last executing test programs: 10m9.479317327s ago: executing program 32 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f0000000840)=[{&(0x7f0000000500)=""/213, 0xd5}], 0x1, 0x3a, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r9, &(0x7f00000001c0)={0x2c, 0x9, r11, 0x2}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250100000008000734687bb20030000880340000800400098024000100975c9df7c983c8209ee787254b899f8ed90000000023c23c62f53c57cdbf691c08000300020000001400020077673100"/98], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 9m56.647448574s ago: executing program 2 (id=57): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m52.547687321s ago: executing program 2 (id=67): socket(0x2, 0xa, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x41145}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000) 9m51.195540226s ago: executing program 2 (id=69): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x103) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000480)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) unshare(0xe000000) r1 = shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x27, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r4], 0x7) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0x4018aee2, &(0x7f0000000080)={0x1, 0x0, [{0x0, 0x0, 0xfffffffffffffffd}]}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYRES16=r5, @ANYRESHEX, @ANYRES64=r3, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x7c}, 0x1, 0x0, 0x0, 0x2000c840}, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) readahead(r7, 0x6, 0x5) sendto$inet6(r7, &(0x7f0000000400)="e232d02025470490115d7c5be6965d081ab46670a3119f17328f77b394be9f122ad4f44b7b50f30d3c7b815e0bcd0786c1bbf54c1ea4dddaa128a5dc3197e5a9450e622085b04e443ba8915f5164685e4111d9effcc91b64b4399ba1c27ab741f28a9e107657b8a89bc64327502ec2945a41083031a1212b850f5554812c6ec22c78befe6aa1395b8559c97110cad2cf3adfcdeeb55cdc319ab287fc5bb91dc8b7fb5dd90b88dc6d673c405d7704c8dc6b606bd6ec1bad219ff9a42710736be2832a8fd0a716cb46a1db96ef5f4c9d3ed33087eda84f120625a24fa991ed304962917602b84c367a06ace536", 0xec, 0x20008800, 0x0, 0x0) 9m46.46947118s ago: executing program 2 (id=79): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) 9m45.523246361s ago: executing program 2 (id=81): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x20000, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x5, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x50}}, 0x0) 9m39.830585627s ago: executing program 2 (id=98): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) 9m39.51988751s ago: executing program 33 (id=98): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) 8m40.873705722s ago: executing program 0 (id=296): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80) utime(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, 0xffffffffffffffff, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 8m36.806997798s ago: executing program 0 (id=309): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x38, 0x0, &(0x7f0000001000)) 8m36.547114001s ago: executing program 0 (id=311): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 8m35.75651544s ago: executing program 0 (id=313): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) 8m35.408775414s ago: executing program 0 (id=315): syz_mount_image$erofs(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 8m31.670667337s ago: executing program 0 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x4040080) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'vlan1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/kexec_loaded', 0x1, 0x86) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 8m31.466043159s ago: executing program 34 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x4040080) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'vlan1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/kexec_loaded', 0x1, 0x86) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 8m25.060295692s ago: executing program 1 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r1, r0}, 0xc) 8m24.842592785s ago: executing program 1 (id=355): socket(0xa, 0x3, 0xff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) unshare(0x6020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[], 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, r0, 0x26, 0x0, 0xa697, 0x3}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) 8m23.983465815s ago: executing program 1 (id=358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, @in=@loopback, {0x0, 0x0, 0x3, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'hmac(sha256)\x00'}}}]}, 0x138}}, 0x0) 8m23.46718891s ago: executing program 1 (id=360): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000440)={[{@jqfmt_vfsv1}, {@usrquota}, {@nouser_xattr}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x83}}, {@noacl}]}, 0xfc, 0x594, &(0x7f0000000500)="$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") mount$bind(&(0x7f0000000240)='./file1\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x109041, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00), 0x800) 8m22.786963769s ago: executing program 1 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x2, 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 8m17.122984793s ago: executing program 1 (id=384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfba) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) syz_emit_ethernet(0x4a, &(0x7f0000000c80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8000}}}}}}}, 0x0) 8m16.752548188s ago: executing program 35 (id=384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfba) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) syz_emit_ethernet(0x4a, &(0x7f0000000c80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8000}}}}}}}, 0x0) 3m0.249165518s ago: executing program 5 (id=1324): capset(0x0, 0x0) futex(&(0x7f00000000c0)=0x1, 0x5, 0x4, 0x0, &(0x7f0000048000)=0x2, 0xffffffff) 2m59.99945434s ago: executing program 5 (id=1327): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2, 0x0, 0x0, 0x5}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$kcm(r0, &(0x7f0000002c40)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @private=0xa010101}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000001c0)='q*aWQ', 0x5}], 0x1}, 0x800) 2m58.993034262s ago: executing program 5 (id=1330): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x8, 0x2, 0x2, 0x401, 0x401004, 0x7, 0x7ffffffffffffffd, 0x6}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m55.862174977s ago: executing program 5 (id=1345): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 2m55.449135132s ago: executing program 5 (id=1348): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000100)) 2m54.901431948s ago: executing program 5 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, 0x0, &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2m54.653033702s ago: executing program 36 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, 0x0, &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2m22.848187363s ago: executing program 3 (id=1509): socket(0x400000000010, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x2040400) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x1) process_mrelease(0xffffffffffffffff, 0x700000000000000) 2m21.38730014s ago: executing program 3 (id=1515): syz_open_dev$mouse(&(0x7f00000002c0), 0x1, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0/file1\x00', 0x385898, &(0x7f00000004c0)={[{@orlov}], [{@fowner_lt}, {@subj_user={'subj_user', 0x3d, 'fsmagic'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}, 0x0, 0x532, &(0x7f00000005c0)="$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") unlink(&(0x7f0000000100)='./file0/file1\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x2) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') 2m19.447294282s ago: executing program 3 (id=1521): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="82eb", 0x2}], 0x1}}], 0x1, 0x8001) 2m18.866807849s ago: executing program 3 (id=1524): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000640)=ANY=[@ANYBLOB='gid=ignore,undelete,anchor=00000000000000000011,longad,umask=00000000000000000000004,utf8,novrs,noadinicb,uid=forget,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f7374726963742c73686f727461642c646d6f64653d30303030303030303030303030303030303030303030302c0080ad9b92f74a7d4f9c4c2d40531531b8a84c7ad96565dc47c8f2c93715951bb4517f8bea88665ff7b1cbbb1efb194b6fbb9438655a17adf3317298821eba064f27ece65a487e218391424720c9c7321be9bf783a2a84ecd18bf3e86d87ce991173"], 0x1, 0xc32, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x98500c, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x1000, 0x5, 0x0, 'queue0\x00', 0x1}) read$FUSE(r0, &(0x7f0000004840)={0x2020}, 0x2020) 2m17.193488657s ago: executing program 3 (id=1532): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, 0x0, 0xffffff00, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x2, 0x5, 0x6, 0x2], 0x2}, {0x3, [0x0, 0x0, 0x2, 0x5, 0x6, 0x1], 0x1, 0xa6adcdac30c0f96d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) rename(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000000)={@remote}, 0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') 2m13.299512592s ago: executing program 3 (id=1551): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) io_setup(0x10000, &(0x7f0000000380)) timer_gettime(r1, &(0x7f0000000040)) 2m13.002864965s ago: executing program 37 (id=1551): ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) io_setup(0x10000, &(0x7f0000000380)) timer_gettime(r1, &(0x7f0000000040)) 25.570439049s ago: executing program 7 (id=2030): syz_open_dev$hiddev(&(0x7f0000000200), 0x3, 0x80) r0 = socket(0x11, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000050, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @local, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) write$nbd(r0, &(0x7f0000000200)=ANY=[], 0x8d) 25.295340762s ago: executing program 7 (id=2032): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = open(0x0, 0x143142, 0x43) ftruncate(r3, 0x2007ffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x14) syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x1004000, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6164696e6963622c756d61736b3d30303030303030303030303030303030303030303030362c66696c657365743d30303030303030303030303030303030303030342c756e64656c657465006769643d69676e6f72652c757466382c6164696e6963622c7569643d666f726765742c616e63686f723d30393232333337323033363835343737353830362c657ae47569643c", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="80af44a9f700c993664ca415b0d208c46dd0ea67a59218729f77e6184acb746edae49053fe2e563480c98bce1709", @ANYRESOCT], 0x0, 0xc1d, &(0x7f0000001b00)="$eJzs3UFsHNd9B+D/G5EiKTcVEyeK3cbFui1SmbFcWVJMxSrcVU2zDSDLRCjmFoArklIXppYESTWykbZMLz30EKAoesiJQGsUSNHAaIqgR7Z1geTiQ5FTT0QLG0HRA1sEyClgMLNvpSVFWYxISqT1fTb12515b+a9N8tZSuDbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+9dvH0i+lRtwIAeJguj3/l9Bnv/wDwWLni7/8AAAAAAAAAAAAAAHDQpSjiyUgxf3k9TVbP2/ovNVs3b02MjG5fbSBVNY9U5cuv/hfPnD33xZeGz3fyo+vvtafjjfErF2uvzt2YX5hZXJyZrk20mlNz08WOj7B9/ZkHbtFQOQB9EXFz+tq1xdqZF85u2n1r8MO+J04MXhh+7tQz7bK3ahMjo6PjXWV6eh/47He51wyPo1HEqUjx/Hd/nBoRUQ3YLsfiPq+d/TZQdWKo6sTEyGjVkdlmo7VU7hzrDEQRUeuqVO+M0UO4FrtSj1gum182eKjs3vh8Y6FxdXamNtZYWGouNedaY6nd2rI/tSjifIpYiYi1vrsP1xtF9ESKbx9fT1cj4khnHL5QTQy+dzt2/p21L8p21nojVopDcM0OsL4o4vVI8ZP3TsZUOWb5Kz4f8XqZ3494p8xXIlL5wjgX8cE2ryMOp54o4i/K639hPU1X94POfeXSV2tfbl2b6yrbua8c0veHgS35cBzwe1N/FNGo7vjr6cF/2AEAAAAAAAAAAAAAAABgrw1EEU9Hitf+44+qecVRzUs/fmH49wc/0T1n/Kn7HKcs+0JELBc7m5N7NE8hHktjKT3iucSPs/4o4o/z/L9vPurGAAAAAAAAAAAAAAAAAAAAPNaK+FGkePn9k2klutcUb7au1640rs62V4XtrP3bWTN9Y2Njo5baWc85mXM550rO1ZxrOaPI9XPWc07mXM65knM151rOOJLr56znnMy5nHMl52rOtZzRk+vnrOeczLmccyXnas61nHFA1u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WKb319PUWKiHrEZLRzte9Rtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKPWlIr4XKWp/UL+9rSciUvV/28nyj3NRP1rmp6I+XOYrUb+Ys1FlT/2bj6D97E5vKuKHkaKv/93bF/wT7evf2352+2UQ73zjzrNf6Wnnkc7OwQ/7njhx/MLw6K89da/HabsGDF1qtm7eqk2MjI6Od23uyWf/VNe2wXzeYm+6TkQsvvX2m43Z2ZmFB39QvgR2Ud2DHT84apwf7oPoORDNeDR95zFQvv9/ECl++/3/7Lzhd37++6X2s9vv8PHTP7nz/v/y1gPt0/v/k13bXs4/jfT2RPQv3ZjvPRHRv/jW26eaNxrXZ67PtM6dPv2l4eEvnT3dezSi/1pzdqbr0a6HCgAAAAAAAAAAAAAAAODhSkX8bqRo/HA91SLiVjVfa/DC8HOnnjkSR6r5Vpvmbb0xfuVi7dW5G/MLM4uLM9O1iVZzam56Zqen66+me02MjO5LZ+5rYJ/bP9D/6tz8WwvN63+4tO3+Y/0Xry4uLTSmtt8dA1FE1Lu3DFUNnhgZrRo922y0qqpj206m+8X1piL+K1JMnaulZ/O2PP9v6wz/TfP/l7ceaJ/m/32ya1t5zpSK+Gmk+K2/fCqerdp5LO4as1zubyPF0PnP5XJxtCzXaUP7cwXaMwPLsv8XKf7xZ7GpbGc+5JN3yr6444E9JMrrfzxSfO/PvxO/nrf1bPr8h+2v/7GtB9rh9d/40y317nP9P9217dimzyvYm/4/7srrfypSvPLku/EbeVvPR3z+R+ezN07mwrc/n2Ofvv8/07VtMJ/3N/em6wAAAAAAAAAAAIdabyri7yLFM6M96aW8bSe//ze99UD79Ptfn+3aNr036xXd98GuBxUAAAAADojeVMSPIsX1pXdvz6HePP+7a/7n79yZ/zmStuyt/p3vl6vPDdjLf//rNpjPO7n7bgMAAAAAAAAAAAAAAAAAAMCBklIRL+X11Cfvs576aqR47X+ez+XSibJcZx34werP/stzrVMXZ2fnphpLjauzM7Xx+cbUTFn305Fi/W8+l+sW1frqz245R2ct9oVIMfr3nbLttdg7a5O31wNvr8Velv1kpPjvf9hctrOO9WfulD1Tlv3rSPG1f96+7Ik7Zc+WZb8TKX7wtVqn7LGybOfzUT97p+wLU3PFnl4PAAAAAAAAAAAAAAAAAAAAHk+9qYg/ixT/e2Pl9lz+vP5/b9fTyjvf6Frvf4tb1Tr/g9X6//d6/CDr/w9+VOM3jv9CfQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMMiRRFvR4r5y+tpta983tZ/qdm6eWtiZHT7agOpqnmkKl9+9b945uy5L740fL6TH11/rz0db4xfuVh7de7G/MLM4uLMdG2i1Zyam57Z8RF2W3+roWoAajfevDl97dpi7cwLZzftvjX4Yd8TJwYvDD936plO2YmR0dHxrjI9vQ989ruke2w/GkX8VaR4/rs/Tv/SF1HE7sfiPq+d/TZQdWKo6sTEyGjVkdlmo7VU7hzrDEQRUeuqVO+M0UO4FrtSj1gum182eKjs3vh8Y6FxdXamNtZYWGouNedaY6nd2rI/tSjifIpYiYi1vrsP1xtFvBkpvn18Pf1rX8SRzjh84fL4V06fuXc7in3s4w6U7az1RqwUh+CaHWB9UcQ/RYqfvHcy/q0voifaX/H5iNfL/H7EO9G+3ql8YZyL+GCb1xGHU08U8f/l9b+wnt7rK+8HnfvKpa/Wvty6NtdVtnNfOfTvDw/TAb839UcRP6ju+Ovp331fAwAAAAAAAAAAAAAAABwgRfxqpHj5/ZOpmh/cmRS90Gxdr11pXJ1tT+vrzP3r7N7Y2NiopXbWc07mXM65knM151rOKHL9nPUy+zc2JvPz5ZwrOVdzruWMI7l+znrOyZzLOVdyruZcyxk9uX7Oes7JnMs5V3Ku5lzLGQdk7h4AAAAAAAAAAAAAAAAAAPDxUlT/pfjW19fTRl97fenJaOeq9UA/9n4eAAD//0ps93U=") 21.92895273s ago: executing program 7 (id=2037): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f00000006c0)={0x7ffd, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x2c43, 