last executing test programs: 28m50.497387102s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000dc0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 28m46.01027565s ago: executing program 3 (id=11): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 28m44.601636483s ago: executing program 3 (id=12): set_mempolicy(0x4005, 0x0, 0x4) r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 28m43.766645839s ago: executing program 3 (id=14): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4800) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r4 = dup(r3) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 28m42.2009562s ago: executing program 3 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x7fff}, 0x50) 28m39.235902614s ago: executing program 3 (id=20): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000050}, 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x28) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 28m23.413130508s ago: executing program 32 (id=20): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000050}, 0x8040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x28) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 16m59.454958573s ago: executing program 1 (id=1356): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) io_setup(0x81, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0/file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 16m56.24868951s ago: executing program 1 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180), r0) open(0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 16m54.963871026s ago: executing program 1 (id=1367): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x678f40a9) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) socket(0x1, 0x803, 0x0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r1, 0x0, 0xefc, 0x10000) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 16m51.62226555s ago: executing program 1 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 16m50.474291057s ago: executing program 1 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r1, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x6, 0x8, 0x3007, 0x3, 0x0, 0x6, 0x1, 0x6}}) r3 = fsopen(0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 16m47.768326224s ago: executing program 1 (id=1385): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@block_validity}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001d00eeff2cbd7000fcdbdf2530bffe40aad52f2687c6aa1a235a5d2fc1157de3dbc5faabce429d2e7dab937b3fdbfb8e66a7870ffb30646e"], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file1\x00', 0x42, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) write(r2, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 16m32.279715745s ago: executing program 33 (id=1385): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@block_validity}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001d00eeff2cbd7000fcdbdf2530bffe40aad52f2687c6aa1a235a5d2fc1157de3dbc5faabce429d2e7dab937b3fdbfb8e66a7870ffb30646e"], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) r6 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file1\x00', 0x42, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) write(r2, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 9m13.102338322s ago: executing program 4 (id=2610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @p_u8=0x0}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000100)=0x4) copy_file_range(r1, &(0x7f0000000100)=0x9, r4, &(0x7f0000000340)=0x941e, 0x7e7, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff6c, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) 9m6.489530879s ago: executing program 4 (id=2629): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r6, @ANYBLOB="0174dfdb"], 0x20}}, 0x0) 9m4.273142863s ago: executing program 4 (id=2634): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001d000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES8=r0], 0xe4}}, 0x20000010) 9m3.46644392s ago: executing program 4 (id=2635): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) geteuid() 9m3.013039673s ago: executing program 4 (id=2636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 9m2.561181838s ago: executing program 4 (id=2638): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8m46.436249813s ago: executing program 34 (id=2638): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m12.154278468s ago: executing program 5 (id=3478): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r0) 2m11.746346799s ago: executing program 5 (id=3479): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2m11.412523502s ago: executing program 5 (id=3481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000001a00), 0xf1a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x1000f) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m10.379138477s ago: executing program 5 (id=3486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x416400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13340}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m0.583564743s ago: executing program 5 (id=3507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000400)=0xa) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) sendmsg$AUDIT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 1m49.536595909s ago: executing program 5 (id=3530): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r2, 0x46f3, 0x57b5, 0x50, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 28.454284086s ago: executing program 0 (id=3694): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x1e00, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@noauto_da_alloc}, {@resgid}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@noquota}], [{@fsname={'fsname', 0x3d, 'test_dummy_encryption=v1'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 22.858249771s ago: executing program 8 (id=3704): syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$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") r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000ec0)={0x1, {{0xa, 0x3, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x5b6, @local, 0x3}}]}, 0x110) 20.553838159s ago: executing program 6 (id=3706): socket$can_raw(0x1d, 0x3, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) listen(r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xffffffffffffff94, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 19.738480942s ago: executing program 8 (id=3709): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x929402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x4, 0x6, 0x0}) 16.80170805s ago: executing program 0 (id=3710): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xfe33) syz_open_dev$loop(&(0x7f00000002c0), 0x9d, 0x8902) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317d0d37ab63d65c6b2d66e6b46ab901d4189a4fc154b6a735a11f844838e0a94cd0815a7000000000000000000", 0xb7, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = gettid() r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r6, r2, 0x0, 0xc, &(0x7f0000000040)='/dev/video#\x00'}, 0x30) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r8, 0x1000000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$FUSE(r9, &(0x7f0000000540)={0x2020}, 0xffffff19) pread64(r9, &(0x7f0000000100)=""/253, 0xfd, 0xadc) openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) r10 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000300)={0x4a, 0x2, 0x1, "444900d730fae90100000004000000060ff697b900", 0x3234564e}) 15.433022065s ago: executing program 6 (id=3711): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r4], 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="0174dfdb"], 0x20}}, 0x0) 15.19843676s ago: executing program 8 (id=3712): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 15.147732285s ago: executing program 2 (id=3713): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) gettid() r0 = getpid() syz_clone(0xb00, &(0x7f0000002300)="14c065fe24574fbfcce08c3e7e7077987831548c9040eb6f63a9a101e9af80586a19a55f8a0e17bfa963603a", 0x2c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) unshare(0x2000400) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004080) 13.822500535s ago: executing program 2 (id=3715): epoll_create1(0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$vhost_msg(r3, &(0x7f0000000600)={0x1, {&(0x7f0000000480)=""/224, 0xe0, &(0x7f0000000580)=""/127, 0x1}}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000b001200000425bd7000fbdbdf250000", @ANYBLOB="08010300bb32ac4b08000f00080000000800040010000000080004000300000008001300", @ANYRES32=r0, @ANYBLOB="140012800b0001006c6f7770616e00000400028024", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r2, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000300030000000a000200aaaaaaaaaabb000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 13.638288189s ago: executing program 8 (id=3716): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="022000000400000008000000010071e680000000f72a4a48b018970dfbb2fe3d1388", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x2070bd27, 0x25dfdbff, {0xa, 0x40, 0xc0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x142}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendfile(r0, r0, 0x0, 0x200000) 12.070405935s ago: executing program 2 (id=3717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400200, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x83) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f7508", 0x25) 11.942380944s ago: executing program 7 (id=3718): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) connect$inet6(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x122) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="30e01b3981ddca14"], 0x1000f) 11.113190798s ago: executing program 7 (id=3719): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="18000000246837f73199aee6fdb9291b120000002d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b64", 0xf8}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 10.973098938s ago: executing program 2 (id=3720): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "ffffffffffffffe2", "acd40800000000000084000000000005", "6a3afbb9", "1277f8eb62db00"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 10.94678006s ago: executing program 0 (id=3721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3f, 0x0, @val=@uprobe_multi={0x0, 0x0, &(0x7f0000000280), 0x7, 0x0, 0x1, r0}}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) 10.820806454s ago: executing program 7 (id=3722): socket$can_raw(0x1d, 0x3, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) listen(r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xffffffffffffff94, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 9.480491285s ago: executing program 0 (id=3723): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xfffffffffffffeb1) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x158, 0x0, &(0x7f0000001a80)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001600)={@flat=@binder={0x73622a85, 0x10b}, @fda={0x66646185, 0x3, 0x2, 0x29}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x5, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001740)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000015c0)={0x0, 0x18, 0x30}}, 0x40}, @acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000019c0)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f00000017c0)=""/250, 0xfa, 0x0, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f00000018c0)=""/228, 0xe4, 0x2, 0x2}}, &(0x7f0000001a40)={0x0, 0x18, 0x40}}}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x0, 0x78, 0x6d, 0x3d, 0x40}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="3237bef8"]}, {0x2, &(0x7f00000003c0)=ANY=[]}]}) 6.921173689s ago: executing program 8 (id=3726): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@block_validity}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001d00eeff2cbd7000fcdbdf2530bffe40aad52f2687c6aa1a235a5d2fc1157de3dbc5faabce429d2e7dab937b3fdbfb8e66"], 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file1\x00', 0x42, 0x0) write(r1, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r1, r0, 0x0, 0x40001) 6.801372795s ago: executing program 7 (id=3727): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) gettid() r0 = getpid() syz_clone(0xb00, &(0x7f0000002300)="14c065fe24574fbfcce08c3e7e7077987831548c9040eb6f63a9a101e9af80586a19a55f8a0e17bfa963603a", 0x2c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) unshare(0x2000400) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004080) 6.625332643s ago: executing program 6 (id=3728): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="54010000020201020000000000000000000000050f0006006e657462696f732d6e730000cc0002800c00028005000100010000000c00028005000100840000002c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffffe00000021400018008000100ac1414bb080002007f00000106000340006edfcb3b000340000200000c000280050001002100000014000180080001000000000011000200e00000012c00018014000300fe88000000000000000000000000010114000400fc0200000000000000000000000000011400018008000100e000000108000200e0000001480003801400018008000100ac1414aa080002"], 0x154}, 0x1, 0x0, 0x0, 0x44}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.382160786s ago: executing program 7 (id=3729): r0 = syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) lseek(r0, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './bus/file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) close(r5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x20000) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x100) 5.163179147s ago: executing program 2 (id=3730): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$eJzs3U1rE0Ecx/HfbJImtqVuH0QQT9WCJ+nDRbwUJO/AiydRmwjFUEErqCf1LL4A730LvgCPnsSz4K0nX0BukZmdNZtkN5uGppuk3w8kbLrzn4fsbGf+KSUCcGk9qP852Tu1DyOVVJJ0Xwok1aSypGu6XntzdHx43Go2hlVUchH2YRRFmoEyB0fNtFAb5yK80L4qazn5M0xG7bc+FN0HFM/d/SkCqervTne+duE9m4zLPulNW2291UrR/QAAFMuv/4Ff55f9/j0IpC2/7Peu/zO+gLaL7sCEfc85n1j/XZbVMfb6XnWnuvmeS+HKqvigk73TtLoWc9paUDSzejaYJi+rdH0Jrjw/bDXvHrxsNQJ90r5X6RbbcM+NaOrG4pzWHn8crHrT56Yj5pfJ2s5myY2hYsewm+x/osj6ObboM+7ht6b5YX6axybUVzX+7//KHWMvk7tSYd+Vivq/nV2jG+WCXKmMUa66Rm74FkYZZUkZGYniGbXadwHDvH66qLW+qGh0OzlR66lRuzlRG/1R3dmcHTlp5ot5ZDb1V99UT+z/A/tub2mUO9OWcSX9zBg6nrIrGbrZGc/Pm6klg3FHhDF81jPd08rrd+9fPG21mq/m9sDeiYOn7AoyLT28+IN4EkxLf+b2wL7JhbQerzvj15P9q4OP5edH96KfMZBJMC/svstE+V8iX9l2mzX7FPbu06vJ2E5e5YkadzJygzX3vJidwfUwLr9ZSvnr4mCLQ3OuW3ek26O0GAl9P6fP/jhBpq5fesLn/wAAAAAAAAAAAAAAAAAAALPm/P7loKasU0WPEQAAAAAAAAAAAAAAAAAAAACAWZfy/b/VQr//96GiV3z/LzBx/wIAAP//nY5x9w==") munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 4.299791613s ago: executing program 6 (id=3731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x3e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @p_u8=0x0}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000100)=0x4) copy_file_range(r1, 0x0, r4, &(0x7f0000000340)=0x941e, 0x7e7, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000001000030400008000000000", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff6c, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) 4.141382633s ago: executing program 8 (id=3732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={0x0, 0x1, 0x4000, r0}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x4000001, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x7, 0xf001, 0x8, 0x2, 0xb676, 0xc}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x3, 0x9, 0x8, 0x0, 0x4, 0x8}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x100, 0x12, 0x400, 0x70bd29, 0x25dfdbfc, {0x1e, 0x6, 0x0, 0xc, {0x4e20, 0x4e21, [0x5, 0xa216, 0x9, 0xe], [0x3, 0x8, 0xc1e4, 0xfffffff6], r7, [0x3ff, 0x3b5b]}, 0x4b, 0xe}, [@INET_DIAG_REQ_BYTECODE={0xb2, 0x1, "9b74802c1272d568acf2daa1c4bc894febe338f07cb151b531ec0845e632260fc0dff9c68e76d885abd407e56a2e115c65cdfc7e67c5a36ac2f83bc1c9d0474920bae02568e0ea3eb25ab1229c5765b21f5314ce9dd79afa7082d7ec29187ed4878eaefd59641219d6050a8d37fae826d66129d4a752c084f02f75719f08a7817a8df4f4f354c58fb1e0891506fe208718d393d0af6bca00efa777276893dbf02343d2d37e5c6ed1c11b02afa601"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x20048800) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r9 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x2, 0x33424752, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5}}) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x20000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x21, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.650723196s ago: executing program 6 (id=3733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltaction={0x18, 0x31, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00', 0x1}]) 1.168590495s ago: executing program 7 (id=3734): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x0, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000080)={r7}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 100.508451ms ago: executing program 2 (id=3735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000001a00), 0xf1a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) 0s ago: executing program 6 (id=3736): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x802414, &(0x7f0000000200)=ANY=[]) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) kernel console output (not intermixed with test programs): 95] udevd[9895]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 1594.572391][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/789.tmp-b7:5' failed: Read-only file system [ 1594.653661][ T6117] udevd[6117]: symlink '../../loop6' '/dev/disk/by-diskseq/769.tmp-b7:6' failed: Read-only file system [ 1594.704874][ T5911] udevd[5911]: symlink '../../loop7' '/dev/disk/by-diskseq/779.tmp-b7:7' failed: Read-only file system [ 1594.730383][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:5' failed: Read-only file system [ 1594.787816][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/788.tmp-b7:2' failed: Read-only file system [ 1595.939854][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/788.tmp-b7:2' failed: Read-only file system [ 1596.033913][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/789.tmp-b7:5' failed: Read-only file system [ 1596.074607][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/769.tmp-b7:6' failed: Read-only file system [ 1596.264401][T18819] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1596.293362][T18819] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1596.356819][T18819] Remounting filesystem read-only [ 1596.378063][ T5830] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1596.440928][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1596.822003][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1596.830911][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1596.859376][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1596.899173][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1596.935262][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1596.978260][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1597.033692][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1597.112705][ T10] usb 3-1: Product: syz [ 1597.169356][T18651] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1597.195604][ T10] usb 3-1: Manufacturer: syz [ 1597.290184][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1597.313854][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1597.340134][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1597.349550][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 1597.359061][T18651] usb 6-1: Using ep0 maxpacket: 32 [ 1597.395607][T18651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1597.429033][T18651] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1597.476340][T18847] loop7: detected capacity change from 0 to 4096 [ 1597.483302][T18651] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1597.523632][T18651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.569756][T18847] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1597.580279][T18651] usb 6-1: config 0 descriptor?? [ 1597.698661][T18847] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1597.812458][T18847] System zones: 0-5 [ 1597.826160][T18847] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1597.906416][T18847] overlayfs: missing 'lowerdir' [ 1599.544561][T12420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.733380][T18860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3280'. [ 1599.751283][ T9638] usb 3-1: USB disconnect, device number 30 [ 1599.767350][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/792.tmp-b7:7' failed: Read-only file system [ 1599.806715][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1599.924125][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1600.167101][T18874] pimreg: entered allmulticast mode [ 1600.461794][T18869] pimreg: left allmulticast mode [ 1601.450406][ T6809] udevd[6809]: symlink '../../loop2' '/dev/disk/by-diskseq/790.tmp-b7:2' failed: Read-only file system [ 1601.680493][T18880] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3281'. [ 1602.207691][ T6112] udevd[6112]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1602.225730][ T5889] udevd[5889]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1602.250446][ T5911] udevd[5911]: symlink '../../loop6' '/dev/disk/by-diskseq/769.tmp-b7:6' failed: Read-only file system [ 1602.253005][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/783.tmp-b7:0' failed: Read-only file system [ 1602.301776][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/792.tmp-b7:7' failed: Read-only file system [ 1602.333372][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/769.tmp-b7:6' failed: Read-only file system [ 1602.781900][T18651] usbhid 6-1:0.0: can't add hid device: -32 [ 1602.787948][T18651] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1602.872867][T12422] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 1602.914780][T18886] loop6: detected capacity change from 0 to 2048 [ 1603.950055][T18890] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1604.255220][T18896] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3287'. [ 1604.524380][T18853] usb 6-1: USB disconnect, device number 35 [ 1604.661506][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3287'. [ 1605.114160][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1605.792959][T18908] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1605.818145][T18908] Remounting filesystem read-only [ 1605.825737][T18908] NILFS (loop6): mounting fs with errors [ 1605.985871][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/790.tmp-b7:2' failed: Read-only file system [ 1606.283768][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1606.472978][T18894] loop7: detected capacity change from 0 to 32768 [ 1606.570599][T18894] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1606.635790][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/790.tmp-b7:2' failed: Read-only file system [ 1606.765331][T18912] input: syz1 as /devices/virtual/input/input86 [ 1606.849104][T18894] XFS (loop7): Ending clean mount [ 1606.923499][T18894] XFS (loop7): Quotacheck needed: Please wait. [ 1607.035890][T18922] loop2: detected capacity change from 0 to 4096 [ 1607.142213][T18894] XFS (loop7): Quotacheck: Done. [ 1607.179953][T18923] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1607.299899][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1607.299928][ T30] audit: type=1800 audit(1760897707.098:1177): pid=18922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3293" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1607.302468][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/795.tmp-b7:7' failed: Read-only file system [ 1607.353940][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:7' failed: Read-only file system [ 1607.359779][ T30] audit: type=1800 audit(1760897707.238:1178): pid=18924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3293" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 1607.403997][T12420] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1607.528510][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/783.tmp-b7:0' failed: Read-only file system [ 1607.608434][ T5911] udevd[5911]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1607.630158][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/796.tmp-b7:2' failed: Read-only file system [ 1607.933517][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:2' failed: Read-only file system [ 1608.999410][T18890] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1609.412263][T18935] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3298'. [ 1609.423696][T18890] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1609.459321][T18890] Remounting filesystem read-only [ 1609.474267][T18938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1610.449173][ T8780] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer [ 1610.634704][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1610.691199][ T6117] udevd[6117]: symlink '../../loop6' '/dev/disk/by-diskseq/794.tmp-b7:6' failed: Read-only file system [ 1610.795321][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/794.tmp-b7:6' failed: Read-only file system [ 1611.045388][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/795.tmp-b7:7' failed: Read-only file system [ 1611.081887][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1611.096500][ T6809] udevd[6809]: symlink '../../loop0' '/dev/disk/by-diskseq/783.tmp-b7:0' failed: Read-only file system [ 1611.101404][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/799.tmp-b7:6' failed: Read-only file system [ 1611.111253][T18959] netlink: 'syz.6.3300': attribute type 4 has an invalid length. [ 1611.129998][T18853] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1611.142567][ T5911] udevd[5911]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1611.155740][T18959] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3300'. [ 1611.403423][T18853] usb 6-1: Using ep0 maxpacket: 32 [ 1611.800862][T18853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.892966][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/795.tmp-b7:7' failed: Read-only file system [ 1612.094153][T18853] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.259693][T18853] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1612.294791][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1612.319484][T18853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.453314][T18853] usb 6-1: config 0 descriptor?? [ 1614.850627][T18981] input: syz1 as /devices/virtual/input/input88 [ 1615.765400][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/799.tmp-b7:6' failed: Read-only file system [ 1615.841587][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/798.tmp-b7:7' failed: Read-only file system [ 1615.935161][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1616.924977][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.008220][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1617.240452][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/799.tmp-b7:6' failed: Read-only file system [ 1617.878871][T18853] usbhid 6-1:0.0: can't add hid device: -32 [ 1617.909221][T18853] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1617.949534][T18853] usb 6-1: USB disconnect, device number 36 [ 1618.270155][T19004] loop0: detected capacity change from 0 to 256 [ 1618.310613][T19004] exfat: Deprecated parameter 'namecase' [ 1618.335289][T19004] exfat: Deprecated parameter 'utf8' [ 1618.444106][T19007] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3316'. [ 1618.577056][T19004] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 1618.634753][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1618.675294][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/798.tmp-b7:7' failed: Read-only file system [ 1619.022614][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3316'. [ 1619.038792][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/783.tmp-b7:0' failed: Read-only file system [ 1619.253934][T18853] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1619.273481][ T6117] udevd[6117]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1619.315387][ T5911] udevd[5911]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1619.409701][T19018] trusted_key: syz.0.3317 sent an empty control message without MSG_MORE. [ 1620.339261][T18853] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1620.347933][T18853] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1620.609579][T18853] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1620.843164][T18853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1620.862478][ T6117] udevd[6117]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1621.206365][T18853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1621.214991][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/800.tmp-b7:0' failed: Read-only file system [ 1621.239574][T18853] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1621.269876][T18853] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1621.281980][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1621.542424][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/800.tmp-b7:0' failed: Read-only file system [ 1622.416611][T18853] usb 9-1: Product: syz [ 1622.421333][T18853] usb 9-1: Manufacturer: syz [ 1622.587197][T18853] usb 9-1: can't set config #1, error -71 [ 1622.658442][T18853] usb 9-1: USB disconnect, device number 8 [ 1622.775683][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1622.924722][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/801.tmp-b7:0' failed: Read-only file system [ 1623.480890][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/801.tmp-b7:0' failed: Read-only file system [ 1623.595556][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1623.789590][T19048] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3328'. [ 1624.525453][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/801.tmp-b7:0' failed: Read-only file system [ 1624.693290][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/786.tmp-b7:8' failed: Read-only file system [ 1625.205257][T19058] loop8: detected capacity change from 0 to 512 [ 1625.250422][T19058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1626.011203][T19058] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1626.017875][T19058] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3331: inode has both inline data and extents flags [ 1626.031822][T19058] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.3331: couldn't read orphan inode 15 (err -117) [ 1626.045522][T19058] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1626.154560][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/802.tmp-b7:8' failed: Read-only file system [ 1626.176730][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1626.396479][T16272] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.473770][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/802.tmp-b7:8' failed: Read-only file system [ 1626.488342][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/801.tmp-b7:0' failed: Read-only file system [ 1626.561654][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1626.583768][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/798.tmp-b7:7' failed: Read-only file system [ 1626.696022][ T9895] udevd[9895]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1626.742466][T19061] loop0: detected capacity change from 0 to 2048 [ 1626.765022][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/802.tmp-b7:8' failed: Read-only file system [ 1627.037987][T19067] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1627.874794][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/802.tmp-b7:8' failed: Read-only file system [ 1628.128134][T19061] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1628.174900][T19061] Remounting filesystem read-only [ 1628.194845][T19070] NILFS (loop0): mounting fs with errors [ 1628.380580][T19067] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1628.413160][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/798.tmp-b7:7' failed: Read-only file system [ 1628.439579][T19067] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1628.481776][T19067] Remounting filesystem read-only [ 1628.499952][T17258] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1628.786034][T19073] loop7: detected capacity change from 0 to 4096 [ 1628.856578][T19073] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1628.907525][T19073] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1628.969543][T19073] System zones: 0-5 [ 1629.060971][T19073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1629.144685][T19077] loop0: detected capacity change from 0 to 512 [ 1629.202161][T19077] EXT4-fs (loop0): #blocks per group too big: 65535 [ 1629.270780][T19073] overlayfs: missing 'workdir' [ 1629.999240][T19077] netlink: 'syz.0.3336': attribute type 12 has an invalid length. [ 1630.099063][ T5938] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1630.306155][ T5938] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1630.345411][ T5938] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1630.405787][ T5938] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1630.453160][ T5938] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1630.476353][ T5938] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1630.487209][T12420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.510218][ T5938] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1630.527899][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1630.538522][ T5938] usb 7-1: Product: syz [ 1630.559404][ T5938] usb 7-1: Manufacturer: syz [ 1630.617221][T19098] input: syz1 as /devices/virtual/input/input90 [ 1630.620897][ T5938] cdc_wdm 7-1:1.0: skipping garbage [ 1630.665764][ T5938] cdc_wdm 7-1:1.0: skipping garbage [ 1630.669293][ T5933] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1630.706094][ T5938] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1630.735433][ T5938] cdc_wdm 7-1:1.0: Unknown control protocol [ 1630.851879][ T5933] usb 3-1: device descriptor read/64, error -71 [ 1631.226950][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/805.tmp-b7:7' failed: Read-only file system [ 1631.282390][T19106] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3342'. [ 1631.291256][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/809.tmp-b7:7' failed: Read-only file system [ 1631.320490][ T5933] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1631.427785][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/808.tmp-b7:0' failed: Read-only file system [ 1631.465415][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/791.tmp-b7:5' failed: Read-only file system [ 1631.476624][ T5933] usb 3-1: device descriptor read/64, error -71 [ 1631.561062][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/803.tmp-b7:8' failed: Read-only file system [ 1631.573390][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/809.tmp-b7:7' failed: Read-only file system [ 1631.599515][ T5933] usb usb3-port1: attempt power cycle [ 1632.639067][ T5933] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1633.028921][T19122] loop5: detected capacity change from 0 to 128 [ 1633.094755][ T30] audit: type=1800 audit(1760897732.978:1179): pid=19116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3345" name="file1" dev="loop5" ino=1048703 res=0 errno=0 [ 1633.114152][ T5933] usb 3-1: device descriptor read/8, error -71 [ 1633.216289][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/810.tmp-b7:5' failed: Read-only file system [ 1633.291691][T11866] usb 7-1: USB disconnect, device number 21 [ 1633.310481][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/803.tmp-b7:8' failed: Read-only file system [ 1633.332544][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/808.tmp-b7:0' failed: Read-only file system [ 1633.426086][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/799.tmp-b7:6' failed: Read-only file system [ 1633.470251][ T5933] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1634.230302][ T5933] usb 3-1: device not accepting address 34, error -71 [ 1634.239265][ T5933] usb usb3-port1: unable to enumerate USB device [ 1634.277690][T19125] loop8: detected capacity change from 0 to 2048 [ 1634.840125][T19135] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1635.005530][T19142] veth0: entered promiscuous mode [ 1635.012964][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3352'. [ 1635.253814][T19144] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1635.591444][T19144] Remounting filesystem read-only [ 1635.599508][T19145] NILFS (loop8): mounting fs with errors [ 1635.778297][T19135] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1635.861662][T19135] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1635.983581][T19135] Remounting filesystem read-only [ 1636.016431][T16272] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1636.234668][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/812.tmp-b7:5' failed: Read-only file system [ 1636.258565][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/813.tmp-b7:8' failed: Read-only file system [ 1637.085240][T19153] loop0: detected