 0xffffffffffffffff) r3 = getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=cp874,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase\x00\x00,fmaskI00000000000100000000406,fmask=00000000000000000000011,fmask=00000000000000000000006,fm!sk=00000000000000000000003,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$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") sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000400)=""/228, 0xe4}], 0x1, 0x58, 0x1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x0, 0x8, 0x805}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) listen(r2, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r7, 0x2) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}], 0x2, 0x7, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_destroy(r0) 11.116186091s ago: executing program 7 (id=2213): gettid() openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000380)={0x591003, 0x1b0, 0xc}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x6, 0x80000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$hfsplus(&(0x7f0000000300), &(0x7f0000000340)='./file1\x00', 0x100c400, &(0x7f0000000080)=ANY=[], 0x88, 0x697, &(0x7f0000001240)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0) 10.898384258s ago: executing program 2 (id=2214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x14, @void}, 0x10) preadv2(r1, 0x0, 0x0, 0x9, 0x4, 0x14) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r4, &(0x7f00000046c0)={0x2020}, 0x2020) 10.648047336s ago: executing program 0 (id=2215): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB], 0x16) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9000400000000000000"], 0xf) 9.448301666s ago: executing program 2 (id=2216): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x2) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 9.088115208s ago: executing program 0 (id=2217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) getpid() r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) syz_clone(0x80080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 7.292176288s ago: executing program 3 (id=2218): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20080058) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) syz_usb_connect(0x6, 0x24, &(0x7f0000000140)=ANY=[], 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.665321942s ago: executing program 9 (id=2219): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000140), 0x0, 0x246, &(0x7f00000002c0)="$eJzs3EFoFFcYB/BvZnebJllK2l4KhbZQSmkDIb0VekkvLQRKCKUUVIiIeFESISZ4Szx58aBnlZy8BPFm9Cg5GLwogqeoOcSLoMGDwYMeVnYnK9FsNLhxR5zfDyYzk5n3vjfs/t/sZSaAwuqLiKGIKEVEf0RUIiLZfMIP2dK3sTvXvTQWUav9+yRpnJftZ5rteiNiNiJ+j4jFNInD5Yjphb2rz5b//vnUVOWnCwt7ujt6kRvWVlf+WT8/cvLy8G/Tt+48GkliKKqvXdfuS1r8r5xEfPUhin0kknLeI2AnRo9fulvP/dcR8WMj/5VII/vwTk9+tliJX89t1/bM49vfdnKswO6r1Sr1e+BsDSicNCKqkaQDEZFtp+nAQPYb/l6pJz0yMXms/9DE1PjBvGcqYLdUI1b+utp1pfeN/D8sZfkHPl31/P83On+/vr1eyns0QCfV89+/f+aXkH8oHPmH4pJ/KC75h+KSfyiuZv6vyz8Ujvs/FJf8Q3HJPxSX/EMBpdlqc/4BgGKpdeX9BDKQl7znHwAAAAAAAAAAAAAAAAAAYKu57qWx5tKpmjfORqz9GRHlVvVLG68q+rzxt+dpUj/tlSRr1pZ937fZQZsu5vz09RcP8q1/87t868+MR8yeiIjBcnnr9y9pvirrvX35juOVA20WaNMf/+db/8V8R8pUtjswvBxxrT7/DLaaf9L4prFuPf9U39bxDh193mYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMzLAAAA//9XTm32") write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x9}, 0xf) socket$inet6(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) 5.376449361s ago: executing program 7 (id=2220): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r1 = getpgrp(0x0) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x541ec3ed, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) 5.023910923s ago: executing program 9 (id=2221): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f0000001b00)="120000001200e7ef007b00000000018b4ba1", 0x12, 0x20040090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001b40)=""/4103, 0x1007}, {&(0x7f0000000380)=""/256, 0x100}, {&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f00000007c0)=""/120, 0x78}], 0x6}, 0x5}], 0x1, 0x40010120, 0x0) 3.562023112s ago: executing program 7 (id=2222): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, 0x0, &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.537825073s ago: executing program 2 (id=2223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$sndseq(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000001140)={0x80, 0x20, 0x3, 0x80000007}) 3.229848173s ago: executing program 9 (id=2224): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x3, 0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.949539742s ago: executing program 9 (id=2225): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r1, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r5 = memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x40000000}) 1.448606342s ago: executing program 9 (id=2226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x14, @void}, 0x10) preadv2(r1, 0x0, 0x0, 0x9, 0x4, 0x14) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') read$FUSE(r4, &(0x7f00000046c0)={0x2020}, 0x2020) 1.1901418s ago: executing program 0 (id=2227): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9000400000000000000"], 0xf) 0s ago: executing program 0 (id=2228): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0], &(0x7f0000001600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000007d000000180100002020690c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 00][T10320] device hsr_slave_1 entered promiscuous mode [ 852.306667][T10320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.334858][T10320] Cannot create hsr debugfs directory [ 854.467856][ T5948] device hsr_slave_0 left promiscuous mode [ 854.511099][ T9150] EXT4-fs: 31 callbacks suppressed [ 854.511118][ T9150] EXT4-fs (loop7): unmounting filesystem. [ 854.576652][ T5948] device hsr_slave_1 left promiscuous mode [ 854.619574][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.639408][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.679763][ T5948] device bridge_slave_1 left promiscuous mode [ 854.691005][T10397] loop7: detected capacity change from 0 to 256 [ 854.697768][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.726567][T10398] dns_resolver: Unsupported content type (254) [ 854.766915][T10397] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 854.786532][T10397] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 854.817279][ T5948] device bridge_slave_0 left promiscuous mode [ 854.829495][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.849616][T10397] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 855.005682][ T5948] device veth1_vlan left promiscuous mode [ 855.025535][ T5948] device veth0_vlan left promiscuous mode [ 855.797278][T10397] exFAT-fs (loop7): hint_cluster is invalid (17) [ 855.844879][T10397] exFAT-fs (loop7): error, invalid access to FAT (entry 0xffffffff) [ 855.865849][T10397] exFAT-fs (loop7): Filesystem has been set read-only [ 856.102948][T10403] Bluetooth: MGMT ver 1.22 [ 856.997225][ T4358] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 857.209802][ T4358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 857.255699][ T4358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.290248][ T4358] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 857.319948][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.453393][ T4358] usb 3-1: config 0 descriptor?? [ 857.922980][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1582'. [ 857.947639][ T4358] elan 0003:04F3:0755.0017: failed to start in urb: -90 [ 857.970764][ T4358] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 858.231912][ T4315] usb 3-1: USB disconnect, device number 33 [ 858.764273][T10413] fido_id[10413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 859.522089][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 859.581032][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 859.601300][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 859.835718][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 860.986811][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.194607][T10432] dns_resolver: Unsupported content type (254) [ 861.238569][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.138658][T10438] loop0: detected capacity change from 0 to 256 [ 863.305234][T10438] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 863.376559][T10438] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 863.482305][T10438] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 864.768028][ T5948] bond0 (unregistering): Released all slaves [ 864.810355][T10441] loop7: detected capacity change from 0 to 8 [ 864.827478][T10441] squashfs: Unknown parameter '0000000000000000000000000000000000000000000000' [ 865.475074][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 865.489903][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 865.506781][ T4315] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 865.718301][ T4315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 865.774360][ T4315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.811458][ T4315] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 865.824679][T10455] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1596'. [ 865.856585][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.987295][ T4315] usb 8-1: config 0 descriptor?? [ 866.746813][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1597'. [ 867.204544][ T4315] elan 0003:04F3:0755.0018: failed to start in urb: -90 [ 867.227643][ T4315] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 869.058837][ T8863] usb 8-1: USB disconnect, device number 6 [ 869.208890][T10318] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 869.442825][T10318] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 869.480548][T10318] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 869.593909][T10318] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 869.755462][T10320] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 871.348347][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.354912][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.366695][T10320] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 871.440670][T10320] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 871.453443][T10484] loop7: detected capacity change from 0 to 256 [ 871.500692][T10320] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 871.591059][T10484] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 871.737273][T10484] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 871.818229][T10484] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 872.225538][T10318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.315959][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 872.327773][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 872.364096][T10318] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.482422][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 872.507706][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 872.537331][ T9244] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.544589][ T9244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.734787][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 872.747440][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 872.817025][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 872.847008][ T9244] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.854193][ T9244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.890908][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 872.928777][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 872.955173][T10318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 873.017127][T10498] dns_resolver: Unsupported content type (254) [ 873.023567][T10318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.137616][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 873.153767][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 873.178078][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 873.248437][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 873.279552][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 873.289786][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 873.299498][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 873.308460][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 873.317694][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 873.326357][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 873.336191][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 873.344967][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 873.445434][T10320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.527628][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 873.548737][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.642038][ T5948] device hsr_slave_0 left promiscuous mode [ 873.666015][ T5948] device hsr_slave_1 left promiscuous mode [ 873.703514][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.757652][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.376984][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'. [ 874.644362][ T5948] device bridge_slave_1 left promiscuous mode [ 874.666659][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.688580][ T5948] device bridge_slave_0 left promiscuous mode [ 874.694979][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.438336][ T5948] team0 (unregistering): Port device team_slave_1 removed [ 878.906560][ T4358] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 879.033465][ T5948] team0 (unregistering): Port device team_slave_0 removed [ 879.128489][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 879.176504][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.186363][ T4358] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 880.558055][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.571159][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.615313][ T4358] usb 1-1: config 0 descriptor?? [ 880.673588][ T4358] usb 1-1: can't set config #0, error -71 [ 880.716916][ T4358] usb 1-1: USB disconnect, device number 25 [ 880.765396][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.781532][T10553] loop0: detected capacity change from 0 to 256 [ 880.861439][T10553] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 881.198167][T10555] loop0: detected capacity change from 0 to 256 [ 881.225933][T10555] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 881.253975][T10555] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 881.308952][T10555] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 881.515636][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 