0x186a1, 0x2, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6}) 19.617851747s ago: executing program 7 (id=2051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3507, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x240000c0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 19.427164309s ago: executing program 7 (id=2054): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, 0x0, 0xffffff00, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x2, 0x5, 0x6, 0x2], 0x2}, {0x3, [0x0, 0x0, 0x2, 0x5, 0x6, 0x1], 0x1, 0xa6adcdac30c0f96d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0) 17.010348246s ago: executing program 9 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f00000006c0)={0x7ffd, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x2c43, 0x186a1, 0x2, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6}) 16.543380272s ago: executing program 7 (id=2063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r3 = syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 11.43950343s ago: executing program 8 (id=2076): r0 = socket$alg(0x26, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$alg(r0, 0x0, 0x0) 10.835486287s ago: executing program 8 (id=2077): write(0xffffffffffffffff, &(0x7f0000000180)="071e04e830c5974a96c0499bb377e219e5ddc7b8efc334ff48d31247cacd28cedb7f1959fed2382b6e0c64fc5a9208207c2894a76976683ac33ea46941da07569e427714a7c8e4ea3ee7206ba4277fee3b999b0925ecf54b7546600641f48de150a1663bc938dd4a81", 0x69) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x79, 0x0, 0xa89}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r2) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x129200) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r3, 0x506) 10.60145529s ago: executing program 6 (id=2078): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04004220"], 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") 10.593306059s ago: executing program 9 (id=2079): semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000080)=[{0x4}, {0x3, 0x4, 0x800}, {0x1, 0x7}, {0x2, 0x8, 0x1800}, {0x3, 0x1, 0x800}, {0x1, 0x2, 0x800}, {0x2, 0x8}, {0x0, 0x80, 0x1000}, {0x2, 0x7, 0x1000}, {0x7, 0xb, 0x1800}], 0xa) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x3662) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x280c413, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0x0, 0x581, &(0x7f0000000100)="$eJzs3c9vHFcdAPDvbHadX07WBQ5QibYiRUkFWcdYbS0OpUgITpVA4R6MvbasrO3Iu25jq6KO+AOQEAIkTnDpBYk/AAlF4sKxQqoEZxAgEIIUhECCDNrZWWe9nrU3ibPrOp+PMpn33vz4vreZnZk3M9kJ4Kn1ej7cT9P0pYio5uWlfLjUzuxEvBARH9x7e6E9JJGm1/+WRJKXddeVZk7H+c4i2QrKX4n4ZrI/bnNr++Z8o1HfyPPTrdVb082t7asrq/PL9eX62uzszCtzr869PHftcZq3dD5PXIiI1770p+9/590vv/aLz771+xt/ufKtpFPnd6KvHXuc7c2Ui+YoLOzqNL0SZ3rK2p/lxkM25Dgr562729kA0j2TBriTbyIAAIxW+5z/IxHxqSxdjVN9p2wDT+CSKDirBwAAAI6j9AuT8d+ke+9un4mCsuqAeQEAAIBjqhQRk5GUavnzvpNRKtVqkT3D+7E4V2qsN1ufWVrfXFtsT4uYikppaaVRv5Y/KzwVlaSdn8nSef5fnYdAp3qmz0bEMxHxverZLF9bWG8sjvviBwAAADwlzvf1//9Z7fT/AQAAgBNmatwVAAAAAJ44/X8AAAA4+fT/AQAA4ET76htvtIe0+/7rxTe3Nm+uv3l1sd68WVvdXKgtrG/cqi2vr1eGWNnuywLXNm9Pt+rN1nRza/vG6vrmWuvGyp5XYAMAAAAj9Mzzd3+bRMTO589mQ9tE9qfjP/l7AsZZR+DJKEf0XZib2D/T7y52xn8cUaWAkTg17goAY1Pem036p58eYV2A0dq9rd8cbz2A8dl34O8z8OGd9zqjgf2IYZ4bAgAARuLyJwrv/2dKBy65c/Bk4Nh78CW+ONZ6AKOXX7frOZYPeVh3XQ8+9LL7/wWP/BVyxg8nSsUTgPDUO/T+/6BzhPeGjeD/EAEAwLhNZkNSquWX9yajVKrVIi5krwWoJEsrjfq1/O7gb6qV0+38TLZkcmifAQAAAAAAAAAAAAAAAAAAAAAAAADoSNMkUgAAAOBEiyj9Ofll57f8L1dfnOy/PjCR/Lsa+StC3/rR9R/cnm+1Nmba5X/fLW/98PqNcVy7AAAAAIpl/ffP5eOZcdcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPmg3tvL3SHUcb96xcjYqoofjnOZOMzUYmIc/9IotyzXBIRp44g/s6diPh4UfykXa3dkD3xK92ys08+fkzln8L+9t+P80cQH55md9v7n9eLvn+leCEbF3//yhF78o9q8P4vdvd/pwbs/y7sW1upMMaz7/9semD8OxHPlov3P934yYD4lzrJQz+Gb3x9e3vQtPTHEZe7x593S30RHqSmW6u3pptb21dXVueX68v1tdnZmVfmXp17ee7a9NJKo57/XRjju5/8+f2D2n+u8PjX2f8e1P4XD2t47n/v37730U6yUhT/yqWC+L/6ST7H/vil/Nj36Tzdnn65m97ppHs999NfP3dQ+xcHtP+wf/8rQ7b/pa99+w9DzgoAjEBza/vmfKNR33iURDUiHmPx0STavfRjUI1xJhoXI4acefb0+Kp6Jhrlx9sgD0tM9JW8s3+e52PoFba/P70laZqm7bK+mcsPsfklw0d/xMQhW0KyWzLuPRMAAHDUejsGAAAAAAAAAAAAAAAAAAAAwHg85K+InXuU3yfrj7mzm0qO4ie0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOxP8DAAD//8tO4O0=") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast2, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x4, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x108) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283afffe800000000000000000000000000000ff020000000000000000000000000001890090780000000020010000000000000000000000000000fc010000000000000000000000000000defb374c693dd1a3426dcefe769552f8cdd773183eff04b443f1e028bb15812d100a2745085931cd42c4db89c0f8b109cd3e864bcc504a425237d0b863bd21298db0825fa018cc41cc37a8fa4781f73b9274a98fb9172faf09605f3f0f2430e5788b1b02c29713564cc5ebc7f8dd4106c568c6017c4f0ba3f130d57213a768b34246d7d72f6d2a88d2843994c39d50de383c29"], 0x0) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/75) 9.197721515s ago: executing program 9 (id=2080): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000"], 0xec}, 0x1, 0x0, 0x0, 0x400c884}, 0x20000010) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x10) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x7151, 0x0) 9.175666575s ago: executing program 6 (id=2081): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x8efd, 0x0, 0x0, 0x800, 0xbc, 0x1, 0x67, 0x403, r3}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000380)=0xc) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESDEC=r0], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0xa44, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) pread64(r0, &(0x7f00000000c0)=""/144, 0x90, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902"], 0x0) r4 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x3f28, 0x2, 0x0, 0x2fb}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)) io_uring_enter(r4, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x5bf, 0x7f, 0x6, 0x46, 0xfffffff2, 0x5f, 0x2, 0x0, 0xffff2d37, 0x1dd2, 0xfffffff8, 0x7, 0x4, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x20000001, 0xfffffffc, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x4, 0xe661, 0x8, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x15, 0x0, 0x80, 0xfffffffc, 0x5, 0x5, 0x8, 0x0, 0x1, 0x3e], [0x10000007, 0x10002, 0x12b, 0x4734646, 0x9, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x1, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x1, 0xea0, 0xfffffff9, 0x7, 0x4, 0x80, 0x5, 0x400, 0xffffffff, 0x6, 0x400001, 0xff, 0x1005, 0x8007fe, 0x5f31, 0x4, 0xffffffff, 0x238, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x10000003, 0x8000, 0xffff, 0x2, 0x7f, 0x1, 0x8, 0x3, 0x7, 0x0, 0x7, 0x6, 0x9, 0x48c93690, 0xfffffffe, 0xff], [0x9, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3d, 0x3, 0x200, 0x80, 0x3, 0x4, 0x0, 0x543, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x4fa, 0xfffff1d1, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x1, 0x7, 0x1, 0x51bc, 0x9, 0xce7, 0x1ff, 0x6, 0x80000000, 0x5, 0x3, 0x104, 0x80000000, 0x3, 0x3, 0x8ffff, 0xa61d, 0x2, 0x5, 0x1, 0x6, 0x7, 0x60a8, 0x6, 0x2, 0x1, 0x80000003, 0x5, 0x8, 0xff, 0x1000003, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x3, 0x2, 0x2b91, 0xa20, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x1, 0x2, 0xb1c, 0x1, 0x200, 0x40fff, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x6bc, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x5f4, 0x5f4, 0x5f4, 0xffffffff, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0x224, 0x280, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0xf], 0x6, 0x10, 0x0, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}], 0x4}}, @common=@hbh={{0x48}, {0x9, 0x5, 0x0, [0xfff, 0x4, 0x7, 0xff, 0x7fff, 0x3, 0x7, 0x5, 0x7f, 0x6, 0x1, 0x7fe, 0x8, 0x4a80, 0x4], 0x1}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0x0, 0xff, 0xffffff00], 0x4e24, 0x4e23, 0x4e24, 0x4e22, 0x4ca, 0x6, 0x8, 0x3, 0x957}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @empty, [0xffffffff, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xff], 'batadv_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2c, 0x38, 0x2, 0x60}, 0x0, 0x224, 0x258, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x7, 0x1000], 0xfffffffe, 0x30, 0x6, [@loopback, @mcast1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @empty, @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local], 0x8}}, @common=@hbh={{0x48}, {0x6, 0x5, 0x0, [0x7, 0xb5d, 0xa521, 0x8, 0x7, 0x4, 0x7, 0x80, 0x9, 0xfffd, 0x32, 0x3, 0x6, 0xd, 0x2, 0x4], 0xb}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x3, 0x1, 0x5}, {0xffffffffffffffff, 0x1, 0x6}, {0x4, 0x5, 0x4}, 0x4, 0x4}}}, {{@uncond, 0x0, 0xec, 0x11c, 0x0, {}, [@common=@mh={{0x24}, {"8a73", 0x1}}, @common=@icmp6={{0x24}, {0xf, "3cd0", 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x4}, {0x4, 0x4, 0x6}, 0x1, 0x4}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x718) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="10000000031401002abd7000fedbdf25addf030e482af8d21c47bfc44f13ab1bac4d214a93318d16e2421e09d93ed2e9d76bfaa229c0ae83cc921335b2b3771ba419cabbeafe5bbea7ee761f05a9409afd81855b4a6e3a4f05f10322a4c3c5cd17b86082d1afd65ddc90ebb7e7a8aebdc284c7b86e3563dde71bf285389829edfa4db15d3520c31e5c2d6eccbf6b6ace62ed8588898c31b4deb753d5ea470f58f51cf960e48066b04a895566aa460e014593a052930ce94ec8fbe4e04ae4b92d59500d7e618923716072187eae"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x0, &(0x7f00000005c0)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@sq={'sq', 0x3d, 0x10}}, {@common=@privport}]}}) io_uring_enter(r6, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 8.489909694s ago: executing program 6 (id=2082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) r5 = openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004000)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3004081, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000f80)="$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") syz_extract_tcp_res(0x0, 0xcfe, 0x6) 7.183282608s ago: executing program 6 (id=2083): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.247940209s ago: executing program 9 (id=2084): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000520099b1000000000000000006000000304f2c3d997ebbd8d6"], 0x14}}, 0x0) 6.218242669s ago: executing program 4 (id=2085): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) 6.017971162s ago: executing program 4 (id=2086): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, 0x0, 0xffffff00, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x2, 0x5, 0x6, 0x2], 0x2}, {0x3, [0x0, 0x0, 0x2, 0x5, 0x6, 0x1], 0x1, 0xa6adcdac30c0f96d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0) 5.984533492s ago: executing program 8 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, 0x0, 0x84) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0500530001000000050053000000000014000400636169663000"/36], 0x48}, 0x1, 0x0, 0x0, 0x401c0}, 0x48004) 5.648305226s ago: executing program 4 (id=2088): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x30044080) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r7) sendmmsg$unix(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000010) socket$inet(0x2, 0x3, 0x9) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200", 0x12}], 0x1) 5.588699316s ago: executing program 8 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) clock_adjtime(0x0, &(0x7f00000006c0)={0x7ffd, 0x1000000007fff, 0x0, 0x0, 0x10000000000000, 0x2c43, 0x186a1, 0x2, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5, 0x6}) 4.263316731s ago: executing program 4 (id=2090): r0 = add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) getrusage(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000300)={0x9, 0x0, '\x00', 0x1, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@commit={'commit', 0x3d, 0x5}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdd0}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000008c0)="c52a5148669a2bf9c2fb70fddaa6e7bd0bf10101f359453e514f0aab744985bc89249922f2b68b07c47203f373bd9ba5ac8b0137fee69444e88930015c0d328697e294cd8337a5af823bbe966c997ecdd024252a9b82d2cf1b49b39eff7a7854ae370dd043c3d42cc57354d80c3f9720caa5af1210b0b9a8ea570f08348467c02e6cd3bba70a93e68a7b65758da81e4bcd1abb4baf0164b5f50c6e6728f545c7f2f294e456b9927b4917d3d12aa733f72d3d2e2c98", 0xb5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.56666501s ago: executing program 9 (id=2091): mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYBLOB=',group_', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)={0x20000005}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1d, 0x2, 0x0, 0x0, 0x1000000802, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02a09c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xae, 0xfffffffffffffffe, 0x7ffff, {0x5, 0xfffffffffffffffd, 0xefc, 0x81, 0x0, 0x7, {0x2, 0x0, 0x0, 0x1fd, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000, 0x1, 0x0, 0xee01, 0xfffffffd, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.120816998s ago: executing program 38 (id=2063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r3 = syz_open_procfs(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.073698847s ago: executing program 8 (id=2093): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 1.072949458s ago: executing program 9 (id=2094): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000002680)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000500)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000140)=0x7e) 962.660049ms ago: executing program 8 (id=2095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xac}}, 0x0) 592.425613ms ago: executing program 4 (id=2096): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0) 375.142176ms ago: executing program 4 (id=2097): write(0xffffffffffffffff, &(0x7f0000000180)="071e04e830c5974a96c0499bb377e219e5ddc7b8efc334ff48d31247cacd28cedb7f1959fed2382b6e0c64fc5a9208207c2894a76976683ac33ea46941da07569e427714a7c8e4ea3ee7206ba4277fee3b999b0925ecf54b7546600641f48de150a1663bc938dd4a81", 