last executing test programs: 11m48.148030103s ago: executing program 2 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioprio_get$uid(0x3, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 11m47.783063481s ago: executing program 2 (id=99): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0xac, 0x0, 0x2, 0x703d2c, 0x25dfdbfa, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x40}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfffb}, {0x8, 0xb, 0x1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="702300001d"], 0x2370}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 11m46.951395038s ago: executing program 2 (id=100): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f00000000c0)={0x70004, 0x2}, 0x8) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) 11m45.671005195s ago: executing program 2 (id=103): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@jqfmt_vfsv1}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@bh}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 11m44.060337049s ago: executing program 2 (id=104): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x53699401}}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@jqfmt_vfsv0}, {@auto_da_alloc}], [], 0x2c}, 0x1, 0x469, &(0x7f0000001b00)="$eJzs28tvG8UfAPDvOnHf/SW/Uh4tBQzlEfFImrRAD1yKQOoFCQkO5RjStCp1G9QEiVYVDRzKEfUvAI5I/AWc6AUBJxBXuCOkCvVCQQItWnttTPzAseO6rT8faeOd3dnd+e7sJLMzTgAjq5T9SCJ2RMSPETEREWNrM5SqHzeuX1z4/frFhSTS9LVfk+yw+O36xYVa1iT/3J4npgr1TU2Wz184PV8uL57L0zMrZ96eWT5/4ZlTZ+ZPLp5cPDt3+PChg7PPPzf37IbEuTMr6973lvbtOfrGlVcWjl1585vPs8LtyPc3xlE12fc1S1FqewMe6/vst5ad+WfbCueWlLX18YgoVtr/RIxVUlUT8fIHQy0cMFBpmqabm7bWewCrKXAHS2LYJQCGo/aHPnv/rS03sfsxdNeOVF+Asrhv5Et1z3gU8jzFhvfbjVaKiGOrf3ycLdFyHAIAYGN9mfV/nm7V/yvEPQ35/pfPDU1GxP8jYldE3BURuyPi7ohK3nsj4r51Xr+0Jt3c//l+a0+BdenakUheyOe2/t3/q/X+YnIsT+2sxF9MTpwqLx7I78lUFDdn6dkO17j60g8ftdvX2P/Lluz6tb5gXo5fxtcM0B2fX5nvJ+ZG196vjAFeao4/qc8EJBGxJyL29nD+LRFx6snP9jXtaJgo6hx/B+M9FGiN9NOIJ6r1vxpr4m8saof5yZktUV48MFN7Kpp9+93lV9td/7/rf7Cy+t/W8vmvxz+ZNM7XLq//Gpd/+rDtO02vz/+m5PXK+qZ827vzKyvnZiM2JavN2+f+ObaWruXP4p/a37r974r465P8uPsjInuIH4iIByPiobzsD0fEIxGxv0P8X7/46Fu9xz9YWfzH11X/618ZO/3VF+2u3139H6qsTeVbuvn9120B+7l3AAAAcLsoVL4DnxSm6+uFwvR09Tv8u2Nboby0vPLUiaV3zh6vfld+MoqF2kjXRMN46Gw+5lJLz+VjxbX0wcq4cZqm6dZKenphqTyoOXWgO9vbtP/Mz2PDLh0wcOuaR/MfXnBH2YB5dOA2pf3D6NL+YXRp/zC6WrX/SxE3hlAU4Cbz9x9Gl/YPo0v7h9Gl/cNI6uf/+jut7Do6qDPfjitXI6JdnrGez7w5Ivot4ePbez08CsO+q92vFPOnvb6l0CLzn8MqYVaP3Wa+FDerYEP+xQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBB/g4AAP//rQblOA==") ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870dffe) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") 11m43.314489604s ago: executing program 2 (id=107): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x7071, 0x0, 0x2, 0x156}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001d80)={0x2, 0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/18, 0x12}], &(0x7f0000001cc0)}, 0x20) 11m41.758466496s ago: executing program 32 (id=107): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x7071, 0x0, 0x2, 0x156}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001d80)={0x2, 0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/18, 0x12}], &(0x7f0000001cc0)}, 0x20) 11m24.466932217s ago: executing program 4 (id=108): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 11m24.116512874s ago: executing program 4 (id=138): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000001840)=ANY=[@ANYBLOB="020500030a0000000000000000000000030006000000000002004e260a014105000000000000000002000100000004d30000000b010000e003000503"], 0x50}, 0x1, 0x7}, 0x8080) 11m23.954841138s ago: executing program 4 (id=139): r0 = socket(0xa, 0x3, 0xff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000040)=0x7, 0x4) 11m23.801098492s ago: executing program 4 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) clock_gettime(0x4, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe0000060000"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xf, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="cbb2945152756987ee248a32494c", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') pread64(r6, &(0x7f0000000500)=""/15, 0xf, 0x40100000087) 11m19.706877537s ago: executing program 4 (id=145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 11m3.791069869s ago: executing program 33 (id=145): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b326e078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 4m53.452327732s ago: executing program 0 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4, 0x3000000}, 0x27) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002, 0x0, 0x6}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 4m52.233119516s ago: executing program 0 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, 0x0, &(0x7f0000000080)) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)={[{@test_dummy_encryption}, {@dioread_nolock}]}, 0x2, 0xbce, &(0x7f0000001000)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 4m51.05198897s ago: executing program 0 (id=1471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xeffffff9) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) write$eventfd(r3, 0x0, 0x0) read(r3, &(0x7f0000000340)=""/131, 0x83) 4m49.786985936s ago: executing program 0 (id=1475): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x843, &(0x7f0000000500)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}]}, 0x1, 0x24b, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 4m49.744294847s ago: executing program 0 (id=1477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a400fe0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf7112623"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x1, 0x803, 0x0) 4m49.462487472s ago: executing program 0 (id=1482): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x47, 0xc59, &(0x7f0000000c80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000007c0)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c646d6f64653d3078abd56d35307d1c4400d85c6e806c8a303030"], 0x5, 0xa51, &(0x7f0000001240)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(0x0, 0x0, 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 4m48.872304905s ago: executing program 34 (id=1482): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x47, 0xc59, &(0x7f0000000c80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000007c0)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b3d72656c617865642c6f76657272696465726f636b7065726d2c646d6f64653d3078abd56d35307d1c4400d85c6e806c8a303030"], 0x5, 0xa51, &(0x7f0000001240)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$bind(0x0, 0x0, 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1m56.816921966s ago: executing program 1 (id=2077): syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000040)=ANY=[], 0x85, 0x6c4, &(0x7f0000000280)="$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") open(&(0x7f0000000000)='./bus\x00', 0x64842, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 1m53.964463444s ago: executing program 1 (id=2088): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m53.373928605s ago: executing program 1 (id=2091): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000280)=@raw=[@alu={0x0, 0x1, 0x0, 0x4, 0x7, 0x2}, @ringbuf_query, @tail_call, @tail_call], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x201}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 1m39.155692473s ago: executing program 1 (id=2093): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m38.882877519s ago: executing program 1 (id=2120): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x237, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x8009, 0xa, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xd, 0x7, 0x4}}}}}]}}]}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 1m36.054206756s ago: executing program 1 (id=2132): r0 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x7b7, 0x0, 0x0, 0x1000, 0x3, r0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 1m35.626661715s ago: executing program 35 (id=2132): r0 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x7b7, 0x0, 0x0, 0x1000, 0x3, r0, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0x2000008, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x8, 0x2, 0x821b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 23.092918323s ago: executing program 5 (id=2420): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) 7.082381057s ago: executing program 7 (id=2480): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000480), &(0x7f0000000080)=r0}, 0x20) 6.94983301s ago: executing program 7 (id=2481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x42, 0x40, 0xc2, 0x1, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffff", @ANYRES8=r0], 0x48) 6.335134142s ago: executing program 7 (id=2482): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 5.187038665s ago: executing program 3 (id=2485): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001400)=""/26, 0x1a}], 0x2}, 0x2fa}], 0x1, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 4.819672422s ago: executing program 6 (id=2486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x6) 4.425907831s ago: executing program 6 (id=2487): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.135093866s ago: executing program 6 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) 4.126480516s ago: executing program 3 (id=2489): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="b9f2", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="b9", 0x1}], 0x1}, 0x24040080) 3.96980427s ago: executing program 6 (id=2490): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x7e}}, 0x10) 3.658994906s ago: executing program 7 (id=2491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x801c581f, 0x0) 3.623652377s ago: executing program 5 (id=2424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x3, 0xff, 0x86, 0xfffff014}]}) 3.559131178s ago: executing program 3 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001500)={r0, &(0x7f0000001640), 0x0}, 0x20) 2.759676464s ago: executing program 7 (id=2493): socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) personality(0x619641b6fb4b8591) uname(0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x800) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) futex(0x0, 0x107, 0x2, 0x0, 0x0, 0x2) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x6, 0x1d, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162eb7ad3300", [0x8, 0x5]}}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.724182915s ago: executing program 3 (id=2494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x3, 0x42, 0x40, 0xc2, 0x1, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5635f5f", @ANYRES8=r0], 0x48) 2.543117259s ago: executing program 5 (id=2495): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) sendmsg$inet(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000006c0)="c5e8f524f988b5047d36e2be06fdd8aa48f58a9de3b9c0bdc47f5e8b9664cf24ee7c3a66ae629f3cffb03d4e1c0c243b8f9a916e814132cd5543c4bc57d6bb2fecec544408b324ce1e9e06f010da0f42329d39f71cb9f4ac8434d7fe42372112d3aca7169d8e39b0d2b58c441574e13ce69b14f31b489e", 0x77}, {&(0x7f0000000740)="c31cea2c90b8cb3be54f514f5cfbf2c59e5a00946c8d4d18580e8a290aa4421df27e05", 0x23}, {&(0x7f0000000a00)="b3c1", 0x2}], 0x3}, 0x4000080) close(r1) 2.195844786s ago: executing program 3 (id=2496): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001400)=""/26, 0x1a}], 0x2}, 0x2fa}], 0x1, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 1.637304357s ago: executing program 6 (id=2497): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.231129985s ago: executing program 5 (id=2498): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230055) close(r2) 1.038531489s ago: executing program 6 (id=2499): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 400.229982ms ago: executing program 5 (id=2500): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 167.118747ms ago: executing program 3 (id=2501): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000cb93000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 21.44305ms ago: executing program 5 (id=2502): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x19, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000ffffffff000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000051000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 7 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) kernel console output (not intermixed with test programs): rom the descriptor's value: 3 [ 340.532793][ T5813] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 340.543997][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.554915][ T5813] usb 6-1: SerialNumber: syz [ 340.598486][ T8651] loop3: detected capacity change from 0 to 1024 [ 340.627043][ T8651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 340.654062][ T8651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.792040][ T5813] usb 6-1: 0:2 : does not exist [ 340.896376][ T5813] usb 6-1: USB disconnect, device number 3 [ 341.033479][ T7956] udevd[7956]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.857242][ T8662] loop5: detected capacity change from 0 to 1024 [ 341.887306][ T8662] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 341.947382][ T8662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.993232][ T8669] fuse: Bad value for 'fd' [ 342.321250][ T8676] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 342.354215][ T8676] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 342.366638][ T8676] EXT4-fs (loop5): This should not happen!! Data will be lost [ 342.366638][ T8676] [ 342.376767][ T8676] EXT4-fs (loop5): Total free blocks count 0 [ 342.383271][ T8676] EXT4-fs (loop5): Free/Dirty block details [ 342.389355][ T8676] EXT4-fs (loop5): free_blocks=20480 [ 342.394898][ T8676] EXT4-fs (loop5): dirty_blocks=80 [ 342.400134][ T8676] EXT4-fs (loop5): Block reservation details [ 342.406309][ T8676] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 342.860570][ T3436] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 345.909425][ T8706] loop3: detected capacity change from 0 to 1024 [ 345.931623][ T8706] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.016211][ T8706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.454130][ T8713] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 346.486267][ T8713] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 346.498634][ T8713] EXT4-fs (loop3): This should not happen!! Data will be lost [ 346.498634][ T8713] [ 346.508581][ T8713] EXT4-fs (loop3): Total free blocks count 0 [ 346.514745][ T8713] EXT4-fs (loop3): Free/Dirty block details [ 346.520762][ T8713] EXT4-fs (loop3): free_blocks=20480 [ 346.526196][ T8713] EXT4-fs (loop3): dirty_blocks=80 [ 346.531429][ T8713] EXT4-fs (loop3): Block reservation details [ 346.537793][ T8713] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 347.047096][ T3436] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 348.340183][ T8724] loop3: detected capacity change from 0 to 512 [ 348.436815][ T7956] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 351.326294][ T8736] loop3: detected capacity change from 0 to 512 [ 351.437674][ T8736] EXT4-fs error (device loop3): ext4_quota_enable:7144: inode #3: comm syz.3.688: iget: checksum invalid [ 351.517071][ T8736] EXT4-fs error (device loop3): ext4_quota_enable:7147: comm syz.3.688: Bad quota inode: 3, type: 0 [ 351.574076][ T8736] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix. [ 351.646979][ T8736] EXT4-fs (loop3): mount failed [ 352.716400][ T8751] loop5: detected capacity change from 0 to 1024 [ 352.735706][ T8751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 352.778206][ T8751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.146781][ T8759] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 353.180806][ T8759] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 353.193150][ T8759] EXT4-fs (loop5): This should not happen!! Data will be lost [ 353.193150][ T8759] [ 353.203309][ T8759] EXT4-fs (loop5): Total free blocks count 0 [ 353.209457][ T8759] EXT4-fs (loop5): Free/Dirty block details [ 353.215573][ T8759] EXT4-fs (loop5): free_blocks=20480 [ 353.221052][ T8759] EXT4-fs (loop5): dirty_blocks=80 [ 353.226329][ T8759] EXT4-fs (loop5): Block reservation details [ 353.233629][ T8759] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 353.710286][ T59] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 354.187364][ T8769] 9pnet_virtio: no channels available for device syz [ 361.511198][ T8813] overlayfs: failed to clone upperpath [ 362.907158][ T8830] loop3: detected capacity change from 0 to 1024 [ 362.974726][ T8830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 362.987729][ T8830] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.007453][ T8830] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.716: Freeing blocks not in datazone - block = 0, count = 16 [ 363.024042][ T8830] EXT4-fs (loop3): Remounting filesystem read-only [ 363.069531][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.195692][ T8857] loop3: detected capacity change from 0 to 256 [ 364.403737][ T8859] loop5: detected capacity change from 0 to 1024 [ 364.449680][ T8859] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 364.509009][ T8859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.074023][ T8870] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 365.092126][ T8870] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 365.104513][ T8870] EXT4-fs (loop5): This should not happen!! Data will be lost [ 365.104513][ T8870] [ 365.114650][ T8870] EXT4-fs (loop5): Total free blocks count 0 [ 365.120652][ T8870] EXT4-fs (loop5): Free/Dirty block details [ 365.126698][ T8870] EXT4-fs (loop5): free_blocks=20480 [ 365.132000][ T8870] EXT4-fs (loop5): dirty_blocks=80 [ 365.137198][ T8870] EXT4-fs (loop5): Block reservation details [ 365.143403][ T8870] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 365.753647][ T4258] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 366.311561][ T8862] loop3: detected capacity change from 0 to 512 [ 366.340362][ T8862] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 366.408705][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 366.408721][ T28] audit: type=1804 audit(1784059316.592:141): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.723" name="/newroot/158/file0/bus" dev="loop3" ino=1048634 res=1 errno=0 [ 366.539353][ T28] audit: type=1804 audit(1784059316.642:142): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.723" name="/newroot/158/file0/bus" dev="loop3" ino=1048634 res=1 errno=0 [ 366.653982][ T28] audit: type=1804 audit(1784059316.642:143): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.723" name="/newroot/158/file0/bus" dev="loop3" ino=1048634 res=1 errno=0 [ 366.980958][ T8878] loop5: detected capacity change from 0 to 512 [ 367.032021][ T8878] EXT4-fs: Ignoring removed oldalloc option [ 367.086674][ T8878] EXT4-fs (loop5): Test dummy encryption mode enabled [ 367.184861][ T8878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.284816][ T8878] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 367.394188][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.776690][ T8900] loop3: detected capacity change from 0 to 1024 [ 368.826020][ T8900] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.057997][ T8900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.668398][ T8902] netlink: 35 bytes leftover after parsing attributes in process `syz.0.734'. [ 369.677621][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.734'. [ 370.044007][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.227787][ T8921] loop3: detected capacity change from 0 to 512 [ 371.250713][ T8921] EXT4-fs: Ignoring removed bh option [ 371.314847][ T8921] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 371.397402][ T8921] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.738: iget: bad i_size value: 3298534883338 [ 371.484164][ T8921] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.738: couldn't read orphan inode 15 (err -117) [ 371.583427][ T8921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.706559][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.641171][ T8935] loop5: detected capacity change from 0 to 4096 [ 372.774172][ T8935] EXT4-fs (loop5): Test dummy encryption mode enabled [ 372.855464][ T8935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.205317][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.608878][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 373.624228][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 373.634627][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 373.645759][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 374.261449][ T8949] loop5: detected capacity change from 0 to 8192 [ 374.367527][ T8949] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.415655][ T8949] netlink: 35 bytes leftover after parsing attributes in process `syz.5.745'. [ 374.456711][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.745'. [ 376.348998][ T8973] loop5: detected capacity change from 0 to 4096 [ 376.364250][ T8973] EXT4-fs (loop5): Test dummy encryption mode enabled [ 376.441842][ T8973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.952959][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.642391][ T5157] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 378.696048][ T5157] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 378.811152][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.817635][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.018307][ T5157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 379.029689][ T5157] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 379.043496][ T5157] usb 6-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 379.053681][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.064689][ T5157] usb 6-1: config 0 descriptor?? [ 379.072758][ T8986] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 380.935299][ T5157] wacom 0003:056A:032B.0002: ignoring exceeding usage max [ 380.970055][ T5157] wacom 0003:056A:032B.0002: unknown main item tag 0x2 [ 381.017949][ T5157] wacom 0003:056A:032B.0002: hidraw0: USB HID v0.05 Device [HID 056a:032b] on usb-dummy_hcd.5-1/input0 [ 381.159525][ T5157] usb 6-1: USB disconnect, device number 4 [ 381.261473][ T9016] fido_id[9016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 384.135754][ T9045] loop3: detected capacity change from 0 to 256 [ 384.749170][ T9049] loop3: detected capacity change from 0 to 256 [ 384.796334][ T9049] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.025828][ T9051] loop3: detected capacity change from 0 to 256 [ 385.150967][ T9051] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 385.636506][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 385.658775][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 385.669525][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 385.680472][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 388.028641][ T9068] loop3: detected capacity change from 0 to 4096 [ 388.037208][ T9068] EXT4-fs (loop3): Test dummy encryption mode enabled [ 388.189588][ T9068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.104781][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.261851][ T9081] loop5: detected capacity change from 0 to 2048 [ 389.383628][ T9081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.432439][ T9081] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.472982][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 389.490932][ T9085] loop3: detected capacity change from 0 to 2048 [ 389.502637][ T9081] syz_tun: refused to change device tx_queue_len [ 389.566672][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.598469][ T9085] xt_hashlimit: size too large, truncated to 1048576 [ 390.633671][ T9102] netlink: 104 bytes leftover after parsing attributes in process `syz.5.794'. [ 393.734894][ T9135] loop5: detected capacity change from 0 to 40427 [ 393.750885][ T9135] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 393.768830][ T9135] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 393.787885][ T9135] F2FS-fs (loop5): invalid crc value [ 393.809906][ T9135] F2FS-fs (loop5): Found nat_bits in checkpoint [ 393.887467][ T9135] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 393.894865][ T9135] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 395.338901][ T9179] loop3: detected capacity change from 0 to 40427 [ 395.372579][ T9179] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 395.388514][ T9179] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 395.407189][ T9179] F2FS-fs (loop3): invalid crc value [ 395.434842][ T9179] F2FS-fs (loop3): Found nat_bits in checkpoint [ 395.498067][ T9179] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 395.536062][ T9179] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 398.031162][ T9236] loop3: detected capacity change from 0 to 512 [ 398.051378][ T9236] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 398.087907][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 398.124110][ T9236] EXT4-fs (loop3): 1 orphan inode deleted [ 398.130591][ T9236] EXT4-fs (loop3): 1 truncate cleaned up [ 398.138167][ T9236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.966626][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.689620][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 401.165447][ T9283] netlink: 104 bytes leftover after parsing attributes in process `syz.3.859'. [ 408.775981][ T9339] bridge_slave_1: left allmulticast mode [ 408.782021][ T9339] bridge_slave_1: left promiscuous mode [ 408.789753][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.132385][ T9339] bridge_slave_0: left allmulticast mode [ 409.138142][ T9339] bridge_slave_0: left promiscuous mode [ 409.144063][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.968982][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 409.983732][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 409.994289][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 410.005327][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 410.014989][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 411.794278][ T9367] netlink: 'syz.1.887': attribute type 9 has an invalid length. [ 411.802186][ T9367] netlink: 'syz.1.887': attribute type 7 has an invalid length. [ 411.809997][ T9367] netlink: 'syz.1.887': attribute type 8 has an invalid length. [ 414.631863][ T9402] loop5: detected capacity change from 0 to 256 [ 414.710991][ T9402] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 414.896839][ T9402] netlink: 'syz.5.900': attribute type 9 has an invalid length. [ 414.904600][ T9402] netlink: 'syz.5.900': attribute type 7 has an invalid length. [ 414.912449][ T9402] netlink: 'syz.5.900': attribute type 8 has an invalid length. [ 415.453974][ T9404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.901'. [ 415.778243][ T9416] loop3: detected capacity change from 0 to 512 [ 415.949911][ T9416] EXT4-fs error (device loop3): __ext4_iget:5078: inode #11: block 1: comm syz.3.905: invalid block [ 416.001504][ T9416] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.905: couldn't read orphan inode 11 (err -117) [ 416.078179][ T9416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.293377][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.719174][ T9441] netlink: 'syz.0.911': attribute type 9 has an invalid length. [ 417.726949][ T9441] netlink: 'syz.0.911': attribute type 7 has an invalid length. [ 417.734767][ T9441] netlink: 'syz.0.911': attribute type 8 has an invalid length. [ 421.290027][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 421.383039][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 421.393506][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 421.403771][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'. [ 424.379937][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 424.733046][ T9501] loop5: detected capacity change from 0 to 256 [ 424.823912][ T9501] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 425.287670][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 425.308655][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 425.319302][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 425.330386][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 426.298100][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 427.229521][ T172] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 427.238744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 427.487371][ T172] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 427.510411][ T172] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 427.537635][ T172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 427.548587][ T172] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 427.568498][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.579059][ T172] usb 4-1: config 0 descriptor?? [ 427.610846][ T9511] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 428.088765][ T172] logitech 0003:046D:C50C.0003: unknown main item tag 0x2 [ 428.137300][ T172] logitech 0003:046D:C50C.0003: hidraw0: USB HID v0.0c Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0 [ 428.344155][ T172] usb 4-1: USB disconnect, device number 5 [ 430.081155][ T5157] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 430.293009][ T5157] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 430.309168][ T5157] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 430.325588][ T5157] usb 6-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 430.340379][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.350105][ T5157] usb 6-1: Product: syz [ 430.354821][ T5157] usb 6-1: Manufacturer: syz [ 430.390894][ T5157] usb 6-1: SerialNumber: syz [ 430.400136][ T9570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.954'. [ 430.647534][ T172] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 430.664870][ T5157] usb 6-1: unit 5 not found! [ 430.698583][ T5157] usb 6-1: can't set first interface for hiFace device. [ 430.711459][ T5157] snd-usb-hiface: probe of 6-1:1.1 failed with error -5 [ 430.734388][ T5157] usb 6-1: can't set first interface for hiFace device. [ 430.744047][ T5157] snd-usb-hiface: probe of 6-1:1.2 failed with error -5 [ 430.770790][ T5157] usb 6-1: USB disconnect, device number 5 [ 430.877490][ T172] usb 4-1: Using ep0 maxpacket: 8 [ 430.897182][ T172] usb 4-1: config 1 interface 0 altsetting 205 endpoint 0x81 has an invalid bInterval 171, changing to 11 [ 430.940453][ T172] usb 4-1: config 1 interface 0 altsetting 205 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.969384][ T172] usb 4-1: config 1 interface 0 has no altsetting 0 [ 430.990925][ T172] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40 [ 431.009712][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.037935][ T172] usb 4-1: Product: syz [ 431.051050][ T172] usb 4-1: Manufacturer: syz [ 431.063091][ T172] usb 4-1: SerialNumber: syz [ 431.357051][ T172] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input11 [ 431.404513][ T5126] bcm5974 4-1:1.0: could not read from device [ 431.431653][ T5126] bcm5974 4-1:1.0: could not read from device [ 431.457100][ T172] usb 4-1: USB disconnect, device number 6 [ 431.463428][ T5126] bcm5974 4-1:1.0: could not read from device [ 431.626780][ T9581] udevd[9581]: Error opening device "/dev/input/event4": No such file or directory [ 431.648489][ T9581] udevd[9581]: Unable to EVIOCGABS device "/dev/input/event4" [ 431.657928][ T9581] udevd[9581]: Unable to EVIOCGABS device "/dev/input/event4" [ 431.672795][ T9581] udevd[9581]: Unable to EVIOCGABS device "/dev/input/event4" [ 431.680908][ T9581] udevd[9581]: Unable to EVIOCGABS device "/dev/input/event4" [ 434.421966][ T9602] Bluetooth: MGMT ver 1.22 [ 436.994969][ T27] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 437.198040][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 437.210624][ T27] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 437.230952][ T27] usb 6-1: config 0 has no interface number 0 [ 437.237100][ T27] usb 6-1: config 0 interface 184 has no altsetting 0 [ 437.257002][ T27] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 437.267548][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.276184][ T27] usb 6-1: Product: syz [ 437.280389][ T27] usb 6-1: Manufacturer: syz [ 437.285520][ T27] usb 6-1: SerialNumber: syz [ 437.292723][ T27] usb 6-1: config 0 descriptor?? [ 437.306638][ T27] smsc75xx v1.0.0 [ 437.962954][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 437.987495][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 441.461722][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 441.479732][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 441.490605][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 441.506535][ T27] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 441.531587][ T27] usb 6-1: USB disconnect, device number 6 [ 442.103058][ T27] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 442.219385][ T9681] loop3: detected capacity change from 0 to 16 [ 442.237166][ T9681] erofs: (device loop3): mounted with root inode @ nid 36. [ 442.277344][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.990'. [ 442.461730][ T27] usb 6-1: config 0 has no interfaces? [ 442.470743][ T27] usb 6-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fa [ 442.480409][ T27] usb 6-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 442.488804][ T27] usb 6-1: Product: syz [ 442.492976][ T27] usb 6-1: Manufacturer: syz [ 442.497568][ T27] usb 6-1: SerialNumber: syz [ 442.504168][ T27] usb 6-1: config 0 descriptor?? [ 443.144186][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.150978][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.383816][ T9659] kvm: kvm [9657]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 443.412108][ T9659] kvm: kvm [9657]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 443.469847][ T9659] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 443.562455][ T5157] usb 6-1: USB disconnect, device number 7 [ 443.663205][ T5838] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 444.462495][ T9704] syz.5.999 (9704) used greatest stack depth: 19400 bytes left [ 444.617871][ T5838] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 444.650428][ T5838] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 444.699295][ T5838] usb 4-1: config 220 has no interface number 2 [ 444.728385][ T5838] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 444.742088][ T5838] usb 4-1: config 220 interface 0 has no altsetting 0 [ 444.749697][ T5838] usb 4-1: config 220 interface 76 has no altsetting 0 [ 444.757594][ T5838] usb 4-1: config 220 interface 1 has no altsetting 0 [ 444.769245][ T5838] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 445.747067][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.756354][ T5838] usb 4-1: Product: syz [ 445.760655][ T5838] usb 4-1: Manufacturer: syz [ 445.765404][ T5838] usb 4-1: SerialNumber: syz [ 445.773810][ T5838] usb 4-1: can't set config #220, error -71 [ 445.781630][ T5838] usb 4-1: USB disconnect, device number 7 [ 445.867572][ T9726] loop3: detected capacity change from 0 to 512 [ 445.886995][ T9727] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1006'. [ 445.923522][ T9726] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 445.975197][ T9726] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 445.983529][ T9726] EXT4-fs (loop3): orphan cleanup on readonly fs [ 445.993764][ T9726] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.1005: Allocating blocks 41-42 which overlap fs metadata [ 446.031975][ T9726] EXT4-fs (loop3): Remounting filesystem read-only [ 446.038793][ T9726] Quota error (device loop3): write_blk: dquota write failed [ 446.046499][ T9726] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 446.057070][ T9726] EXT4-fs (loop3): 1 truncate cleaned up [ 446.740177][ T9739] loop5: detected capacity change from 0 to 256 [ 446.805087][ T9726] EXT4-fs (loop3): pa ffff88805df67e80: logic 1, phys. 41, len 23 [ 446.814773][ T9726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.857313][ T9739] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 446.876659][ T9739] netlink: 'syz.5.1007': attribute type 9 has an invalid length. [ 446.884730][ T9739] netlink: 'syz.5.1007': attribute type 7 has an invalid length. [ 446.892658][ T9739] netlink: 'syz.5.1007': attribute type 8 has an invalid length. [ 447.362002][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.512450][ T9745] loop5: detected capacity change from 0 to 128 [ 447.561242][ T9745] EXT4-fs (loop5): Test dummy encryption mode enabled [ 447.616185][ T9745] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.672979][ T9745] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.135452][ T6621] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.401810][ T9757] loop5: detected capacity change from 0 to 512 [ 448.538243][ T9757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.551383][ T9757] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.389534][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.589067][ T9784] loop3: detected capacity change from 0 to 256 [ 451.832898][ T9784] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 451.858122][ T9779] netlink: 'syz.3.1020': attribute type 9 has an invalid length. [ 451.866031][ T9779] netlink: 'syz.3.1020': attribute type 7 has an invalid length. [ 451.874095][ T9779] netlink: 'syz.3.1020': attribute type 8 has an invalid length. [ 452.258846][ T9798] 9pnet_fd: Insufficient options for proto=fd [ 452.602376][ T9802] loop5: detected capacity change from 0 to 1024 [ 453.047088][ T9796] loop3: detected capacity change from 0 to 40427 [ 453.071399][ T9796] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 453.080512][ T9796] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 453.097346][ T9796] F2FS-fs (loop3): invalid crc value [ 453.113628][ T9796] F2FS-fs (loop3): Found nat_bits in checkpoint [ 453.181952][ T9796] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 453.189510][ T9796] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 453.233705][ T9796] overlayfs: missing 'workdir' [ 453.607413][ T9820] loop3: detected capacity change from 0 to 2048 [ 453.661574][ T9820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.692687][ T9820] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 453.765380][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.867365][ T9831] loop5: detected capacity change from 0 to 256 [ 454.066011][ T9831] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 454.101982][ T9831] netlink: 'syz.5.1035': attribute type 9 has an invalid length. [ 454.109894][ T9831] netlink: 'syz.5.1035': attribute type 7 has an invalid length. [ 454.117844][ T9831] netlink: 'syz.5.1035': attribute type 8 has an invalid length. [ 454.713185][ T9842] loop5: detected capacity change from 0 to 128 [ 454.741845][ T9842] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 454.788095][ T9842] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 454.812318][ T9842] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 454.834947][ T9842] FAT-fs (loop5): Filesystem has been set read-only [ 455.002015][ T9848] loop3: detected capacity change from 0 to 512 [ 455.081997][ T9848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 455.141130][ T9848] EXT4-fs (loop3): 1 truncate cleaned up [ 455.158065][ T9848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.268578][ T9848] EXT4-fs (loop3): shut down requested (1) [ 455.436965][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.661236][ T9860] loop5: detected capacity change from 0 to 256 [ 455.724274][ T9860] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 455.845022][ T28] audit: type=1800 audit(1784059402.250:144): pid=9860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1048" name="file1" dev="loop5" ino=1048639 res=0 errno=0 [ 455.919009][ T9866] syz.5.1048: attempt to access beyond end of device [ 455.919009][ T9866] loop5: rw=2049, sector=320, nr_sectors = 8 limit=256 [ 456.164747][ T9871] netlink: 'syz.0.1051': attribute type 9 has an invalid length. [ 456.172683][ T9871] netlink: 'syz.0.1051': attribute type 7 has an invalid length. [ 456.180556][ T9871] netlink: 'syz.0.1051': attribute type 8 has an invalid length. [ 456.990869][ T9878] loop5: detected capacity change from 0 to 2048 [ 457.051574][ T9878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.093865][ T9878] EXT4-fs (loop5): shut down requested (1) [ 457.143880][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.338692][ T9892] loop5: detected capacity change from 0 to 4096 [ 457.359188][ T9892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.425570][ T9892] EXT4-fs error (device loop5): ext4_get_first_dir_block:3604: inode #12: block 80: comm syz.5.1058: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 457.482985][ T9892] EXT4-fs error (device loop5): ext4_get_first_dir_block:3606: inode #12: comm syz.5.1058: directory missing '..' [ 457.591350][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.882780][ T9913] netlink: 'syz.5.1065': attribute type 9 has an invalid length. [ 457.890704][ T9913] netlink: 'syz.5.1065': attribute type 7 has an invalid length. [ 457.898942][ T9913] netlink: 'syz.5.1065': attribute type 8 has an invalid length. [ 458.752513][ T9926] loop3: detected capacity change from 0 to 512 [ 458.835800][ T9926] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 458.871463][ T9926] EXT4-fs (loop3): orphan cleanup on readonly fs [ 458.897006][ T9926] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 458.942200][ T9926] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 458.973702][ T9926] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #16: comm syz.3.1073: corrupted xattr block 31: invalid header [ 459.004012][ T9926] EXT4-fs (loop3): Remounting filesystem read-only [ 459.011759][ T9926] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 459.024076][ T9926] EXT4-fs (loop3): 1 orphan inode deleted [ 459.032140][ T9926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.178687][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.551940][ T9947] loop5: detected capacity change from 0 to 512 [ 459.570650][ T9947] EXT4-fs: Ignoring removed oldalloc option [ 459.589100][ T9947] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 459.626360][ T9947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.670077][ T9947] ext4 filesystem being mounted at /180/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.711251][ T28] audit: type=1804 audit(1784059405.872:145): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1081" name="/newroot/180/file2/file1" dev="loop5" ino=15 res=1 errno=0 [ 459.766993][ T6621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.984289][ T9960] netlink: 'syz.5.1083': attribute type 9 has an invalid length. [ 459.992357][ T9960] netlink: 'syz.5.1083': attribute type 7 has an invalid length. [ 460.000151][ T9960] netlink: 'syz.5.1083': attribute type 8 has an invalid length. [ 461.297593][ T9984] loop5: detected capacity change from 0 to 256 [ 461.355562][ T9984] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 461.413401][ T28] audit: type=1800 audit(1784059407.463:146): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1096" name="file1" dev="loop5" ino=1048640 res=0 errno=0 [ 461.473681][ T28] audit: type=1800 audit(1784059407.463:147): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1096" name="file1" dev="loop5" ino=1048640 res=0 errno=0 [ 461.495806][ T9994] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 461.515818][ T9994] FAT-fs (loop5): Filesystem has been set read-only [ 461.538537][ T9994] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 461.909115][T10000] netlink: 'syz.5.1101': attribute type 9 has an invalid length. [ 461.917150][T10000] netlink: 'syz.5.1101': attribute type 7 has an invalid length. [ 461.924997][T10000] netlink: 'syz.5.1101': attribute type 8 has an invalid length. [ 462.649911][T10009] fuse: Bad value for 'fd' [ 462.657106][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 463.303414][T10035] netlink: 'syz.0.1114': attribute type 9 has an invalid length. [ 463.311544][T10035] netlink: 'syz.0.1114': attribute type 7 has an invalid length. [ 463.319598][T10035] netlink: 'syz.0.1114': attribute type 8 has an invalid length. [ 464.485655][T10054] loop3: detected capacity change from 0 to 2048 [ 464.519091][T10054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.760479][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'. [ 464.773661][T10063] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 465.403485][ T7204] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 465.420748][ T7204] EXT4-fs (loop3): This should not happen!! Data will be lost [ 465.420748][ T7204] [ 465.430969][ T7204] EXT4-fs (loop3): Total free blocks count 0 [ 465.437038][ T7204] EXT4-fs (loop3): Free/Dirty block details [ 465.443400][ T7204] EXT4-fs (loop3): free_blocks=4096 [ 465.449175][ T7204] EXT4-fs (loop3): dirty_blocks=512 [ 465.454937][ T7204] EXT4-fs (loop3): Block reservation details [ 465.461051][ T7204] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 465.470422][ T7203] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 465.962164][T10086] netlink: 'syz.3.1128': attribute type 9 has an invalid length. [ 465.970825][T10086] netlink: 'syz.3.1128': attribute type 7 has an invalid length. [ 465.978719][T10086] netlink: 'syz.3.1128': attribute type 8 has an invalid length. [ 469.073712][T10093] loop3: detected capacity change from 0 to 1024 [ 469.132743][T10093] EXT4-fs: Ignoring removed orlov option [ 469.246384][T10093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.347843][ T28] audit: type=1800 audit(1784059414.893:148): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1136" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 469.586809][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.802435][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 471.641968][T10142] loop3: detected capacity change from 0 to 256 [ 472.094261][T10156] loop3: detected capacity change from 0 to 512 [ 472.228792][T10156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.603144][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1159'. [ 472.835232][T10172] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1162'. [ 