capacity change from 0 to 256 [ 1637.098159][T19153] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1637.544490][T19156] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3357'. [ 1637.815664][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1637.898071][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/814.tmp-b7:0' failed: Read-only file system [ 1637.946076][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/812.tmp-b7:5' failed: Read-only file system [ 1637.980683][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 1638.002004][T19163] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1638.096434][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/813.tmp-b7:8' failed: Read-only file system [ 1638.125318][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/814.tmp-b7:0' failed: Read-only file system [ 1638.245598][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/814.tmp-b7:0' failed: Read-only file system [ 1639.335048][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/814.tmp-b7:0' failed: Read-only file system [ 1639.741978][T19178] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3362'. [ 1640.059199][T18853] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1640.681936][T18853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1640.691114][T18853] usb 1-1: config 1 has an invalid interface number: 48 but max is 0 [ 1640.699257][T18853] usb 1-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 1640.710202][T18853] usb 1-1: config 1 has no interface number 0 [ 1640.716290][T18853] usb 1-1: config 1 interface 48 altsetting 3 has an invalid endpoint descriptor of length 5, skipping [ 1640.727755][T18853] usb 1-1: config 1 interface 48 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1640.740910][T18853] usb 1-1: config 1 interface 48 has no altsetting 0 [ 1640.760753][T18853] usb 1-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=52.dd [ 1640.779916][T18853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.787920][T18853] usb 1-1: Product: syz [ 1640.792303][T18853] usb 1-1: Manufacturer: syz [ 1640.796905][T18853] usb 1-1: SerialNumber: syz [ 1640.819644][T16280] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1641.112588][T16280] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1641.122872][T16280] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1641.190403][T16280] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1641.235725][T16280] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1641.308703][T16280] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1641.370852][T16280] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1641.397864][T16280] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1641.462266][T16280] usb 9-1: Product: syz [ 1641.467809][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/809.tmp-b7:7' failed: Read-only file system [ 1641.496996][T16280] usb 9-1: Manufacturer: syz [ 1641.572548][T16280] cdc_wdm 9-1:1.0: skipping garbage [ 1641.635966][T16280] cdc_wdm 9-1:1.0: skipping garbage [ 1641.655897][T19186] input: syz1 as /devices/virtual/input/input91 [ 1641.745137][T16280] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1641.759382][T16280] cdc_wdm 9-1:1.0: Unknown control protocol [ 1642.187807][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/799.tmp-b7:6' failed: Read-only file system [ 1642.293057][T19189] loop6: detected capacity change from 0 to 512 [ 1642.293879][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1642.366415][T19189] EXT4-fs error (device loop6): __ext4_fill_super:5512: inode #2: comm syz.6.3365: invalid fast symlink length 39 [ 1642.412708][T19189] EXT4-fs (loop6): get root inode failed [ 1642.419340][T19189] EXT4-fs (loop6): mount failed [ 1642.473227][ T6117] udevd[6117]: symlink '../../loop6' '/dev/disk/by-diskseq/816.tmp-b7:6' failed: Read-only file system [ 1642.498646][ T6117] udevd[6117]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1642.560762][T18853] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1642.577606][T19179] Bluetooth: hci5: command 0x0406 tx timeout [ 1642.633641][ T6809] udevd[6809]: symlink '../../loop0' '/dev/disk/by-diskseq/815.tmp-b7:0' failed: Read-only file system [ 1642.852232][T18853] snd-usb-audio 1-1:1.48: probe with driver snd-usb-audio failed with error -2 [ 1642.864140][ T5889] udevd[5889]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1642.881615][T18853] usb 1-1: USB disconnect, device number 12 [ 1642.899247][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/816.tmp-b7:6' failed: Read-only file system [ 1643.527360][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/816.tmp-b7:6' failed: Read-only file system [ 1643.671526][T11866] usb 9-1: USB disconnect, device number 9 [ 1643.750220][ T9895] udevd[9895]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.48/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1644.294675][T16280] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1644.353767][T16280] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1646.533196][T19207] fido_id[19207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1647.161173][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/812.tmp-b7:5' failed: Read-only file system [ 1647.377814][T19219] loop5: detected capacity change from 0 to 256 [ 1647.499264][T19219] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1647.539101][T19219] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1647.597430][T19219] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1647.635904][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/809.tmp-b7:7' failed: Read-only file system [ 1647.735482][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/818.tmp-b7:5' failed: Read-only file system [ 1647.755807][T19221] loop7: detected capacity change from 0 to 2048 [ 1647.785407][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 1647.832928][ T5911] udevd[5911]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1647.850124][T19221] EXT4-fs: Ignoring removed nobh option [ 1647.861007][T19219] exFAT-fs (loop5): failed to load alloc-bitmap [ 1647.909612][T19219] exFAT-fs (loop5): failed to recognize exfat type [ 1647.974520][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/818.tmp-b7:5' failed: Read-only file system [ 1648.020375][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 1648.034848][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/819.tmp-b7:7' failed: Read-only file system [ 1648.074032][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1648.136655][T19221] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1648.154622][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1648.299150][ T30] audit: type=1800 audit(1760897748.168:1180): pid=19221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3373" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1648.477229][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3375'. [ 1648.661449][T12420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.339210][T19240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3376'. [ 1652.445004][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/821.tmp-b7:7' failed: Read-only file system [ 1653.735371][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/821.tmp-b7:7' failed: Read-only file system [ 1654.242529][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/813.tmp-b7:8' failed: Read-only file system [ 1655.052309][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/821.tmp-b7:7' failed: Read-only file system [ 1655.313901][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1655.647811][T19269] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3384'. [ 1656.546348][T16280] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1656.963173][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1657.014862][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/821.tmp-b7:7' failed: Read-only file system [ 1657.184799][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1657.226051][T16280] usb 9-1: config 0 has no interfaces? [ 1657.254911][T16280] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1657.276531][T16280] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1657.280855][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/815.tmp-b7:0' failed: Read-only file system [ 1657.292618][T16280] usb 9-1: Product: syz [ 1657.332694][T16280] usb 9-1: Manufacturer: syz [ 1657.358603][T16280] usb 9-1: SerialNumber: syz [ 1657.387042][T19278] netlink: 'syz.2.3386': attribute type 4 has an invalid length. [ 1657.390192][T16280] usb 9-1: config 0 descriptor?? [ 1657.446156][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/820.tmp-b7:5' failed: Read-only file system [ 1657.457527][T19278] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3386'. [ 1657.502564][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/821.tmp-b7:7' failed: Read-only file system [ 1658.463621][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/815.tmp-b7:0' failed: Read-only file system [ 1658.568305][T16280] usb 9-1: USB disconnect, device number 10 [ 1659.239539][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/820.tmp-b7:5' failed: Read-only file system [ 1659.319097][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/813.tmp-b7:8' failed: Read-only file system [ 1659.403027][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1659.657446][T19294] loop5: detected capacity change from 0 to 4096 [ 1659.838803][T19297] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1659.860851][ T30] audit: type=1800 audit(1760897759.748:1181): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3393" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1660.045147][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/815.tmp-b7:0' failed: Read-only file system [ 1660.109069][ T30] audit: type=1800 audit(1760897759.748:1182): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3393" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1660.145364][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/813.tmp-b7:8' failed: Read-only file system [ 1660.322364][T19303] loop8: detected capacity change from 0 to 1024 [ 1660.354531][T19303] EXT4-fs: Ignoring removed oldalloc option [ 1660.355194][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/822.tmp-b7:5' failed: Read-only file system [ 1660.402310][T19303] EXT4-fs: Ignoring removed bh option [ 1660.428043][ T30] audit: type=1800 audit(1760897760.138:1183): pid=19300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3393" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1660.457143][T19304] loop0: detected capacity change from 0 to 2048 [ 1660.470901][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:5' failed: Read-only file system [ 1660.594956][T19303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1660.653098][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/823.tmp-b7:8' failed: Read-only file system [ 1660.719189][T19308] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1660.778487][ T30] audit: type=1804 audit(1760897760.658:1184): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3396" name="/newroot/109/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 1661.192625][T19310] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1661.825180][T19310] Remounting filesystem read-only [ 1661.834428][T19312] NILFS (loop0): mounting fs with errors [ 1662.069971][T16272] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.214726][T19308] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1662.358938][T19308] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1662.379241][T19308] Remounting filesystem read-only [ 1662.389864][T17258] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1662.556815][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/824.tmp-b7:0' failed: Read-only file system [ 1662.608799][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/823.tmp-b7:8' failed: Read-only file system [ 1663.751574][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/824.tmp-b7:0' failed: Read-only file system [ 1663.984339][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/824.tmp-b7:0' failed: Read-only file system [ 1664.994898][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1665.284908][T19334] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3401'. [ 1666.340310][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/827.tmp-b7:0' failed: Read-only file system [ 1667.200037][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/826.tmp-b7:8' failed: Read-only file system [ 1667.430404][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/821.tmp-b7:7' failed: Read-only file system [ 1667.638633][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1668.216953][T19350] netlink: 'syz.2.3408': attribute type 4 has an invalid length. [ 1668.252233][T19350] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3408'. [ 1668.614813][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1669.024439][T19340] loop8: detected capacity change from 0 to 32768 [ 1669.333398][T19340] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1669.335662][T19340] (syz.8.3404,19340,1):ocfs2_initialize_super:2229 ERROR: status = -12 [ 1669.360202][T19340] (syz.8.3404,19340,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 1669.426762][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/827.tmp-b7:0' failed: Read-only file system [ 1669.738698][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/828.tmp-b7:8' failed: Read-only file system [ 1670.573113][ T6117] udevd[6117]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1670.587134][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/825.tmp-b7:5' failed: Read-only file system [ 1670.631707][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:8' failed: Read-only file system [ 1670.815085][T19363] loop0: detected capacity change from 0 to 2048 [ 1671.088088][T19367] loop7: detected capacity change from 0 to 32768 [ 1671.126080][T19367] (syz.7.3415,19367,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1671.139955][T19367] (syz.7.3415,19367,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1671.173119][T19367] JBD2: Ignoring recovery information on journal [ 1671.195393][T19371] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1671.258580][T19367] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1671.531216][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/827.tmp-b7:0' failed: Read-only file system [ 1671.597902][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system [ 1671.915687][T19377] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1671.933150][T19377] Remounting filesystem read-only [ 1671.941402][T19377] NILFS (loop0): mounting fs with errors [ 1672.066210][T12420] ocfs2: Unmounting device (7,7) on (node local) [ 1672.319472][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/828.tmp-b7:8' failed: Read-only file system [ 1672.399243][T19371] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1672.473911][T19371] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1672.699109][T19371] Remounting filesystem read-only [ 1673.297212][T17258] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1673.497154][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/825.tmp-b7:5' failed: Read-only file system [ 1673.557062][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/830.tmp-b7:0' failed: Read-only file system [ 1674.003419][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1674.014442][ T5911] udevd[5911]: symlink '../../loop7' '/dev/disk/by-diskseq/831.tmp-b7:7' failed: Read-only file system [ 1674.016307][ T5911] udevd[5911]: symlink '../../loop7' '/dev/disk/by-uuid/9357e9d7-5182-4c22-8242-b9b0d0fb6750.tmp-b7:7' failed: Read-only file system [ 1675.121105][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system [ 1676.331950][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3421'. [ 1676.405522][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/830.tmp-b7:0' failed: Read-only file system [ 1677.764226][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/830.tmp-b7:0' failed: Read-only file system [ 1678.115984][T19415] loop0: detected capacity change from 0 to 2048 [ 1678.137556][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/832.tmp-b7:0' failed: Read-only file system [ 1678.364531][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.636795][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/834.tmp-b7:0' failed: Read-only file system [ 1678.687389][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:0' failed: Read-only file system [ 1678.873390][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/831.tmp-b7:7' failed: Read-only file system [ 1678.910333][T19416] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1679.040122][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/831.tmp-b7:7' failed: Read-only file system [ 1679.268072][T19415] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1679.369717][T19415] Remounting filesystem read-only [ 1679.375118][T19417] NILFS (loop0): mounting fs with errors [ 1679.553438][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/831.tmp-b7:7' failed: Read-only file system [ 1679.590990][T19416] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1679.592852][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/831.tmp-b7:7' failed: Read-only file system [ 1679.669929][T19416] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1679.679188][T19416] Remounting filesystem read-only [ 1679.689652][T17258] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 1679.789389][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/834.tmp-b7:0' failed: Read-only file system [ 1679.923736][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/834.tmp-b7:0' failed: Read-only file system [ 1680.068325][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/835.tmp-b7:0' failed: Read-only file system [ 1680.579598][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/825.tmp-b7:5' failed: Read-only file system [ 1681.171533][T19427] loop0: detected capacity change from 0 to 64 [ 1682.695569][T19435] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3430'. [ 1683.916437][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1684.006843][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1684.059115][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3430'. [ 1684.076151][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/837.tmp-b7:0' failed: Read-only file system [ 1685.591264][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3435'. [ 