0x69) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x79, 0x0, 0xa89}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r2) setsockopt$sock_attach_bpf(r1, 0x110, 0x2, 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x129200) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r3, 0x506) 323.379616ms ago: executing program 6 (id=2098): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, 0x0, 0xffffff00, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x2, 0x5, 0x6, 0x2], 0x2}, {0x3, [0x0, 0x0, 0x2, 0x5, 0x6, 0x1], 0x1, 0xa6adcdac30c0f96d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') select(0x40, &(0x7f0000000000)={0x8}, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=2099): socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x228, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8, 0x0, {0x1000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) io_submit(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) kernel console output (not intermixed with test programs): filesystem in 1th superblock [ 366.030649][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.038159][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.045859][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.053196][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.060937][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.068086][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.075680][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.084005][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.091425][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.098899][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.106465][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.115224][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.123300][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.131631][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.147696][ T8400] F2FS-fs (loop5): invalid crc value [ 366.164756][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.184812][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.211195][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.234783][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.261435][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.280339][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.304425][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.326932][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.351595][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.358799][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.396293][ T8400] F2FS-fs (loop5): Found nat_bits in checkpoint [ 366.430896][ T4231] itetech 0003:258A:6A88.0006: unknown main item tag 0x0 [ 366.481961][ T4231] itetech 0003:258A:6A88.0006: hidraw0: USB HID v1.01 Device [HID 258a:6a88] on usb-dummy_hcd.6-1/input0 [ 366.543797][ T4231] usb 7-1: USB disconnect, device number 10 [ 366.557848][ T8400] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 366.574685][ T8400] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 367.284047][ T8415] fido_id[8415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 367.683224][ T8422] xt_hashlimit: size too large, truncated to 1048576 [ 367.945536][ T8430] loop3: detected capacity change from 0 to 512 [ 369.101712][ T4231] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 369.736557][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.805466][ T4231] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 371.168560][ T4231] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 371.185599][ T8455] loop6: detected capacity change from 0 to 512 [ 371.238982][ T8455] EXT4-fs (loop6): Ignoring removed orlov option [ 371.250065][ T8455] EXT4-fs (loop6): Test dummy encryption mode enabled [ 371.265987][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.307180][ T8455] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 371.320204][ T4231] usb 4-1: config 0 descriptor?? [ 371.350299][ T4231] usb 4-1: can't set config #0, error -71 [ 371.393839][ T4231] usb 4-1: USB disconnect, device number 13 [ 371.424887][ T8455] EXT4-fs (loop6): 1 truncate cleaned up [ 371.430686][ T8455] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 373.772005][ T8472] loop3: detected capacity change from 0 to 40427 [ 373.979399][ T8472] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 374.203135][ T8472] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 374.388704][ T8472] F2FS-fs (loop3): invalid crc value [ 374.717912][ T8472] F2FS-fs (loop3): Found nat_bits in checkpoint [ 375.002365][ T8472] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 375.069209][ T8472] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 377.513517][ T4231] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 377.951479][ T4231] usb 8-1: Using ep0 maxpacket: 8 [ 379.044186][ T4231] usb 8-1: config 0 has no interfaces? [ 379.101771][ T8564] device syzkaller0 entered promiscuous mode [ 379.267570][ T8571] loop6: detected capacity change from 0 to 512 [ 379.276465][ T4231] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 379.456587][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.560407][ T8571] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 379.572536][ T8571] ext4 filesystem being mounted at /159/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.725356][ T8571] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 379.737941][ T8571] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 379.748352][ T8571] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.922: Failed to acquire dquot type 0 [ 380.145422][ T4231] usb 8-1: Product: syz [ 380.190817][ T4231] usb 8-1: Manufacturer: syz [ 380.200757][ T4231] usb 8-1: SerialNumber: syz [ 380.380117][ T4231] usb 8-1: config 0 descriptor?? [ 380.409364][ T4231] usb 8-1: can't set config #0, error -71 [ 380.416495][ T4231] usb 8-1: USB disconnect, device number 9 [ 380.644652][ T8589] loop5: detected capacity change from 0 to 512 [ 380.788590][ T8589] EXT4-fs (loop5): Ignoring removed orlov option [ 380.828813][ T8589] EXT4-fs (loop5): Test dummy encryption mode enabled [ 380.847746][ T8589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 380.880248][ T8599] loop3: detected capacity change from 0 to 16 [ 380.963641][ T8599] erofs: (device loop3): mounted with root inode @ nid 36. [ 381.425312][ T8589] EXT4-fs (loop5): 1 truncate cleaned up [ 381.809193][ T8589] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 382.419191][ T8607] loop3: detected capacity change from 0 to 8192 [ 382.474085][ T8607] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 382.667930][ T8607] UDF-fs: Scanning with blocksize 512 failed [ 382.828183][ T8607] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 383.301577][ T8607] UDF-fs: Scanning with blocksize 1024 failed [ 383.326317][ T8607] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 383.375441][ T8607] UDF-fs: Scanning with blocksize 2048 failed [ 383.499116][ T8607] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.590374][ T26] audit: type=1800 audit(1778136594.896:22): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.931" name="bus" dev="loop3" ino=824 res=0 errno=0 [ 383.628035][ T8626] 9pnet_rdma: rdma_create_trans (8626): problem binding to privport: 13 [ 385.823999][ T8668] loop3: detected capacity change from 0 to 16 [ 385.906141][ T8668] erofs: (device loop3): mounted with root inode @ nid 36. [ 386.638645][ T8685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 386.707852][ T8685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.583155][ T8687] loop7: detected capacity change from 0 to 8192 [ 387.614407][ T8689] loop5: detected capacity change from 0 to 8192 [ 387.703265][ T8687] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 387.735614][ T8689] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 387.821435][ T8687] UDF-fs: Scanning with blocksize 512 failed [ 387.836977][ T8689] UDF-fs: Scanning with blocksize 512 failed [ 387.879989][ T8689] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 387.901947][ T8687] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 387.931755][ T8687] UDF-fs: Scanning with blocksize 1024 failed [ 387.940837][ T8689] UDF-fs: Scanning with blocksize 1024 failed [ 388.001798][ T8705] loop6: detected capacity change from 0 to 256 [ 388.176872][ T8687] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found [ 388.193791][ T8689] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 388.355459][ T8687] UDF-fs: Scanning with blocksize 2048 failed [ 388.409938][ T8689] UDF-fs: Scanning with blocksize 2048 failed [ 388.633618][ T8705] FAT-fs (loop6): bogus number of FAT sectors [ 388.640298][ T8705] FAT-fs (loop6): Can't find a valid FAT filesystem [ 388.660354][ T8687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.673920][ T8689] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 388.706707][ T26] audit: type=1800 audit(1778136599.687:23): pid=8687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.945" name="bus" dev="loop7" ino=824 res=0 errno=0 [ 388.783640][ T26] audit: type=1800 audit(1778136599.743:24): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.946" name="bus" dev="loop5" ino=824 res=0 errno=0 [ 390.491252][ T8729] loop6: detected capacity change from 0 to 512 [ 390.574882][ T8729] EXT4-fs (loop6): Ignoring removed orlov option [ 390.677428][ T8729] EXT4-fs (loop6): Test dummy encryption mode enabled [ 390.723062][ T8729] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 390.912225][ T8729] EXT4-fs (loop6): 1 truncate cleaned up [ 390.921164][ T8729] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 391.333090][ T4235] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 391.856736][ T4235] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.005024][ T4235] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 392.311347][ T4235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.498774][ T4235] usb 6-1: config 0 descriptor?? [ 392.553775][ T4235] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 392.639737][ T8763] loop7: detected capacity change from 0 to 256 [ 392.812175][ T8763] FAT-fs (loop7): Directory bread(block 64) failed [ 392.842813][ T8763] FAT-fs (loop7): Directory bread(block 65) failed [ 392.861039][ T8763] FAT-fs (loop7): Directory bread(block 66) failed [ 392.861749][ T8764] netlink: 68 bytes leftover after parsing attributes in process `syz.5.959'. [ 392.867816][ T8763] FAT-fs (loop7): Directory bread(block 67) failed [ 392.957357][ T8763] FAT-fs (loop7): Directory bread(block 68) failed [ 392.989247][ T8763] FAT-fs (loop7): Directory bread(block 69) failed [ 393.021897][ T8763] FAT-fs (loop7): Directory bread(block 70) failed [ 393.044393][ T8763] FAT-fs (loop7): Directory bread(block 71) failed [ 393.074752][ T8763] FAT-fs (loop7): Directory bread(block 72) failed [ 393.081887][ T8763] FAT-fs (loop7): Directory bread(block 73) failed [ 393.215190][ T8762] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 393.935780][ T8775] loop3: detected capacity change from 0 to 256 [ 395.398957][ T8775] FAT-fs (loop3): bogus number of FAT sectors [ 395.405617][ T8775] FAT-fs (loop3): Can't find a valid FAT filesystem [ 395.434663][ T4231] usb 6-1: USB disconnect, device number 10 [ 395.864588][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.965'. [ 395.930978][ T8782] loop5: detected capacity change from 0 to 128 [ 397.387073][ T8781] loop3: detected capacity change from 0 to 8192 [ 398.523232][ T8781] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 398.711773][ T9] attempt to access beyond end of device [ 398.711773][ T9] loop5: rw=1, want=1041, limit=128 [ 398.726239][ T8794] loop7: detected capacity change from 0 to 16 [ 398.759421][ T8781] UDF-fs: Scanning with blocksize 512 failed [ 398.826038][ T8794] erofs: Unknown parameter 'ÅZ(q' [ 398.841789][ T8781] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 398.863969][ T8781] UDF-fs: Scanning with blocksize 1024 failed [ 398.883118][ T8781] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 398.898715][ T8781] UDF-fs: Scanning with blocksize 2048 failed [ 398.977198][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.983850][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.117728][ T8781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.177588][ T8800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 399.185422][ T8800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 399.261053][ T8800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.365406][ T8810] loop5: detected capacity change from 0 to 512 [ 400.548111][ T8814] loop3: detected capacity change from 0 to 256 [ 400.652845][ T8810] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 400.836781][ T8810] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.878820][ T4231] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 401.285825][ T8814] FAT-fs (loop3): Directory bread(block 64) failed [ 401.313642][ T8814] FAT-fs (loop3): Directory bread(block 65) failed [ 401.398111][ T8814] FAT-fs (loop3): Directory bread(block 66) failed [ 401.441285][ T8814] FAT-fs (loop3): Directory bread(block 67) failed [ 401.462832][ T8814] FAT-fs (loop3): Directory bread(block 68) failed [ 401.475783][ T4231] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.506216][ T8814] FAT-fs (loop3): Directory bread(block 69) failed [ 401.523999][ T8814] FAT-fs (loop3): Directory bread(block 70) failed [ 401.634023][ T8814] FAT-fs (loop3): Directory bread(block 71) failed [ 401.667535][ T4231] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 401.677396][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.697560][ T4231] usb 7-1: config 0 descriptor?? [ 401.715837][ T8814] FAT-fs (loop3): Directory bread(block 72) failed [ 401.722390][ T8830] loop5: detected capacity change from 0 to 512 [ 401.730451][ T8814] FAT-fs (loop3): Directory bread(block 73) failed [ 401.801980][ T4231] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 