474.643828][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.676669][T10201] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1174'. [ 474.900425][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1177'. [ 475.099528][T10217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1180'. [ 475.116110][T10217] netlink: 'syz.3.1180': attribute type 11 has an invalid length. [ 475.176091][T10220] loop3: detected capacity change from 0 to 8 [ 475.276642][T10222] loop3: detected capacity change from 0 to 2048 [ 475.307404][T10222] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 475.322933][T10222] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.189738][T10232] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1185'. [ 476.856933][T10237] fuse: Bad value for 'fd' [ 477.655516][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 477.898016][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.967275][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.089054][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.249276][ T27] usb 4-1: config 1 has no interface number 0 [ 478.277023][ T27] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 478.317974][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.326038][ T27] usb 4-1: Product: syz [ 478.355052][ T27] usb 4-1: Manufacturer: syz [ 478.373180][ T27] usb 4-1: SerialNumber: syz [ 478.520217][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 480.165995][ T8] usb 4-1: USB disconnect, device number 8 [ 480.466904][T10272] loop3: detected capacity change from 0 to 2048 [ 480.505086][T10272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.642631][T10276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.650368][T10276] IPv6: NLM_F_CREATE should be set when creating new route [ 480.657654][T10276] IPv6: NLM_F_CREATE should be set when creating new route [ 480.806451][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 480.929138][T10285] loop3: detected capacity change from 0 to 1024 [ 480.975527][T10287] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1207'. [ 481.023767][T10287] netlink: 'syz.5.1207': attribute type 11 has an invalid length. [ 481.045205][T10285] hfsplus: xattr searching failed [ 481.054991][ T28] audit: type=1800 audit(1784059425.842:149): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1206" name="bus" dev="loop3" ino=2 res=0 errno=0 [ 481.312994][T10294] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1210'. [ 481.446052][T10303] binder: binder_mmap: 10301 200000000000-200000b36000 bad vm_flags failed -1 [ 481.637229][T10311] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1218'. [ 481.718337][T10311] netlink: 'syz.5.1218': attribute type 11 has an invalid length. [ 482.784730][T10323] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1223'. [ 484.058508][T10330] loop3: detected capacity change from 0 to 1024 [ 484.391769][T10330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.593840][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.681645][T10316] futex_wake_op: syz.1.1220 tries to shift op by 36; fix this program [ 484.943279][T10352] netlink: 'syz.1.1230': attribute type 9 has an invalid length. [ 484.951186][T10352] netlink: 'syz.1.1230': attribute type 7 has an invalid length. [ 484.959028][T10352] netlink: 'syz.1.1230': attribute type 8 has an invalid length. [ 485.866668][T10354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1231'. [ 485.893030][T10354] netlink: 'syz.3.1231': attribute type 11 has an invalid length. [ 487.958366][T10372] loop3: detected capacity change from 0 to 512 [ 488.050932][T10372] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1236: bad orphan inode 13 [ 488.212921][T10372] ext4_test_bit(bit=12, block=4) = 1 [ 488.223937][T10372] is_bad_inode(inode)=0 [ 488.228244][T10372] NEXT_ORPHAN(inode)=0 [ 488.232419][T10372] max_ino=32 [ 488.236128][T10372] i_nlink=1 [ 488.241818][T10372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.206884][T10339] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 489.451013][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.547686][T10387] loop3: detected capacity change from 0 to 512 [ 489.563756][T10387] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1241: inode has both inline data and extents flags [ 489.582377][T10387] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1241: couldn't read orphan inode 15 (err -117) [ 489.599627][T10387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.611183][T10391] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1243'. [ 489.641697][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.523289][T10405] warning: `syz.1.1248' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 491.704809][T10423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1253'. [ 491.941860][T10437] loop3: detected capacity change from 0 to 1024 [ 491.951147][T10438] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1261'. [ 492.390967][ T1319] hfsplus: request for non-existent node 33554434 in B*Tree [ 492.514926][ T1319] hfsplus: request for non-existent node 33554434 in B*Tree [ 493.109590][T10457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1267'. [ 499.217300][T10534] netlink: 'syz.0.1293': attribute type 9 has an invalid length. [ 499.225248][T10534] netlink: 'syz.0.1293': attribute type 7 has an invalid length. [ 499.233185][T10534] netlink: 'syz.0.1293': attribute type 8 has an invalid length. [ 500.998946][T10571] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1305'. [ 501.931388][T10586] raw_sendmsg: syz.0.1308 forgot to set AF_INET. Fix it! [ 502.286079][T10601] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1315'. [ 504.971524][T10633] netlink: 'syz.0.1322': attribute type 9 has an invalid length. [ 504.988953][T10633] netlink: 'syz.0.1322': attribute type 7 has an invalid length. [ 504.998012][T10633] netlink: 'syz.0.1322': attribute type 8 has an invalid length. [ 505.014565][T10635] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1325'. [ 507.454786][T10689] netlink: 'syz.3.1341': attribute type 9 has an invalid length. [ 507.469448][T10689] netlink: 'syz.3.1341': attribute type 7 has an invalid length. [ 507.489138][T10689] netlink: 'syz.3.1341': attribute type 8 has an invalid length. [ 508.799731][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.809480][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.727867][T10769] netlink: 'syz.3.1366': attribute type 11 has an invalid length. [ 515.365789][T10800] netlink: 'syz.1.1375': attribute type 13 has an invalid length. [ 516.168807][T10809] netlink: 'syz.5.1379': attribute type 11 has an invalid length. [ 518.775480][T10850] netlink: 'syz.1.1391': attribute type 11 has an invalid length. [ 519.329098][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1392'. [ 521.298217][T10891] syz.1.1403 uses obsolete (PF_INET,SOCK_PACKET) [ 530.160599][T10956] netlink: 'syz.3.1422': attribute type 11 has an invalid length. [ 532.553252][T10985] netlink: 'syz.3.1434': attribute type 11 has an invalid length. [ 533.607065][T11007] netlink: 'syz.0.1443': attribute type 11 has an invalid length. [ 536.066721][T11031] xt_hashlimit: size too large, truncated to 1048576 [ 536.108976][T11033] netlink: 'syz.5.1453': attribute type 11 has an invalid length. [ 536.450387][T11043] netlink: 'syz.0.1456': attribute type 9 has an invalid length. [ 536.458405][T11043] netlink: 'syz.0.1456': attribute type 7 has an invalid length. [ 536.467743][T11043] netlink: 'syz.0.1456': attribute type 8 has an invalid length. [ 538.893468][T11072] netlink: 'syz.3.1467': attribute type 9 has an invalid length. [ 538.901566][T11072] netlink: 'syz.3.1467': attribute type 7 has an invalid length. [ 538.909570][T11072] netlink: 'syz.3.1467': attribute type 8 has an invalid length. [ 541.453507][ T4506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.522554][T11115] netlink: 'syz.5.1480': attribute type 9 has an invalid length. [ 541.541178][T11115] netlink: 'syz.5.1480': attribute type 7 has an invalid length. [ 541.577147][T11115] netlink: 'syz.5.1480': attribute type 8 has an invalid length. [ 541.697355][ T4506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.862637][ T4506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.052495][ T4506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.181765][T11136] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 543.193241][T11136] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 543.202979][T11136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.218060][T11136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.227566][T11136] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 543.236199][T11136] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 543.659079][T11133] chnl_net:caif_netlink_parms(): no params data found [ 544.096267][T11133] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.159450][T11133] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.192718][T11133] bridge_slave_0: entered allmulticast mode [ 544.226179][T11133] bridge_slave_0: entered promiscuous mode [ 544.249055][T11133] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.256471][T11133] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.263777][T11133] bridge_slave_1: entered allmulticast mode [ 544.271141][T11133] bridge_slave_1: entered promiscuous mode [ 544.885938][T11133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.343154][T11133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.479914][ T5781] Bluetooth: hci1: command tx timeout [ 545.782925][T11133] team0: Port device team_slave_0 added [ 545.841574][T11133] team0: Port device team_slave_1 added [ 546.648210][T11133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.678970][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.722164][T11133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.814650][T11133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.835846][T11133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.122935][T11133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.409266][T11133] hsr_slave_0: entered promiscuous mode [ 547.430706][T11133] hsr_slave_1: entered promiscuous mode [ 547.465987][T11133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.504508][T11133] Cannot create hsr debugfs directory [ 547.703054][ T5781] Bluetooth: hci1: command tx timeout [ 548.454391][ T4506] hsr_slave_0: left promiscuous mode [ 548.478438][ T4506] hsr_slave_1: left promiscuous mode [ 548.489732][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.508282][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.524497][ T4506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.539113][ T4506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.556453][ T4506] bridge_slave_1: left allmulticast mode [ 548.570247][ T4506] bridge_slave_1: left promiscuous mode [ 548.584418][ T4506] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.616705][ T4506] bridge_slave_0: left allmulticast mode [ 548.637487][ T4506] bridge_slave_0: left promiscuous mode [ 548.663647][ T4506] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.782467][ T4506] veth1_macvtap: left promiscuous mode [ 548.834730][ T4506] veth0_macvtap: left promiscuous mode [ 548.904473][ T4506] veth1_vlan: left promiscuous mode [ 549.022137][ T4506] veth0_vlan: left promiscuous mode [ 549.914552][ T5781] Bluetooth: hci1: command tx timeout [ 551.548524][T11256] fuse: Bad value for 'fd' [ 551.646766][ T4506] team0 (unregistering): Port device team_slave_1 removed [ 551.761847][ T4506] team0 (unregistering): Port device team_slave_0 removed [ 551.853621][ T4506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.930235][ T4506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.137114][ T5781] Bluetooth: hci1: command tx timeout [ 552.430924][ T4506] bond0 (unregistering): Released all slaves [ 552.691675][T11258] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1514'. [ 553.024767][T11133] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.083338][T11133] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.133428][T11133] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.191949][T11133] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 553.488470][T11133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.544240][T11133] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.592236][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.599411][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.656269][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.663472][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.883907][T11309] netlink: 'syz.1.1529': attribute type 9 has an invalid length. [ 553.892104][T11309] netlink: 'syz.1.1529': attribute type 7 has an invalid length. [ 553.899860][T11309] netlink: 'syz.1.1529': attribute type 8 has an invalid length. [ 554.994692][T11133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.700966][T11133] veth0_vlan: entered promiscuous mode [ 555.716298][T11133] veth1_vlan: entered promiscuous mode [ 555.797621][T11133] veth0_macvtap: entered promiscuous mode [ 555.825059][T11133] veth1_macvtap: entered promiscuous mode [ 555.866254][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.896462][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.923430][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.953714][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.982994][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.009673][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.032801][T11133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.091697][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.125188][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.161045][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.194342][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.225713][T11133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.255357][T11133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.284691][T11133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.303982][T11133] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.347541][T11133] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.356451][T11133] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.393132][T11133] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.593275][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.627627][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.696240][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.719094][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.270688][T11448] loop6: detected capacity change from 0 to 1024 [ 563.722594][T11448] hfsplus: invalid length 1792 has been corrected to 255 [ 563.730629][T11448] hfsplus: invalid length 1792 has been corrected to 255 [ 563.849166][T11448] hfsplus: invalid length 1792 has been corrected to 255 [ 563.905389][T11448] hfsplus: invalid length 1792 has been corrected to 255 [ 564.096317][ T7203] hfsplus: invalid length 1792 has been corrected to 255 [ 564.135033][ T7203] hfsplus: invalid length 1792 has been corrected to 255 [ 564.179775][ T7203] hfsplus: invalid length 1792 has been corrected to 255 [ 564.598125][T11465] netlink: 'syz.6.1559': attribute type 9 has an invalid length. [ 564.638450][T11465] netlink: 'syz.6.1559': attribute type 7 has an invalid length. [ 564.685091][T11465] netlink: 'syz.6.1559': attribute type 8 has an invalid length. [ 564.796862][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 565.035205][T11470] syz.1.1562 (11470) used greatest stack depth: 17032 bytes left [ 570.018640][T11541] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1574'. [ 570.040897][T11536] netlink: 'syz.6.1573': attribute type 9 has an invalid length. [ 570.058604][T11536] netlink: 'syz.6.1573': attribute type 7 has an invalid length. [ 570.066392][T11536] netlink: 'syz.6.1573': attribute type 8 has an invalid length. [ 571.065108][T11550] loop6: detected capacity change from 0 to 16 [ 571.129367][T11550] erofs: (device loop6): mounted with root inode @ nid 36. [ 572.200315][T11563] loop6: detected capacity change from 0 to 512 [ 572.931487][T11563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.280381][T11563] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 573.540420][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.876023][T11588] netlink: 'syz.6.1584': attribute type 9 has an invalid length. [ 573.883901][T11588] netlink: 'syz.6.1584': attribute type 7 has an invalid length. [ 573.892336][T11588] netlink: 'syz.6.1584': attribute type 8 has an invalid length. [ 574.549929][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.564088][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.662357][T11642] netlink: 'syz.1.1597': attribute type 9 has an invalid length. [ 576.691490][T11642] netlink: 'syz.1.1597': attribute type 7 has an invalid length. [ 576.719115][T11642] netlink: 'syz.1.1597': attribute type 8 has an invalid length. [ 577.650409][T11651] loop6: detected capacity change from 0 to 512 [ 577.669247][T11652] netlink: 'syz.1.1599': attribute type 11 has an invalid length. [ 577.690411][T11651] EXT4-fs (loop6): Test dummy encryption mode enabled [ 577.697233][T11651] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 577.755934][T11651] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 577.869757][T11277] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 580.573344][T11688] netlink: 'syz.5.1607': attribute type 9 has an invalid length. [ 580.596846][T11688] netlink: 'syz.5.1607': attribute type 7 has an invalid length. [ 580.621921][T11688] netlink: 'syz.5.1607': attribute type 8 has an invalid length. [ 580.664098][T11690] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1608'. [ 580.804216][T11694] loop6: detected capacity change from 0 to 128 [ 580.820184][T11694] ext4: Unknown parameter 'fsmagic' [ 582.389634][T11713] loop6: detected capacity change from 0 to 8192 [ 582.417995][T11721] netlink: 'syz.1.1616': attribute type 11 has an invalid length. [ 582.536469][T11722] fuse: Bad value for 'fd' [ 584.638113][T11761] netlink: 'syz.3.1626': attribute type 11 has an invalid length. [ 586.564292][T11793] loop6: detected capacity change from 0 to 16 [ 586.592593][T11793] erofs: (device loop6): mounted with root inode @ nid 36. [ 589.488706][T11810] loop6: detected capacity change from 0 to 2048 [ 593.253790][T11854] Invalid ELF header magic: != ELF [ 596.372912][T11860] loop6: detected capacity change from 0 to 40427 [ 596.413265][T11860] F2FS-fs (loop6): invalid crc value [ 596.556724][T11860] F2FS-fs (loop6): Found nat_bits in checkpoint [ 597.503081][T11860] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 600.092404][T11931] loop6: detected capacity change from 0 to 1024 [ 600.130763][T11931] hfsplus: invalid length 32517 has been corrected to 255 [ 600.189560][ T28] audit: type=1800 audit(1784059537.333:150): pid=11931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1667" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 601.637836][ T4258] hfsplus: b-tree write err: -5, ino 25 [ 601.655486][ T4258] hfsplus: b-tree write err: -5, ino 4 [ 601.677881][ T4258] hfsplus: b-tree write err: -5, ino 2 [ 602.145818][T11959] loop6: detected capacity change from 0 to 256 [ 602.262158][T11959] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 602.412319][T11959] FAT-fs (loop6): Filesystem has been set read-only [ 602.428876][T11959] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 602.461261][T11959] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 602.497654][ T28] audit: type=1800 audit(1784059539.495:151): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1674" name="file1" dev="loop6" ino=1048645 res=0 errno=0 [ 603.738516][T11997] netlink: 'syz.5.1681': attribute type 11 has an invalid length. [ 604.039840][T12006] netlink: 'syz.5.1683': attribute type 32 has an invalid length. [ 609.528204][T12060] netlink: 'syz.6.1690': attribute type 11 has an invalid length. [ 610.066666][T12071] loop6: detected capacity change from 0 to 256 [ 610.702994][T12080] mmap: syz.5.1696 (12080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 616.521958][ T5838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 616.723667][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 616.762293][ T5838] usb 7-1: unable to get BOS descriptor or descriptor too short [ 616.808066][ T5838] usb 7-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 616.849947][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.903461][ T5838] usb 7-1: Product: syz [ 616.927765][ T5838] usb 7-1: Manufacturer: syz [ 616.954972][ T5838] usb 7-1: SerialNumber: syz [ 617.076892][T12153] netlink: 'syz.5.1711': attribute type 9 has an invalid length. [ 617.137660][T12153] netlink: 'syz.5.1711': attribute type 7 has an invalid length. [ 617.204959][T12153] netlink: 'syz.5.1711': attribute type 8 has an invalid length. [ 617.286464][ T5838] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 618.184385][ T5838] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 618.267258][ T5838] usb 7-1: USB disconnect, device number 2 [ 618.318876][T12101] udevd[12101]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.701265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 618.803351][ T5838] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 619.892695][ T5838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.921939][ T5838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 619.949247][ T5838] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 619.973018][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.003552][ T5838] usb 7-1: config 0 descriptor?? [ 620.757860][ T5838] usb 7-1: Direct firmware load for ar3k/ramps_0x0df71b95_0.dfu failed with error -2 [ 620.779901][ T5838] usb 7-1: Falling back to sysfs fallback for: ar3k/ramps_0x0df71b95_0.dfu [ 621.902359][T12218] netlink: 'syz.6.1722': attribute type 9 has an invalid length. [ 621.930141][T12218] netlink: 'syz.6.1722': attribute type 7 has an invalid length. [ 621.958087][T12218] netlink: 'syz.6.1722': attribute type 8 has an invalid length. [ 625.148335][T12243] syz_tun: entered allmulticast mode [ 625.175326][T12242] syz_tun: left allmulticast mode [ 625.466668][T12249] netlink: 'syz.6.1734': attribute type 9 has an invalid length. [ 625.474684][T12249] netlink: 'syz.6.1734': attribute type 7 has an invalid length. [ 625.811900][T12249] netlink: 'syz.6.1734': attribute type 8 has an invalid length. [ 628.343135][T12266] loop6: detected capacity change from 0 to 40427 [ 628.379185][T12266] F2FS-fs (loop6): invalid crc value [ 628.414127][T12266] F2FS-fs (loop6): Found nat_bits in checkpoint [ 628.473468][T12292] netlink: 'syz.1.1747': attribute type 9 has an invalid length. [ 628.508229][T12292] netlink: 'syz.1.1747': attribute type 7 has an invalid length. [ 628.531064][T12292] netlink: 'syz.1.1747': attribute type 8 has an invalid length. [ 628.670994][T12266] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 629.558153][ T28] audit: type=1800 audit(1784059564.808:152): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1739" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 629.892121][T11133] syz-executor: attempt to access beyond end of device [ 629.892121][T11133] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 629.915487][T11133] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 630.496655][T12310] 9pnet_fd: p9_fd_create_unix (12310): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 631.300304][ T28] audit: type=1326 audit(1784059566.455:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12320 comm="syz.6.1757" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f529c59de59 code=0x0 [ 632.847667][T12331] netlink: 'syz.3.1759': attribute type 9 has an invalid length. [ 632.877777][T12331] netlink: 'syz.3.1759': attribute type 7 has an invalid length. [ 632.911307][T12331] netlink: 'syz.3.1759': attribute type 8 has an invalid length. [ 635.015951][T12358] netlink: 'syz.3.1769': attribute type 9 has an invalid length. [ 635.025454][T12358] netlink: 'syz.3.1769': attribute type 7 has an invalid length. [ 635.035190][T12358] netlink: 'syz.3.1769': attribute type 8 has an invalid length. [ 636.559507][T12380] netlink: 'syz.5.1778': attribute type 9 has an invalid length. [ 636.567326][T12380] netlink: 'syz.5.1778': attribute type 7 has an invalid length. [ 636.656489][T12380] netlink: 'syz.5.1778': attribute type 8 has an invalid length. [ 636.701738][T12383] loop6: detected capacity change from 0 to 256 [ 638.525934][T12397] loop6: detected capacity change from 0 to 256 [ 638.767714][T12397] binfmt_misc: register: failed to install interpreter file ./file0 [ 638.967711][T12403] loop6: detected capacity change from 0 to 512 [ 639.017270][T12403] EXT4-fs (loop6): Test dummy encryption mode enabled [ 639.059858][T12403] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.1784: inode has both inline data and extents flags [ 639.202974][T12403] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1784: couldn't read orphan inode 15 (err -117) [ 639.248119][T12403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.385273][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.491559][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.498139][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.184046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 644.679007][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 648.119360][T12481] loop6: detected capacity change from 0 to 1024 [ 648.145184][T12481] hfsplus: invalid btree flag [ 648.155312][T12481] hfsplus: failed to load catalog file [ 648.261803][ C1] hrtimer: interrupt took 35052 ns [ 649.064901][T12498] loop6: detected capacity change from 0 to 1024 [ 649.196515][T12499] netlink: 'syz.5.1815': attribute type 16 has an invalid length. [ 649.204850][T12499] netlink: 'syz.5.1815': attribute type 17 has an invalid length. [ 649.212824][T12499] netlink: 'syz.5.1815': attribute type 27 has an invalid length. [ 649.462165][T12498] hfsplus: xattr searching failed [ 651.925628][ T4476] hfsplus: bad catalog file entry [ 651.945204][ T4476] hfsplus: b-tree write err: -5, ino 3 [ 652.734650][T12536] loop6: detected capacity change from 0 to 512 [ 652.832056][T12536] EXT4-fs (loop6): Test dummy encryption mode enabled [ 652.863749][T12536] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 653.423294][T12550] loop6: detected capacity change from 0 to 512 [ 653.433688][T12550] EXT4-fs (loop6): Test dummy encryption mode enabled [ 653.448080][T12550] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 653.531583][T12550] EXT4-fs (loop6): 1 truncate cleaned up [ 653.565830][T12550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.821480][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.562116][T12571] loop6: detected capacity change from 0 to 256 [ 655.619679][T12571] FAT-fs (loop6): Directory bread(block 64) failed [ 655.640104][T12571] FAT-fs (loop6): Directory bread(block 65) failed [ 655.675881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 655.763085][T12571] FAT-fs (loop6): Directory bread(block 66) failed [ 655.801041][T12571] FAT-fs (loop6): Directory bread(block 67) failed [ 655.809431][T12571] FAT-fs (loop6): Directory bread(block 68) failed [ 655.823940][T12571] FAT-fs (loop6): Directory bread(block 69) failed [ 655.830698][T12571] FAT-fs (loop6): Directory bread(block 70) failed [ 655.848589][T12571] FAT-fs (loop6): Directory bread(block 71) failed [ 655.855342][T12571] FAT-fs (loop6): Directory bread(block 72) failed [ 655.875419][T12571] FAT-fs (loop6): Directory bread(block 73) failed [ 656.001572][T12571] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 660.842355][T12632] loop6: detected capacity change from 0 to 1024 [ 660.914130][T12632] hfsplus: invalid length 32517 has been corrected to 255 [ 660.959917][ T28] audit: type=1800 audit(1784059594.202:154): pid=12632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1863" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 661.233454][ T3436] hfsplus: b-tree write err: -5, ino 25 [ 661.279172][ T3436] hfsplus: b-tree write err: -5, ino 4 [ 661.302952][ T3436] hfsplus: b-tree write err: -5, ino 2 [ 668.137225][T12719] netlink: 'syz.6.1889': attribute type 11 has an invalid length. [ 668.168359][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1889'. [ 671.033325][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1897'. [ 672.463276][T12760] loop6: detected capacity change from 0 to 2048 [ 672.559364][T12760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.981376][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.597523][T12774] loop6: detected capacity change from 0 to 2048 [ 673.732612][T12774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.790389][T12774] EXT4-fs error (device loop6): ext4_find_extent:945: inode #2: comm syz.6.1907: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 673.991728][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.242424][T11136] Bluetooth: hci1: command 0x0406 tx timeout [ 675.613718][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1917'. [ 681.249978][T12892] loop6: detected capacity change from 0 to 2048 [ 681.276064][T12892] EXT4-fs: quotafile must be on filesystem root [ 682.718872][T12908] loop6: detected capacity change from 0 to 1024 [ 682.762494][T12908] hfsplus: invalid length 32517 has been corrected to 255 [ 682.898767][ T28] audit: type=1800 audit(1784059614.649:155): pid=12908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1958" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 683.302953][ T28] audit: type=1326 audit(1784059615.107:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12917 comm="syz.5.1960" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e039de59 code=0x0 [ 684.607131][ T4506] hfsplus: b-tree write err: -5, ino 25 [ 684.631186][ T4506] hfsplus: b-tree write err: -5, ino 4 [ 684.642090][ T4506] hfsplus: b-tree write err: -5, ino 2 [ 685.556166][T12943] netlink: 'syz.3.1969': attribute type 9 has an invalid length. [ 685.584507][T12943] netlink: 'syz.3.1969': attribute type 6 has an invalid length. [ 688.115299][T12979] netlink: 'syz.1.1982': attribute type 9 has an invalid length. [ 688.125385][T12979] netlink: 'syz.1.1982': attribute type 6 has an invalid length. [ 688.593661][T12988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1986'. [ 689.354533][ T5838] Bluetooth: Configuration file not found ar3k/ramps_0x0df71b95_0.dfu [ 689.406157][ T5838] Bluetooth: Loading sysconfig file failed [ 689.435479][ T5838] ath3k: probe of 7-1:0.0 failed with error -110 [ 689.504145][ T5838] usb 7-1: USB disconnect, device number 3 [ 690.378312][T13011] loop6: detected capacity change from 0 to 4096 [ 690.388582][T13011] EXT4-fs (loop6): Test dummy encryption mode enabled [ 690.421174][T13011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.869903][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.184089][T13026] netlink: 'syz.5.1998': attribute type 9 