1685.627135][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1685.702721][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/833.tmp-b7:7' failed: Read-only file system [ 1685.998939][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/837.tmp-b7:0' failed: Read-only file system [ 1687.134925][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1687.376298][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/833.tmp-b7:7' failed: Read-only file system [ 1687.615979][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/837.tmp-b7:0' failed: Read-only file system [ 1687.667785][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/833.tmp-b7:7' failed: Read-only file system [ 1687.827977][T19179] Bluetooth: hci5: command 0x0406 tx timeout [ 1687.987136][T19482] loop7: detected capacity change from 0 to 1024 [ 1688.101229][T19482] EXT4-fs: Ignoring removed oldalloc option [ 1688.139998][T19482] EXT4-fs: Ignoring removed bh option [ 1688.227806][T19480] loop0: detected capacity change from 0 to 4096 [ 1688.281261][T19482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1688.434035][ T30] audit: type=1804 audit(1760897788.298:1185): pid=19482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3442" name="/newroot/282/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 1689.361180][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1689.364040][T12420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.611372][ T9895] udevd[9895]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1689.780581][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/838.tmp-b7:7' failed: Read-only file system [ 1689.881009][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/838.tmp-b7:7' failed: Read-only file system [ 1689.990375][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/840.tmp-b7:7' failed: Read-only file system [ 1690.067592][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/839.tmp-b7:0' failed: Read-only file system [ 1690.152386][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1690.190743][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 1690.252338][T19493] loop7: detected capacity change from 0 to 4096 [ 1690.717664][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1691.190550][T19493] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1691.401006][T19493] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1691.469110][ T30] audit: type=1326 audit(1760897791.238:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19501 comm="syz.0.3449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefc2d8efc9 code=0x0 [ 1693.489767][T19493] System zones: 0-5 [ 1693.504935][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3448'. [ 1693.800294][T19493] EXT4-fs: error -4 creating inode table initialization thread [ 1693.808604][T19493] EXT4-fs (loop7): mount failed [ 1694.043827][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/829.tmp-b7:8' failed: Read-only file system [ 1694.402588][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/839.tmp-b7:0' failed: Read-only file system [ 1694.809331][ T6012] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1694.811945][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/841.tmp-b7:7' failed: Read-only file system [ 1694.995357][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1695.066816][ T6117] udevd[6117]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1695.077152][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/839.tmp-b7:0' failed: Read-only file system [ 1695.935204][T19523] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1695.943688][ T6117] udevd[6117]: symlink '../../loop5' '/dev/disk/by-diskseq/825.tmp-b7:5' failed: Read-only file system [ 1695.954659][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1695.966336][T19523] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1696.074828][T19523] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1696.088661][T19523] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1696.104258][T19523] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1696.114313][T19523] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1696.178889][T19523] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1696.198833][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1696.789736][T19523] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1696.919568][T12422] Bluetooth: hci0: command 0x0406 tx timeout [ 1697.080534][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/841.tmp-b7:7' failed: Read-only file system [ 1697.743768][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 1697.999552][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3457'. [ 1698.051226][T12422] Bluetooth: hci3: command 0x0406 tx timeout [ 1698.120210][T19179] Bluetooth: hci1: command 0x0406 tx timeout [ 1698.126436][T19179] Bluetooth: hci4: command 0x0406 tx timeout [ 1698.132642][T12422] Bluetooth: hci2: command 0x0406 tx timeout [ 1698.199185][T19179] Bluetooth: hci5: command 0x0406 tx timeout [ 1698.398749][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1699.991484][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1700.083094][T19559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3459'. [ 1700.200133][ T6012] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1700.206979][T19546] Bluetooth: hci2: command 0x0406 tx timeout [ 1700.279082][T19546] Bluetooth: hci5: command 0x0406 tx timeout [ 1700.286173][ T6012] usb 9-1: unable to read config index 0 descriptor/start: -32 [ 1700.669493][ T6012] usb 9-1: chopping to 0 config(s) [ 1700.687473][ T6012] usb 9-1: can't read configurations, error -32 [ 1700.843089][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/829.tmp-b7:8' failed: Read-only file system [ 1700.988074][T19571] netlink: 'syz.0.3463': attribute type 1 has an invalid length. [ 1704.638174][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/829.tmp-b7:8' failed: Read-only file system [ 1705.175322][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/797.tmp-b7:2' failed: Read-only file system [ 1705.179254][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/843.tmp-b7:7' failed: Read-only file system [ 1705.985966][T19597] loop2: detected capacity change from 0 to 4096 [ 1706.014392][ T30] audit: type=1326 audit(1760897805.778:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1706.044168][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/829.tmp-b7:8' failed: Read-only file system [ 1706.127858][T19597] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1706.146091][T19597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1706.225735][ T6117] udevd[6117]: symlink '../../loop5' '/dev/disk/by-diskseq/825.tmp-b7:5' failed: Read-only file system [ 1706.279229][T19597] System zones: 0-5 [ 1706.292127][T19597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1706.325955][ T30] audit: type=1326 audit(1760897805.778:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1706.631151][ T30] audit: type=1326 audit(1760897805.778:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1706.655484][ T30] audit: type=1326 audit(1760897805.788:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1706.678066][ T30] audit: type=1326 audit(1760897805.788:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1706.755508][ T30] audit: type=1326 audit(1760897805.788:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1707.508398][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/844.tmp-b7:2' failed: Read-only file system [ 1707.583627][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/825.tmp-b7:5' failed: Read-only file system [ 1707.596047][ T30] audit: type=1326 audit(1760897805.788:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1707.642620][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1707.657080][T19614] loop5: detected capacity change from 0 to 64 [ 1707.674169][ T30] audit: type=1326 audit(1760897805.788:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1708.048113][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1708.067593][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/829.tmp-b7:8' failed: Read-only file system [ 1708.069896][ T30] audit: type=1326 audit(1760897805.788:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1709.050216][ T30] audit: type=1326 audit(1760897805.798:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19602 comm="syz.8.3468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1709.094675][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1709.926114][T19629] lo speed is unknown, defaulting to 1000 [ 1710.150040][ T5938] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1710.396014][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1711.240769][ T5938] usb 1-1: config 0 has no interfaces? [ 1711.272935][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/846.tmp-b7:5' failed: Read-only file system [ 1711.310011][ T5938] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1711.350681][T19637] input: syz1 as /devices/virtual/input/input92 [ 1711.393850][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.457390][ T5938] usb 1-1: Product: syz [ 1711.466535][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.489704][ T5938] usb 1-1: Manufacturer: syz [ 1711.502578][ T5938] usb 1-1: SerialNumber: syz [ 1711.540427][ T5938] usb 1-1: config 0 descriptor?? [ 1711.623278][ T9895] udevd[9895]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1711.681829][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/844.tmp-b7:2' failed: Read-only file system [ 1711.704983][ T6117] udevd[6117]: symlink '../../loop5' '/dev/disk/by-diskseq/846.tmp-b7:5' failed: Read-only file system [ 1711.741744][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/844.tmp-b7:2' failed: Read-only file system [ 1711.856222][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/847.tmp-b7:2' failed: Read-only file system [ 1711.892302][T19629] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.963889][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/843.tmp-b7:7' failed: Read-only file system [ 1712.006866][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/846.tmp-b7:5' failed: Read-only file system [ 1712.030036][T19646] loop8: detected capacity change from 0 to 4096 [ 1712.050631][ T6012] usb 1-1: USB disconnect, device number 13 [ 1712.062683][T19646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1712.524615][T19646] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1712.524748][T19646] EXT4-fs: failed to create workqueue [ 1712.546157][T19646] EXT4-fs (loop8): mount failed [ 1712.766526][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1712.942758][T19546] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1713.129460][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1713.462469][ T10] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1713.492195][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.650158][ T10] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1713.661585][T19675] loop8: detected capacity change from 0 to 2048 [ 1713.862369][T19677] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 1714.000111][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1714.022553][T19679] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1714.066427][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1714.082405][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1714.095616][ T10] usb 7-1: Product: syz [ 1714.104794][ T10] usb 7-1: Manufacturer: syz [ 1714.117426][ T10] usb 7-1: SerialNumber: syz [ 1714.131169][ T10] usb 7-1: config 0 descriptor?? [ 1714.257427][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 1714.294480][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1714.595522][ T10] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1714.635359][ T10] usb 7-1: USB disconnect, device number 22 [ 1714.641978][T19685] NILFS error (device loop8): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1714.670911][T19685] Remounting filesystem read-only [ 1714.677215][T19685] NILFS (loop8): mounting fs with errors [ 1715.759593][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1715.777018][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/850.tmp-b7:8' failed: Read-only file system [ 1715.821071][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:8' failed: Read-only file system [ 1715.825056][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/843.tmp-b7:7' failed: Read-only file system [ 1715.965393][T19679] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1716.099198][T19679] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1716.108639][T19679] Remounting filesystem read-only [ 1716.439119][T16272] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 1716.902006][T19693] FAT-fs (loop15): unable to read boot sector [ 1717.831697][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/850.tmp-b7:8' failed: Read-only file system [ 1717.977425][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 1718.032998][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/843.tmp-b7:7' failed: Read-only file system [ 1718.053129][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/850.tmp-b7:8' failed: Read-only file system [ 1718.340547][T19712] loop6: detected capacity change from 0 to 64 [ 1718.350843][T19712] minix: Unknown parameter '0x0000000000000004ÿÿÿÿÿÿÿÿ18446744073709551615' [ 1719.204021][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/852.tmp-b7:6' failed: Read-only file system [ 1719.407220][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/852.tmp-b7:6' failed: Read-only file system [ 1719.428633][T19714] input: syz1 as /devices/virtual/input/input93 [ 1721.022457][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system [ 1721.162423][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1721.187762][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/843.tmp-b7:7' failed: Read-only file system [ 1721.243760][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1721.405769][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/847.tmp-b7:2' failed: Read-only file system [ 1721.520618][T19744] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3503'. [ 1722.831307][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1723.004402][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/847.tmp-b7:2' failed: Read-only file system [ 1723.950682][ T5889] udevd[5889]: symlink '../../loop5' '/dev/disk/by-diskseq/846.tmp-b7:5' failed: Read-only file system [ 1724.112946][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1724.358813][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system [ 1724.488582][T19755] loop2: detected capacity change from 0 to 4096 [ 1725.769413][T19767] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1726.507837][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/854.tmp-b7:2' failed: Read-only file system [ 1726.582699][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1726.606768][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:2' failed: Read-only file system [ 1726.774130][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1726.978469][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/854.tmp-b7:2' failed: Read-only file system [ 1727.033414][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1728.171519][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:2' failed: Read-only file system [ 1728.417678][ T9895] udevd[9895]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1728.419808][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system [ 1728.482858][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/854.tmp-b7:2' failed: Read-only file system [ 1728.600203][T16280] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1728.809193][T16280] usb 3-1: Using ep0 maxpacket: 16 [ 1728.880753][T16280] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 1728.971144][T16280] usb 3-1: config 0 has no interface number 0 [ 1729.018624][T19809] netlink: 'syz.6.3516': attribute type 1 has an invalid length. [ 1729.387272][T16280] usb 3-1: config 0 interface 48 has no altsetting 0 [ 1729.452056][T16280] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1730.169086][T16280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.228830][T16280] usb 3-1: Product: syz [ 1730.233173][T16280] usb 3-1: Manufacturer: syz [ 1730.238329][T16280] usb 3-1: SerialNumber: syz [ 1730.260576][T16280] usb 3-1: config 0 descriptor?? [ 1730.488912][T19792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.587783][T19792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.724020][T19546] Bluetooth: hci3: Unknown advertising packet type: 0x35 [ 1730.724093][T19546] Bluetooth: hci3: adv larger than maximum supported [ 1730.724836][ T5938] usb 3-1: USB disconnect, device number 35 [ 1730.743496][T19546] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1731.853125][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1732.080832][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1732.788282][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1733.056983][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1733.153964][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1733.276374][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1733.491129][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system [ 1734.625666][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1734.926417][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1734.958675][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/846.tmp-b7:5' failed: Read-only file system [ 1737.512094][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1737.832323][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1738.041470][ T9895] udevd[9895]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system [ 1738.744711][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1739.263521][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/842.tmp-b7:0' failed: Read-only file system [ 1739.356958][T19900] loop0: detected capacity change from 0 to 64 [ 1739.813216][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.545356][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1740.565810][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/856.tmp-b7:0' failed: Read-only file system [ 1740.581939][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 1740.768744][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1740.784714][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/856.tmp-b7:0' failed: Read-only file system [ 1743.208387][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1743.208414][ T30] audit: type=1326 audit(1760897842.398:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1743.931387][ T30] audit: type=1326 audit(1760897842.398:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.070189][ T30] audit: type=1326 audit(1760897842.398:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.093626][ T30] audit: type=1326 audit(1760897842.398:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.117255][ T30] audit: type=1326 audit(1760897842.398:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.185399][ T30] audit: type=1326 audit(1760897842.398:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.233346][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/843.tmp-b7:7' failed: Read-only file system [ 1744.268611][ T30] audit: type=1326 audit(1760897842.398:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.349662][ T30] audit: type=1326 audit(1760897842.398:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.377324][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system [ 1744.623409][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1744.665042][ T30] audit: type=1326 audit(1760897842.408:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.791487][ T30] audit: type=1326 audit(1760897842.408:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19928 comm="syz.8.3550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27298efc9 code=0x7ffc0000 [ 1744.983507][T11351] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.066379][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/843.tmp-b7:7' failed: Read-only file system [ 1745.221683][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1745.242567][T19951] loop7: detected capacity change from 0 to 64 [ 1745.534732][ T9737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1745.545049][ T9737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1745.553313][ T9737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1746.443955][ T9737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1746.456869][ T9737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1746.477850][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/858.tmp-b7:7' failed: Read-only file system [ 1746.526348][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 1746.671904][T11351] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.722301][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/858.tmp-b7:7' failed: Read-only file system [ 1746.976485][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 1747.076957][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/858.tmp-b7:7' failed: Read-only file system [ 1747.548444][T19965] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3558'. [ 1748.153878][T11351] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.519387][ T9737] Bluetooth: hci0: command tx timeout [ 1748.806331][T11351] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1748.908483][T19956] lo speed is unknown, defaulting to 1000 [ 1749.984588][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1750.427376][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1750.497250][ T5889] udevd[5889]: symlink '../../loop6' '/dev/disk/by-diskseq/853.tmp-b7:6' failed: Read-only file system [ 1750.599173][ T9737] Bluetooth: hci0: command tx timeout [ 1750.639590][T19986] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1750.668165][T19986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1751.787039][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/857.tmp-b7:0' failed: Read-only file system [ 1752.015678][T19989] lo speed is unknown, defaulting to 1000 [ 1752.052197][T11351] bridge_slave_1: left allmulticast mode [ 1752.057857][T11351] bridge_slave_1: left promiscuous mode [ 1752.080059][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/857.tmp-b7:0' failed: Read-only file system [ 1752.099954][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.331532][T11351] bridge_slave_0: left allmulticast mode [ 1752.337731][T11351] bridge_slave_0: left promiscuous mode [ 1753.090275][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.096377][ T9737] Bluetooth: hci0: command tx timeout [ 1753.136073][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1753.234482][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/857.tmp-b7:0' failed: Read-only file system [ 1753.347333][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1753.541679][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/857.tmp-b7:0' failed: Read-only file system [ 1753.956951][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/859.tmp-b7:7' failed: Read-only file system [ 1754.069846][ T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1754.242864][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.273125][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.307909][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1754.327365][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.124970][ T10] usb 3-1: config 0 descriptor?? [ 1755.153861][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/859.tmp-b7:7' failed: Read-only file system [ 1755.167519][ T9737] Bluetooth: hci0: command tx timeout [ 1755.258600][T11351] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1755.324655][T20027] trusted_key: encrypted_key: insufficient parameters specified [ 1755.595299][T11351] dvmrp1 (unregistering): left allmulticast mode [ 1755.642428][ T10] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1755.654068][ T10] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1755.661510][ T10] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1755.670554][ T10] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1755.700597][ T10] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1755.708400][ T10] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1755.716400][ T10] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 1755.729355][ T10] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1755.817618][ T10] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 1756.126540][T11351] team0: Port device bond0 removed [ 1756.143535][T11351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1756.155972][T11351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1756.167338][T11351] bond0 (unregistering): Released all slaves [ 1756.216807][T11351] bond1 (unregistering): Released all slaves [ 1756.438709][ T10] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71 [ 1756.559400][T19956] chnl_net:caif_netlink_parms(): no params data found [ 1756.589917][ T10] usb 3-1: USB disconnect, device number 36 [ 1756.770354][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/857.tmp-b7:0' failed: Read-only file system [ 1756.808226][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1756.996729][T20033] loop0: detected capacity change from 0 to 4096 [ 1757.016328][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1757.790859][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1757.804353][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/859.tmp-b7:7' failed: Read-only file system [ 1757.924275][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/860.tmp-b7:0' failed: Read-only file system [ 1757.982939][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1758.041448][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 1758.077907][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/859.tmp-b7:7' failed: Read-only file system [ 1758.888938][T19956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.924922][T19956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.946654][T19956] bridge_slave_0: entered allmulticast mode [ 1758.981192][T19956] bridge_slave_0: entered promiscuous mode [ 1759.099944][T19956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.146309][T19956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.160102][T19956] bridge_slave_1: entered allmulticast mode [ 1759.201976][T19956] bridge_slave_1: entered promiscuous mode [ 1759.986098][T20076] loop0: detected capacity change from 0 to 512 [ 1759.995389][T20076] EXT4-fs (loop0): #blocks per group too big: 65535 [ 1760.243182][T20073] netlink: 'syz.0.3585': attribute type 12 has an invalid length. [ 1760.305164][T19956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1760.356894][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1760.371601][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/862.tmp-b7:0' failed: Read-only file system [ 1760.401059][T19956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1760.432211][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1760.445828][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1760.496216][ T9895] udevd[9895]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1760.536192][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/862.tmp-b7:0' failed: Read-only file system [ 1760.605232][T20055] loop7: detected capacity change from 0 to 32768 [ 1760.614961][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/862.tmp-b7:0' failed: Read-only file system [ 1760.709145][T15585] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1760.979180][T15585] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.041555][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/862.tmp-b7:0' failed: Read-only file system [ 1761.077621][T15585] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1761.077691][T15585] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1761.077734][T15585] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.104838][T15585] usb 9-1: config 0 descriptor?? [ 1761.153205][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/863.tmp-b7:0' failed: Read-only file system [ 1761.255528][T19956] team0: Port device team_slave_0 added [ 1761.872468][T15585] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1761.872511][T15585] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1761.872547][T15585] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1761.872586][T15585] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1761.872626][T15585] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1761.872661][T15585] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1761.872695][T15585] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 1761.893417][T15585] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1761.940839][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/864.tmp-b7:7' failed: Read-only file system [ 1762.046921][T11351] hsr_slave_0: left promiscuous mode [ 1762.070789][T15585] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 1762.086243][T11351] hsr_slave_1: left promiscuous mode [ 1762.087831][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1762.087861][T11351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.151123][T11351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1762.151158][T11351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.372179][T11351] veth1_macvtap: left promiscuous mode [ 1762.372349][T11351] veth0_macvtap: left promiscuous mode [ 1762.372667][T11351] veth1_vlan: left promiscuous mode [ 1762.372830][T11351] veth0_vlan: left promiscuous mode [ 1762.682621][T15585] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 1762.716315][T15585] usb 9-1: USB disconnect, device number 13 [ 1762.773046][T20099] loop6: detected capacity change from 0 to 4096 [ 1763.949432][T18651] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1764.434478][T18651] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1764.506244][T18651] usb 9-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1764.540786][T18651] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1764.560212][T18651] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1764.597380][T18651] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1764.616232][T18651] usb 9-1: Product: syz [ 1764.624552][T18651] usb 9-1: Manufacturer: syz [ 1764.629266][T18651] usb 9-1: SerialNumber: syz [ 1764.637062][T18651] usb 9-1: config 0 descriptor?? [ 1764.714045][T18651] hub 9-1:0.0: bad descriptor, ignoring hub [ 1764.726257][T18651] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1765.336270][T18651] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1765.388691][T18651] usb 9-1: USB disconnect, device number 14 [ 1765.419246][ T9895] udevd[9895]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1765.523648][T11351] team0 (unregistering): Port device team_slave_1 removed [ 1765.717568][T11351] team0 (unregistering): Port device team_slave_0 removed [ 1765.784959][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1765.850462][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/863.tmp-b7:0' failed: Read-only file system [ 1766.584170][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1766.717420][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/863.tmp-b7:0' failed: Read-only file system [ 1766.872420][T20141] loop0: detected capacity change from 0 to 4096 [ 1766.885178][T20141] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1766.912882][T20141] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1766.922241][T20141] System zones: 0-5 [ 1766.940199][T20141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1767.011392][T20145] netlink: 'syz.8.3609': attribute type 1 has an invalid length. [ 1767.028893][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1767.200383][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/868.tmp-b7:0' failed: Read-only file system [ 1767.251627][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1767.416260][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/868.tmp-b7:0' failed: Read-only file system [ 1767.437218][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1767.438303][T17258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1767.600092][T18651] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1767.720860][T19956] team0: Port device team_slave_1 added [ 1767.763557][T18651] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.816578][T18651] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.862670][ T9638] lo speed is unknown, defaulting to 1000 [ 1767.879898][ T9638] infiniband syz0: ib_query_port failed (-19) [ 1767.916145][T18651] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1768.109093][T18651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.390075][T18651] usb 7-1: config 0 descriptor?? [ 1768.750202][T20145] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1769.034461][T18651] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1769.060711][T18651] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1769.067695][T18651] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1769.076301][T18651] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1769.098703][T18651] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1769.130179][T19956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.137169][T19956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.170282][T18651] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1769.219661][T18651] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 1769.249995][T18651] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1769.569882][T19956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.614028][T19956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.633847][T19956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.661687][T18651] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 1769.693075][T19956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.893563][T18651] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 1770.921067][T18651] usb 7-1: USB disconnect, device number 23 [ 1770.966766][T20173] fido_id[20173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1771.264339][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1771.310773][T20184] netlink: 'syz.8.3614': attribute type 1 has an invalid length. [ 1772.632070][T19956] hsr_slave_0: entered promiscuous mode [ 1772.671075][T19956] hsr_slave_1: entered promiscuous mode [ 1772.677533][T19956] debugfs: 'hsr0' already exists in 'hsr' [ 1773.159127][T19956] Cannot create hsr debugfs directory [ 1773.368364][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/869.tmp-b7:0' failed: Read-only file system [ 1773.893463][T20211] FAT-fs (loop1): bogus number of reserved sectors [ 1773.900133][T20211] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1774.732013][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/869.tmp-b7:0' failed: Read-only file system [ 1774.913163][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1775.018726][T20216] loop0: detected capacity change from 0 to 1024 [ 1775.108015][T20216] EXT4-fs: Ignoring removed oldalloc option [ 1775.168308][T20216] EXT4-fs: Ignoring removed bh option [ 1775.251700][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/870.tmp-b7:0' failed: Read-only file system [ 1775.367649][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1775.371069][T20216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1775.523026][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1775.595968][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1775.595993][ T30] audit: type=1804 audit(1760897875.478:1278): pid=20216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3619" name="/newroot/137/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 1775.639331][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1775.852804][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/870.tmp-b7:0' failed: Read-only file system [ 1776.443377][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1776.486654][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1776.637685][T17258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1776.684526][T20243] netlink: 'syz.6.3625': attribute type 1 has an invalid length. [ 1777.781030][ T9895] udevd[9895]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1777.815619][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/870.tmp-b7:0' failed: Read-only file system [ 1777.865840][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1777.945782][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/870.tmp-b7:0' failed: Read-only file system [ 1777.991894][T20246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1778.043131][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1779.150085][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1779.254566][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1779.545559][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1779.655362][T20274] tipc: Can't bind to reserved service type 1 [ 1779.779086][T20029] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1780.644853][T20274] Falling back ldisc for ptm1. [ 