402.180229][ T8830] EXT4-fs (loop5): Ignoring removed orlov option [ 402.574594][ T8830] EXT4-fs (loop5): Test dummy encryption mode enabled [ 402.597027][ T8830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 402.725478][ T8830] EXT4-fs (loop5): 1 truncate cleaned up [ 402.739153][ T8813] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 402.742380][ T8830] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 403.105975][ T8841] device sit0 entered promiscuous mode [ 403.127171][ T23] usb 7-1: USB disconnect, device number 11 [ 403.224170][ T8841] netlink: 'syz.6.981': attribute type 1 has an invalid length. [ 403.258553][ T8841] netlink: 1 bytes leftover after parsing attributes in process `syz.6.981'. [ 404.788232][ T8860] loop3: detected capacity change from 0 to 512 [ 407.233680][ T4235] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 407.661317][ T4235] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.725971][ T4235] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 407.767894][ T4235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.841209][ T4235] usb 7-1: config 0 descriptor?? [ 408.374180][ T8898] netlink: 68 bytes leftover after parsing attributes in process `syz.6.991'. [ 408.784861][ T4235] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 409.474215][ T8906] device ipip0 entered promiscuous mode [ 410.963403][ T4177] usb 7-1: USB disconnect, device number 12 [ 410.985124][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1000'. [ 412.059908][ T8930] loop3: detected capacity change from 0 to 512 [ 412.245738][ T8930] EXT4-fs (loop3): Ignoring removed orlov option [ 412.268400][ T8930] EXT4-fs (loop3): Test dummy encryption mode enabled [ 412.306564][ T8930] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 413.496466][ T8930] EXT4-fs (loop3): 1 truncate cleaned up [ 413.502631][ T8930] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 414.307553][ T8922] loop6: detected capacity change from 0 to 40427 [ 414.368094][ T8922] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 414.422619][ T8922] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 414.487945][ T8922] F2FS-fs (loop6): invalid crc value [ 414.518071][ T8922] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12) [ 414.874261][ T23] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 415.248387][ T4231] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 415.333870][ T23] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 415.355109][ T23] usb 6-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.398995][ T23] usb 6-1: config 1 interface 0 has no altsetting 0 [ 415.676179][ T4231] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.701467][ T4231] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 415.750709][ T23] usb 6-1: string descriptor 0 read error: -22 [ 415.757660][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.766762][ T23] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.40 [ 416.501841][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.708958][ T4231] usb 7-1: config 0 descriptor?? [ 416.886649][ T8948] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 416.941912][ T4231] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 418.238123][ T8977] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1010'. [ 418.429742][ T23] usbhid 6-1:1.0: can't add hid device: -71 [ 418.451140][ T23] usbhid: probe of 6-1:1.0 failed with error -71 [ 418.529041][ T23] usb 6-1: USB disconnect, device number 11 [ 418.599861][ T8988] loop3: detected capacity change from 0 to 512 [ 419.508055][ T4231] usb 7-1: USB disconnect, device number 13 [ 419.845831][ T9004] loop7: detected capacity change from 0 to 512 [ 419.915788][ T9004] EXT4-fs (loop7): Ignoring removed orlov option [ 420.612751][ T9004] EXT4-fs (loop7): Test dummy encryption mode enabled [ 420.632164][ T9004] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 420.798061][ T9004] EXT4-fs (loop7): 1 truncate cleaned up [ 420.804067][ T9004] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 420.956762][ T9009] pit: kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 420.995274][ T9009] pit: kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 421.027772][ T9009] pit: kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 421.055336][ T9009] pit: kvm: requested 190247 ns i8254 timer period limited to 200000 ns [ 421.089852][ T9009] pit: kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 421.130412][ T9009] pit: kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 421.143100][ T9009] pit: kvm: requested 190247 ns i8254 timer period limited to 200000 ns [ 422.344953][ T9032] loop3: detected capacity change from 0 to 512 [ 425.775325][ T9061] 9pnet: Insufficient options for proto=fd [ 425.847978][ T9063] loop6: detected capacity change from 0 to 2048 [ 426.232908][ T9063] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 426.386002][ T9063] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 427.167964][ T9074] loop6: detected capacity change from 0 to 8192 [ 427.302412][ T9074] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 427.310453][ T9074] UDF-fs: Scanning with blocksize 512 failed [ 427.372971][ T9074] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 427.394115][ T9074] UDF-fs: Scanning with blocksize 1024 failed [ 427.424481][ T9074] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 427.493552][ T9074] UDF-fs: Scanning with blocksize 2048 failed [ 427.573711][ T9074] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.665499][ T26] audit: type=1800 audit(1778136636.136:25): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1046" name="bus" dev="loop6" ino=824 res=0 errno=0 [ 437.607060][ T9160] loop7: detected capacity change from 0 to 2048 [ 437.837919][ T9160] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,,errors=continue. Quota mode: none. [ 437.890629][ T9171] loop5: detected capacity change from 0 to 256 [ 438.003527][ T9171] FAT-fs (loop5): Directory bread(block 64) failed [ 438.045868][ T9171] FAT-fs (loop5): Directory bread(block 65) failed [ 438.095392][ T9171] FAT-fs (loop5): Directory bread(block 66) failed [ 438.153596][ T9171] FAT-fs (loop5): Directory bread(block 67) failed [ 438.183484][ T9171] FAT-fs (loop5): Directory bread(block 68) failed [ 438.205255][ T9171] FAT-fs (loop5): Directory bread(block 69) failed [ 438.227934][ T9171] FAT-fs (loop5): Directory bread(block 70) failed [ 438.275521][ T9171] FAT-fs (loop5): Directory bread(block 71) failed [ 438.442379][ T9171] FAT-fs (loop5): Directory bread(block 72) failed [ 438.458534][ T9171] FAT-fs (loop5): Directory bread(block 73) failed [ 438.618126][ T9171] attempt to access beyond end of device [ 438.618126][ T9171] loop5: rw=524288, want=1164, limit=256 [ 438.718451][ T9171] attempt to access beyond end of device [ 438.718451][ T9171] loop5: rw=0, want=1164, limit=256 [ 438.793443][ T26] audit: type=1800 audit(1778136646.552:26): pid=9171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1072" name="file0" dev="loop5" ino=1048870 res=0 errno=0 [ 439.309437][ T9166] loop6: detected capacity change from 0 to 40427 [ 439.457250][ T9166] F2FS-fs (loop6): Corrupted extension count (327717 + 1 > 64) [ 439.475490][ T9166] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 439.488616][ T9166] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1ffff [ 439.503430][ T9166] F2FS-fs (loop6): invalid crc value [ 439.519269][ T9166] F2FS-fs (loop6): Found nat_bits in checkpoint [ 439.814782][ T9166] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 439.823363][ T9166] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 440.784229][ T4685] attempt to access beyond end of device [ 440.784229][ T4685] loop6: rw=2049, want=45104, limit=40427 [ 443.849405][ T9213] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1085'. [ 445.417997][ T9227] loop6: detected capacity change from 0 to 256 [ 446.303080][ T9227] FAT-fs (loop6): bogus number of FAT sectors [ 446.309597][ T9227] FAT-fs (loop6): Can't find a valid FAT filesystem [ 446.696014][ T9231] loop3: detected capacity change from 0 to 4096 [ 446.833207][ T9217] loop5: detected capacity change from 0 to 40427 [ 446.967936][ T9231] EXT4-fs (loop3): inline encryption not supported [ 447.011529][ T9217] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64) [ 447.028907][ T9231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 447.061080][ T9217] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 447.069875][ T9217] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff [ 447.091033][ T9238] loop7: detected capacity change from 0 to 128 [ 447.098495][ T9231] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 447.108510][ T9217] F2FS-fs (loop5): invalid crc value [ 447.122846][ T9217] F2FS-fs (loop5): Found nat_bits in checkpoint [ 447.151126][ T26] audit: type=1800 audit(1778136654.375:27): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1091" name="bus" dev="loop7" ino=1048872 res=0 errno=0 [ 447.190860][ T9231] System zones: 0-5 [ 447.211052][ T9217] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 447.220912][ T9217] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 447.351523][ T9231] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 449.093691][ T9265] overlayfs: './file0' not a directory [ 450.962292][ T9277] loop3: detected capacity change from 0 to 256 [ 451.358526][ T9277] FAT-fs (loop3): bogus number of FAT sectors [ 451.365187][ T9277] FAT-fs (loop3): Can't find a valid FAT filesystem [ 451.874239][ T9285] loop3: detected capacity change from 0 to 256 [ 451.998199][ T9285] exfat: Deprecated parameter 'utf8' [ 452.015628][ T9285] exfat: Unknown parameter 'keep_last_dots' [ 452.489537][ T4295] Trying to write to read-only block-device loop7 [ 456.564470][ T9329] loop5: detected capacity change from 0 to 512 [ 458.329114][ T9346] loop5: detected capacity change from 0 to 512 [ 458.402415][ T9346] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 458.598582][ T9346] EXT4-fs (loop5): 1 truncate cleaned up [ 458.605009][ T9346] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 459.538487][ T9370] loop6: detected capacity change from 0 to 2048 [ 461.171088][ T5738] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 461.184673][ T5738] FAT-fs (loop7): Filesystem has been set read-only [ 461.194637][ T5738] Trying to write to read-only block-device loop7 [ 461.197819][ T9386] loop5: detected capacity change from 0 to 512 [ 461.222240][ T5738] Trying to write to read-only block-device loop7 [ 461.229858][ T5738] Trying to write to read-only block-device loop7 [ 461.283722][ T5738] Trying to write to read-only block-device loop7 [ 461.457422][ T9393] loop5: detected capacity change from 0 to 512 [ 461.490583][ T9390] loop7: detected capacity change from 0 to 2048 [ 461.540155][ T4236] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 461.569871][ T9393] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 461.667391][ T9393] EXT4-fs (loop5): 1 truncate cleaned up [ 461.743451][ T9393] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 461.807368][ T4236] usb 7-1: Using ep0 maxpacket: 8 [ 463.143071][ T4236] usb 7-1: config 0 has no interfaces? [ 464.286833][ T4236] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 464.296375][ T4236] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.322225][ T4236] usb 7-1: Product: syz [ 464.435418][ T4236] usb 7-1: Manufacturer: syz [ 464.490734][ T4236] usb 7-1: SerialNumber: syz [ 464.553617][ T4236] usb 7-1: config 0 descriptor?? [ 464.612740][ T9408] 9pnet_rdma: rdma_create_trans (9408): problem binding to privport: 13 [ 464.642088][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.649005][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.822122][ T9417] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 464.886215][ T9417] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 464.895000][ T9422] netlink: 'syz.3.1145': attribute type 29 has an invalid length. [ 464.985561][ T9412] loop7: detected capacity change from 0 to 8192 [ 464.995401][ T4233] usb 7-1: USB disconnect, device number 14 [ 466.761186][ T9452] loop7: detected capacity change from 0 to 512 [ 469.355067][ T9455] loop7: detected capacity change from 0 to 512 [ 469.424847][ T9471] netlink: 203516 bytes leftover after parsing attributes in process `syz.8.1158'. [ 469.447001][ T9473] loop3: detected capacity change from 0 to 512 [ 469.470430][ T9471] netlink: zone id is out of range [ 469.476263][ T9471] netlink: zone id is out of range [ 469.490781][ T9471] netlink: zone id is out of range [ 469.496279][ T9471] netlink: zone id is out of range [ 469.524416][ T9471] netlink: zone id is out of range [ 469.530185][ T9471] netlink: zone id is out of range [ 469.585155][ T9471] netlink: del zone limit has 8 unknown bytes [ 469.743185][ T9455] loop7: detected capacity change from 0 to 256 [ 469.806189][ T9455] exfat: Unknown parameter '¡ŒDÄ"b_Dü7"öGÄÿ"–¥]&‰¨¬ÿþæõü¿ÍF [ 469.806189][ T9455] ÷×Z·ÕHûodc[ù”å›'Èb{"òóìñlŸŒEqèÂ\iöD‡íïè’cÿ/Òüó¾`VŽûƒMÍ™©…©µÕ¶Õƒ[‡›ëŸ ¦.