has an invalid length. [ 691.211247][T13026] netlink: 'syz.5.1998': attribute type 6 has an invalid length. [ 696.334569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 697.678542][T13093] loop6: detected capacity change from 0 to 4096 [ 697.703050][T13093] EXT4-fs (loop6): Test dummy encryption mode enabled [ 697.736838][T13093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.850606][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.202683][T13143] loop6: detected capacity change from 0 to 1024 [ 702.267010][T13143] hfsplus: invalid length 32517 has been corrected to 255 [ 702.432767][ T28] audit: type=1800 audit(1784059632.990:157): pid=13143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2042" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 704.439328][T13156] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 705.156180][ T4794] hfsplus: b-tree write err: -5, ino 25 [ 705.220189][ T4794] hfsplus: b-tree write err: -5, ino 4 [ 705.250133][ T4794] hfsplus: b-tree write err: -5, ino 2 [ 705.779069][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 705.790019][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 709.970217][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'. [ 709.999662][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'. [ 710.037692][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'. [ 710.076416][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2061'. [ 713.118862][T13231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.821196][T13278] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 716.828372][T13278] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 718.856908][ T7204] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.073444][ T7204] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.180239][T11136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 719.191320][T11136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 719.207813][T11136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 719.216186][T11136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 719.235736][T11136] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 719.246485][T11136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 719.326530][ T7204] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.465537][ T7204] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.311115][T13294] chnl_net:caif_netlink_parms(): no params data found [ 721.336402][T13322] overlayfs: failed to clone upperpath [ 721.347420][T13323] loop6: detected capacity change from 0 to 1024 [ 721.437782][T13323] hfsplus: invalid length 32517 has been corrected to 255 [ 721.489735][ T5781] Bluetooth: hci2: command tx timeout [ 721.519419][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.527706][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.535486][T13294] bridge_slave_0: entered allmulticast mode [ 721.550365][T13294] bridge_slave_0: entered promiscuous mode [ 721.573180][ T28] audit: type=1800 audit(1784059650.920:158): pid=13323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2096" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 721.692736][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.715842][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.723630][T13294] bridge_slave_1: entered allmulticast mode [ 721.767639][T13294] bridge_slave_1: entered promiscuous mode [ 722.031426][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.106947][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.183970][T13294] team0: Port device team_slave_0 added [ 722.239690][T13294] team0: Port device team_slave_1 added [ 722.648761][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.677212][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.740852][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.777432][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.795921][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.864287][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.228139][T13294] hsr_slave_0: entered promiscuous mode [ 723.251055][T13294] hsr_slave_1: entered promiscuous mode [ 723.270393][T13294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 723.288964][T13294] Cannot create hsr debugfs directory [ 723.665505][ T7204] hsr_slave_0: left promiscuous mode [ 723.705356][ T7204] hsr_slave_1: left promiscuous mode [ 723.713699][ T5781] Bluetooth: hci2: command tx timeout [ 723.759762][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 723.789787][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.829879][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 723.837370][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 723.908091][ T7204] veth1_macvtap: left promiscuous mode [ 723.914290][ T7204] veth0_macvtap: left promiscuous mode [ 723.941629][ T7204] veth1_vlan: left promiscuous mode [ 723.946996][ T7204] veth0_vlan: left promiscuous mode [ 724.293856][ T4794] hfsplus: b-tree write err: -5, ino 25 [ 724.299706][ T4794] hfsplus: b-tree write err: -5, ino 4 [ 724.305466][ T4794] hfsplus: b-tree write err: -5, ino 2 [ 725.935092][ T5781] Bluetooth: hci2: command tx timeout [ 726.244811][ T7204] team0 (unregistering): Port device team_slave_1 removed [ 726.339199][ T7204] team0 (unregistering): Port device team_slave_0 removed [ 726.503502][ T7204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.756149][ T7204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.387800][ T7204] bond0 (unregistering): Released all slaves [ 728.193176][ T5781] Bluetooth: hci2: command tx timeout [ 728.321075][T13398] loop6: detected capacity change from 0 to 4096 [ 728.340352][T13398] EXT4-fs (loop6): Test dummy encryption mode enabled [ 728.386345][T13398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.994285][T13294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 728.995504][T11133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.020075][T13294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 729.070942][T13294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 729.113394][T13294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 729.360622][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.407535][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.457021][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.464375][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.495090][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.502289][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.685916][ T5813] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 729.903686][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 729.928520][ T5813] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 729.953077][ T5813] usb 7-1: config 0 has no interface number 0 [ 729.973154][ T5813] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 729.996860][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.026718][ T5813] usb 7-1: Product: syz [ 730.037626][ T5813] usb 7-1: Manufacturer: syz [ 730.048341][ T5813] usb 7-1: SerialNumber: syz [ 730.076093][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.083369][ T5813] usb 7-1: config 0 descriptor?? [ 730.086426][ T5813] smsc95xx v2.0.0 [ 730.229875][T13294] veth0_vlan: entered promiscuous mode [ 730.273308][T13294] veth1_vlan: entered promiscuous mode [ 730.356240][T13294] veth0_macvtap: entered promiscuous mode [ 730.376559][T13294] veth1_macvtap: entered promiscuous mode [ 730.456226][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.477763][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.504790][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.530107][ T5813] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 730.533975][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.563618][ T5813] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 730.596955][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.627573][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.646519][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.696893][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.728037][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.754312][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.774219][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.785509][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.801426][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.832713][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.930579][T13294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.957020][T13294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.972298][T13294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.982964][T13294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.006087][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2118'. [ 731.306425][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.331449][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.421659][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.456131][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.655607][ T5813] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 731.667869][ T5813] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 731.678956][ T5813] usb 7-1: USB disconnect, device number 4 [ 733.084124][ T788] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 733.312864][ T788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 733.341115][ T788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 733.370950][ T788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 733.397285][ T788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 733.420064][ T788] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 733.431316][ T788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.454869][ T788] usb 7-1: Product: syz [ 733.466334][ T788] usb 7-1: Manufacturer: syz [ 733.490223][ T788] usb 7-1: SerialNumber: syz [ 733.497449][ T788] usb 7-1: config 0 descriptor?? [ 733.534245][ T788] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 733.806796][ T788] ums-isd200: probe of 7-1:0.0 failed with error -22 [ 733.975885][ T8] usb 7-1: USB disconnect, device number 5 [ 734.677245][T13523] overlayfs: failed to clone upperpath [ 735.032063][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.696355][ T8] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 735.767374][ T8] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 735.885457][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.981131][T11136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 735.996989][T11136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 736.084686][T11136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 736.096816][T11136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 736.107016][T11136] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 736.142541][T11136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 736.278714][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.412965][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.906544][T13560] chnl_net:caif_netlink_parms(): no params data found [ 737.311782][ T23] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 737.330698][T13560] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.343939][T13560] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.353895][T13560] bridge_slave_0: entered allmulticast mode [ 737.365377][T13560] bridge_slave_0: entered promiscuous mode [ 737.409388][T13560] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.417001][T13560] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.425019][T13560] bridge_slave_1: entered allmulticast mode [ 737.431845][T13560] bridge_slave_1: entered promiscuous mode [ 737.509955][ T23] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 737.523239][T13560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.535052][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.547432][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.557443][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 737.570747][ T23] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 737.580037][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.599217][T13560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.616868][ T23] usb 7-1: config 0 descriptor?? [ 737.687079][T13599] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2144'. [ 737.710008][T13560] team0: Port device team_slave_0 added [ 737.724459][T13560] team0: Port device team_slave_1 added [ 737.932518][T13560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.953035][T13560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.989379][T13560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.028985][T13560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.036246][T13560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.070480][T13560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.071827][ T23] holtek_kbd 0003:04D9:A055.0005: report_id 0 is invalid [ 738.118669][ T23] holtek_kbd 0003:04D9:A055.0005: item 0 0 1 8 parsing failed [ 738.137835][ T23] holtek_kbd: probe of 0003:04D9:A055.0005 failed with error -22 [ 738.274458][ T42] hsr_slave_0: left promiscuous mode [ 738.285290][ T42] hsr_slave_1: left promiscuous mode [ 738.299935][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.307488][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.308613][ T23] usb 7-1: USB disconnect, device number 6 [ 738.331314][T11136] Bluetooth: hci2: command tx timeout [ 738.332626][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.366966][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.386674][ T42] bridge_slave_1: left allmulticast mode [ 738.392700][ T42] bridge_slave_1: left promiscuous mode [ 738.398672][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.410129][ T42] bridge_slave_0: left allmulticast mode [ 738.422333][ T42] bridge_slave_0: left promiscuous mode [ 738.429642][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.502415][ T42] veth1_macvtap: left promiscuous mode [ 738.507990][ T42] veth0_macvtap: left promiscuous mode [ 738.534404][ T42] veth1_vlan: left promiscuous mode [ 738.539799][ T42] veth0_vlan: left promiscuous mode [ 738.969481][T13632] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2152'. [ 739.638040][ T42] team0 (unregistering): Port device team_slave_1 removed [ 739.704444][ T42] team0 (unregistering): Port device team_slave_0 removed [ 739.764638][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.845639][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.992625][T13642] loop6: detected capacity change from 0 to 40427 [ 740.033845][T13642] F2FS-fs (loop6): invalid crc value [ 740.052017][T13642] F2FS-fs (loop6): Found nat_bits in checkpoint [ 740.163194][T13642] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 740.475710][ T42] bond0 (unregistering): Released all slaves [ 740.554520][T11136] Bluetooth: hci2: command tx timeout [ 740.653799][T13560] hsr_slave_0: entered promiscuous mode [ 740.678293][ T28] audit: type=1800 audit(1784059668.803:159): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2156" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 740.701134][T13560] hsr_slave_1: entered promiscuous mode [ 740.714000][T13617] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2148'. [ 740.730452][T13617] gretap0: entered promiscuous mode [ 740.767238][T13621] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2148'. [ 740.776381][T13621] 0ªî{X¹¦: renamed from gretap0 [ 740.800020][T13621] 0ªî{X¹¦: left promiscuous