1780.661130][T20029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.701906][T20029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.763486][T20029] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1780.803740][T20029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.984272][T20029] usb 3-1: config 0 descriptor?? [ 1781.152040][T20289] FAT-fs (loop17): unable to read boot sector [ 1782.056319][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1782.353420][T20029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1782.373342][T20029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1782.381316][T20029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1782.395583][T20029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1783.155027][T20029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1783.162387][T20029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1783.169671][T20029] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1783.219686][T20029] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1783.308861][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1783.322713][T20029] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 1783.558032][T20029] cp2112 0003:10C4:EA90.000C: error reading lock byte: -71 [ 1783.621663][T20029] usb 3-1: USB disconnect, device number 37 [ 1783.796132][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1783.844937][T20298] fido_id[20298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1783.908508][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1783.940799][T20309] netlink: 'syz.8.3633': attribute type 1 has an invalid length. [ 1785.236200][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1786.383490][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1786.398003][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1787.631950][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1787.826884][T19956] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1787.918125][T20348] netlink: 'syz.7.3640': attribute type 1 has an invalid length. [ 1787.972767][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1788.132527][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1788.133403][T19956] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1789.067869][T20355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1789.214824][T19956] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1789.338214][T19956] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1789.405421][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1789.665097][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1790.705993][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1790.771479][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1790.867108][T19956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.088596][T19956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1792.263872][T11351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.271088][T11351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.286285][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.293422][T11351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1792.392682][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1792.502035][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1792.638356][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1792.817797][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1794.024411][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1794.165008][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1794.616033][T19956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.642958][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1794.697263][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1795.049129][T20430] trusted_key: encrypted_key: insufficient parameters specified [ 1795.432950][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1795.538675][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1795.654465][T20435] netlink: 'syz.2.3654': attribute type 1 has an invalid length. [ 1796.911767][T20439] FAT-fs (loop17): unable to read boot sector [ 1797.538106][T20440] netlink: 'syz.0.3657': attribute type 1 has an invalid length. [ 1797.574763][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1797.930481][T20443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1799.059703][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1799.220129][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1799.345215][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/871.tmp-b7:0' failed: Read-only file system [ 1800.695482][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1801.480428][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.499270][T20481] bridge0: entered promiscuous mode [ 1801.504897][T20481] macsec1: entered promiscuous mode [ 1801.512158][T20481] bridge0: port 3(macsec1) entered blocking state [ 1801.518693][T20481] bridge0: port 3(macsec1) entered disabled state [ 1801.525378][T20481] macsec1: entered allmulticast mode [ 1801.530754][T20481] bridge0: entered allmulticast mode [ 1801.701003][T20481] macsec1: left allmulticast mode [ 1801.706084][T20481] bridge0: left allmulticast mode [ 1801.737588][T20479] loop0: detected capacity change from 0 to 1024 [ 1801.750189][T20479] EXT4-fs: Ignoring removed oldalloc option [ 1801.759267][T20481] bridge0: left promiscuous mode [ 1801.832036][T20479] EXT4-fs: Ignoring removed bh option [ 1801.913059][T20479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1802.006172][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/872.tmp-b7:0' failed: Read-only file system [ 1802.087685][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1802.102397][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1802.124113][ T30] audit: type=1804 audit(1760897901.968:1279): pid=20479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3662" name="/newroot/146/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 1802.203365][ T6117] udevd[6117]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1803.303600][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/872.tmp-b7:0' failed: Read-only file system [ 1803.392049][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1803.587666][ T5938] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1803.639189][ T9737] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1804.180305][ T5938] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.268015][T17258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1804.392998][ T5938] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.429429][ T5938] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1804.453699][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1804.469135][ T5938] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.493953][ T5938] usb 9-1: config 0 descriptor?? [ 1804.519699][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1804.561989][ T9895] udevd[9895]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1804.635707][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/872.tmp-b7:0' failed: Read-only file system [ 1804.788605][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/872.tmp-b7:0' failed: Read-only file system [ 1805.123675][T20520] overlayfs: failed to resolve './file1/file0': -2 [ 1805.124235][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1805.429116][ T5938] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1805.461895][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/873.tmp-b7:0' failed: Read-only file system [ 1805.477176][ T5938] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1805.505057][ T5938] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1805.535413][ T5938] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1805.744588][ T5938] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1805.752894][ T5938] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1805.779111][ T5938] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 1805.820939][ T5938] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1806.812985][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1806.915272][ T6117] udevd[6117]: symlink '../../loop0' '/dev/disk/by-diskseq/873.tmp-b7:0' failed: Read-only file system [ 1806.962589][ T5938] cp2112 0003:10C4:EA90.000D: error requesting version [ 1807.005410][ T5938] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71 [ 1807.050399][T19546] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1807.067021][T20535] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 1807.075056][T19546] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1807.077712][ T5938] usb 9-1: USB disconnect, device number 15 [ 1807.089962][T19546] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1807.110154][T19546] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1807.128411][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1807.144832][T19546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1807.241562][T20531] fido_id[20531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1809.107453][T20564] loop0: detected capacity change from 0 to 1024 [ 1809.145207][T20564] EXT4-fs: Ignoring removed oldalloc option [ 1809.159312][T20564] EXT4-fs: Ignoring removed bh option [ 1809.229374][T20564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1809.304219][T20545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1809.331274][ T9737] Bluetooth: hci6: command tx timeout [ 1810.141102][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/874.tmp-b7:0' failed: Read-only file system [ 1810.159611][ T30] audit: type=1804 audit(1760897909.668:1280): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3681" name="/newroot/150/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 1810.162316][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1810.281393][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1810.703537][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/874.tmp-b7:0' failed: Read-only file system [ 1810.857898][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1811.095216][T17258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1811.147530][T20582] loop2: detected capacity change from 0 to 128 [ 1811.149871][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/855.tmp-b7:2' failed: Read-only file system [ 1811.225089][T20582] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1811.228619][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/874.tmp-b7:0' failed: Read-only file system [ 1811.268780][T20582] ext4 filesystem being mounted at /608/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1811.273410][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/865.tmp-b7:7' failed: Read-only file system [ 1811.412998][ T9737] Bluetooth: hci6: command tx timeout [ 1811.422030][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/875.tmp-b7:2' failed: Read-only file system [ 1811.441024][ T30] audit: type=1326 audit(1760897911.328:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz.0.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d8efc9 code=0x7ffc0000 [ 1811.486921][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:2' failed: Read-only file system [ 1811.502305][ T30] audit: type=1326 audit(1760897911.328:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz.0.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d8efc9 code=0x7ffc0000 [ 1811.530634][ T30] audit: type=1326 audit(1760897911.358:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz.0.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc2d8efc9 code=0x7ffc0000 [ 1811.553509][ T30] audit: type=1326 audit(1760897911.358:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz.0.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fefc2d8efc9 code=0x7ffc0000 [ 1811.881547][ T30] audit: type=1326 audit(1760897911.358:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz.0.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fefc2d8efc9 code=0x7ffc0000 [ 1812.681386][T20593] xt_hashlimit: size too large, truncated to 1048576 [ 1812.688318][T20593] xt_hashlimit: max too large, truncated to 1048576 [ 1812.995461][ T6012] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1813.047210][T20605] FAT-fs (loop17): unable to read boot sector [ 1813.555756][ T9737] Bluetooth: hci6: command tx timeout [ 1813.618578][T20602] loop7: detected capacity change from 0 to 1024 [ 1813.771390][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.566374][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1814.579085][ T6012] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1814.588144][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.607932][T20602] EXT4-fs: Ignoring removed bh option [ 1814.627997][ T6012] usb 7-1: config 0 descriptor?? [ 1814.676010][T20602] EXT4-fs: Ignoring removed nobh option [ 1814.727118][ T5829] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1814.769910][T20602] EXT4-fs: Ignoring removed bh option [ 1814.963888][ T6012] usbhid 7-1:0.0: can't add hid device: -71 [ 1815.006354][T20602] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1815.031271][ T6012] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1815.091094][ T6012] usb 7-1: USB disconnect, device number 24 [ 1815.100767][T20619] loop0: detected capacity change from 0 to 512 [ 1815.412227][ T6117] udevd[6117]: symlink '../../loop2' '/dev/disk/by-diskseq/878.tmp-b7:2' failed: Read-only file system [ 1816.374049][ T9737] Bluetooth: hci6: command tx timeout [ 1816.391341][T20624] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4192: comm syz.7.3690: Allocating blocks 497-513 which overlap fs metadata [ 1816.425943][T20624] EXT4-fs (loop7): pa ffff8880302502b8: logic 256, phys. 385, len 8 [ 1816.434444][T20624] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5443: group 0, free 0, pa_free 1 [ 1816.496542][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/876.tmp-b7:0' failed: Read-only file system [ 1816.525489][T20625] netlink: 'syz.6.3695': attribute type 1 has an invalid length. [ 1817.388280][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1817.663285][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1817.759421][T20628] loop2: detected capacity change from 0 to 1024 [ 1817.795843][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/879.tmp-b7:0' failed: Read-only file system [ 1817.816632][T20628] EXT4-fs: Ignoring removed oldalloc option [ 1817.862106][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/879.tmp-b7:0' failed: Read-only file system [ 1817.887930][T20628] EXT4-fs: Ignoring removed bh option [ 1817.928619][T12420] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.955489][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/878.tmp-b7:2' failed: Read-only file system [ 1818.065585][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/879.tmp-b7:0' failed: Read-only file system [ 1818.088527][T20631] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1818.100377][ T6117] udevd[6117]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1818.136167][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1818.182475][T20628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1819.141394][ T30] audit: type=1804 audit(1760897918.758:1286): pid=20628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3696" name="/newroot/610/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 1819.304477][T20636] tipc: Started in network mode [ 1819.309556][T20636] tipc: Node identity 4, cluster identity 4711 [ 1819.315943][T20636] tipc: Node number set to 4 [ 1819.734207][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1820.437829][ T5889] udevd[5889]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1820.530886][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/881.tmp-b7:2' failed: Read-only file system [ 1820.626423][T20533] chnl_net:caif_netlink_parms(): no params data found [ 1820.660991][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/881.tmp-b7:2' failed: Read-only file system [ 1820.914918][ T5911] udevd[5911]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1821.731951][T20677] loop8: detected capacity change from 0 to 8 [ 1822.241047][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/883.tmp-b7:2' failed: Read-only file system [ 1822.292304][T20677] SQUASHFS error: Failed to read block 0x62: -5 [ 1822.493647][ T6112] udevd[6112]: symlink '../../loop8' '/dev/disk/by-diskseq/851.tmp-b7:8' failed: Read-only file system [ 1822.830962][T20677] squashfs image failed sanity check [ 1823.027789][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1823.046964][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/884.tmp-b7:8' failed: Read-only file system [ 1823.157539][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/884.tmp-b7:8' failed: Read-only file system [ 1823.185119][ T5889] udevd[5889]: symlink '../../loop2' '/dev/disk/by-diskseq/883.tmp-b7:2' failed: Read-only file system [ 1823.364486][ T13] bridge_slave_1: left allmulticast mode [ 1823.538009][ T13] bridge_slave_1: left promiscuous mode [ 1823.545111][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.789813][ T13] bridge_slave_0: left allmulticast mode [ 1824.838181][ T13] bridge_slave_0: left promiscuous mode [ 1824.910854][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.201651][T20704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3708'. [ 1825.430631][T20029] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1825.701175][T20029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.752742][T20029] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.800086][T20029] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1825.859751][T20029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.963900][T20029] usb 9-1: config 0 descriptor?? [ 1826.450975][T20029] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1826.479636][T20029] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1826.504507][T20029] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1826.527199][T20029] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1826.551388][T20029] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1826.561449][T20029] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1826.568418][T20029] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 1826.626131][T20029] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1826.698828][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 1826.747270][T20029] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00 [ 1827.425161][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1827.435787][T20029] cp2112 0003:10C4:EA90.000E: error reading lock byte: -71 [ 1827.473254][T20029] usb 