ÆI"â`Dêa»#á¹W¾:\4ÝVt¯U¥ípÄ:ŒŸUîF¼\;þåXvü—rLÇ' -ã“ÃQš' [ 470.239451][ T4231] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 472.165556][ T9501] loop6: detected capacity change from 0 to 512 [ 472.253690][ T4231] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 472.268080][ T4231] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 472.328492][ T4231] usb 6-1: config 0 interface 0 has no altsetting 0 [ 472.525571][ T4231] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.535437][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 472.585175][ T4231] usb 6-1: Product: syz [ 472.596006][ T4231] usb 6-1: Manufacturer: syz [ 472.601202][ T4231] usb 6-1: SerialNumber: syz [ 472.633195][ T4231] usb 6-1: config 0 descriptor?? [ 472.687343][ T4231] hub 6-1:0.0: bad descriptor, ignoring hub [ 472.694252][ T4231] hub: probe of 6-1:0.0 failed with error -5 [ 472.727167][ T4231] usb 6-1: selecting invalid altsetting 0 [ 473.147448][ T4236] usb 6-1: USB disconnect, device number 12 [ 473.541508][ T4233] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 473.709994][ T9527] netlink: 'syz.8.1180': attribute type 10 has an invalid length. [ 473.730750][ T9528] loop5: detected capacity change from 0 to 512 [ 473.742181][ T9527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 473.840670][ T4233] usb 7-1: Using ep0 maxpacket: 8 [ 474.680207][ T4233] usb 7-1: config 0 has no interfaces? [ 474.694755][ T4231] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 474.855271][ T4233] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 474.876435][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.884850][ T4233] usb 7-1: Product: syz [ 474.890242][ T4233] usb 7-1: Manufacturer: syz [ 474.895404][ T4233] usb 7-1: SerialNumber: syz [ 474.923684][ T4233] usb 7-1: config 0 descriptor?? [ 475.111779][ T4231] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.128853][ T4231] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 475.150750][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.177428][ T4231] usb 4-1: config 0 descriptor?? [ 475.243302][ T9511] 9pnet_rdma: rdma_create_trans (9511): problem binding to privport: 13 [ 475.255094][ T4231] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 475.300205][ T4233] usb 7-1: USB disconnect, device number 15 [ 476.329634][ T4233] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 476.368091][ T4236] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 476.543342][ T4233] usb 6-1: device descriptor read/64, error -71 [ 476.757794][ T4236] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 476.777742][ T4236] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 476.806421][ T4236] usb 8-1: config 0 interface 0 has no altsetting 0 [ 476.835370][ T4233] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 476.922228][ T4231] usb 4-1: USB disconnect, device number 14 [ 476.992399][ T4236] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 477.027790][ T4236] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 477.045677][ T4233] usb 6-1: device descriptor read/64, error -71 [ 477.074344][ T4236] usb 8-1: Product: syz [ 477.084309][ T4236] usb 8-1: Manufacturer: syz [ 477.109784][ T4236] usb 8-1: SerialNumber: syz [ 477.166061][ T4236] usb 8-1: config 0 descriptor?? [ 477.185519][ T4233] usb usb6-port1: attempt power cycle [ 477.206978][ T4236] hub 8-1:0.0: bad descriptor, ignoring hub [ 478.035582][ T4236] hub: probe of 8-1:0.0 failed with error -5 [ 478.063553][ T4236] usb 8-1: selecting invalid altsetting 0 [ 478.208275][ T4236] usb 8-1: USB disconnect, device number 10 [ 478.438558][ T4233] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 478.564657][ T4233] usb 6-1: device descriptor read/8, error -71 [ 478.568156][ T9586] 9pnet_rdma: rdma_create_trans (9586): problem binding to privport: 13 [ 478.986979][ T9593] netlink: 'syz.6.1197': attribute type 29 has an invalid length. [ 479.076278][ T9593] netlink: 'syz.6.1197': attribute type 29 has an invalid length. [ 479.088706][ T4233] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 479.343238][ T4233] usb 6-1: device not accepting address 16, error -71 [ 479.356448][ T4233] usb usb6-port1: unable to enumerate USB device [ 479.583440][ T9595] netlink: 'syz.6.1197': attribute type 29 has an invalid length. [ 480.045124][ T9606] loop6: detected capacity change from 0 to 128 [ 480.066244][ T9600] loop7: detected capacity change from 0 to 2048 [ 480.186659][ T9606] FAT-fs (loop6): Directory bread(block 32) failed [ 480.217994][ T9606] FAT-fs (loop6): Directory bread(block 33) failed [ 480.230287][ T9606] FAT-fs (loop6): Directory bread(block 34) failed [ 480.237150][ T9606] FAT-fs (loop6): Directory bread(block 35) failed [ 480.272921][ T9606] FAT-fs (loop6): Directory bread(block 36) failed [ 480.279957][ T9606] FAT-fs (loop6): Directory bread(block 37) failed [ 480.401487][ T9606] FAT-fs (loop6): Directory bread(block 38) failed [ 480.408811][ T9606] FAT-fs (loop6): Directory bread(block 39) failed [ 480.471301][ T9606] FAT-fs (loop6): Directory bread(block 40) failed [ 480.503703][ T9606] FAT-fs (loop6): Directory bread(block 41) failed [ 480.694789][ T26] audit: type=1800 audit(1778136685.762:28): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1205" name="file1" dev="loop6" ino=1048881 res=0 errno=0 [ 480.695308][ T9606] FAT-fs (loop6): Filesystem has been set read-only [ 480.778071][ T9606] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 481.886414][ T7305] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 483.350538][ T7305] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 483.396232][ T7305] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 484.237402][ T7305] usb 4-1: config 0 interface 0 has no altsetting 0 [ 484.545822][ T9646] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 485.624483][ T9649] loop6: detected capacity change from 0 to 512 [ 485.690876][ T7305] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.830716][ T7305] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 485.902890][ T7305] usb 4-1: Product: syz [ 485.907297][ T7305] usb 4-1: Manufacturer: syz [ 485.916689][ T7305] usb 4-1: config 0 descriptor?? [ 485.947219][ T7305] usb 4-1: can't set config #0, error -71 [ 485.962644][ T9649] EXT4-fs (loop6): 1 truncate cleaned up [ 485.964007][ T7305] usb 4-1: USB disconnect, device number 15 [ 485.979272][ T9649] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 486.113601][ T9649] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1219'. [ 486.149248][ T9649] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 487.174804][ T4233] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 487.386910][ T9675] loop6: detected capacity change from 0 to 8192 [ 487.449747][ T9675] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 487.503772][ T9675] UDF-fs: Scanning with blocksize 512 failed [ 487.550455][ T9675] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 487.593041][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.612927][ T9685] loop5: detected capacity change from 0 to 2048 [ 487.620815][ T9675] UDF-fs: Scanning with blocksize 1024 failed [ 487.641665][ T4233] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 487.670356][ T9675] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 487.684765][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.688948][ T9675] UDF-fs: Scanning with blocksize 2048 failed [ 487.723915][ T4233] usb 4-1: config 0 descriptor?? [ 487.737476][ T9685] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 487.783750][ T9675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.787232][ T4233] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 487.826034][ T26] audit: type=1800 audit(1778136692.434:29): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1228" name="bus" dev="loop6" ino=824 res=0 errno=0 [ 489.488415][ T9706] IPv6: addrconf: prefix option has invalid lifetime [ 489.908751][ T1108] usb 4-1: USB disconnect, device number 16 [ 491.080954][ T9726] loop6: detected capacity change from 0 to 512 [ 491.290563][ T9726] EXT4-fs (loop6): Ignoring removed orlov option [ 491.347254][ T9733] loop5: detected capacity change from 0 to 2048 [ 491.414599][ T9726] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 491.437125][ T9733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.760337][ T1108] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 492.284082][ T1108] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.345674][ T1108] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 492.366823][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.398955][ T1108] usb 4-1: config 0 descriptor?? [ 492.513079][ T1108] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 493.395350][ T23] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 493.792234][ T23] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 493.812696][ T23] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 493.841750][ T23] usb 7-1: config 0 interface 0 has no altsetting 0 [ 494.026093][ T23] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 494.050287][ T23] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 494.089893][ T23] usb 7-1: Product: syz [ 494.102507][ T23] usb 7-1: Manufacturer: syz [ 494.119271][ T23] usb 7-1: SerialNumber: syz [ 494.150773][ T23] usb 7-1: config 0 descriptor?? [ 494.223177][ T23] hub 7-1:0.0: bad descriptor, ignoring hub [ 494.244128][ T23] hub: probe of 7-1:0.0 failed with error -5 [ 494.285957][ T23] usb 7-1: selecting invalid altsetting 0 [ 494.494071][ T9782] loop7: detected capacity change from 0 to 512 [ 494.573800][ T23] usb 7-1: USB disconnect, device number 16 [ 494.812145][ T4177] usb 4-1: USB disconnect, device number 17 [ 495.288655][ T9797] loop6: detected capacity change from 0 to 512 [ 495.603031][ T9803] loop5: detected capacity change from 0 to 256 [ 495.701184][ T9803] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 495.845391][ T26] audit: type=1800 audit(1778136699.939:30): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1267" name="file1" dev="loop5" ino=1048895 res=0 errno=0 [ 497.013327][ T9812] loop6: detected capacity change from 0 to 1024 [ 497.344643][ T4385] hfsplus: b-tree write err: -5, ino 25 [ 497.351002][ T4385] hfsplus: b-tree write err: -5, ino 4 [ 497.426363][ T4385] hfsplus: b-tree write err: -5, ino 2 [ 498.296483][ T23] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 498.310637][ T9835] loop5: detected capacity change from 0 to 2048 [ 498.355427][ T9835] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 498.744504][ T23] usb 7-1: no configurations [ 498.750123][ T23] usb 7-1: can't read configurations, error -22 [ 498.981990][ T23] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 499.430297][ T23] usb 7-1: no configurations [ 499.435609][ T23] usb 7-1: can't read configurations, error -22 [ 499.465549][ T23] usb usb7-port1: attempt power cycle [ 501.334398][ T9845] loop5: detected capacity change from 0 to 128 [ 501.469514][ T9845] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 501.532733][ T9845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.212927][ T9864] loop5: detected capacity change from 0 to 2048 [ 502.879350][ T9864] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 503.268841][ T9877] 9pnet_rdma: rdma_create_trans (9877): problem binding to privport: 13 [ 503.321227][ T9880] loop5: detected capacity change from 0 to 256 [ 503.444922][ T9880] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 503.804761][ T9886] loop7: detected capacity change from 0 to 256 [ 504.583570][ T9886] FAT-fs (loop7): bogus number of FAT sectors [ 504.589693][ T9886] FAT-fs (loop7): Can't find a valid FAT filesystem [ 505.397684][ T9910] loop3: detected capacity change from 0 to 512 [ 505.849182][ T4233] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 506.910569][ T4233] usb 8-1: Using ep0 maxpacket: 8 [ 507.039983][ T4233] usb 8-1: config 0 has no interfaces? [ 507.815474][ T4233] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 507.874936][ T4233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.942508][ T4233] usb 8-1: Product: syz [ 508.839717][ T4233] usb 8-1: Manufacturer: syz [ 508.878350][ T4233] usb 8-1: SerialNumber: syz [ 508.902287][ T4233] usb 8-1: config 0 descriptor?? [ 508.964167][ T4233] usb 8-1: can't set config #0, error -71 [ 509.017554][ T4233] usb 8-1: USB disconnect, device number 11 [ 509.031389][ T9952] loop7: detected capacity change from 0 to 512 [ 509.243837][ T9959] loop6: detected capacity change from 0 to 2048 [ 509.259546][ T9960] loop5: detected capacity change from 0 to 1024 [ 509.602518][ T9959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.235990][ T9966] loop7: detected capacity change from 0 to 1024 [ 510.414660][ T9970] futex_wake_op: syz.5.1324 tries to shift op by -1; fix this program [ 511.405707][ T9981] loop6: detected capacity change from 0 to 8 [ 511.460575][ T9978] 9pnet_rdma: rdma_create_trans (9978): problem binding to privport: 13 [ 511.565708][ T9981] SQUASHFS error: Unable to read inode 0x11f [ 514.892765][T10035] loop5: detected capacity change from 0 to 128 [ 514.908364][ T4233] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 515.149928][ T4371] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 515.182469][ T4233] usb 7-1: Using ep0 maxpacket: 8 [ 515.192765][ T4371] FAT-fs (loop5): Filesystem has been set read-only [ 515.284004][T10040] loop7: detected capacity change from 0 to 8 [ 515.297951][ T4233] usb 7-1: config 0 has no interfaces? [ 515.403232][T10040] /dev/loop7: Can't open blockdev [ 515.476653][T10040] loop7: detected capacity change from 0 to 256 [ 515.501698][ T4233] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 515.516820][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.524549][T10040] /dev/loop7: Can't open blockdev [ 515.525287][ T4233] usb 7-1: Product: syz [ 515.525307][ T4233] usb 7-1: Manufacturer: syz [ 515.525323][ T4233] usb 7-1: SerialNumber: syz [ 515.547739][ T4233] usb 7-1: config 0 descriptor?? [ 515.741171][T10048] loop3: detected capacity change from 0 to 164 [ 515.819347][T10029] 9pnet_rdma: rdma_create_trans (10029): problem binding to privport: 13 [ 515.900435][ T4231] usb 7-1: USB disconnect, device number 20 [ 515.967815][T10055] loop3: detected capacity change from 0 to 512 [ 516.151362][T10055] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 516.312115][T10059] loop7: detected capacity change from 0 to 128 [ 516.380852][T10055] EXT4-fs error (device loop3): ext4_init_orphan_info:621: comm syz.3.1357: orphan file block 0: bad magic [ 516.439891][T10055] EXT4-fs (loop3): Remounting filesystem read-only [ 516.492762][T10055] EXT4-fs (loop3): mount failed [ 516.737347][T10067] loop6: detected capacity change from 0 to 2048 [ 516.784377][T10070] loop7: detected capacity change from 0 to 8 [ 516.931253][T10055] loop3: detected capacity change from 0 to 8192 [ 516.934072][T10067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.967527][T10070] /dev/loop7: Can't open blockdev [ 518.289563][T10071] chnl_net:caif_netlink_parms(): no params data found [ 518.491859][T10101] loop7: detected capacity change from 0 to 128 [ 519.102861][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 519.251152][ T1108] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 519.411587][T10071] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.467325][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.508016][T10071] device bridge_slave_0 entered promiscuous mode [ 519.531981][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.539413][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.551255][T10071] device bridge_slave_1 entered promiscuous mode [ 519.618801][T10071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.628611][ T1108] usb 4-1: Using ep0 maxpacket: 8 [ 519.715404][T10071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.774628][ T1108] usb 4-1: config 0 has no interfaces? [ 519.850885][ T4295] device hsr_slave_0 left promiscuous mode [ 519.869506][ T4295] device hsr_slave_1 left promiscuous mode [ 519.904823][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.936516][ T1108] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 519.955759][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.955855][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.980849][ T4295] device bridge_slave_1 left promiscuous mode [ 520.002816][ T1108] usb 4-1: Product: syz [ 520.007380][ T1108] usb 4-1: Manufacturer: syz [ 520.012541][ T1108] usb 4-1: SerialNumber: syz [ 520.025885][ T1108] usb 4-1: config 0 descriptor?? [ 520.031228][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.040156][ T4295] device bridge_slave_0 left promiscuous mode [ 520.050518][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.308412][T10098] 9pnet_rdma: rdma_create_trans (10098): problem binding to privport: 13 [ 520.377744][ T4177] usb 4-1: USB disconnect, device number 18 [ 520.439698][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 520.514299][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 520.545819][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.593772][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.856465][ T4295] bond0 (unregistering): Released all slaves [ 520.965339][T10121] loop3: detected capacity change from 0 to 256 [ 520.999310][T10071] team0: Port device team_slave_0 added [ 521.079733][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 521.080053][T10071] team0: Port device team_slave_1 added [ 521.155147][T10121] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 521.193114][T10071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.280076][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.475150][T10071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.707619][T10071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.715178][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.575931][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 523.746811][T10071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.841675][T10153] loop3: detected capacity change from 0 to 128 [ 523.911535][T10071] device hsr_slave_0 entered promiscuous mode [ 523.931189][T10156] loop6: detected capacity change from 0 to 128 [ 523.991939][T10071] device hsr_slave_1 entered promiscuous mode [ 524.007696][T10071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.048246][T10156] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 524.070797][T10071] Cannot create hsr debugfs directory [ 524.111642][T10156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.470575][ T26] audit: type=1326 audit(1778139801.977:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.3.1384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fdbbd4dd9 code=0x0 [ 525.254931][T10071] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 525.291072][T10071] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 525.331209][T10185] loop6: detected capacity change from 0 to 256 [ 525.361949][T10071] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 525.402484][T10071] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 525.439751][T10188] loop3: detected capacity change from 0 to 1024 [ 525.462575][T10185] exFAT-fs (loop6): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 525.498659][ T4177] Bluetooth: hci0: command 0x0419 tx timeout [ 525.545151][T10188] EXT4-fs (loop3): Ignoring removed bh option [ 525.587087][T10188] EXT4-fs (loop3): inline encryption not supported [ 525.828994][T10188] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 2: comm syz.3.1386: lblock 2 mapped to illegal pblock 2 (length 1) [ 526.332501][T10188] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 526.367902][T10188] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.1386: Invalid inode table block 1 in block_group 0 [ 526.546910][T10188] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 526.568353][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.574766][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.576918][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.597588][T10188] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.1386: mark_inode_dirty error [ 526.624059][T10188] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 526.670517][T10188] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1386: Failed to acquire dquot type 0 [ 526.708477][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 526.716694][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 526.748201][T10071] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.783291][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.804013][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.844006][T10188] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 526.862853][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.870465][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.878922][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 526.918178][T10188] EXT4-fs error (device loop3): ext4_evict_inode:284: inode #11: comm syz.3.1386: mark_inode_dirty error [ 527.161064][T10188] EXT4-fs warning (device loop3): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 527.666187][T10188] EXT4-fs (loop3): 1 orphan inode deleted [ 527.700360][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 527.712359][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.737749][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.745042][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.754117][ T4297] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 527.824509][ T4297] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 527.851520][ T4297] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0 [ 527.908323][T10188] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,usrjquota=,,errors=continue. Quota mode: none. [ 527.965943][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 528.312786][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 528.861685][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 528.888660][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 528.897696][ T4201] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 528.934531][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 528.991379][ T4201] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 528.998942][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 529.028899][ T4201] EXT4-fs error (device loop3): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 529.062332][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 529.099673][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.119766][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 529.213452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 529.251947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 529.263263][T10071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 529.336673][T10222] loop6: detected capacity change from 0 to 512 [ 529.438942][T10225] loop3: detected capacity change from 0 to 512 [ 529.544003][T10222] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 529.559441][T10225] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 529.670792][T10222] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.685363][T10225] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 529.768386][T10225] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 529.851407][T10225] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 529.942696][T10225] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 529.993076][T10225] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c04ce11c, mo2=0000] [ 530.051665][T10225] EXT4-fs (loop3): too many log groups per flexible block group [ 530.356442][T10225] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 530.394147][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 530.457747][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.572173][T10225] EXT4-fs (loop3): mount failed [ 531.109054][T10071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.914777][T10265] loop3: detected capacity change from 0 to 1024 [ 532.031725][T10265] hfsplus: failed to load root directory [ 532.175751][T10265] loop3: detected capacity change from 0 to 512 [ 532.259875][T10265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 532.382902][T10265] EXT4-fs (loop3): 1 orphan inode deleted [ 532.397879][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 532.414154][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 532.451689][T10265] EXT4-fs (loop3): 1 truncate cleaned up [ 532.457696][T10265] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 532.582054][T10071] device veth0_vlan entered promiscuous mode [ 532.609209][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.633299][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.697287][T10071] device veth1_vlan entered promiscuous mode [ 532.722978][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.738385][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.764829][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 532.904680][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 532.926494][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 532.986530][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.073455][T10071] device veth0_macvtap entered promiscuous mode [ 533.105456][T10071] device veth1_macvtap entered promiscuous mode [ 533.402812][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 533.501523][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 533.743328][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.804597][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.090772][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.407710][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.659268][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.707391][T10306] hub 7-0:1.0: USB hub found [ 534.712896][T10306] hub 7-0:1.0: 1 port detected [ 534.765840][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.783038][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.804356][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.834332][T10071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.883452][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.897088][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.972823][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.993450][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.042687][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.076611][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.110384][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.140444][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.170536][T10071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.220036][T10071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.269762][T10071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.313782][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 535.332849][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 535.359005][T10071] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.401215][T10071] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.431026][T10071] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.457341][T10071] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.653546][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.675330][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.699139][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 535.760384][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.760409][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.760642][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.806970][T10405] loop3: detected capacity change from 0 to 1024 [ 539.387251][ T26] audit: type=1326 audit(1778140585.631:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 539.490015][ T26] audit: type=1326 audit(1778140585.662:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 539.641751][ T26] audit: type=1326 audit(1778140585.662:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 539.686234][T10436] loop3: detected capacity change from 0 to 1024 [ 539.726589][ T26] audit: type=1326 audit(1778140585.652:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 539.789725][T10436] EXT4-fs (loop3): Ignoring removed bh option [ 539.812035][ T26] audit: type=1326 audit(1778140585.673:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 539.896569][ T26] audit: type=1326 audit(1778140585.673:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 539.940138][T10436] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 539.965776][ C0] vkms_vblank_simulate: vblank timer overrun [ 540.009572][T10439] loop7: detected capacity change from 0 to 8192 [ 540.058884][ T26] audit: type=1326 audit(1778140585.673:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 540.207151][ T26] audit: type=1326 audit(1778140585.673:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 540.321964][ T26] audit: type=1326 