mode [ 740.805841][T13621] 0ªî{X¹¦: entered allmulticast mode [ 740.813434][T13621] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 741.288076][T11133] syz-executor: attempt to access beyond end of device [ 741.288076][T11133] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 741.339765][T11133] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 741.506208][T13664] overlayfs: failed to clone upperpath [ 741.511847][T13560] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 741.593909][T13560] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 741.627791][T13560] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 741.651869][T13560] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 742.129062][T13674] veth0_vlan: entered allmulticast mode [ 742.740599][T13560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.776326][T11136] Bluetooth: hci2: command tx timeout [ 742.879796][T13560] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.933257][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.940501][ T4506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.018972][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.026243][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.679308][T13560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.346852][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'. [ 744.451940][T13560] veth0_vlan: entered promiscuous mode [ 744.452857][T13716] loop6: detected capacity change from 0 to 40427 [ 744.469486][T13560] veth1_vlan: entered promiscuous mode [ 744.515902][T13716] F2FS-fs (loop6): invalid crc value [ 744.562717][T13716] F2FS-fs (loop6): Found nat_bits in checkpoint [ 744.601762][T13560] veth0_macvtap: entered promiscuous mode [ 744.644293][T13560] veth1_macvtap: entered promiscuous mode [ 744.705573][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.717346][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.717400][T13716] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 744.728343][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.747706][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.760918][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.772095][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.797694][T13560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.836322][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.892087][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.923773][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.967464][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.991975][T13560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.998981][T11136] Bluetooth: hci2: command tx timeout [ 745.014976][T13560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.059385][T13560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.083199][T13560] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.127233][T13560] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.146924][T13560] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.170332][T13560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.360382][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.385217][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.416193][T13764] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2178'. [ 745.433536][ T4794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.469035][ T4794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.801567][ T28] audit: type=1800 audit(1784059673.595:160): pid=13765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2168" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 746.256224][T11133] syz-executor: attempt to access beyond end of device [ 746.256224][T11133] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 746.293893][T11133] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 748.013576][ T788] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 748.226330][ T788] usb 8-1: Using ep0 maxpacket: 8 [ 748.254208][T13805] overlay: Unknown parameter 'dont_measure' [ 748.310106][ T788] usb 8-1: unable to get BOS descriptor or descriptor too short [ 748.348578][ T788] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 748.380714][ T788] usb 8-1: can't read configurations, error -71 [ 748.728419][ T5157] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 748.952753][ T5157] usb 7-1: Using ep0 maxpacket: 16 [ 748.976421][ T5157] usb 7-1: config 0 interface 0 has no altsetting 0 [ 748.997521][ T5157] usb 7-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 749.027664][ T5157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.060872][ T5157] usb 7-1: config 0 descriptor?? [ 749.544604][ T5157] wacom 0003:056A:0325.0006: unknown main item tag 0x2 [ 749.561914][ T5157] wacom 0003:056A:0325.0006: unknown main item tag 0x6 [ 749.581216][ T5157] wacom 0003:056A:0325.0006: ignoring exceeding usage max [ 749.625659][ T5157] wacom 0003:056A:0325.0006: hidraw0: USB HID v0.81 Device [HID 056a:0325] on usb-dummy_hcd.6-1/input0 [ 749.752416][ T6396] usb 7-1: USB disconnect, device number 7 [ 749.803510][T13841] overlayfs: failed to clone upperpath [ 749.827640][T13836] fido_id[13836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 750.289517][T13829] loop7: detected capacity change from 0 to 40427 [ 750.336947][T13829] F2FS-fs (loop7): invalid crc value [ 750.394868][T13829] F2FS-fs (loop7): Found nat_bits in checkpoint [ 750.589746][T13829] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 751.393593][ T28] audit: type=1800 audit(1784059678.835:161): pid=13883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2189" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 751.787220][T13560] syz-executor: attempt to access beyond end of device [ 751.787220][T13560] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 751.831986][T13560] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 754.513400][T13936] 9pnet_fd: Insufficient options for proto=fd [ 754.786305][T13939] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 755.161272][ T28] audit: type=1804 audit(1784059682.354:162): pid=13941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2220" name="/newroot/149/file0" dev="fuse" ino=1 res=1 errno=0 [ 756.850223][ T23] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 757.053778][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 757.075879][ T23] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.091563][ T23] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 757.100794][ T23] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 757.117696][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2228'. [ 757.126709][ T23] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 757.152748][ T23] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 757.174124][ T23] usb 7-1: config 1 interface 1 has no altsetting 0 [ 757.192727][ T23] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 757.209093][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.225242][ T23] usb 7-1: Product: syz [ 757.245345][ T23] usb 7-1: Manufacturer: syz [ 757.253913][ T23] usb 7-1: SerialNumber: syz [ 757.527862][ T23] usb 7-1: selecting invalid altsetting 0 [ 758.047354][ T23] usb 7-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 758.157424][ T23] usb 7-1: USB disconnect, device number 8 [ 758.270251][T14009] udevd[14009]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 766.848281][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 768.109545][T14158] syzkaller1: entered promiscuous mode [ 768.350599][T14158] syzkaller1: entered allmulticast mode [ 769.694698][T10380] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 769.901802][T10380] usb 7-1: Using ep0 maxpacket: 16 [ 769.913258][T10380] usb 7-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 769.932293][T10380] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.953864][T10380] usb 7-1: Product: syz [ 769.958095][T10380] usb 7-1: Manufacturer: syz [ 769.982940][T10380] usb 7-1: SerialNumber: syz [ 770.498948][T10380] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 770.543694][T10380] gspca_stv06xx: st6422 sensor detected [ 770.853942][T10380] STV06xx: probe of 7-1:1.0 failed with error -71 [ 770.885575][T10380] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 770.917321][T10380] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 770.985594][T10380] usb 7-1: USB disconnect, device number 9 [ 771.036897][T14009] udevd[14009]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 771.433261][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.439669][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 773.260627][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 773.520154][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 773.566856][ T9] usb 8-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 773.656689][ T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 773.688445][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.742038][ T9] usb 8-1: Product: syz [ 773.770135][ T9] usb 8-1: Manufacturer: syz [ 773.810409][ T9] usb 8-1: SerialNumber: syz [ 775.244496][ T9] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 775.257867][ T9] cdc_ncm 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 775.267390][ T9] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 775.460132][ T9] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 775.505592][ T9] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 775.539382][ T9] usb 8-1: USB disconnect, device number 4 [ 775.562870][ T9] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 784.735683][T14384] overlayfs: failed to clone upperpath [ 784.884322][ T28] audit: type=1326 audit(1784059710.156:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14401 comm="syz.6.2323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f529c59de59 code=0x0 [ 786.933123][ T28] audit: type=1326 audit(1784059712.084:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14432 comm="syz.5.2333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e039de59 code=0x7ffc0000 [ 787.064191][ T28] audit: type=1326 audit(1784059712.084:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14432 comm="syz.5.2333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e039de59 code=0x7ffc0000 [ 787.064740][T14434] syzkaller1: entered promiscuous mode [ 787.123280][ T28] audit: type=1326 audit(1784059712.084:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14432 comm="syz.5.2333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f86e039de59 code=0x7ffc0000 [ 787.129751][T14434] syzkaller1: entered allmulticast mode [ 787.180946][ T28] audit: type=1326 audit(1784059712.084:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14432 comm="syz.5.2333" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e039de59 code=0x7ffc0000 [ 789.336498][T14479] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 792.620992][T14542] loop6: detected capacity change from 0 to 1024 [ 792.654756][T14542] hfsplus: invalid length 32517 has been corrected to 255 [ 792.719860][ T28] audit: type=1800 audit(1784059717.502:168): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2369" name="bus" dev="loop6" ino=25 res=0 errno=0 [ 794.794760][T14554] loop7: detected capacity change from 0 to 40427 [ 794.811752][T14554] F2FS-fs (loop7): invalid crc value [ 794.831762][T14554] F2FS-fs (loop7): Found nat_bits in checkpoint [ 794.889191][ T49] hfsplus: b-tree write err: -5, ino 25 [ 794.901332][ T49] hfsplus: b-tree write err: -5, ino 4 [ 794.916574][ T49] hfsplus: b-tree write err: -5, ino 2 [ 794.959926][T14554] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 795.341465][ T28] audit: type=1800 audit(1784059719.964:169): pid=14570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2372" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 795.370431][T14571] fuse: Bad value for 'fd' [ 795.533471][ T6396] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 795.626263][T13560] syz-executor: attempt to access beyond end of device [ 795.626263][T13560] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 795.644057][T13560] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 795.725563][ T6396] usb 7-1: Using ep0 maxpacket: 32 [ 795.735315][ T6396] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 795.748916][ T6396] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 795.758186][ T6396] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 795.767329][ T6396] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 795.782280][ T6396] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 795.794432][ T6396] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 795.813727][ T6396] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 795.824422][ T6396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.839881][ T6396] usb 7-1: config 0 descriptor?? [ 796.109897][ T6396] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 796.147834][ T6396] usb 7-1: USB disconnect, device number 10 [ 796.166897][ T6396] usblp0: removed [ 796.784291][ T6396] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 797.009178][ T6396] usb 7-1: Using ep0 maxpacket: 32 [ 797.028425][ T6396] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 797.072607][ T6396] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 797.081639][ T6396] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 797.094888][ T6396] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 797.107671][ T6396] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 797.127652][ T6396] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 797.163619][ T6396] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 797.173144][ T6396] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.184593][ T6396] usb 7-1: config 0 descriptor?? [ 797.210228][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2382'. [ 797.581440][ T6396] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 797.953654][ T9] usb 7-1: USB disconnect, device number 11 [ 797.999403][ T9] usblp0: removed [ 799.866385][T14599] loop6: detected capacity change from 0 to 40427 [ 799.892933][T14599] F2FS-fs (loop6): invalid crc value [ 799.919037][T14599] F2FS-fs (loop6): Found nat_bits in checkpoint [ 800.001416][T14599] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 800.315433][ T28] audit: type=1800 audit(1784059724.615:170): pid=14625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2385" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 800.559313][T11133] syz-executor: attempt to access beyond end of device [ 800.559313][T11133] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 800.578585][T11133] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 803.224615][T14658] loop7: detected capacity change from 0 to 40427 [ 803.239909][T14658] F2FS-fs (loop7): invalid crc value [ 803.286201][T14658] F2FS-fs (loop7): Found nat_bits in checkpoint [ 803.415385][T14658] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 803.758926][ T28] audit: type=1800 audit(1784059727.834:171): pid=14674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2401" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 804.065478][T13560] syz-executor: attempt to access beyond end of device [ 804.065478][T13560] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 804.088303][T13560] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 806.112669][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 806.317830][ T9] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 806.336812][ T9] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 806.366978][ T9] usb 8-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 806.390390][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.398899][ T9] usb 8-1: Product: syz [ 806.409446][ T9] usb 8-1: Manufacturer: syz [ 806.417238][ T9] usb 8-1: SerialNumber: syz [ 806.681611][ T9] usb 8-1: Can't get UAC3 power state for id 10 [ 806.691866][ T9] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 806.707779][ T9] usb 8-1: 2:0: cannot get min/max values for control 2 (id 2) [ 806.781826][T14699] loop6: detected capacity change from 0 to 40427 [ 806.791642][T14699] F2FS-fs (loop6): invalid crc value [ 806.815742][T14699] F2FS-fs (loop6): Found nat_bits in checkpoint [ 806.904006][T14699] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 807.021892][ T9] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 807.060478][ T9] usb 8-1: USB disconnect, device number 5 [ 807.179922][T13302] udevd[13302]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.297324][ T28] audit: type=1800 audit(1784059731.137:172): pid=14709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2415" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 807.781026][T11133] syz-executor: attempt to access beyond end of device [ 807.781026][T11133] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 807.797604][T11133] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 808.943600][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 808.976536][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 808.987767][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 809.005656][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 809.040641][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 809.050638][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 809.099509][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.310451][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.429526][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.461472][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2425'. [ 809.630474][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.846183][T14732] chnl_net:caif_netlink_parms(): no params data found [ 810.853226][T14732] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.864221][T14732] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.873673][T14732] bridge_slave_0: entered allmulticast mode [ 810.924123][T14732] bridge_slave_0: entered promiscuous mode [ 810.962654][T14732] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.009852][T14732] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.029272][T14732] bridge_slave_1: entered allmulticast mode [ 811.077324][T14732] bridge_slave_1: entered promiscuous mode [ 811.263464][ T5781] Bluetooth: hci3: command tx timeout [ 811.447518][T14732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.506399][T14732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.753021][T14732] team0: Port device team_slave_0 added [ 811.827078][T14732] team0: Port device team_slave_1 added [ 812.101275][T14732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.120179][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.200996][T14732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.310917][T14732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.317934][T14732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.422095][T14732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.010948][T14732] hsr_slave_0: entered promiscuous mode [ 813.115074][T14732] hsr_slave_1: entered promiscuous mode [ 813.192557][T14732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 813.274533][T14732] Cannot create hsr debugfs directory [ 813.475654][ T5781] Bluetooth: hci3: command tx timeout [ 814.303852][ T49] hsr_slave_0: left promiscuous mode [ 814.340808][ T49] hsr_slave_1: left promiscuous mode [ 814.426243][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.433730][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.470982][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.478470][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.561254][ T49] bridge_slave_1: left allmulticast mode [ 814.597117][ T49] bridge_slave_1: left promiscuous mode [ 814.602935][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.519802][ T49] bridge_slave_0: left allmulticast mode [ 815.525981][ T49] bridge_slave_0: left promiscuous mode [ 815.531887][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.593994][ T49] veth0_macvtap: left promiscuous mode [ 815.599682][ T49] veth1_vlan: left promiscuous mode [ 815.697827][ T5781] Bluetooth: hci3: command tx timeout [ 817.985588][ T5781] Bluetooth: hci3: command tx timeout [ 818.922435][ T49] team0 (unregistering): Port device team_slave_1 removed [ 818.990160][ T49] team0 (unregistering): Port device team_slave_0 removed [ 819.052229][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.117117][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.696862][ T49] bond0 (unregistering): Released all slaves [ 819.784293][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2461'. [ 821.723111][T14732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 821.781551][T14732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 821.875865][T14732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 821.919217][T14732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 822.359488][T14732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.400471][T14732] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.475997][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.483197][ T7203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.558078][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.565386][ T7203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.776705][T14732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.901665][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2471'. [ 823.438718][T14732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.419561][T14732] veth0_vlan: entered promiscuous mode [ 825.505903][T14732] veth1_vlan: entered promiscuous mode [ 825.772413][T14732] veth0_macvtap: entered promiscuous mode [ 825.846259][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 825.902808][T14732] veth1_macvtap: entered promiscuous mode [ 826.005052][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.049061][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.070397][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.093658][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.116155][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 826.144140][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.156516][T14732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.198601][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.209494][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.226209][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.243095][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.257500][T14732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 826.270420][T14732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.288840][T14732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.318576][T14732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.363643][T14732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.382570][T14732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.428791][T14732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.693806][T14391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.701702][T14391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.765562][ T7203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.797423][ T7203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.700910][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2496'. [ 830.838632][T15050] [ 830.841461][T15050] ============================= [ 830.846342][T15050] WARNING: suspicious RCU usage [ 830.851326][T15050] syzkaller #0 Not tainted [ 830.855776][T15050] ----------------------------- [ 830.860752][T15050] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 830.869576][T15050] [ 830.869576][T15050] other info that might help us debug this: [ 830.869576][T15050] [ 830.879986][T15050] [ 830.879986][T15050] rcu_scheduler_active = 2, debug_locks = 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 830.888201][T15050] 1 lock held by syz.7.2503/15050: [ 830.893456][T15050] #0: ffffffff8d131f80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 830.904309][T15050] [ 830.904309][T15050] stack backtrace: [ 830.910283][T15050] CPU: 0 PID: 15050 Comm: syz.7.2503 Not tainted syzkaller #0 [ 830.917784][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 830.928058][T15050] Call Trace: [ 830.931363][T15050] [ 830.934326][T15050] dump_stack_lvl+0x18c/0x250 [ 830.939176][T15050] ? show_regs_print_info+0x20/0x20 [ 830.944417][T15050] ? load_image+0x420/0x420 [ 830.949009][T15050] lockdep_rcu_suspicious+0x1e1/0x300 [ 830.954467][T15050] get_callchain_entry+0x2a9/0x3c0 [ 830.959645][T15050] get_perf_callchain+0xc6/0x510 [ 830.964696][T15050] ? put_callchain_entry+0xb0/0xb0 [ 830.969857][T15050] __bpf_get_stack+0x2e4/0x540 [ 830.974685][T15050] ? stack_map_get_build_id_offset+0x720/0x720 [ 830.980889][T15050] ? __cant_sleep+0x220/0x220 [ 830.985631][T15050] ? bpf_prog_d43750871481577d+0x45/0x49 [ 830.991303][T15050] bpf_get_stack_raw_tp+0x1a4/0x210 [ 830.996555][T15050] bpf_prog_d43750871481577d+0x45/0x49 [ 831.002331][T15050] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 831.007829][T15050] bpf_prog_test_run_syscall+0x320/0x4b0 [ 831.013499][T15050] ? sock_gen_cookie+0x60/0x60 [ 831.018292][T15050] ? sock_gen_cookie+0x60/0x60 [ 831.023075][T15050] bpf_prog_test_run+0x31f/0x390 [ 831.028088][T15050] __sys_bpf+0x49d/0x890 [ 831.032367][T15050] ? bpf_link_show_fdinfo+0x390/0x390 [ 831.037794][T15050] ? lock_chain_count+0x20/0x20 [ 831.042687][T15050] __x64_sys_bpf+0x7c/0x90 [ 831.047141][T15050] do_syscall_64+0x55/0xb0 [ 831.051625][T15050] ? clear_bhb_loop+0x40/0x90 [ 831.056430][T15050] ? clear_bhb_loop+0x40/0x90 [ 831.061140][T15050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.067144][T15050] RIP: 0033:0x7f9bbbf9de59 [ 831.071608][T15050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.091251][T15050] RSP: 002b:00007f9bbce71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 831.099707][T15050] RAX: ffffffffffffffda RBX: 00007f9bbc225fa0 RCX: 00007f9bbbf9de59 [ 831.107881][T15050] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 831.115880][T15050] RBP: 00007f9bbc033e6f R08: 0000000000000000 R09: 0000000000000000 [ 831.123856][T15050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 831.131836][T15050] R13: 00007f9bbc226038 R14: 00007f9bbc225fa0 R15: 00007ffd38a8b5d8 [ 831.139828][T15050] [ 832.574172][T14389] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.674853][T14389] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.825881][T14389] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.948592][T14389] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.282008][T14389] hsr_slave_0: left promiscuous mode [ 834.289224][T14389] hsr_slave_1: left promiscuous mode [ 834.298168][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.310356][T14389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.318911][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.328624][T14389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.336932][T14389] bridge_slave_1: left allmulticast mode [ 834.342634][T14389] bridge_slave_1: left promiscuous mode [ 834.348810][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.362851][T14389] bridge_slave_0: left allmulticast mode [ 834.369207][T14389] bridge_slave_0: left promiscuous mode [ 834.375061][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.405030][T14389] veth1_macvtap: left promiscuous mode [ 834.413308][T14389] veth0_macvtap: left promiscuous mode [ 834.418964][T14389] veth1_vlan: left promiscuous mode [ 834.424883][T14389] veth0_vlan: left promiscuous mode [ 835.129992][T14389] team0 (unregistering): Port device team_slave_1 removed [ 835.180176][T14389] team0 (unregistering): Port device team_slave_0 removed [ 835.228996][T14389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.279441][T14389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.646194][T14389] bond0 (unregistering): Released all slaves [ 836.098989][T14389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.200205][T14389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.249498][T14389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.308350][T14389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.594852][T14389] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.692380][T14389] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.768256][T14389] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.874601][T14389] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.079113][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.090867][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.662858][T14389] hsr_slave_0: left promiscuous mode [ 838.671446][T14389] hsr_slave_1: left promiscuous mode [ 838.678070][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.685684][T14389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.693898][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.704177][T14389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.712051][T14389] bridge_slave_1: left allmulticast mode [ 838.718274][T14389] bridge_slave_1: left promiscuous mode [ 838.723987][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.732853][T14389] bridge_slave_0: left allmulticast mode [ 838.738577][T14389] bridge_slave_0: left promiscuous mode [ 838.744268][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.755989][T14389] hsr_slave_0: left promiscuous mode [ 838.761960][T14389] hsr_slave_1: left promiscuous mode [ 838.767796][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.776797][T14389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.786245][T14389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.793931][T14389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.801897][T14389] bridge_slave_1: left allmulticast mode [ 838.807829][T14389] bridge_slave_1: left promiscuous mode [ 838.813682][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.822491][T14389] bridge_slave_0: left allmulticast mode [ 838.828140][T14389] bridge_slave_0: left promiscuous mode [ 838.834456][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.867459][T14389] veth1_macvtap: left promiscuous mode [ 838.873013][T14389] veth0_macvtap: left promiscuous mode [ 838.880245][T14389] veth1_vlan: left promiscuous mode [ 838.887367][T14389] veth0_vlan: left promiscuous mode [ 838.893920][T14389] veth1_macvtap: left promiscuous mode [ 838.899719][T14389] veth0_macvtap: left promiscuous mode [ 838.905289][T14389] veth1_vlan: left promiscuous mode [ 838.914103][T14389] veth0_vlan: left promiscuous mode [ 839.606832][T14389] team0 (unregistering): Port device team_slave_1 removed [ 839.654795][T14389] team0 (unregistering): Port device team_slave_0 removed [ 839.712221][T14389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.767329][T14389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.140740][T14389] bond0 (unregistering): Released all slaves [ 840.755972][T14389] team0 (unregistering): Port device team_slave_1 removed [ 840.805150][T14389] team0 (unregistering): Port device team_slave_0 removed