9-1: USB disconnect, device number 16 [ 1827.488555][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1827.566758][ T13] bond0 (unregistering): Released all slaves [ 1827.698434][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1828.105385][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/885.tmp-b7:8' failed: Read-only file system [ 1828.225321][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 1828.252526][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/883.tmp-b7:2' failed: Read-only file system [ 1828.333059][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1828.409210][ T13] hsr_slave_0: left promiscuous mode [ 1828.424463][ T13] hsr_slave_1: left promiscuous mode [ 1828.435831][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1828.694576][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1829.649821][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/883.tmp-b7:2' failed: Read-only file system [ 1829.728370][ T5889] udevd[5889]: symlink '../../loop8' '/dev/disk/by-diskseq/885.tmp-b7:8' failed: Read-only file system [ 1831.454074][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/883.tmp-b7:2' failed: Read-only file system [ 1831.511184][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1832.291122][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1832.404832][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/883.tmp-b7:2' failed: Read-only file system [ 1832.475965][ T5889] udevd[5889]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 1832.543101][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1833.560246][ T30] audit: type=1326 audit(1760897933.398:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20764 comm="syz.2.3720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1cbb8efc9 code=0x0 [ 1833.817434][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1834.129902][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 1835.240352][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 1835.309696][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1835.401507][ T9737] Bluetooth: hci5: SCO packet too small [ 1835.580126][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 1835.771066][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1836.179356][T11866] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1836.255649][T20533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.263934][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.272015][T20533] bridge_slave_0: entered allmulticast mode [ 1836.283164][T20533] bridge_slave_0: entered promiscuous mode [ 1836.541156][T20533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.548389][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.555679][T20533] bridge_slave_1: entered allmulticast mode [ 1836.580433][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/885.tmp-b7:8' failed: Read-only file system [ 1836.582784][T20533] bridge_slave_1: entered promiscuous mode [ 1836.633584][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1836.689133][T11866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1836.722842][T11866] usb 1-1: not running at top speed; connect to a high speed hub [ 1836.779787][T11866] usb 1-1: config 2 has an invalid interface number: 212 but max is 0 [ 1836.831861][T11866] usb 1-1: config 2 has no interface number 0 [ 1836.866066][T11866] usb 1-1: config 2 interface 212 has no altsetting 0 [ 1836.885615][T20789] loop8: detected capacity change from 0 to 1024 [ 1837.118559][T11866] usb 1-1: language id specifier not provided by device, defaulting to English [ 1837.159722][T20789] EXT4-fs: Ignoring removed oldalloc option [ 1837.165859][T20789] EXT4-fs: Ignoring removed bh option [ 1838.015631][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/886.tmp-b7:8' failed: Read-only file system [ 1838.064013][T11866] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1838.077290][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/882.tmp-b7:7' failed: Read-only file system [ 1838.098581][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1838.116512][T20789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1838.131500][T11866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.153207][T20533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1838.175603][T11866] usb 1-1: Product: syz [ 1838.197003][T11866] usb 1-1: SerialNumber: syz [ 1838.197101][ T30] audit: type=1804 audit(1760897938.078:1288): pid=20789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3726" name="/newroot/179/file1/bus" dev="loop8" ino=18 res=1 errno=0 [ 1838.427002][T20533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.268670][T16272] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1839.284889][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/886.tmp-b7:8' failed: Read-only file system [ 1839.342156][T20802] loop7: detected capacity change from 0 to 2048 [ 1839.377536][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1839.535247][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-diskseq/887.tmp-b7:7' failed: Read-only file system [ 1839.747504][ T6117] udevd[6117]: symlink '../../loop7' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:7' failed: Read-only file system [ 1839.787939][ T6117] udevd[6117]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 1839.892615][T20813] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1840.438372][T20815] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1840.458684][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-diskseq/887.tmp-b7:7' failed: Read-only file system [ 1840.488374][ T9895] udevd[9895]: symlink '../../loop7' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:7' failed: Read-only file system [ 1840.592861][T20533] team0: Port device team_slave_0 added [ 1840.952779][T20533] team0: Port device team_slave_1 added [ 1841.077085][T20819] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1841.870384][T20819] Remounting filesystem read-only [ 1841.875949][T20820] NILFS (loop7): mounting fs with errors [ 1842.212514][T20815] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1842.300047][T20815] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1842.328434][T20825] loop2: detected capacity change from 0 to 64 [ 1842.345684][T20815] Remounting filesystem read-only [ 1842.369507][T12420] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 1842.709452][T20533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1842.716444][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.927984][T20533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.066358][T20533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1843.269543][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1843.534956][T20533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1843.753445][T20838] ================================================================== [ 1843.761554][T20838] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1843.768784][T20838] Read of size 8 at addr ffff88802f048cf8 by task syz.7.3734/20838 [ 1843.776678][T20838] [ 1843.779005][T20838] CPU: 1 UID: 0 PID: 20838 Comm: syz.7.3734 Not tainted syzkaller #0 PREEMPT(full) [ 1843.779050][T20838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1843.779074][T20838] Call Trace: [ 1843.779086][T20838] [ 1843.779100][T20838] dump_stack_lvl+0x116/0x1f0 [ 1843.779163][T20838] print_report+0xcd/0x630 [ 1843.779210][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.779256][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.779300][T20838] ? __phys_addr+0xe8/0x180 [ 1843.779342][T20838] ? __cpa_addr+0x1d3/0x220 [ 1843.779388][T20838] kasan_report+0xe0/0x110 [ 1843.779436][T20838] ? __cpa_addr+0x1d3/0x220 [ 1843.779490][T20838] __cpa_addr+0x1d3/0x220 [ 1843.779539][T20838] cpa_flush+0x28b/0x8a0 [ 1843.779592][T20838] ? __pfx_cpa_flush+0x10/0x10 [ 1843.779643][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.779688][T20838] ? pgprot2cachemode+0x9a/0x130 [ 1843.779732][T20838] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1843.779770][T20838] ? drm_gem_get_pages+0x6a0/0xa10 [ 1843.779822][T20838] change_page_attr_set_clr+0x34e/0x4a0 [ 1843.779881][T20838] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1843.779940][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.780002][T20838] _set_pages_array+0x1ab/0x2c0 [ 1843.780059][T20838] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1843.780102][T20838] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1843.780143][T20838] ? __pfx___might_resched+0x10/0x10 [ 1843.780186][T20838] drm_gem_shmem_mmap+0xc9/0x550 [ 1843.780223][T20838] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1843.780265][T20838] drm_gem_mmap_obj+0x1b5/0x560 [ 1843.780312][T20838] drm_gem_mmap+0x40b/0x620 [ 1843.780357][T20838] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1843.780400][T20838] ? vm_area_alloc+0x1f/0x160 [ 1843.780460][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.780505][T20838] ? lockdep_init_map_type+0x5c/0x280 [ 1843.780558][T20838] __mmap_region+0x1309/0x27a0 [ 1843.780598][T20838] ? __pfx___mmap_region+0x10/0x10 [ 1843.780632][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.780679][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.780723][T20838] ? rcu_is_watching+0x12/0xc0 [ 1843.780765][T20838] ? finish_task_switch.isra.0+0x221/0xc10 [ 1843.780826][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.780871][T20838] ? lockdep_hardirqs_on+0x7c/0x110 [ 1843.780930][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.780975][T20838] ? finish_task_switch.isra.0+0x221/0xc10 [ 1843.781035][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781081][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781181][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781226][T20838] ? __lock_acquire+0xb8a/0x1c90 [ 1843.781273][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781324][T20838] mmap_region+0x1ab/0x3f0 [ 1843.781360][T20838] ? __get_unmapped_area+0x267/0x440 [ 1843.781407][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781455][T20838] do_mmap+0xa3e/0x1210 [ 1843.781504][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781551][T20838] ? __pfx_do_mmap+0x10/0x10 [ 1843.781595][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781642][T20838] ? __pfx_down_write_killable+0x10/0x10 [ 1843.781691][T20838] vm_mmap_pgoff+0x29e/0x470 [ 1843.781748][T20838] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1843.781800][T20838] ? __fget_files+0x20e/0x3c0 [ 1843.781841][T20838] ? __entry_text_end+0x1020b5/0x1020b9 [ 1843.781891][T20838] ksys_mmap_pgoff+0x32c/0x5c0 [ 1843.781937][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1843.781986][T20838] __x64_sys_mmap+0x125/0x190 [ 1843.782036][T20838] do_syscall_64+0xcd/0xfa0 [ 1843.782072][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.782110][T20838] RIP: 0033:0x7f11b1b8efc9 [ 1843.782139][T20838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1843.782176][T20838] RSP: 002b:00007f11b29d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1843.782211][T20838] RAX: ffffffffffffffda RBX: 00007f11b1de6270 RCX: 00007f11b1b8efc9 [ 1843.782237][T20838] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1843.782263][T20838] RBP: 00007f11b1c11f91 R08: 0000000000000007 R09: 0000000100000000 [ 1843.782288][T20838] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1843.782311][T20838] R13: 00007f11b1de6308 R14: 00007f11b1de6270 R15: 00007ffe4a8586e8 [ 1843.782351][T20838] [ 1843.782365][T20838] [ 1844.117146][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/889.tmp-b7:2' failed: Read-only file system [ 1844.117729][T20838] Allocated by task 20838: [ 1844.220720][T20838] kasan_save_stack+0x33/0x60 [ 1844.225402][T20838] kasan_save_track+0x14/0x30 [ 1844.230073][T20838] __kasan_kmalloc+0xaa/0xb0 [ 1844.234655][T20838] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1844.240021][T20838] drm_gem_get_pages+0x144/0xa10 [ 1844.244955][T20838] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1844.251012][T20838] drm_gem_shmem_mmap+0xc9/0x550 [ 1844.255942][T20838] drm_gem_mmap_obj+0x1b5/0x560 [ 1844.260789][T20838] drm_gem_mmap+0x40b/0x620 [ 1844.265286][T20838] __mmap_region+0x1309/0x27a0 [ 1844.270037][T20838] mmap_region+0x1ab/0x3f0 [ 1844.274442][T20838] do_mmap+0xa3e/0x1210 [ 1844.278597][T20838] vm_mmap_pgoff+0x29e/0x470 [ 1844.283183][T20838] ksys_mmap_pgoff+0x32c/0x5c0 [ 1844.287943][T20838] __x64_sys_mmap+0x125/0x190 [ 1844.292614][T20838] do_syscall_64+0xcd/0xfa0 [ 1844.297103][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.302988][T20838] [ 1844.305290][T20838] The buggy address belongs to the object at ffff88802f048c00 [ 1844.305290][T20838] which belongs to the cache kmalloc-256 of size 256 [ 1844.319329][T20838] The buggy address is located 0 bytes to the right of [ 1844.319329][T20838] allocated 248-byte region [ffff88802f048c00, ffff88802f048cf8) [ 1844.333811][T20838] [ 1844.336119][T20838] The buggy address belongs to the physical page: [ 1844.342505][T20838] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f048 [ 1844.351256][T20838] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1844.359743][T20838] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1844.367271][T20838] page_type: f5(slab) [ 1844.371239][T20838] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0000c46680 dead000000000002 [ 1844.379813][T20838] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1844.388386][T20838] head: 00fff00000000040 ffff88813ffa6b40 ffffea0000c46680 dead000000000002 [ 1844.397045][T20838] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1844.405705][T20838] head: 00fff00000000001 ffffea0000bc1201 00000000ffffffff 00000000ffffffff [ 1844.414368][T20838] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1844.423018][T20838] page dumped because: kasan: bad access detected [ 1844.429412][T20838] page_owner tracks the page as allocated [ 1844.435115][T20838] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 109563170011, free_ts 109441458862 [ 1844.456646][T20838] post_alloc_hook+0x1c0/0x230 [ 1844.461420][T20838] get_page_from_freelist+0x10a3/0x3a30 [ 1844.466958][T20838] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1844.472853][T20838] alloc_pages_mpol+0x1fb/0x550 [ 1844.477736][T20838] new_slab+0x24a/0x360 [ 1844.481899][T20838] ___slab_alloc+0xdc4/0x1ae0 [ 1844.486579][T20838] __slab_alloc.constprop.0+0x63/0x110 [ 1844.492043][T20838] __kmalloc_cache_noprof+0x477/0x780 [ 1844.497419][T20838] vlan_vid_add+0x2ee/0x750 [ 1844.501909][T20838] vlan_device_event+0x1a39/0x2620 [ 1844.507012][T20838] notifier_call_chain+0xbc/0x410 [ 1844.512035][T20838] call_netdevice_notifiers_info+0xbe/0x140 [ 1844.517923][T20838] __dev_notify_flags+0x12c/0x2e0 [ 1844.522957][T20838] netif_change_flags+0x108/0x160 [ 1844.527989][T20838] do_setlink.constprop.0+0xb53/0x4380 [ 1844.533464][T20838] rtnl_newlink+0x1446/0x2000 [ 1844.538130][T20838] page last free pid 2 tgid 2 stack trace: [ 1844.543915][T20838] __free_frozen_pages+0x7df/0x1160 [ 1844.549120][T20838] __put_partials+0x130/0x170 [ 1844.553833][T20838] qlist_free_all+0x4d/0x120 [ 1844.558417][T20838] kasan_quarantine_reduce+0x195/0x1e0 [ 1844.563872][T20838] __kasan_slab_alloc+0x69/0x90 [ 1844.568718][T20838] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 1844.574602][T20838] copy_process+0x4b5/0x76a0 [ 1844.579185][T20838] kernel_clone+0xfc/0x930 [ 1844.583617][T20838] kernel_thread+0xd7/0x120 [ 1844.588107][T20838] kthreadd+0x503/0x800 [ 1844.592261][T20838] ret_from_fork+0x675/0x7d0 [ 1844.596854][T20838] ret_from_fork_asm+0x1a/0x30 [ 1844.601613][T20838] [ 1844.603921][T20838] Memory state around the buggy address: [ 1844.609530][T20838] ffff88802f048b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1844.617575][T20838] ffff88802f048c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1844.625623][T20838] >ffff88802f048c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1844.633664][T20838] ^ [ 1844.641622][T20838] ffff88802f048d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1844.649673][T20838] ffff88802f048d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1844.657731][T20838] ================================================================== [ 1844.720737][T20838] Disabling lock debugging due to kernel taint [ 1844.734551][T20838] ================================================================== [ 1844.742624][T20838] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1844.749853][T20838] Read of size 8 at addr ffff88802f048cf8 by task syz.7.3734/20838 [ 1844.757755][T20838] [ 1844.760088][T20838] CPU: 1 UID: 0 PID: 20838 Comm: syz.7.3734 Tainted: G B syzkaller #0 PREEMPT(full) [ 1844.760142][T20838] Tainted: [B]=BAD_PAGE [ 1844.760156][T20838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1844.760179][T20838] Call Trace: [ 1844.760191][T20838] [ 1844.760205][T20838] dump_stack_lvl+0x116/0x1f0 [ 1844.760267][T20838] print_report+0xcd/0x630 [ 1844.760314][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.760359][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.760403][T20838] ? __phys_addr+0xe8/0x180 [ 1844.760444][T20838] ? __cpa_addr+0x1d3/0x220 [ 1844.760489][T20838] kasan_report+0xe0/0x110 [ 1844.760538][T20838] ? __cpa_addr+0x1d3/0x220 [ 1844.760590][T20838] __cpa_addr+0x1d3/0x220 [ 1844.760638][T20838] cpa_flush+0x28b/0x8a0 [ 1844.760690][T20838] ? __pfx_cpa_flush+0x10/0x10 [ 1844.760749][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.760793][T20838] ? pgprot2cachemode+0x9a/0x130 [ 1844.760831][T20838] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1844.760869][T20838] ? drm_gem_get_pages+0x6a0/0xa10 [ 1844.760920][T20838] change_page_attr_set_clr+0x34e/0x4a0 [ 1844.760978][T20838] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1844.761036][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.761096][T20838] _set_pages_array+0x20a/0x2c0 [ 1844.761153][T20838] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1844.761195][T20838] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1844.761236][T20838] ? __pfx___might_resched+0x10/0x10 [ 1844.761278][T20838] drm_gem_shmem_mmap+0xc9/0x550 [ 1844.761315][T20838] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1844.761356][T20838] drm_gem_mmap_obj+0x1b5/0x560 [ 1844.761398][T20838] drm_gem_mmap+0x40b/0x620 [ 1844.761441][T20838] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1844.761483][T20838] ? vm_area_alloc+0x1f/0x160 [ 1844.761538][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.761580][T20838] ? lockdep_init_map_type+0x5c/0x280 [ 1844.761629][T20838] __mmap_region+0x1309/0x27a0 [ 