audit(1778140585.673:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 540.381915][ T26] audit: type=1326 audit(1778140585.673:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.9.1437" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f812c0e7dd9 code=0x7ffc0000 [ 540.601302][T10467] loop3: detected capacity change from 0 to 128 [ 540.863739][T10467] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 540.913223][T10467] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.231027][T10485] loop9: detected capacity change from 0 to 512 [ 541.324272][T10485] EXT4-fs error (device loop9): ext4_fill_super:4872: inode #2: comm syz.9.1454: inode has both inline data and extents flags [ 541.420302][T10485] EXT4-fs (loop9): get root inode failed [ 541.427105][T10485] EXT4-fs (loop9): mount failed [ 541.480433][ T4233] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 541.776011][ T4233] usb 7-1: Using ep0 maxpacket: 16 [ 541.891013][ T4233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.944874][ T4233] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.031777][ T4233] usb 7-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 542.106502][ T4233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.192010][ T4233] usb 7-1: config 0 descriptor?? [ 542.355108][T10499] loop7: detected capacity change from 0 to 8192 [ 542.748229][ T4233] hid (null): bogus close delimiter [ 542.766926][ T4233] wacom 0003:056A:0084.0007: bogus close delimiter [ 542.801896][ T4233] wacom 0003:056A:0084.0007: item 0 4 2 10 parsing failed [ 542.833469][ T4233] wacom 0003:056A:0084.0007: parse failed [ 542.878330][ T4233] wacom: probe of 0003:056A:0084.0007 failed with error -22 [ 542.942024][ T1108] usb 7-1: USB disconnect, device number 21 [ 543.125400][T10540] loop9: detected capacity change from 0 to 512 [ 543.248738][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1471'. [ 543.313776][T10546] futex_wake_op: syz.9.1472 tries to shift op by 32; fix this program [ 543.338082][ T4177] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 543.351727][T10546] loop9: detected capacity change from 0 to 16 [ 543.485639][T10546] erofs: (device loop9): mounted with root inode @ nid 36. [ 544.321826][T10552] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 544.337098][T10552] Error parsing options; rc = [-22] [ 544.975238][ T4177] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 544.983934][ T4177] usb 4-1: can't read configurations, error -61 [ 545.019424][ T26] kauditd_printk_skb: 892 callbacks suppressed [ 545.019441][ T26] audit: type=1326 audit(1778140591.542:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.128443][ T4177] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 545.136224][ T26] audit: type=1326 audit(1778140591.542:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.157513][T10577] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1483'. [ 545.186216][T10575] loop7: detected capacity change from 0 to 512 [ 545.233053][ T26] audit: type=1326 audit(1778140591.542:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.305417][ T26] audit: type=1326 audit(1778140591.542:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.309864][T10583] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 545.370647][ T26] audit: type=1326 audit(1778140591.542:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.416443][ T26] audit: type=1326 audit(1778140591.542:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.450066][ T26] audit: type=1326 audit(1778140591.542:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.569969][ T26] audit: type=1326 audit(1778140591.542:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 545.599131][ T26] audit: type=1326 audit(1778140591.542:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f82bc6feb57 code=0x7ffc0000 [ 545.624853][ T4177] usb 4-1: device descriptor read/all, error -71 [ 545.632481][ T4177] usb usb4-port1: attempt power cycle [ 545.638098][ T26] audit: type=1326 audit(1778140591.542:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10569 comm="syz.8.1481" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f82bc6a6159 code=0x7ffc0000 [ 545.642686][T10589] loop7: detected capacity change from 0 to 128 [ 546.515359][T10611] loop6: detected capacity change from 0 to 512 [ 549.800499][T10678] loop3: detected capacity change from 0 to 512 [ 549.993280][T10688] loop6: detected capacity change from 0 to 512 [ 550.058223][T10688] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 550.398520][T10688] EXT4-fs (loop6): 1 truncate cleaned up [ 550.495229][T10690] loop9: detected capacity change from 0 to 1024 [ 550.524990][T10688] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.717121][T10690] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 2: comm syz.9.1519: lblock 2 mapped to illegal pblock 2 (length 1) [ 551.793298][T10690] __quota_error: 1188 callbacks suppressed [ 551.793317][T10690] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 551.810386][T10690] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 48: comm syz.9.1519: lblock 0 mapped to illegal pblock 48 (length 1) [ 551.863350][T10690] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 551.876796][T10690] EXT4-fs error (device loop9): ext4_acquire_dquot:6236: comm syz.9.1519: Failed to acquire dquot type 0 [ 551.893271][T10690] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 551.922002][T10690] EXT4-fs error (device loop9): ext4_evict_inode:284: inode #11: comm syz.9.1519: mark_inode_dirty error [ 551.955437][T10690] EXT4-fs warning (device loop9): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 551.982730][T10690] EXT4-fs (loop9): 1 orphan inode deleted [ 551.995547][ T5120] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 552.020579][T10710] loop3: detected capacity change from 0 to 2048 [ 552.027598][T10690] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 552.066940][ T5120] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 552.096964][T10710] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 552.126890][ T5120] EXT4-fs error (device loop9): ext4_release_dquot:6272: comm kworker/u4:16: Failed to release dquot type 0 [ 552.238205][ T5120] EXT4-fs error (device loop9): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 552.299638][ T5120] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 552.336625][T10710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 552.405164][ T5120] EXT4-fs error (device loop9): ext4_release_dquot:6272: comm kworker/u4:16: Failed to release dquot type 0 [ 553.015941][T10071] EXT4-fs error (device loop9): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 553.119738][T10071] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 553.209870][T10071] EXT4-fs error (device loop9): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 553.229348][T10736] loop7: detected capacity change from 0 to 256 [ 553.354280][T10739] loop9: detected capacity change from 0 to 512 [ 553.438174][T10739] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 553.458080][ T4201] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 553.494950][T10739] EXT4-fs (loop9): 1 truncate cleaned up [ 553.634964][ T4201] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 553.653079][T10739] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 553.707184][T10748] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1534'. [ 554.372313][T10761] loop7: detected capacity change from 0 to 512 [ 554.689509][T10761] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 554.753518][T10761] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 554.842695][ T4295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.869356][T10761] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 554.968384][T10761] EXT4-fs error (device loop7): ext4_ext_check_inode:501: inode #2: comm syz.7.1537: pblk 0 bad header/extent: invalid magic - magic 90a, entries 0, max 0(0), depth 0(0) [ 554.999985][T10761] EXT4-fs (loop7): get root inode failed [ 555.006228][T10761] EXT4-fs (loop7): mount failed [ 555.032580][ T4295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.089269][ T4295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.252131][T10787] loop9: detected capacity change from 0 to 512 [ 556.262205][ T4295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.710113][ T23] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 556.737887][ T4295] tipc: Left network mode [ 556.986240][ T4232] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 557.091723][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.118784][ T23] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 557.161624][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.234249][ T4232] usb 10-1: Using ep0 maxpacket: 32 [ 557.393203][ T4232] usb 10-1: unable to get BOS descriptor or descriptor too short [ 557.487880][ T23] usb 7-1: config 0 descriptor?? [ 557.541442][ T23] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 557.635912][ T4232] usb 10-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 557.660596][ T4232] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.689481][ T4232] usb 10-1: Product: syz [ 557.709532][ T4232] usb 10-1: Manufacturer: syz [ 557.718477][ T4232] usb 10-1: SerialNumber: syz [ 557.788158][T10834] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1546'. [ 557.943338][ T4295] device hsr_slave_0 left promiscuous mode [ 557.963197][ T4295] device hsr_slave_1 left promiscuous mode [ 557.981580][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.010828][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.039794][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.071457][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.091291][ T4232] usb 10-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 558.109295][ T4295] device bridge_slave_1 left promiscuous mode [ 558.119788][ T4232] usb 10-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 558.124393][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.209428][ T4232] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 558.257159][ T4232] usb 10-1: USB disconnect, device number 2 [ 558.364829][ T4295] device veth1_macvtap left promiscuous mode [ 558.387698][ T4295] device veth0_macvtap left promiscuous mode [ 558.449278][ T4295] device veth1_vlan left promiscuous mode [ 558.501076][ T4295] device veth0_vlan left promiscuous mode [ 558.520848][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.628457][ T4177] usb 7-1: USB disconnect, device number 22 [ 560.042124][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 560.091776][ T4177] Bluetooth: hci4: command 0x0409 tx timeout [ 560.106307][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.152320][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.341167][ T4295] bond0 (unregistering): Released all slaves [ 560.799107][T10522] Bluetooth: hci0: command 0x2019 tx timeout [ 561.016902][T10907] loop6: detected capacity change from 0 to 1024 [ 561.153594][T10843] chnl_net:caif_netlink_parms(): no params data found [ 561.403776][T10923] loop7: detected capacity change from 0 to 512 [ 561.493166][T10843] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.501069][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.519229][T10843] device bridge_slave_0 entered promiscuous mode [ 561.528565][T10843] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.536984][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.546215][T10843] device bridge_slave_1 entered promiscuous mode [ 561.593942][T10843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.606932][T10843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.781136][T10843] team0: Port device team_slave_0 added [ 561.823162][T10843] team0: Port device team_slave_1 added [ 561.899679][T10843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.906994][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.935381][T10843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.962938][T10843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.161507][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 562.173947][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.214058][T10843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.356060][T10843] device hsr_slave_0 entered promiscuous mode [ 562.394899][T10843] device hsr_slave_1 entered promiscuous mode [ 562.419428][T10843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.450763][T10843] Cannot create hsr debugfs directory [ 563.817696][T10978] loop6: detected capacity change from 0 to 512 [ 564.180738][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 564.199484][T10987] loop7: detected capacity change from 0 to 1024 [ 565.504637][T11012] loop6: detected capacity change from 0 to 512 [ 566.030579][T11022] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 566.057316][T11022] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.111098][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 566.711290][ T4231] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 567.328877][ T4231] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.389795][ T4231] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 567.460589][ T4231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.535800][ T4231] usb 8-1: config 0 descriptor?? [ 567.560826][T10843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 567.628216][ T4231] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 567.651152][T10843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 567.726540][T10843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 567.755863][T10843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 567.985204][T10843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.032139][T10843] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.049510][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.075636][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.133445][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.186093][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.240470][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.248066][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.318645][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 