881.536820][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 881.825484][T10560] loop2: detected capacity change from 0 to 512 [ 881.839321][T10560] EXT4-fs: Ignoring removed i_version option [ 881.877515][T10560] ext4: Unknown parameter 'obj_type' [ 883.596793][T10565] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1616'. [ 885.463782][ T5948] bond0 (unregistering): Released all slaves [ 887.370035][T10320] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.464726][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 887.507537][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 887.546662][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.553840][ T7939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.606975][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 887.646861][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 887.682035][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.689274][ T7939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.775740][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 887.817134][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 887.844489][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 887.902256][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 887.959049][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 888.019005][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 888.047452][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 888.056343][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 888.101587][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 888.124969][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 888.148609][T10584] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 888.328287][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 888.355280][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 888.555438][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 888.583336][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 888.615069][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 888.689400][T10318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.721709][T10600] loop0: detected capacity change from 0 to 1024 [ 888.837288][ T4320] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 889.040629][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 889.077400][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.127619][ T4320] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 889.166483][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.192847][ T4320] usb 3-1: config 0 descriptor?? [ 889.264430][ T4279] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 889.286020][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 889.577971][T10616] loop7: detected capacity change from 0 to 512 [ 889.626309][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 889.645587][T10616] EXT4-fs: Ignoring removed i_version option [ 889.656349][ T4320] elan 0003:04F3:0755.0019: failed to start in urb: -90 [ 889.676113][T10616] ext4: Unknown parameter 'obj_type' [ 889.683219][ T4320] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 889.689223][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 889.734993][T10320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.893883][ T4320] usb 3-1: USB disconnect, device number 34 [ 890.764832][T10630] loop7: detected capacity change from 0 to 256 [ 891.376671][T10628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'. [ 891.630240][T10623] fido_id[10623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 891.667198][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 891.685561][T10630] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 891.697693][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 891.746573][T10630] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 891.777298][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 891.815686][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 891.826908][T10630] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 891.851196][T10318] device veth0_vlan entered promiscuous mode [ 891.876603][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 891.884689][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 891.972915][T10318] device veth1_vlan entered promiscuous mode [ 892.087419][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 892.106296][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 892.144361][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 892.182406][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 892.213903][T10318] device veth0_macvtap entered promiscuous mode [ 892.250658][T10318] device veth1_macvtap entered promiscuous mode [ 892.337507][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.374487][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.406541][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.443827][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.472767][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.502697][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.540760][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 892.576709][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.614157][T10318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.649842][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 892.665248][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 892.697669][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 892.712034][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 892.751709][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.809625][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.842855][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.861030][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.902220][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.933598][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.980858][T10318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.005227][T10318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.049844][T10318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.068331][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 893.097844][ T6877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 893.148107][T10318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.181223][T10318] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.551497][T10318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.582200][T10318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.662936][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 894.693037][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 894.813192][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 894.846186][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 894.888159][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 894.929201][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 894.993429][T10320] device veth0_vlan entered promiscuous mode [ 896.318815][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.328733][T10660] loop7: detected capacity change from 0 to 128 [ 896.432456][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.615461][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 896.657102][T10320] device veth1_vlan entered promiscuous mode [ 896.720127][ T9244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.754046][ T9244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.762301][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 896.834626][T10320] device veth0_macvtap entered promiscuous mode [ 896.904575][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 896.937489][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 896.968047][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 897.004025][T10320] device veth1_macvtap entered promiscuous mode [ 897.136836][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.196479][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.226379][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.281422][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.306532][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.337660][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.368428][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.416624][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.436620][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.457494][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.479497][T10320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.521218][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.596513][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.651273][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.676280][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 897.676298][ T26] audit: type=1326 audit(1779167206.841:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 897.715265][T10678] loop8: detected capacity change from 0 to 1024 [ 897.726346][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.772798][ T26] audit: type=1326 audit(1779167206.841:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 897.801822][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.813293][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 897.833019][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 897.858224][ T26] audit: type=1326 audit(1779167206.841:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 897.982310][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.033349][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.088748][ T26] audit: type=1326 audit(1779167206.841:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 898.113538][ T26] audit: type=1326 audit(1779167206.841:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 898.148586][ T26] audit: type=1326 audit(1779167206.841:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 898.222108][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.413849][ T26] audit: type=1326 audit(1779167206.841:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 898.593140][T10688] hfsplus: xattr searching failed [ 898.662436][T10320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.665696][ T26] audit: type=1326 audit(1779167206.841:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 899.674297][T10320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.827305][T10320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.935057][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 900.216543][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 900.303520][ T26] audit: type=1326 audit(1779167206.841:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 900.304624][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 900.445625][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 900.467388][ T26] audit: type=1326 audit(1779167206.841:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1448b9ce59 code=0x7ffc0000 [ 901.096672][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1639'. [ 901.339284][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 901.763349][T10705] loop0: detected capacity change from 0 to 1024 [ 902.438469][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 902.450629][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 902.459690][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 902.469574][ T4285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 902.490972][ T4285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 902.495267][T10711] loop7: detected capacity change from 0 to 256 [ 902.504862][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 902.566845][T10711] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 902.637675][T10711] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 902.669147][T10711] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 903.249890][T10715] loop8: detected capacity change from 0 to 512 [ 903.419780][T10715] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 903.474055][T10715] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.554236][T10726] dns_resolver: Unsupported content type (254) [ 903.742340][T10318] EXT4-fs (loop8): unmounting filesystem. [ 903.812119][T10708] chnl_net:caif_netlink_parms(): no params data found [ 905.300223][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 905.504177][T10708] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.545827][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.589415][T10708] device bridge_slave_0 entered promiscuous mode [ 905.628033][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.635271][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.726897][T10708] device bridge_slave_1 entered promiscuous mode [ 907.122692][ T4278] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 907.144301][ T4278] Bluetooth: Frame is too long (len 10, expected len 4) [ 907.232693][T10708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.247795][T10708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.316817][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 908.026660][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1650'. [ 908.602631][T10708] team0: Port device team_slave_0 added [ 908.640750][T10761] loop0: detected capacity change from 0 to 128 [ 908.709093][T10409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 908.849683][T10708] team0: Port device team_slave_1 added [ 909.150828][T10708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.166509][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.266990][T10708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.397136][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 909.415337][T10708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.436488][ T1179] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 909.437346][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.547989][T10708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.936580][ T1179] usb 1-1: Using ep0 maxpacket: 16 [ 910.944158][ T1179] usb 1-1: unable to get BOS descriptor or descriptor too short [ 910.954257][ T1179] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 911.005845][ T1179] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 911.051787][ T1179] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.080449][ T1179] usb 1-1: Product: syz [ 911.084724][ T1179] usb 1-1: Manufacturer: syz [ 911.100719][ T1179] usb 1-1: SerialNumber: syz [ 911.163286][T10708] device hsr_slave_0 entered promiscuous mode [ 911.187389][T10708] device hsr_slave_1 entered promiscuous mode [ 911.322656][ T1179] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 911.342072][ T1179] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 911.401616][T10778] loop2: detected capacity change