1844.761665][T20838] ? __pfx___mmap_region+0x10/0x10 [ 1844.761698][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.761748][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.761791][T20838] ? rcu_is_watching+0x12/0xc0 [ 1844.761824][T20838] ? finish_task_switch.isra.0+0x221/0xc10 [ 1844.761882][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.761923][T20838] ? lockdep_hardirqs_on+0x7c/0x110 [ 1844.761979][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762020][T20838] ? finish_task_switch.isra.0+0x221/0xc10 [ 1844.762075][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762118][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762207][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762251][T20838] ? __lock_acquire+0xb8a/0x1c90 [ 1844.762297][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762345][T20838] mmap_region+0x1ab/0x3f0 [ 1844.762380][T20838] ? __get_unmapped_area+0x267/0x440 [ 1844.762426][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762474][T20838] do_mmap+0xa3e/0x1210 [ 1844.762523][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762568][T20838] ? __pfx_do_mmap+0x10/0x10 [ 1844.762612][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762658][T20838] ? __pfx_down_write_killable+0x10/0x10 [ 1844.762705][T20838] vm_mmap_pgoff+0x29e/0x470 [ 1844.762762][T20838] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1844.762814][T20838] ? __fget_files+0x20e/0x3c0 [ 1844.762856][T20838] ? __entry_text_end+0x1020b5/0x1020b9 [ 1844.762904][T20838] ksys_mmap_pgoff+0x32c/0x5c0 [ 1844.762949][T20838] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1844.762997][T20838] __x64_sys_mmap+0x125/0x190 [ 1844.763047][T20838] do_syscall_64+0xcd/0xfa0 [ 1844.763082][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.763117][T20838] RIP: 0033:0x7f11b1b8efc9 [ 1844.763145][T20838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1844.763183][T20838] RSP: 002b:00007f11b29d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1844.763216][T20838] RAX: ffffffffffffffda RBX: 00007f11b1de6270 RCX: 00007f11b1b8efc9 [ 1844.763242][T20838] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 1844.763267][T20838] RBP: 00007f11b1c11f91 R08: 0000000000000007 R09: 0000000100000000 [ 1844.763290][T20838] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 1844.763314][T20838] R13: 00007f11b1de6308 R14: 00007f11b1de6270 R15: 00007ffe4a8586e8 [ 1844.763352][T20838] [ 1844.763365][T20838] [ 1844.772280][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/889.tmp-b7:2' failed: Read-only file system [ 1844.774280][T20838] Allocated by task 20838: [ 1845.207272][T20838] kasan_save_stack+0x33/0x60 [ 1845.211963][T20838] kasan_save_track+0x14/0x30 [ 1845.216649][T20838] __kasan_kmalloc+0xaa/0xb0 [ 1845.221242][T20838] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1845.226619][T20838] drm_gem_get_pages+0x144/0xa10 [ 1845.231564][T20838] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1845.237635][T20838] drm_gem_shmem_mmap+0xc9/0x550 [ 1845.242571][T20838] drm_gem_mmap_obj+0x1b5/0x560 [ 1845.247427][T20838] drm_gem_mmap+0x40b/0x620 [ 1845.251935][T20838] __mmap_region+0x1309/0x27a0 [ 1845.256702][T20838] mmap_region+0x1ab/0x3f0 [ 1845.261116][T20838] do_mmap+0xa3e/0x1210 [ 1845.265279][T20838] vm_mmap_pgoff+0x29e/0x470 [ 1845.269877][T20838] ksys_mmap_pgoff+0x32c/0x5c0 [ 1845.274647][T20838] __x64_sys_mmap+0x125/0x190 [ 1845.279332][T20838] do_syscall_64+0xcd/0xfa0 [ 1845.283835][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.289727][T20838] [ 1845.292039][T20838] The buggy address belongs to the object at ffff88802f048c00 [ 1845.292039][T20838] which belongs to the cache kmalloc-256 of size 256 [ 1845.306090][T20838] The buggy address is located 0 bytes to the right of [ 1845.306090][T20838] allocated 248-byte region [ffff88802f048c00, ffff88802f048cf8) [ 1845.320584][T20838] [ 1845.322896][T20838] The buggy address belongs to the physical page: [ 1845.329292][T20838] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f048 [ 1845.338049][T20838] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1845.346541][T20838] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1845.354082][T20838] page_type: f5(slab) [ 1845.358067][T20838] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0000c46680 dead000000000002 [ 1845.366651][T20838] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1845.375235][T20838] head: 00fff00000000040 ffff88813ffa6b40 ffffea0000c46680 dead000000000002 [ 1845.383906][T20838] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1845.392576][T20838] head: 00fff00000000001 ffffea0000bc1201 00000000ffffffff 00000000ffffffff [ 1845.401250][T20838] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1845.409909][T20838] page dumped because: kasan: bad access detected [ 1845.416307][T20838] page_owner tracks the page as allocated [ 1845.422004][T20838] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 109563170011, free_ts 109441458862 [ 1845.443552][T20838] post_alloc_hook+0x1c0/0x230 [ 1845.448338][T20838] get_page_from_freelist+0x10a3/0x3a30 [ 1845.453883][T20838] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1845.459777][T20838] alloc_pages_mpol+0x1fb/0x550 [ 1845.464637][T20838] new_slab+0x24a/0x360 [ 1845.468809][T20838] ___slab_alloc+0xdc4/0x1ae0 [ 1845.473501][T20838] __slab_alloc.constprop.0+0x63/0x110 [ 1845.478984][T20838] __kmalloc_cache_noprof+0x477/0x780 [ 1845.484381][T20838] vlan_vid_add+0x2ee/0x750 [ 1845.488879][T20838] vlan_device_event+0x1a39/0x2620 [ 1845.493992][T20838] notifier_call_chain+0xbc/0x410 [ 1845.499026][T20838] call_netdevice_notifiers_info+0xbe/0x140 [ 1845.504929][T20838] __dev_notify_flags+0x12c/0x2e0 [ 1845.509977][T20838] netif_change_flags+0x108/0x160 [ 1845.515024][T20838] do_setlink.constprop.0+0xb53/0x4380 [ 1845.520482][T20838] rtnl_newlink+0x1446/0x2000 [ 1845.525156][T20838] page last free pid 2 tgid 2 stack trace: [ 1845.530946][T20838] __free_frozen_pages+0x7df/0x1160 [ 1845.536162][T20838] __put_partials+0x130/0x170 [ 1845.540863][T20838] qlist_free_all+0x4d/0x120 [ 1845.545453][T20838] kasan_quarantine_reduce+0x195/0x1e0 [ 1845.550918][T20838] __kasan_slab_alloc+0x69/0x90 [ 1845.555780][T20838] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 1845.561675][T20838] copy_process+0x4b5/0x76a0 [ 1845.566265][T20838] kernel_clone+0xfc/0x930 [ 1845.570678][T20838] kernel_thread+0xd7/0x120 [ 1845.575194][T20838] kthreadd+0x503/0x800 [ 1845.579360][T20838] ret_from_fork+0x675/0x7d0 [ 1845.583964][T20838] ret_from_fork_asm+0x1a/0x30 [ 1845.588734][T20838] [ 1845.591045][T20838] Memory state around the buggy address: [ 1845.596666][T20838] ffff88802f048b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1845.604723][T20838] ffff88802f048c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1845.612781][T20838] >ffff88802f048c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1845.620831][T20838] ^ [ 1845.628797][T20838] ffff88802f048d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1845.636853][T20838] ffff88802f048d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1845.644906][T20838] ================================================================== [ 1845.817310][T20837] ================================================================== [ 1845.825414][T20837] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1845.832629][T20837] Read of size 8 at addr ffff88802f048cf8 by task syz.7.3734/20837 [ 1845.840516][T20837] [ 1845.842842][T20837] CPU: 0 UID: 0 PID: 20837 Comm: syz.7.3734 Tainted: G B syzkaller #0 PREEMPT(full) [ 1845.842889][T20837] Tainted: [B]=BAD_PAGE [ 1845.842902][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1845.842922][T20837] Call Trace: [ 1845.842935][T20837] [ 1845.842948][T20837] dump_stack_lvl+0x116/0x1f0 [ 1845.843005][T20837] print_report+0xcd/0x630 [ 1845.843046][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.843086][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.843126][T20837] ? __phys_addr+0xe8/0x180 [ 1845.843161][T20837] ? __cpa_addr+0x1d3/0x220 [ 1845.843201][T20837] kasan_report+0xe0/0x110 [ 1845.843245][T20837] ? __cpa_addr+0x1d3/0x220 [ 1845.843291][T20837] __cpa_addr+0x1d3/0x220 [ 1845.843333][T20837] cpa_flush+0xec/0x8a0 [ 1845.843380][T20837] ? __pfx_cpa_flush+0x10/0x10 [ 1845.843425][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.843464][T20837] ? pgprot2cachemode+0x9a/0x130 [ 1845.843498][T20837] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1845.843537][T20837] set_pages_array_wb+0x238/0x280 [ 1845.843587][T20837] ? __pfx_set_pages_array_wb+0x10/0x10 [ 1845.843644][T20837] ? __pfx___might_resched+0x10/0x10 [ 1845.843675][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.843718][T20837] drm_gem_shmem_put_pages_locked+0x27e/0x300 [ 1845.843759][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.843799][T20837] drm_gem_shmem_vm_close+0x63/0xc0 [ 1845.843832][T20837] ? __pfx_drm_gem_shmem_vm_close+0x10/0x10 [ 1845.843866][T20837] remove_vma+0x88/0x160 [ 1845.843917][T20837] exit_mmap+0x50a/0xb90 [ 1845.843962][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.844003][T20837] ? __pfx_exit_mmap+0x10/0x10 [ 1845.844045][T20837] ? lock_release+0x201/0x2f0 [ 1845.844091][T20837] ? lock_release+0x201/0x2f0 [ 1845.844129][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.844179][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.844218][T20837] ? arch_uprobe_clear_state+0x16/0x150 [ 1845.844267][T20837] __mmput+0x12a/0x410 [ 1845.844297][T20837] mmput+0x62/0x70 [ 1845.844323][T20837] do_exit+0x7c7/0x2bf0 [ 1845.844363][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.844405][T20837] ? __pfx_do_exit+0x10/0x10 [ 1845.844441][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.844481][T20837] ? do_raw_spin_lock+0x12c/0x2b0 [ 1845.844530][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.844569][T20837] ? rcu_is_watching+0x12/0xc0 [ 1845.844603][T20837] do_group_exit+0xd3/0x2a0 [ 1845.844643][T20837] get_signal+0x2671/0x26d0 [ 1845.844681][T20837] ? __pfx_get_signal+0x10/0x10 [ 1845.844712][T20837] ? do_futex+0x122/0x350 [ 1845.844760][T20837] ? __pfx_do_futex+0x10/0x10 [ 1845.844804][T20837] arch_do_signal_or_restart+0x8f/0x7c0 [ 1845.844860][T20837] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1845.844919][T20837] ? xfd_validate_state+0x61/0x180 [ 1845.844960][T20837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1845.845004][T20837] exit_to_user_mode_loop+0x85/0x130 [ 1845.845053][T20837] do_syscall_64+0x426/0xfa0 [ 1845.845085][T20837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1845.845119][T20837] RIP: 0033:0x7f11b1b8efc9 [ 1845.845142][T20837] Code: Unable to access opcode bytes at 0x7f11b1b8ef9f. [ 1845.845159][T20837] RSP: 002b:00007f11b29f90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1845.845190][T20837] RAX: fffffffffffffe00 RBX: 00007f11b1de6188 RCX: 00007f11b1b8efc9 [ 1845.845213][T20837] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11b1de6188 [ 1845.845235][T20837] RBP: 00007f11b1de6180 R08: 0000000000000000 R09: 0000000000000000 [ 1845.845255][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1845.845276][T20837] R13: 00007f11b1de6218 R14: 00007ffe4a858600 R15: 00007ffe4a8586e8 [ 1845.845311][T20837] [ 1845.845322][T20837] [ 1846.200745][T20837] Allocated by task 20838: [ 1846.205157][T20837] kasan_save_stack+0x33/0x60 [ 1846.209848][T20837] kasan_save_track+0x14/0x30 [ 1846.214528][T20837] __kasan_kmalloc+0xaa/0xb0 [ 1846.219121][T20837] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1846.224504][T20837] drm_gem_get_pages+0x144/0xa10 [ 1846.229448][T20837] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1846.235518][T20837] drm_gem_shmem_mmap+0xc9/0x550 [ 1846.240461][T20837] drm_gem_mmap_obj+0x1b5/0x560 [ 1846.245318][T20837] drm_gem_mmap+0x40b/0x620 [ 1846.249822][T20837] __mmap_region+0x1309/0x27a0 [ 1846.254584][T20837] mmap_region+0x1ab/0x3f0 [ 1846.259002][T20837] do_mmap+0xa3e/0x1210 [ 1846.263163][T20837] vm_mmap_pgoff+0x29e/0x470 [ 1846.267759][T20837] ksys_mmap_pgoff+0x32c/0x5c0 [ 1846.272527][T20837] __x64_sys_mmap+0x125/0x190 [ 1846.277220][T20837] do_syscall_64+0xcd/0xfa0 [ 1846.281720][T20837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.287616][T20837] [ 1846.289927][T20837] The buggy address belongs to the object at ffff88802f048c00 [ 1846.289927][T20837] which belongs to the cache kmalloc-256 of size 256 [ 1846.303977][T20837] The buggy address is located 0 bytes to the right of [ 1846.303977][T20837] allocated 248-byte region [ffff88802f048c00, ffff88802f048cf8) [ 1846.318465][T20837] [ 1846.320777][T20837] The buggy address belongs to the physical page: [ 1846.327177][T20837] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f048 [ 1846.335934][T20837] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1846.344428][T20837] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1846.351970][T20837] page_type: f5(slab) [ 1846.355950][T20837] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0000c46680 dead000000000002 [ 1846.364537][T20837] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1846.373123][T20837] head: 00fff00000000040 ffff88813ffa6b40 ffffea0000c46680 dead000000000002 [ 1846.381795][T20837] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1846.390462][T20837] head: 00fff00000000001 ffffea0000bc1201 00000000ffffffff 00000000ffffffff [ 1846.399137][T20837] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1846.407793][T20837] page dumped because: kasan: bad access detected [ 1846.414190][T20837] page_owner tracks the page as allocated [ 1846.419891][T20837] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 109563170011, free_ts 109441458862 [ 1846.441437][T20837] post_alloc_hook+0x1c0/0x230 [ 1846.446224][T20837] get_page_from_freelist+0x10a3/0x3a30 [ 1846.451768][T20837] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1846.457660][T20837] alloc_pages_mpol+0x1fb/0x550 [ 1846.462519][T20837] new_slab+0x24a/0x360 [ 1846.466690][T20837] ___slab_alloc+0xdc4/0x1ae0 [ 1846.471384][T20837] __slab_alloc.constprop.0+0x63/0x110 [ 1846.476862][T20837] __kmalloc_cache_noprof+0x477/0x780 [ 1846.482253][T20837] vlan_vid_add+0x2ee/0x750 [ 1846.486753][T20837] vlan_device_event+0x1a39/0x2620 [ 1846.491864][T20837] notifier_call_chain+0xbc/0x410 [ 1846.496893][T20837] call_netdevice_notifiers_info+0xbe/0x140 [ 1846.502793][T20837] __dev_notify_flags+0x12c/0x2e0 [ 1846.507835][T20837] netif_change_flags+0x108/0x160 [ 1846.512887][T20837] do_setlink.constprop.0+0xb53/0x4380 [ 1846.518342][T20837] rtnl_newlink+0x1446/0x2000 [ 1846.523017][T20837] page last free pid 2 tgid 2 stack trace: [ 1846.528810][T20837] __free_frozen_pages+0x7df/0x1160 [ 1846.534027][T20837] __put_partials+0x130/0x170 [ 1846.538726][T20837] qlist_free_all+0x4d/0x120 [ 1846.543322][T20837] kasan_quarantine_reduce+0x195/0x1e0 [ 1846.548783][T20837] __kasan_slab_alloc+0x69/0x90 [ 1846.553640][T20837] kmem_cache_alloc_node_noprof+0x28a/0x770 [ 1846.559531][T20837] copy_process+0x4b5/0x76a0 [ 1846.564119][T20837] kernel_clone+0xfc/0x930 [ 1846.568530][T20837] kernel_thread+0xd7/0x120 [ 1846.573032][T20837] kthreadd+0x503/0x800 [ 1846.577198][T20837] ret_from_fork+0x675/0x7d0 [ 1846.581800][T20837] ret_from_fork_asm+0x1a/0x30 [ 1846.586566][T20837] [ 1846.588907][T20837] Memory state around the buggy address: [ 1846.594525][T20837] ffff88802f048b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1846.602582][T20837] ffff88802f048c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1846.610636][T20837] >ffff88802f048c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 1846.618684][T20837] ^ [ 1846.626651][T20837] ffff88802f048d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1846.634708][T20837] ffff88802f048d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1846.642764][T20837] ================================================================== [ 1846.715634][T20533] hsr_slave_0: entered promiscuous mode [ 1846.722006][T20533] hsr_slave_1: entered promiscuous mode [ 1846.727935][T20533] debugfs: 'hsr0' already exists in 'hsr' [ 1846.739879][T20533] Cannot create hsr debugfs directory [ 1846.827201][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/891.tmp-b7:2' failed: Read-only file system [ 1847.273477][ T5889] udevd[5889]: symlink '../../loop7' '/dev/disk/by-diskseq/890.tmp-b7:7' failed: Read-only file system [ 1847.626072][ T9895] udevd[9895]: symlink '../../loop2' '/dev/disk/by-diskseq/891.tmp-b7:2' failed: Read-only file system [ 1847.687006][T20029] usb 1-1: USB disconnect, device number 14 [ 1847.797730][ T9895] udevd[9895]: symlink '../../loop0' '/dev/disk/by-diskseq/880.tmp-b7:0' failed: Read-only file system [ 1848.048695][ T9895] udevd[9895]: symlink '../../loop8' '/dev/disk/by-diskseq/888.tmp-b7:8' failed: Read-only file system [ 1848.157696][T20533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1848.173396][T20533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1848.183636][T20533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1848.194160][T20533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1848.268021][T20533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1848.286377][T20533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1848.297572][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.304682][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1848.319738][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.326826][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1848.533909][T20533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1848.791832][T20533] veth0_vlan: entered promiscuous mode [ 1848.805545][T20533] veth1_vlan: entered promiscuous mode [ 1848.836314][T20533] veth0_macvtap: entered promiscuous mode [ 1848.846143][T20533] veth1_macvtap: entered promiscuous mode [ 1848.866159][T20533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1848.883344][T20533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1848.898180][T10971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.921426][T10971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.935852][T10971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.950387][T10971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.996902][T15673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1849.020504][T15673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1849.048137][T15672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1849.056459][T15672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1849.107008][ T9895] udevd[9895]: symlink '../../loop5' '/dev/disk/by-diskseq/846.tmp-b7:5' failed: Read-only file system