from 0 to 1024 [ 911.486985][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 912.246113][T10782] hfsplus: xattr searching failed [ 912.494447][T10774] loop7: detected capacity change from 0 to 256 [ 912.539550][ T1179] usb 1-1: USB disconnect, device number 26 [ 912.760471][T10774] FAT-fs (loop7): Directory bread(block 64) failed [ 912.771979][ T9244] device hsr_slave_0 left promiscuous mode [ 912.779511][T10409] udevd[10409]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.790086][T10774] FAT-fs (loop7): Directory bread(block 65) failed [ 912.822968][ T9244] device hsr_slave_1 left promiscuous mode [ 912.840296][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.880661][T10774] FAT-fs (loop7): Directory bread(block 66) failed [ 912.886725][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 912.936599][T10774] FAT-fs (loop7): Directory bread(block 67) failed [ 912.953063][T10774] FAT-fs (loop7): Directory bread(block 68) failed [ 912.974014][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.977081][T10788] dns_resolver: Unsupported content type (254) [ 912.995784][T10774] FAT-fs (loop7): Directory bread(block 69) failed [ 913.005432][T10791] loop0: detected capacity change from 0 to 1024 [ 913.010971][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.255636][T10774] FAT-fs (loop7): Directory bread(block 70) failed [ 914.286989][T10774] FAT-fs (loop7): Directory bread(block 71) failed [ 914.316029][T10791] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 914.316029][T10791] [ 914.331932][T10774] FAT-fs (loop7): Directory bread(block 72) failed [ 914.339443][ T9244] device bridge_slave_1 left promiscuous mode [ 914.346169][T10774] FAT-fs (loop7): Directory bread(block 73) failed [ 914.380859][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.447752][ T9244] device bridge_slave_0 left promiscuous mode [ 914.454011][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.574428][ T9244] device veth1_macvtap left promiscuous mode [ 914.657238][ T9244] device veth0_macvtap left promiscuous mode [ 914.664602][ T9244] device veth1_vlan left promiscuous mode [ 914.692544][ T9244] device veth0_vlan left promiscuous mode [ 915.051180][T10804] loop0: detected capacity change from 0 to 1024 [ 915.218072][ T4278] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 915.231542][ T4278] Bluetooth: Frame is too long (len 10, expected len 4) [ 918.809951][T10818] kvm [10817]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 919.766174][T10822] loop7: detected capacity change from 0 to 128 [ 922.951525][T10842] loop8: detected capacity change from 0 to 1024 [ 923.187514][ T4278] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 923.209797][ T4278] Bluetooth: Frame is too long (len 10, expected len 4) [ 923.258598][ T9244] team0 (unregistering): Port device team_slave_1 removed [ 923.278409][T10850] dns_resolver: Unsupported content type (254) [ 925.068312][ T9244] team0 (unregistering): Port device team_slave_0 removed [ 925.172941][T10856] loop2: detected capacity change from 0 to 512 [ 925.240564][T10858] loop7: detected capacity change from 0 to 128 [ 925.248780][T10856] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 925.493019][T10856] EXT4-fs (loop2): orphan cleanup on readonly fs [ 925.556138][T10856] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 925.565033][T10856] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 925.628450][T10856] EXT4-fs (loop2): 1 truncate cleaned up [ 925.634188][T10856] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 925.674545][T10856] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 4: comm syz.2.1673: lblock 0 mapped to illegal pblock 4 (length 1) [ 925.921060][ T9244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.078528][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 926.169677][T10867] loop7: detected capacity change from 0 to 1024 [ 927.417754][ T9244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.721159][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.727680][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.470432][T10895] loop7: detected capacity change from 0 to 512 [ 933.480623][T10895] EXT4-fs: Ignoring removed i_version option [ 933.487117][T10895] ext4: Unknown parameter 'obj_type' [ 933.613027][ T9244] bond0 (unregistering): Released all slaves [ 933.958594][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 934.569762][T10905] loop7: detected capacity change from 0 to 128 [ 935.170764][T10708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 936.580628][T10708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 936.717690][T10708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 936.777714][T10708] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 936.826598][ T9370] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 938.046532][ T9370] usb 9-1: device not accepting address 2, error -71 [ 938.285409][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.354114][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 938.390910][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 938.430733][T10708] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.518889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 938.529656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 938.564840][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.572067][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.675322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 938.719569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 939.454055][T10936] loop8: detected capacity change from 0 to 256 [ 940.034385][T10936] FAT-fs (loop8): bogus logical sector size 2303 [ 940.041273][T10936] FAT-fs (loop8): Can't find a valid FAT filesystem [ 940.132062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 940.156339][T10409] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.193314][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.200566][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.212681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 940.222362][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 940.328430][T10940] dns_resolver: Unsupported content type (254) [ 940.390069][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 940.434528][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 940.517406][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 940.560515][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 940.665770][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 940.773077][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 940.843149][T10708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.909828][T10708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 940.936271][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 940.952935][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 940.986792][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 942.330437][T10957] devtmpfs: Unknown parameter '\']*' [ 943.859959][ T4320] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 944.092468][ T4320] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.121585][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 944.130074][ T4320] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 944.148320][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 944.156566][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.173586][T10708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.294717][ T4320] usb 8-1: config 0 descriptor?? [ 944.313505][ T4320] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 944.480583][T10976] loop8: detected capacity change from 0 to 1024 [ 945.389406][T10980] loop2: detected capacity change from 0 to 128 [ 947.615452][ T8863] usb 8-1: USB disconnect, device number 7 [ 949.748862][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 949.797441][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 949.831109][T10708] device veth0_vlan entered promiscuous mode [ 949.908389][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 949.943921][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 949.965515][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 950.025120][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 950.060903][T10708] device veth1_vlan entered promiscuous mode [ 950.167413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 950.175811][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 950.242969][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 950.279577][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 950.313533][T10708] device veth0_macvtap entered promiscuous mode [ 950.374152][T10708] device veth1_macvtap entered promiscuous mode [ 950.468111][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.535508][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.556148][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.574690][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.587512][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.606581][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.626495][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.654465][T11021] hub 8-0:1.0: USB hub found [ 950.662051][T11021] hub 8-0:1.0: 1 port detected [ 950.696643][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.709827][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.730978][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.785420][T10708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.854102][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 950.884967][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 950.935783][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 950.981110][T11027] dns_resolver: Unsupported content type (254) [ 953.193968][T11036] devtmpfs: Unknown parameter '\']*' [ 953.527118][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.540392][T11038] loop0: detected capacity change from 0 to 1024 [ 953.579897][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.641184][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.829631][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.582872][T11041] hfsplus: xattr searching failed [ 954.846553][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.895708][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.924140][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.977824][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.012817][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.036439][T10708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.056487][T10708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.080416][T10708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.138679][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 955.163866][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 955.224650][T10708] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.258907][T10708] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.113852][T10708] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.152952][T10708] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.346728][ T9497] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 956.540331][ T9497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.596624][ T9497] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 956.649073][ T9497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.725576][ T9497] usb 1-1: config 0 descriptor?? [ 956.747753][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.776113][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.785495][ T9497] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 956.827256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 956.938876][ T4696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.953312][ T4696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.003575][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 957.214787][T11072] loop7: detected capacity change from 0 to 128 [ 957.288476][T10620] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 959.336872][ T9497] usb 1-1: USB disconnect, device number 27 [ 960.918858][T11102] devtmpfs: Unknown parameter '\']*' [ 961.866809][T11110] dns_resolver: Unsupported content type (254) [ 964.641437][T11134] loop8: detected capacity change from 0 to 1024 [ 964.816559][ T9282] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 964.847200][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 965.036551][ T9282] usb 10-1: Using ep0 maxpacket: 16 [ 965.047018][ T9282] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 965.150803][ T9282] usb 10-1: config 0 has no interface number 0 [ 965.185642][ T9282] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 965.269438][ T9282] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 965.311460][ T9282] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 965.383256][ T9282] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.435873][ T9282] usb 10-1: Product: syz [ 965.452508][ T9282] usb 10-1: Manufacturer: syz [ 965.463117][ T9282] usb 10-1: SerialNumber: syz [ 965.474724][ T9282] usb 10-1: config 0 descriptor?? [ 965.489178][T11131] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 965.509569][T11131] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 965.743489][T11131] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 965.774884][T11131] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 966.190168][ T9282] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 966.209039][ T9282] asix 10-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 966.241118][ T9282] asix: probe of 10-1:0.34 failed with error -32 [ 966.256604][ T4282] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 967.708219][ T9497] usb 10-1: USB disconnect, device number 2 [ 967.867489][ T4282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.915866][ T4282] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 967.985079][ T4282] usb 1-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 967.997951][T11170] loop9: detected capacity change from 0 to 128 [ 968.221545][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.285506][ T4282] usb 1-1: config 0 descriptor?? [ 968.310740][ T4282] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 970.505592][ T9370] usb 1-1: USB disconnect, device number 28 [ 970.696507][ T22] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 970.811614][T11190] devtmpfs: Unknown parameter '\']*' [ 971.808295][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.828608][ T22] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 971.892293][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.950836][ T22] usb 3-1: config 0 descriptor?? [ 971.989290][ T22] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 974.567867][ T9497] usb 3-1: USB disconnect, device number 35 [ 975.762226][T11232] loop2: detected capacity change from 0 to 16 [ 976.800916][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 976.800935][ T26] audit: type=1326 audit(1779167284.811:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.2.1734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effdd59ce59 code=0x0 [ 976.960700][T11232] erofs: (device loop2): mounted with root inode @ nid 36. [ 977.021447][T11229] loop0: detected capacity change from 0 to 128 [ 977.317690][T10620] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 977.827165][T11240] loop2: detected capacity change from 0 to 1024 [ 979.545082][T11254] devtmpfs: Unknown parameter '\']*' [ 980.312604][T11255] loop8: detected capacity change from 0 to 512 [ 980.342979][T11255] EXT4-fs: Ignoring removed orlov option [ 980.413407][T11255] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 980.781745][T11260] loop8: detected capacity change from 512 to 1 [ 981.257572][T11255] syz.8.1733: attempt to access beyond end of device [ 981.257572][T11255] loop8: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 982.746799][T11255] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 982.796579][T11255] EXT4-fs (loop8): I/O error while writing superblock [ 983.202268][T10318] EXT4-fs (loop8): unmounting filesystem. [ 983.286996][T10318] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 983.338110][T10318] syz-executor: attempt to access beyond end of device [ 983.338110][T10318] loop8: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 983.398147][T10318] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 983.424411][T10318] EXT4-fs (loop8): I/O error while writing superblock [ 983.461277][T10318] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 983.540258][T10318] syz-executor: attempt to access beyond end of device [ 983.540258][T10318] loop8: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 983.586459][T10318] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 983.594887][T10318] EXT4-fs (loop8): I/O error while writing superblock [ 983.629161][T10318] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 983.676119][T10318] syz-executor: attempt to access beyond end of device [ 983.676119][T10318] loop8: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 983.710921][T10318] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 983.769743][T10318] EXT4-fs (loop8): I/O error while writing superblock [ 983.795499][T10318] EXT4-fs error (device loop8): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 983.839278][T10318] syz-executor: attempt to access beyond end of device [ 983.839278][T10318] loop8: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 983.926585][T10318] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 983.935021][T10318] EXT4-fs (loop8): I/O error while writing superblock [ 984.058685][T10318] syz-executor: attempt to access beyond end of device [ 984.058685][T10318] loop8: rw=133121, sector=2, nr_sectors = 2 limit=1 [ 984.108484][T10318] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 984.141277][T10318] EXT4-fs (loop8): I/O error while writing superblock [ 984.162159][T11256] kmmpd-loop8: attempt to access beyond end of device [ 984.162159][T11256] loop8: rw=14337, sector=34, nr_sectors = 2 limit=1 [ 984.206661][T11256] Buffer I/O error on dev loop8, logical block 17, lost sync page write [ 984.425582][T11291] Bluetooth: MGMT ver 1.22 [ 984.460437][T11293] loop7: detected capacity change from 0 to 128 [ 985.395148][T10409] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 985.996807][T11303] devtmpfs: Unknown parameter '\']*' [ 987.406534][ T9497] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 987.628522][ T9497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 987.656877][ T9497] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.939821][ T4279] Bluetooth: hci4: link tx timeout [ 988.946212][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 988.968176][ T9497] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 988.979390][ T9497] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.000234][ T9497] usb 1-1: config 0 descriptor?? [ 989.384411][T11327] loop8: detected capacity change from 0 to 1024 [ 989.413905][T11327] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 989.428661][T11327] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 989.429634][ T9497] usbhid 1-1:0.0: can't add hid device: -71 [ 989.451089][ T9497] usbhid: probe of 1-1:0.0 failed with error -71 [ 989.466799][ T9497] usb 1-1: USB disconnect, device number 29 [ 989.517000][T11327] EXT4-fs error (device loop8): ext4_get_journal_inode:5762: inode #5: comm syz.8.1749: unexpected bad inode w/o EXT4_IGET_BAD [ 989.558841][T11331] loop9: detected capacity change from 0 to 512 [ 989.574070][T11327] EXT4-fs (loop8): no journal found [ 989.606544][T11331] EXT4-fs: Ignoring removed i_version option [ 989.630894][T11331] ext4: Unknown parameter 'obj_type' [ 989.633979][T11327] EXT4-fs (loop8): can't get journal size [ 989.815609][T11327] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 990.996847][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 991.907116][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 991.917494][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 993.559013][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.565407][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.911473][T11372] devtmpfs: Unknown parameter '\']*' [ 996.117425][T10318] EXT4-fs (loop8): unmounting filesystem. [ 996.236893][ T9370] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 996.410636][T11379] loop8: detected capacity change from 0 to 512 [ 996.435736][T11379] EXT4-fs: Ignoring removed i_version option [ 996.449672][T11379] ext4: Unknown parameter 'obj_type' [ 996.450014][ T9370] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 996.726430][ T9370] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.999018][ T9370] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 997.009757][T11387] loop7: detected capacity change from 0 to 1024 [ 997.081166][ T9370] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.105159][ T9370] usb 10-1: config 0 descriptor?? [ 997.392891][T11391] loop8: detected capacity change from 0 to 1024 [ 997.670994][ T9370] usbhid 10-1:0.0: can't add hid device: -71 [ 997.681677][ T9370] usbhid: probe of 10-1:0.0 failed with error -71 [ 997.732673][ T9370] usb 10-1: USB disconnect, device number 3 [ 998.654277][T11400] hfsplus: xattr searching failed [ 998.748830][ T4324] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 998.958472][ T4324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 998.996629][ T4324] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.046970][ T4324] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 999.086765][ T4324] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.144603][ T4324] usb 10-1: config 0 descriptor?? [ 999.585444][ T4324] usbhid 10-1:0.0: can't add hid device: -71 [ 999.593224][ T4324] usbhid: probe of 10-1:0.0 failed with error -71 [ 999.653718][ T4324] usb 10-1: USB disconnect, device number 4 [ 999.790808][T11411] loop2: detected capacity change from 0 to 128 [ 999.928631][T10409] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1000.711521][ T4279] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1000.721787][ T4279] CPU: 1 PID: 4279 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 1000.729477][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1000.739604][ T4279] Workqueue: hci4 hci_rx_work [ 1000.744337][ T4279] Call Trace: [ 1000.747632][ T4279] [ 1000.750663][ T4279] dump_stack_lvl+0x188/0x24e [ 1000.755368][ T4279] ? show_regs_print_info+0x12/0x12 [ 1000.760582][ T4279] ? load_image+0x400/0x400 [ 1000.765102][ T4279] sysfs_create_dir_ns+0x26a/0x290 [ 1000.770322][ T4279] ? sysfs_warn_dup+0xa0/0xa0 [ 1000.775110][ T4279] ? do_raw_spin_unlock+0x11d/0x230 [ 1000.780337][ T4279] kobject_add_internal+0x61c/0xcc0 [ 1000.785831][ T4279] kobject_add+0x160/0x230 [ 1000.790323][ T4279] ? kobject_init+0x1d0/0x1d0 [ 1000.795087][ T4279] ? klist_children_get+0x50/0x50 [ 1000.800153][ T4279] ? get_device_parent+0x121/0x3f0 [ 1000.805303][ T4279] device_add+0x483/0xfb0 [ 1000.809673][ T4279] ? kmem_cache_free+0xf7/0x290 [ 1000.814578][ T4279] hci_conn_add_sysfs+0xd1/0x1e0 [ 1000.819727][ T4279] le_conn_complete_evt+0x1062/0x1670 [ 1000.825117][ T4279] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1000.831473][ T4279] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1000.837150][ T4279] ? skb_pull_data+0xf7/0x200 [ 1000.841879][ T4279] hci_le_conn_complete_evt+0x183/0x440 [ 1000.847442][ T4279] ? hci_remote_host_features_evt+0x270/0x270 [ 1000.853718][ T4279] hci_event_packet+0x7b9/0x1280 [ 1000.858757][ T4279] ? bis_list+0x280/0x280 [ 1000.863186][ T4279] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1000.869267][ T4279] ? kcov_remote_start+0x4c7/0x7e0 [ 1000.874416][ T4279] ? patch_conexant_auto+0x1260/0x1650 [ 1000.879912][ T4279] ? hci_send_to_monitor+0x9c/0x4a0 [ 1000.885129][ T4279] hci_rx_work+0x3eb/0xd40 [ 1000.889680][ T4279] ? _raw_spin_unlock+0x40/0x40 [ 1000.894549][ T4279] ? process_one_work+0x7b0/0x1160 [ 1000.899712][ T4279] process_one_work+0x8a2/0x1160 [ 1000.904693][ T4279] ? worker_detach_from_pool+0x240/0x240 [ 1000.910529][ T4279] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1000.915687][ T4279] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1000.921242][ T4279] ? kthread_data+0x4b/0xc0 [ 1000.925769][ T4279] worker_thread+0xaa2/0x1270 [ 1000.930478][ T4279] kthread+0x29d/0x330 [ 1000.934658][ T4279] ? worker_clr_flags+0x1a0/0x1a0 [ 1000.939822][ T4279] ? kthread_blkcg+0xd0/0xd0 [ 1000.944529][ T4279] ret_from_fork+0x1f/0x30 [ 1000.949144][ T4279] [ 1000.955538][ T4279] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1000.969932][ T4279] Bluetooth: hci4: failed to register connection device [ 1000.977825][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1000.985273][ T4279] Bluetooth: hci4: link tx timeout [ 1000.990668][ T4279] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1002.207017][T11430] devtmpfs: Unknown parameter '\']*' [ 1003.512752][T11435] loop9: detected capacity change from 0 to 1024 [ 1003.591518][T11435] EXT4-fs: Ignoring removed bh option [ 1003.776931][T11435] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1003.802809][ T26] audit: type=1800 audit(1779167312.971:66): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1775" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1004.058996][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1006.136514][ T9497] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1006.344603][ T9497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1006.364391][ T9497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.379808][ T9497] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1006.389917][ T9497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.401126][ T9497] usb 3-1: config 0 descriptor?? [ 1006.502661][T11464] loop0: detected capacity change from 0 to 1024 [ 1006.817759][ T9497] usbhid 3-1:0.0: can't add hid device: -71 [ 1006.823876][ T9497] usbhid: probe of 3-1:0.0 failed with error -71 [ 1006.848288][ T9497] usb 3-1: USB disconnect, device number 36 [ 1006.869432][T11466] loop8: detected capacity change from 0 to 128 [ 1009.049475][T11485] devtmpfs: Unknown parameter '\']*' [ 1014.852182][T11513] loop9: detected capacity change from 0 to 256 [ 1014.927182][T11513] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1014.982808][T11513] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1015.071289][T11513] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1015.152775][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1015.163513][ T4278] Bluetooth: Frame is too long (len 10, expected len 4) [ 1015.518427][T11522] loop2: detected capacity change from 0 to 512 [ 1015.553113][T11522] EXT4-fs: Ignoring removed i_version option [ 1015.602433][T11522] ext4: Unknown parameter 'obj_type' [ 1017.464896][T11536] kernel profiling enabled (shift: 5) [ 1018.148970][T11543] devtmpfs: Unknown parameter '\']*' [ 1019.228370][T11550] loop9: detected capacity change from 0 to 512 [ 1019.717122][T11552] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1798'. [ 1020.697181][T11550] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1020.720013][T11550] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1020.728732][T11550] System zones: 0-1, 15-15, 18-18, 34-34 [ 1020.735927][T11550] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1020.743927][T11550] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 1020.753500][T11550] EXT4-fs warning (device loop9): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1020.768780][T11550] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 1020.787042][T11550] EXT4-fs (loop9): 1 truncate cleaned up [ 1020.792862][T11550] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1020.969909][T11550] fscrypt (loop9, inode 16): Error -61 getting encryption context [ 1021.007061][T11550] fscrypt (loop9, inode 16): Error -61 getting encryption context [ 1021.173355][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1023.332179][T11571] loop8: detected capacity change from 0 to 1024 [ 1023.337735][T11575] loop2: detected capacity change from 0 to 128 [ 1023.359607][ T4278] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1023.378097][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1023.662764][T11578] loop0: detected capacity change from 0 to 512 [ 1023.672464][T11578] EXT4-fs: Ignoring removed i_version option [ 1023.691899][T11578] ext4: Unknown parameter 'obj_type' [ 1026.132621][T11592] loop2: detected capacity change from 0 to 512 [ 1026.338788][T11592] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.1809: inode has both inline data and extents flags [ 1026.586805][T11592] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1809: couldn't read orphan inode 15 (err -117) [ 1026.646577][T11592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1026.675824][T11600] loop9: detected capacity change from 0 to 1024 [ 1027.212806][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1027.996505][T11609] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1811'. [ 1030.538860][T11627] loop7: detected capacity change from 0 to 1024 [ 1030.578242][ T4279] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1030.598650][ T4278] Bluetooth: Frame is too long (len 10, expected len 4) [ 1030.664880][T11627] EXT4-fs: quotafile must be on filesystem root [ 1031.132142][ T9282] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1031.469930][T11637] loop2: detected capacity change from 0 to 128 [ 1031.646696][ T9282] usb 1-1: Using ep0 maxpacket: 16 [ 1031.658101][ T9282] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1031.666654][ T9282] usb 1-1: config 0 has no interface number 0 [ 1031.672890][ T9282] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1032.466406][ T9282] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1032.508556][ T9282] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1032.536393][ T9282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.560533][ T9282] usb 1-1: Product: syz [ 1032.564801][ T9282] usb 1-1: Manufacturer: syz [ 1032.594737][ T9282] usb 1-1: SerialNumber: syz [ 1032.628628][ T9282] usb 1-1: config 0 descriptor?? [ 1032.909288][T11632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1033.271842][T11632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1033.609509][T11653] devtmpfs: Unknown parameter '\']*' [ 1033.641742][T11632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1033.673657][T11632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1033.972551][T11660] loop9: detected capacity change from 0 to 1024 [ 1034.102545][ T9282] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1034.133320][ T9282] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1034.156185][ T9282] asix: probe of 1-1:0.34 failed with error -61 [ 1034.636602][T11665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1823'. [ 1035.639806][ T9497] usb 1-1: USB disconnect, device number 30 [ 1036.136981][ T4278] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1036.147850][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1036.334342][T11685] loop0: detected capacity change from 0 to 128 [ 1036.428913][T10409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1037.578456][T11690] hfsplus: xattr searching failed [ 1037.893350][T11698] loop0: detected capacity change from 0 to 512 [ 1037.921370][T10409] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1037.954157][T10409] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1037.978401][T10409] Buffer I/O error on dev loop0, logical block 2, async page read [ 1038.044653][T11703] loop8: detected capacity change from 0 to 1024 [ 1038.082716][T11698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1038.178294][T11698] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.1832: iget: bad i_size value: 38620345925642 [ 1038.276879][T11698] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.1832: couldn't read orphan inode 15 (err -117) [ 1038.301876][T11707] loop9: detected capacity change from 0 to 1024 [ 1038.353495][T11698] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1038.427404][T11707] EXT4-fs: quotafile must be on filesystem root [ 1039.118664][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 1039.129477][T11714] devtmpfs: Unknown parameter '\']*' [ 1039.886426][T11720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'. [ 1040.899630][ T9497] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1041.096517][ T9497] usb 10-1: Using ep0 maxpacket: 16 [ 1041.104694][ T9497] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1041.166513][ T9497] usb 10-1: config 0 has no interface number 0 [ 1041.180502][ T9497] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1041.235665][ T9497] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1041.272058][ T9497] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1041.321600][ T9497] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.363489][ T9497] usb 10-1: Product: syz [ 1041.390324][ T9497] usb 10-1: Manufacturer: syz [ 1041.415480][ T9497] usb 10-1: SerialNumber: syz [ 1041.462548][ T9497] usb 10-1: config 0 descriptor?? [ 1041.478431][T11717] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1041.490930][T11717] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1041.770704][T11717] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1041.807275][T11717] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1042.238434][ T9497] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1042.283496][ T9497] asix 10-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1042.327356][ T9497] asix: probe of 10-1:0.34 failed with error -61 [ 1043.540280][ T9497] usb 10-1: USB disconnect, device number 5 [ 1044.528251][T11752] loop0: detected capacity change from 0 to 128 [ 1044.991799][T10409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1045.617210][ T26] audit: type=1326 audit(1779167354.791:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1045.660908][ T26] audit: type=1326 audit(1779167354.811:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1045.836118][ T26] audit: type=1326 audit(1779167354.811:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1046.035973][ T26] audit: type=1326 audit(1779167354.811:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1046.151870][ T26] audit: type=1326 audit(1779167354.811:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1046.155878][T11776] kvm [11775]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5f [ 1046.264394][T11789] loop7: detected capacity change from 0 to 1024 [ 1046.307529][T11789] EXT4-fs: quotafile must be on filesystem root [ 1046.357212][ T26] audit: type=1326 audit(1779167354.811:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1046.398960][T11776] kvm [11775]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xdf [ 1046.408318][T10409] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1046.507469][T11776] kvm [11775]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x5f [ 1046.523702][ T26] audit: type=1326 audit(1779167354.811:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1046.558883][T11776] kvm [11775]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1047.096875][ T26] audit: type=1326 audit(1779167354.811:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1047.120927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1047.156579][ T26] audit: type=1326 audit(1779167354.811:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1047.283062][ T26] audit: type=1326 audit(1779167354.811:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.8.1845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda07b9ce59 code=0x7ffc0000 [ 1047.514369][T11802] devtmpfs: Unknown parameter '\']*' [ 1048.036536][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 1048.388135][T11815] loop7: detected capacity change from 0 to 1024 [ 1048.816517][T11820] loop8: detected capacity change from 0 to 128 [ 1051.389139][ T4278] Bluetooth: hci4: link tx timeout [ 1051.397048][ T4278] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1051.406033][ T4278] Bluetooth: hci4: link tx timeout [ 1051.411607][ T4278] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1052.714107][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 1053.519064][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 1054.599872][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.606278][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.908284][T11870] loop7: detected capacity change from 0 to 128 [ 1057.390468][T11880] devtmpfs: Unknown parameter '\']*' [ 1057.535016][T11895] loop8: detected capacity change from 0 to 512 [ 1057.832415][T11895] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1058.215155][T11903] kvm [11902]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5f [ 1058.324096][T11903] kvm [11902]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xdf [ 1058.430039][T11903] kvm [11902]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x5f [ 1058.486727][T11903] kvm [11902]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1060.757106][T11923] loop7: detected capacity change from 0 to 1024 [ 1061.272805][T10318] EXT4-fs (loop8): unmounting filesystem. [ 1061.583905][T11934] loop8: detected capacity change from 0 to 256 [ 1061.673353][T11934] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1061.713331][T11934] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1061.739346][T11934] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1061.896047][T11935] loop9: detected capacity change from 0 to 128 [ 1062.126774][ T9282] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1062.726461][ T9282] usb 3-1: device descriptor read/64, error -71 [ 1063.006588][ T9282] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1063.188046][ T9282] usb 3-1: device descriptor read/64, error -71 [ 1063.316890][ T9282] usb usb3-port1: attempt power cycle [ 1065.270439][T11963] devtmpfs: Unknown parameter '\']*' [ 1065.470112][ T4329] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.924213][ T4329] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.494828][ T4329] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.626182][ T4329] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.052762][ T4279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1068.071501][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1068.081196][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1068.090325][ T4279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1068.102194][ T4279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1068.109821][ T4279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1068.148598][T11998] loop2: detected capacity change from 0 to 512 [ 1068.333317][T11998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1070.076882][ T9370] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1070.196549][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 1070.256425][ T9370] usb 8-1: device descriptor read/64, error -71 [ 1070.356532][T12003] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 1070.546512][ T9370] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1070.756681][ T9370] usb 8-1: device descriptor read/64, error -71 [ 1070.876826][ T9370] usb usb8-port1: attempt power cycle [ 1071.296431][ T9370] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1071.377070][ T9370] usb 8-1: device descriptor read/8, error -71 [ 1071.490229][T12018] loop9: detected capacity change from 0 to 128 [ 1071.668470][T10409] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1072.248699][T12022] loop7: detected capacity change from 0 to 256 [ 1072.435469][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 1072.497431][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1072.506605][T12022] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1072.535407][T12022] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1072.664307][T12022] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1072.685038][T11996] chnl_net:caif_netlink_parms(): no params data found [ 1072.946675][ T9370] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1073.077344][T12029] Bluetooth: MGMT ver 1.22 [ 1073.196620][ T9370] usb 10-1: Using ep0 maxpacket: 16 [ 1073.204218][ T9370] usb 10-1: config 0 has an invalid interface number: 34 but max is 0 [ 1073.222662][ T9370] usb 10-1: config 0 has no interface number 0 [ 1073.236305][ T9370] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1073.257220][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.260695][ T9370] usb 10-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1073.264606][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.309197][ T9370] usb 10-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1073.330504][ T9370] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.335507][T11996] device bridge_slave_0 entered promiscuous mode [ 1073.350225][ T9370] usb 10-1: Product: syz [ 1073.361912][ T9370] usb 10-1: Manufacturer: syz [ 1073.373241][ T9370] usb 10-1: SerialNumber: syz [ 1073.386865][ T9370] usb 10-1: config 0 descriptor?? [ 1073.394565][T12025] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1073.412844][T12025] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1073.501259][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.523610][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.561711][T11996] device bridge_slave_1 entered promiscuous mode [ 1073.644921][T12025] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1073.780232][T12025] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1074.534842][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 1074.709240][ T9370] asix 10-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1074.715101][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.746959][ T9370] asix 10-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1074.773251][ T9370] asix: probe of 10-1:0.34 failed with error -61 [ 1074.883169][T12050] loop0: detected capacity change from 0 to 1024 [ 1076.533818][ T4282] usb 10-1: USB disconnect, device number 6 [ 1076.581489][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.596578][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 1076.768126][T11996] team0: Port device team_slave_0 added [ 1077.224378][T11996] team0: Port device team_slave_1 added [ 1077.248480][T12062] loop9: detected capacity change from 0 to 512 [ 1077.422287][ T4329] device hsr_slave_0 left promiscuous mode [ 1077.467865][T12062] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1077.561595][ T4329] device hsr_slave_1 left promiscuous mode [ 1077.646601][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.686573][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.702906][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.756844][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.767339][ T4329] device bridge_slave_1 left promiscuous mode [ 1077.773642][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.857171][ T4329] device bridge_slave_0 left promiscuous mode [ 1077.864278][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.880264][T12067] EXT4-fs error (device loop9): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 1077.976815][ T4329] device veth1_macvtap left promiscuous mode [ 1077.983044][ T4329] device veth0_macvtap left promiscuous mode [ 1078.017199][ T4329] device veth1_vlan left promiscuous mode [ 1078.023113][ T4329] device veth0_vlan left promiscuous mode [ 1079.888342][T12082] loop0: detected capacity change from 0 to 128 [ 1083.175643][T12109] loop7: detected capacity change from 0 to 1024 [ 1085.215431][T12113] loop2: detected capacity change from 0 to 256 [ 1085.316752][T12113] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1085.337932][T12113] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1085.410178][T12113] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1085.737506][ T4329] team0 (unregistering): Port device team_slave_1 removed [ 1085.939109][ T4329] team0 (unregistering): Port device team_slave_0 removed [ 1086.266846][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.294030][T12122] loop0: detected capacity change from 0 to 128 [ 1087.654876][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.842819][ T4329] bond0 (unregistering): Released all slaves [ 1090.121795][T12158] loop2: detected capacity change from 0 to 256 [ 1090.150672][T12158] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1090.187257][T12158] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1090.193071][T11996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.242311][T12158] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1090.266444][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.048272][T11996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.096467][T11996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.128756][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1091.278910][T11996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.294299][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1091.581504][T11996] device hsr_slave_0 entered promiscuous mode [ 1091.651253][T12166] loop9: detected capacity change from 0 to 128 [ 1091.667408][T11996] device hsr_slave_1 entered promiscuous mode [ 1091.675507][T11996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1091.685089][T11996] Cannot create hsr debugfs directory [ 1091.740218][T10620] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1094.645602][ T4278] Bluetooth: Frame is too long (len 10, expected len 4) [ 1094.736280][T11996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.542238][T11996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.780345][T11996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.001261][T11996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.025722][T12194] loop9: detected capacity change from 0 to 128 [ 1096.044609][T12195] loop2: detected capacity change from 0 to 1024 [ 1096.205228][T12195] EXT4-fs: quotafile must be on filesystem root [ 1096.291550][T10620] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1096.797351][ T4279] Bluetooth: hci1: unexpected event for opcode 0x201c [ 1097.660588][T12206] device syzkaller0 entered promiscuous mode [ 1097.805240][T12208] loop2: detected capacity change from 0 to 256 [ 1097.842170][T10620] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1097.875830][T12208] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1097.903674][T12210] loop0: detected capacity change from 0 to 512 [ 1097.961472][T11996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1097.978238][T12208] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1097.991050][T11996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1098.022448][T11996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1098.063713][T11996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1098.081950][T12210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1098.164241][T12208] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1098.337644][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1098.357549][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.574314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1098.640302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1099.423812][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.450059][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1099.487152][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1100.379815][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.387181][ T7939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.439990][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1100.457544][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1100.477480][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1100.517343][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.524601][ T7939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.556924][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1100.635216][T11635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1100.655296][T11635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1102.012791][T12213] EXT4-fs error (device loop0): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 1102.096749][T11635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1102.134268][T11635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1102.195805][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1102.243175][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1102.286059][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 1102.292169][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1102.301534][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1102.311631][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1102.321173][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1102.383429][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1103.043373][T12249] loop2: detected capacity change from 0 to 1024 [ 1103.147758][T12249] EXT4-fs: quotafile must be on filesystem root [ 1103.176901][ T4279] Bluetooth: hci1: unexpected event for opcode 0x201c [ 1103.810713][T12258] loop7: detected capacity change from 0 to 4096 [ 1103.990523][T12265] loop2: detected capacity change from 0 to 1024 [ 1104.060912][T12258] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1104.060939][T12265] EXT4-fs: quotafile must be on filesystem root [ 1104.128456][ T4279] Bluetooth: hci1: unexpected event for opcode 0x201c [ 1104.799955][T11635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1104.817940][T11635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1104.836768][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.933708][ T9150] EXT4-fs (loop7): unmounting filesystem. [ 1104.979330][T12260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.027874][T12260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1105.115011][T12272] loop2: detected capacity change from 0 to 1764 [ 1105.169617][T12260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1105.311480][T12279] loop9: detected capacity change from 0 to 128 [ 1105.354317][T12260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1106.683433][T12260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1106.692349][T12260] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1106.709498][T11996] device veth0_vlan entered promiscuous mode [ 1107.673911][T11996] device veth1_vlan entered promiscuous mode [ 1107.872705][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.925263][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.990669][T11996] device veth0_macvtap entered promiscuous mode [ 1108.041414][T11996] device veth1_macvtap entered promiscuous mode [ 1108.065703][T12296] loop2: detected capacity change from 0 to 512 [ 1108.173774][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.211646][T12296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1108.265133][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.317272][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.375136][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.436261][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.476639][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.524216][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.586365][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.606730][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.656128][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.698598][T11996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.735628][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.776939][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.816228][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.851699][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.886708][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.926372][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.968109][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.026409][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.062270][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.095574][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.111721][T12306] loop0: detected capacity change from 0 to 256 [ 1109.126369][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.166799][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.179294][T12306] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1109.190404][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.251258][T11996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.294047][T12306] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1109.326571][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.377369][ T6570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.418902][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1109.438244][T11996] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.490355][T12306] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1110.306663][T11996] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.315448][T11996] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.325566][T11996] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.513540][T12313] loop2: detected capacity change from 0 to 1024 [ 1110.602507][T12313] EXT4-fs: quotafile must be on filesystem root [ 1110.627023][ T6334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.661638][ T4279] Bluetooth: hci1: unexpected event for opcode 0x201c [ 1110.673728][ T6334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.889501][ T6136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1111.346898][ T6334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.363872][ T6334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.412784][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1116.074495][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.081337][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.762786][T12362] loop7: detected capacity change from 0 to 128 [ 1117.978470][T10409] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1126.030621][T12410] loop7: detected capacity change from 0 to 512 [ 1126.122870][T12410] EXT4-fs: Ignoring removed i_version option [ 1127.498099][ T4279] Bluetooth: hci0: link tx timeout [ 1127.504329][ T4279] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1127.594431][T12418] loop3: detected capacity change from 0 to 512 [ 1127.687619][T12418] EXT4-fs: Ignoring removed i_version option [ 1127.693710][T12418] ext4: Unknown parameter 'obj_type' [ 1127.706426][T12410] EXT4-fs: Ignoring removed oldalloc option [ 1127.886852][T12410] EXT4-fs: failed to create workqueue [ 1127.952566][T12410] EXT4-fs (loop7): mount failed [ 1128.565371][T12427] loop0: detected capacity change from 0 to 128 [ 1129.556439][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 1136.254024][T12477] device gretap0 entered promiscuous mode [ 1137.265276][T12485] loop2: detected capacity change from 0 to 256 [ 1137.347389][T12485] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1137.477983][T12485] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1138.874459][T12485] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1141.413551][T12506] loop0: detected capacity change from 0 to 512 [ 1142.942424][T12506] EXT4-fs: Ignoring removed i_version option [ 1142.996760][T12506] ext4: Unknown parameter 'obj_type' [ 1144.840817][T12526] loop3: detected capacity change from 0 to 512 [ 1145.008118][T12526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1145.339273][T11996] EXT4-fs (loop3): unmounting filesystem. [ 1152.324344][T12579] loop9: detected capacity change from 0 to 128 [ 1152.408204][T12579] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1152.557078][T12579] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1152.602850][T12579] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.963147][T12586] loop3: detected capacity change from 0 to 1024 [ 1153.122078][T12579] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1153.168811][T12588] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1153.465412][T12586] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1153.496553][T12586] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1153.508725][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1153.666385][T12586] EXT4-fs error (device loop3): ext4_get_journal_inode:5762: inode #5: comm syz.3.2026: unexpected bad inode w/o EXT4_IGET_BAD [ 1153.815800][T12586] EXT4-fs (loop3): no journal found [ 1153.911137][T12586] EXT4-fs (loop3): can't get journal size [ 1154.007665][T12586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1155.769978][ T1179] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1156.208685][ T1179] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.410114][ T1179] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1156.566468][ T1179] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1156.636401][ T1179] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.669527][ T1179] usb 10-1: config 0 descriptor?? [ 1156.776200][T12618] loop2: detected capacity change from 0 to 512 [ 1156.930801][T12618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1157.322204][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1157.485494][T11996] EXT4-fs (loop3): unmounting filesystem. [ 1157.499270][T12628] loop2: detected capacity change from 0 to 512 [ 1157.649803][T12628] EXT4-fs: Ignoring removed i_version option [ 1157.783253][T12628] ext4: Unknown parameter 'obj_type' [ 1158.307299][ T9370] usb 10-1: USB disconnect, device number 7 [ 1160.793105][T12646] loop3: detected capacity change from 0 to 1024 [ 1162.829412][T12657] hfsplus: xattr searching failed [ 1165.912548][T12677] loop3: detected capacity change from 0 to 1024 [ 1166.043960][T12677] EXT4-fs: quotafile must be on filesystem root [ 1166.981198][T12686] loop2: detected capacity change from 0 to 1024 [ 1167.029295][T12686] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1167.087292][T12686] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1167.154336][T12686] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.2043: unexpected bad inode w/o EXT4_IGET_BAD [ 1168.536619][T12686] EXT4-fs (loop2): no journal found [ 1168.542002][T12686] EXT4-fs (loop2): can't get journal size [ 1168.565627][T12686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1170.579551][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1170.980698][T12704] loop2: detected capacity change from 0 to 512 [ 1171.035169][T12704] EXT4-fs: Ignoring removed i_version option [ 1171.121547][T12704] ext4: Unknown parameter 'obj_type' [ 1171.590905][T12709] loop9: detected capacity change from 0 to 512 [ 1171.832874][T12709] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1172.428365][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1172.728830][T12723] loop9: detected capacity change from 0 to 1024 [ 1172.973866][T12728] hfsplus: xattr searching failed [ 1173.497249][T12740] loop0: detected capacity change from 0 to 512 [ 1173.886478][T12746] loop2: detected capacity change from 0 to 8 [ 1174.411588][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.422147][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.484383][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.494174][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.503475][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.512838][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.524150][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.533324][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.541591][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.550806][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.568053][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.579295][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.589016][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.598771][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.612453][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.620403][T12745] SQUASHFS error: Failed to read block 0x4de: -5 [ 1174.686622][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1174.686641][ T26] audit: type=1800 audit(1779167483.601:80): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2052" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1176.154911][T12740] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (131072 > 6144). [ 1176.246687][T12740] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1176.319582][T12740] EXT4-fs (loop0): mount failed [ 1176.859736][T12753] Invalid ELF header magic: != ELF [ 1177.670614][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.677471][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.533532][ T1179] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1182.792448][ T1179] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.816188][ T1179] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1182.926532][ T1179] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1182.983027][ T1179] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.045257][ T1179] usb 10-1: config 0 descriptor?? [ 1183.110918][ T1179] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1183.152920][T12805] loop3: detected capacity change from 0 to 256 [ 1184.924431][T12814] loop7: detected capacity change from 0 to 512 [ 1184.989725][T12814] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1185.094065][T12814] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 1185.124554][T12814] EXT4-fs (loop7): 1 truncate cleaned up [ 1185.158688][T12814] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1186.685337][ T9370] usb 10-1: USB disconnect, device number 8 [ 1186.833135][T12828] loop0: detected capacity change from 0 to 512 [ 1186.897859][T12828] EXT4-fs: Ignoring removed i_version option [ 1186.904001][T12828] ext4: Unknown parameter 'obj_type' [ 1188.363386][ T9150] EXT4-fs (loop7): unmounting filesystem. [ 1188.594934][T12836] loop7: detected capacity change from 0 to 512 [ 1188.682233][T12836] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1190.800448][T12839] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 1190.868414][ T9150] EXT4-fs (loop7): unmounting filesystem. [ 1192.349894][T12862] Invalid ELF header magic: != ELF [ 1194.768303][T12878] loop7: detected capacity change from 0 to 1024 [ 1194.800516][T12878] EXT4-fs: quotafile must be on filesystem root [ 1200.618793][T12912] loop7: detected capacity change from 0 to 512 [ 1200.728053][T12912] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1202.776448][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1202.795637][ T9150] EXT4-fs (loop7): unmounting filesystem. [ 1203.803752][ T22] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1203.941557][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.977547][ T22] usb 4-1: config 0 descriptor?? [ 1204.817780][ T22] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1204.839782][ T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1204.919165][ T22] [drm:udl_init] *ERROR* Selecting channel failed [ 1205.041295][ T22] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 1206.526337][ T22] [drm] Initialized udl on minor 2 [ 1206.540491][ T22] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1206.628157][ T22] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1206.711396][ T22] usb 4-1: USB disconnect, device number 11 [ 1206.746035][ T4324] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1206.795796][ T4324] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1206.867085][ T4324] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1209.323846][T12960] loop0: detected capacity change from 0 to 8 [ 1209.396423][T12960] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1209.439515][T12960] SQUASHFS error: Failed to read block 0x91: -5 [ 1209.488852][T12960] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1209.518882][T12960] SQUASHFS error: Unable to read inode 0x11f [ 1211.443238][ T9370] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1211.758785][T12979] loop3: detected capacity change from 0 to 8 [ 1212.282364][T12978] SQUASHFS error: Failed to read block 0x4de: -5 [ 1212.295910][T12978] SQUASHFS error: Failed to read block 0x4de: -5 [ 1212.326716][ T26] audit: type=1800 audit(1779167521.471:81): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2092" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1212.799271][T12980] Invalid ELF header magic: != ELF [ 1213.759357][ T9370] usb 3-1: device descriptor read/all, error -71 [ 1213.924700][T12986] loop3: detected capacity change from 0 to 512 [ 1215.530812][T12986] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1216.034497][T11996] EXT4-fs (loop3): unmounting filesystem. [ 1227.098365][T13044] Bluetooth: hci0: unsupported parameter 255 [ 1227.126366][T13044] Bluetooth: hci0: unsupported parameter 255 [ 1227.706414][ T8863] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1227.898483][ T8863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.936402][ T8863] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.986456][ T8863] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1228.026371][ T8863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.068104][ T8863] usb 1-1: config 0 descriptor?? [ 1228.109242][ T8863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1230.792673][T13082] Invalid ELF header magic: != ELF [ 1231.701618][ T4323] usb 1-1: USB disconnect, device number 31 [ 1231.709643][T13071] kvm [13070]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe6 [ 1231.761498][T13071] kvm [13070]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86 [ 1238.921292][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.927796][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.928479][T13172] Bluetooth: hci0: unsupported parameter 255 [ 1245.936430][T13172] Bluetooth: hci0: unsupported parameter 255 [ 1246.151450][T13173] kvm [13170]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe6 [ 1256.495611][T13237] Invalid ELF header magic: != ELF [ 1259.961934][T13255] device veth0 entered promiscuous mode [ 1260.620250][T13250] device veth0 left promiscuous mode [ 1263.102586][T13280] loop2: detected capacity change from 0 to 8 [ 1263.224096][T13280] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1263.332037][T13280] SQUASHFS error: Failed to read block 0x91: -5 [ 1263.445630][T13280] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1263.499016][T13280] SQUASHFS error: Unable to read inode 0x11f [ 1263.548112][T13294] loop7: detected capacity change from 0 to 256 [ 1264.926711][T13294] exfat: Deprecated parameter 'namecase' [ 1264.932460][T13294] exfat: Deprecated parameter 'namecase' [ 1265.006733][T13294] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 1270.324091][T13330] loop3: detected capacity change from 0 to 1024 [ 1273.574555][T13342] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1273.968782][T13349] loop9: detected capacity change from 0 to 8 [ 1274.262538][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.271210][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.294202][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.301294][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.308697][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.315740][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.323916][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.330916][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.338012][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.345146][T13348] SQUASHFS error: Failed to read block 0x4de: -5 [ 1274.416605][ T26] audit: type=1800 audit(1779167583.451:82): pid=13348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2151" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 1276.386368][ T7942] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1276.588473][ T7942] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1276.632553][ T7942] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1276.673458][ T7942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.704919][ T7942] usb 10-1: config 0 descriptor?? [ 1276.727989][ T7942] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1278.423139][T13369] devtmpfs: Unknown parameter '\']*' [ 1279.479205][T12966] usb 10-1: USB disconnect, device number 9 [ 1280.703862][T13381] loop3: detected capacity change from 0 to 512 [ 1280.849902][T13381] FAT-fs (loop3): Directory bread(block 199916) failed [ 1280.879117][T13381] FAT-fs (loop3): Directory bread(block 199917) failed [ 1280.886176][T13381] FAT-fs (loop3): Directory bread(block 199918) failed [ 1280.956779][T13381] FAT-fs (loop3): Directory bread(block 199919) failed [ 1280.964114][T13381] FAT-fs (loop3): Directory bread(block 199920) failed [ 1281.022115][T13381] FAT-fs (loop3): Directory bread(block 199921) failed [ 1281.046510][T13381] FAT-fs (loop3): Directory bread(block 199922) failed [ 1281.053650][T13381] FAT-fs (loop3): Directory bread(block 199923) failed [ 1284.946766][T13404] loop9: detected capacity change from 0 to 1024 [ 1285.801662][T13414] loop2: detected capacity change from 0 to 8 [ 1287.900225][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.907157][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.914111][ T26] audit: type=1800 audit(1779167597.081:83): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2169" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1287.939897][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.946572][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.953135][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.959898][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.967061][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.973563][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.980289][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.987767][T13410] SQUASHFS error: Failed to read block 0x4de: -5 [ 1289.974975][T13425] devtmpfs: Unknown parameter '\']*' [ 1293.426847][T13435] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1293.771881][T13442] loop7: detected capacity change from 0 to 8 [ 1296.716592][ T4282] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1296.946436][ T4282] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1297.010483][ T4282] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1297.054845][ T4282] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.114915][ T4282] usb 10-1: config 0 descriptor?? [ 1297.160097][ T4282] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1299.844700][ T4315] usb 10-1: USB disconnect, device number 10 [ 1300.118757][T13482] loop7: detected capacity change from 0 to 1024 [ 1300.360925][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.367419][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.574645][T13489] loop9: detected capacity change from 0 to 8 [ 1300.721499][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.729481][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.750736][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.758041][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.766209][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.773445][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.781676][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.789501][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.797023][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1300.804068][T13488] SQUASHFS error: Failed to read block 0x4de: -5 [ 1301.076603][ T26] audit: type=1800 audit(1779167609.911:84): pid=13488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2183" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 1301.532800][T13493] devtmpfs: Unknown parameter '\']*' [ 1303.109347][T13501] loop0: detected capacity change from 0 to 8 [ 1303.951590][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1303.959337][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1303.965955][ T26] audit: type=1800 audit(1779167613.131:85): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2179" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1303.991005][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1303.998039][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.004652][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.011178][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.018207][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.024724][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.031551][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.039901][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.047679][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.054251][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.061786][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1304.069052][T13499] SQUASHFS error: Failed to read block 0x4de: -5 [ 1305.233296][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1307.960170][T13534] loop9: detected capacity change from 0 to 2048 [ 1308.043299][T13536] loop7: detected capacity change from 0 to 1024 [ 1308.157857][T13536] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1308.253543][T13536] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1308.286978][T13534] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1308.423041][T13536] EXT4-fs error (device loop7): ext4_get_journal_inode:5762: inode #5: comm syz.7.2195: unexpected bad inode w/o EXT4_IGET_BAD [ 1310.866568][T13543] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1310.881674][T13543] EXT4-fs (loop9): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 1310.893883][T13543] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1310.893883][T13543] [ 1310.903713][T13543] EXT4-fs (loop9): Total free blocks count 0 [ 1310.909797][T13543] EXT4-fs (loop9): Free/Dirty block details [ 1310.915713][T13543] EXT4-fs (loop9): free_blocks=2415919504 [ 1310.921998][T13543] EXT4-fs (loop9): dirty_blocks=38736 [ 1310.927513][T13543] EXT4-fs (loop9): Block reservation details [ 1310.933494][T13543] EXT4-fs (loop9): i_reserved_data_blocks=2421 [ 1310.940454][T13536] EXT4-fs (loop7): no journal found [ 1310.945742][T13536] EXT4-fs (loop7): can't get journal size [ 1311.867343][T13536] EXT4-fs: failed to create workqueue [ 1311.894615][T13536] EXT4-fs (loop7): mount failed [ 1313.638946][ T4282] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1313.836348][ T4282] usb 4-1: Using ep0 maxpacket: 16 [ 1313.847337][ T4282] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1313.856364][ T4323] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1313.876884][ T4282] usb 4-1: config 0 has no interface number 0 [ 1313.883076][ T4282] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1313.925658][ T4282] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1313.960863][ T4282] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1313.988220][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.021200][ T4282] usb 4-1: Product: syz [ 1314.025467][ T4282] usb 4-1: Manufacturer: syz [ 1314.041451][ T4282] usb 4-1: SerialNumber: syz [ 1314.068290][ T4323] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1314.083748][ T4282] usb 4-1: config 0 descriptor?? [ 1314.103159][ T4323] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1314.107155][T13558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1314.145689][T13558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1314.153798][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.217953][ T4323] usb 1-1: config 0 descriptor?? [ 1314.260420][ T4323] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1314.405227][T13558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1314.417584][T13558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1316.086417][T13572] loop2: detected capacity change from 0 to 1024 [ 1316.662080][ T4323] usb 1-1: USB disconnect, device number 32 [ 1316.907142][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1318.310656][ T4282] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1318.336314][ T4282] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1318.404112][ T4282] asix: probe of 4-1:0.34 failed with error -71 [ 1319.560043][ T4282] usb 4-1: USB disconnect, device number 12 [ 1320.052270][T13606] loop3: detected capacity change from 0 to 128 [ 1320.169128][T13606] FAT-fs (loop3): Unrecognized mount option "uni_1ŠÁ !rGxlate=1" or missing value [ 1321.213122][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1321.717303][ T4279] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 1322.661494][T13619] loop7: detected capacity change from 0 to 8 [ 1322.810396][T13617] SQUASHFS error: Failed to read block 0x4de: -5 [ 1322.817482][T13617] SQUASHFS error: Failed to read block 0x4de: -5 [ 1322.824238][ T26] audit: type=1800 audit(1779167631.991:86): pid=13617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2201" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1323.777541][T13624] loop0: detected capacity change from 0 to 1024 [ 1323.785970][T13624] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1323.811193][T13624] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1323.852465][T13624] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #5: comm syz.0.2209: unexpected bad inode w/o EXT4_IGET_BAD [ 1324.114368][T13627] devtmpfs: Unknown parameter '\']*' [ 1325.147862][T13624] EXT4-fs (loop0): no journal found [ 1325.153335][T13624] EXT4-fs (loop0): can't get journal size [ 1325.247727][T13624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1328.457549][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 1328.727378][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1329.552580][T13656] loop9: detected capacity change from 0 to 512 [ 1329.628668][T13656] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1329.661840][T13656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1329.670984][T13656] System zones: 1-12 [ 1330.608693][T13656] EXT4-fs (loop9): 1 truncate cleaned up [ 1330.614519][T13656] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1331.979803][T13672] loop7: detected capacity change from 0 to 1024 [ 1332.315689][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1332.358383][T13675] loop2: detected capacity change from 0 to 1024 [ 1332.482066][T13681] loop9: detected capacity change from 0 to 128 [ 1332.510967][T13675] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1332.568344][T13681] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1332.716960][T13681] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.816461][T13675] loop2: detected capacity change from 1024 to 64 [ 1332.907161][T10708] EXT4-fs (loop9): unmounting filesystem. [ 1334.325133][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 1334.371953][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.466971][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.535622][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.607316][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.671422][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.738432][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.797604][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.866641][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.923854][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1334.993290][ T4270] EXT4-fs warning (device loop2): ext4_empty_dir:3166: inode #11: lblock 4: comm syz-executor: error -12 reading directory block [ 1337.408053][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 1337.477818][T13677] kmmpd-loop2: attempt to access beyond end of device [ 1337.477818][T13677] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1337.545140][ T4279] Bluetooth: Frame is too long (len 10, expected len 4) [ 1337.734959][T13677] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 1337.881635][T13677] EXT4-fs error (device loop2): kmmpd:186: comm kmmpd-loop2: Error writing to MMP block [ 1337.963319][T13677] kmmpd-loop2: attempt to access beyond end of device [ 1337.963319][T13677] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1338.052724][T13677] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 1338.108354][ T4270] ------------[ cut here ]------------ [ 1338.114176][ T4270] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x480 [ 1338.176955][ T4270] WARNING: CPU: 1 PID: 4270 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x43c/0x530 [ 1338.187132][ T4270] Modules linked in: [ 1338.191423][ T4270] CPU: 1 PID: 4270 Comm: syz-executor Not tainted syzkaller #0 [ 1338.199126][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1338.209583][ T4270] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1338.215971][ T4270] Code: ef e8 98 af bd fd 4c 8b 45 00 48 c7 c7 00 25 df 8a 48 c7 c6 c0 21 df 8a 48 c7 c2 60 26 df 8a 8b 0c 24 4d 89 e9 e8 b4 11 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 35 4d 0a [ 1338.235997][ T4270] RSP: 0018:ffffc90003e37a68 EFLAGS: 00010246 [ 1338.242231][ T4270] RAX: 9902249dba916300 RBX: ffffffff96ee34e0 RCX: ffff88807dc4bb80 [ 1338.250409][ T4270] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1338.258518][ T4270] RBP: ffffffff8a8df720 R08: ffffc90003e376e7 R09: 1ffff920007c6edc [ 1338.266723][ T4270] R10: dffffc0000000000 R11: fffff520007c6edd R12: ffff88807919b000 [ 1338.274804][ T4270] R13: ffffffff82359640 R14: ffff88807919a000 R15: ffff88807919a728 [ 1338.282928][ T4270] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1338.292015][ T4270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1338.298819][ T4270] CR2: 00007fa4ab560e9c CR3: 000000005f654000 CR4: 00000000003506e0 [ 1338.306848][ T4270] Call Trace: [ 1338.310133][ T4270] [ 1338.313155][ T4270] slab_free_freelist_hook+0xd2/0x1a0 [ 1338.318584][ T4270] ? generic_shutdown_super+0x130/0x340 [ 1338.324335][ T4270] __kmem_cache_free+0xb6/0x1f0 [ 1338.329325][ T4270] ? ext4_drop_inode+0x2b0/0x2b0 [ 1338.334338][ T4270] generic_shutdown_super+0x130/0x340 [ 1338.339774][ T4270] kill_block_super+0x7c/0xe0 [ 1338.344612][ T4270] deactivate_locked_super+0x93/0xf0 [ 1338.350011][ T4270] cleanup_mnt+0x42c/0x4b0 [ 1338.354532][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.359844][ T4270] task_work_run+0x1d0/0x260 [ 1338.364456][ T4270] ? task_work_cancel+0x220/0x220 [ 1338.369509][ T4270] ? do_exit+0x97d/0x2480 [ 1338.374040][ T4270] ? kmem_cache_free+0xf7/0x290 [ 1338.378946][ T4270] do_exit+0x982/0x2480 [ 1338.383125][ T4270] ? put_task_struct+0x80/0x80 [ 1338.387916][ T4270] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1338.393906][ T4270] ? lock_chain_count+0x20/0x20 [ 1338.398785][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1338.403900][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1338.409647][ T4270] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1338.415787][ T4270] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1338.421205][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.426455][ T4270] do_group_exit+0x217/0x2d0 [ 1338.431171][ T4270] __x64_sys_exit_group+0x3b/0x40 [ 1338.436274][ T4270] do_syscall_64+0x4c/0xa0 [ 1338.440809][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 1338.445574][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 1338.450491][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1338.456538][ T4270] RIP: 0033:0x7effdd59ce59 [ 1338.460952][ T4270] Code: Unable to access opcode bytes at 0x7effdd59ce2f. [ 1338.468087][ T4270] RSP: 002b:00007ffe81b963b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1338.476780][ T4270] RAX: ffffffffffffffda RBX: 00007effdd63224e RCX: 00007effdd59ce59 [ 1338.484790][ T4270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1338.492839][ T4270] RBP: 0000000000000027 R08: 0000000000000000 R09: 00007effdd6321ca [ 1338.501010][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe81b97670 [ 1338.509177][ T4270] R13: 00007effdd6321ca R14: 0000555571b774e8 R15: 00007ffe81b99830 [ 1338.517256][ T4270] [ 1338.520389][ T4270] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1338.528109][ T4270] CPU: 1 PID: 4270 Comm: syz-executor Not tainted syzkaller #0 [ 1338.535919][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1338.546335][ T4270] Call Trace: [ 1338.549719][ T4270] [ 1338.552666][ T4270] dump_stack_lvl+0x188/0x24e [ 1338.557561][ T4270] ? memcpy+0x3c/0x60 [ 1338.561547][ T4270] ? show_regs_print_info+0x12/0x12 [ 1338.566764][ T4270] ? load_image+0x400/0x400 [ 1338.571291][ T4270] panic+0x2e5/0x730 [ 1338.575206][ T4270] ? bpf_jit_dump+0xd0/0xd0 [ 1338.579798][ T4270] __warn+0x2f8/0x4f0 [ 1338.583884][ T4270] ? debug_check_no_obj_freed+0x43c/0x530 [ 1338.589623][ T4270] ? debug_check_no_obj_freed+0x43c/0x530 [ 1338.595622][ T4270] report_bug+0x2ba/0x4f0 [ 1338.599965][ T4270] ? debug_check_no_obj_freed+0x43c/0x530 [ 1338.605861][ T4270] handle_bug+0x3a/0x70 [ 1338.610119][ T4270] exc_invalid_op+0x16/0x40 [ 1338.614681][ T4270] asm_exc_invalid_op+0x16/0x20 [ 1338.619635][ T4270] RIP: 0010:debug_check_no_obj_freed+0x43c/0x530 [ 1338.626053][ T4270] Code: ef e8 98 af bd fd 4c 8b 45 00 48 c7 c7 00 25 df 8a 48 c7 c6 c0 21 df 8a 48 c7 c2 60 26 df 8a 8b 0c 24 4d 89 e9 e8 b4 11 38 fd <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 35 4d 0a [ 1338.645858][ T4270] RSP: 0018:ffffc90003e37a68 EFLAGS: 00010246 [ 1338.651954][ T4270] RAX: 9902249dba916300 RBX: ffffffff96ee34e0 RCX: ffff88807dc4bb80 [ 1338.660011][ T4270] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1338.668170][ T4270] RBP: ffffffff8a8df720 R08: ffffc90003e376e7 R09: 1ffff920007c6edc [ 1338.676325][ T4270] R10: dffffc0000000000 R11: fffff520007c6edd R12: ffff88807919b000 [ 1338.684315][ T4270] R13: ffffffff82359640 R14: ffff88807919a000 R15: ffff88807919a728 [ 1338.692289][ T4270] ? ext4_group_desc_init+0x2160/0x2160 [ 1338.698036][ T4270] ? debug_check_no_obj_freed+0x43c/0x530 [ 1338.703792][ T4270] slab_free_freelist_hook+0xd2/0x1a0 [ 1338.709185][ T4270] ? generic_shutdown_super+0x130/0x340 [ 1338.714737][ T4270] __kmem_cache_free+0xb6/0x1f0 [ 1338.719586][ T4270] ? ext4_drop_inode+0x2b0/0x2b0 [ 1338.724619][ T4270] generic_shutdown_super+0x130/0x340 [ 1338.730007][ T4270] kill_block_super+0x7c/0xe0 [ 1338.734803][ T4270] deactivate_locked_super+0x93/0xf0 [ 1338.740100][ T4270] cleanup_mnt+0x42c/0x4b0 [ 1338.744523][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.749768][ T4270] task_work_run+0x1d0/0x260 [ 1338.754377][ T4270] ? task_work_cancel+0x220/0x220 [ 1338.759410][ T4270] ? do_exit+0x97d/0x2480 [ 1338.763910][ T4270] ? kmem_cache_free+0xf7/0x290 [ 1338.768890][ T4270] do_exit+0x982/0x2480 [ 1338.773142][ T4270] ? put_task_struct+0x80/0x80 [ 1338.777917][ T4270] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1338.784027][ T4270] ? lock_chain_count+0x20/0x20 [ 1338.789086][ T4270] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1338.794157][ T4270] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1338.799703][ T4270] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1338.805688][ T4270] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1338.810976][ T4270] ? lockdep_hardirqs_on+0x94/0x140 [ 1338.816424][ T4270] do_group_exit+0x217/0x2d0 [ 1338.821044][ T4270] __x64_sys_exit_group+0x3b/0x40 [ 1338.826132][ T4270] do_syscall_64+0x4c/0xa0 [ 1338.830579][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 1338.835383][ T4270] ? clear_bhb_loop+0x60/0xb0 [ 1338.840081][ T4270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1338.846177][ T4270] RIP: 0033:0x7effdd59ce59 [ 1338.850756][ T4270] Code: Unable to access opcode bytes at 0x7effdd59ce2f. [ 1338.857787][ T4270] RSP: 002b:00007ffe81b963b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1338.866291][ T4270] RAX: ffffffffffffffda RBX: 00007effdd63224e RCX: 00007effdd59ce59 [ 1338.874298][ T4270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1338.882281][ T4270] RBP: 0000000000000027 R08: 0000000000000000 R09: 00007effdd6321ca [ 1338.890353][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe81b97670 [ 1338.898414][ T4270] R13: 00007effdd6321ca R14: 0000555571b774e8 R15: 00007ffe81b99830 [ 1338.906410][ T4270] [ 1338.909992][ T4270] Kernel Offset: disabled [ 1338.914410][ T4270] Rebooting in 86400 seconds..