568.383228][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.457760][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.465389][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.508707][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.561057][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 568.580725][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 568.623500][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 568.672968][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 568.704151][T11067] loop9: detected capacity change from 0 to 512 [ 568.734537][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 568.782515][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 568.812510][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 568.846753][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 568.964852][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 569.047990][ T4231] usb 8-1: USB disconnect, device number 12 [ 569.055567][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 569.147590][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.619485][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 570.651756][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.679443][T11107] loop6: detected capacity change from 0 to 512 [ 570.730117][T10843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.369149][ T4233] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 571.711387][ T4233] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.726943][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.744591][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.751982][ T4233] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 571.783102][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.794869][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 571.809953][ T4233] usb 8-1: config 0 descriptor?? [ 571.814182][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.838024][T10843] device veth0_vlan entered promiscuous mode [ 571.847321][ T4233] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 571.850610][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.870040][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.892329][T10843] device veth1_vlan entered promiscuous mode [ 571.938071][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 571.948710][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 571.957571][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 571.971194][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.988615][T10843] device veth0_macvtap entered promiscuous mode [ 572.015629][T10843] device veth1_macvtap entered promiscuous mode [ 572.115922][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.147127][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.229867][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.274986][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.302195][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.336683][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.372502][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.397123][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.419591][T10843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.440359][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.473279][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.510335][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.570485][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.642166][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.786795][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.949787][T10843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.105381][T10843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.212674][T10843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.351867][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 573.372977][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 573.407853][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 573.427341][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 573.441217][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 573.465229][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 573.485901][T10843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.503725][T10843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.523301][T10843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.534334][T10843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.697476][ T4177] usb 8-1: USB disconnect, device number 13 [ 574.046877][ T4244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.085511][ T4244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.155533][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 574.186182][T11177] loop7: detected capacity change from 0 to 512 [ 574.228618][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.261060][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.960230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 575.569380][ T4177] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 575.864210][ T4177] usb 5-1: Using ep0 maxpacket: 16 [ 576.007036][ T4177] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 576.217033][ T4177] usb 5-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 576.232075][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.264446][ T4177] usb 5-1: Product: syz [ 576.268794][ T4177] usb 5-1: Manufacturer: syz [ 576.317041][ T4177] usb 5-1: SerialNumber: syz [ 576.720800][ T4177] usb 5-1: invalid MIDI in EP 0 [ 577.032203][ T4177] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 577.053439][ T4177] usb 5-1: USB disconnect, device number 2 [ 577.169129][ T4231] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 577.312648][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.616952][ T4231] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.710548][ T4231] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 577.828762][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.980647][T11237] loop4: detected capacity change from 0 to 512 [ 578.038685][ T4231] usb 7-1: config 0 descriptor?? [ 578.086157][ T4231] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 579.742985][T11260] loop9: detected capacity change from 0 to 1024 [ 579.978685][ T4177] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 580.055778][ T4238] usb 7-1: USB disconnect, device number 23 [ 580.245312][ T4177] usb 5-1: Using ep0 maxpacket: 16 [ 580.584429][ T4177] usb 5-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 580.619279][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.664810][ T4177] usb 5-1: Product: syz [ 580.674266][ T4177] usb 5-1: Manufacturer: syz [ 580.729142][ T4177] usb 5-1: SerialNumber: syz [ 581.238413][ T4177] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 581.389015][ T4177] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 581.559524][ T4177] usb 5-1: USB disconnect, device number 3 [ 581.693138][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.752463][T11303] loop9: detected capacity change from 0 to 512 [ 583.140863][ T4236] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 583.274476][T10522] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 583.608141][T10522] usb 8-1: Using ep0 maxpacket: 16 [ 583.736524][T10522] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 583.785863][T10522] usb 8-1: config 1 has no interface number 0 [ 583.899085][T10522] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 584.048742][T10522] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 584.209402][T10522] usb 8-1: config 1 interface 105 has no altsetting 0 [ 584.215252][T11326] loop9: detected capacity change from 0 to 512 [ 584.299817][T11326] EXT4-fs error (device loop9): ext4_orphan_get:1406: inode #15: comm syz.9.1668: inode has both inline data and extents flags [ 584.324554][T11326] EXT4-fs error (device loop9): ext4_orphan_get:1411: comm syz.9.1668: couldn't read orphan inode 15 (err -117) [ 584.398955][T10522] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 584.415961][T10522] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 584.431351][T10522] usb 8-1: Product: syz [ 584.446804][T10522] usb 8-1: Manufacturer: syz [ 584.460540][T10522] usb 8-1: SerialNumber: syz [ 584.461124][T11326] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 584.495442][T11301] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 584.502587][T11301] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 584.751810][T10522] aqc111: probe of 8-1:1.105 failed with error -71 [ 584.808536][T10522] usb 8-1: USB disconnect, device number 14 [ 585.297634][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.304019][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.954956][T11360] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1674'. [ 586.143697][T11368] loop9: detected capacity change from 0 to 512 [ 588.081843][T11377] loop6: detected capacity change from 0 to 8 [ 588.275309][T11382] input: syz1 as /devices/virtual/input/input8 [ 589.509048][ T4177] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 589.979557][ T4177] usb 7-1: Using ep0 maxpacket: 16 [ 590.107939][ T4177] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.154006][ T4177] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.171078][ T4177] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 590.177065][T11415] loop4: detected capacity change from 0 to 2048 [ 590.329649][T11415] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 590.353532][ T4177] usb 7-1: config 0 interface 0 has no altsetting 0 [ 590.361289][ T4177] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 590.370991][ T4177] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.387297][ T4177] usb 7-1: config 0 descriptor?? [ 590.422311][T11415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.922663][ T4177] hid (null): unknown global tag 0xd [ 591.225258][ T4177] usb 7-1: USB disconnect, device number 25 [ 592.430390][ T4238] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 594.126468][ T4238] usb 8-1: Using ep0 maxpacket: 16 [ 594.258223][T11473] loop9: detected capacity change from 0 to 128 [ 595.647221][ T4238] usb 8-1: device descriptor read/all, error -71 [ 595.739750][T11473] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 595.751621][T11473] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.770969][T11473] EXT4-fs (loop9): resizing filesystem from 64 to 2 blocks [ 595.783238][T11473] EXT4-fs warning (device loop9): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 595.909258][T11500] loop7: detected capacity change from 0 to 1024 [ 597.784169][T11534] bridge0: port 3(veth0_to_bond) entered blocking state [ 597.791931][T11534] bridge0: port 3(veth0_to_bond) entered disabled state [ 597.815324][T11534] device veth0_to_bond entered promiscuous mode [ 597.826594][T11534] bridge0: port 3(veth0_to_bond) entered blocking state [ 597.834400][T11534] bridge0: port 3(veth0_to_bond) entered forwarding state [ 598.628164][ T4238] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 599.497101][ T4238] usb 5-1: unable to get BOS descriptor or descriptor too short [ 599.590523][ T4238] usb 5-1: not running at top speed; connect to a high speed hub [ 599.890545][ T4238] usb 5-1: config index 0 descriptor too short (expected 2104, got 282) [ 599.936407][T11564] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1725'. [ 600.248708][ T4238] usb 5-1: config 4 has too many interfaces: 128, using maximum allowed: 32 [ 600.447585][ T4238] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 600.804398][ T4238] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 600.815906][ T4238] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 128 [ 600.873134][ T4238] usb 5-1: string descriptor 0 read error: -71 [ 600.879537][ T4238] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=2a.4a [ 600.928853][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.001536][ T4238] usb 5-1: can't set config #4, error -71 [ 601.015903][ T4238] usb 5-1: USB disconnect, device number 4 [ 603.598245][T11605] loop9: detected capacity change from 0 to 512 [ 603.700366][T11605] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 603.793322][T11605] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv1,grpquota,,errors=continue. Quota mode: writeback. [ 603.864423][T11605] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.033481][T11616] loop4: detected capacity change from 0 to 1024 [ 605.114526][T11639] loop7: detected capacity change from 0 to 512 [ 606.557189][T11681] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 606.911856][T11689] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~  [ 607.412753][T11703] loop4: detected capacity change from 0 to 1024 [ 607.496827][T11707] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1759'. [ 607.515361][T11703] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 607.575629][T11703] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 608.277861][T11703] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 608.296419][T11703] System zones: 0-1, 3-36 [ 608.457745][T11703] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 610.075830][T11754] loop4: detected capacity change from 0 to 256 [ 610.116984][T11756] loop7: detected capacity change from 0 to 8 [ 610.175935][T11756] /dev/loop7: Can't open blockdev [ 610.278709][T11759] loop9: detected capacity change from 0 to 512 [ 610.352910][T11761] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 610.599129][T11759] EXT4-fs (loop9): Ignoring removed oldalloc option [ 610.614978][T11759] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 611.492456][T11759] EXT4-fs (loop9): 1 truncate cleaned up [ 611.498547][T11759] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000007e,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 611.629839][ T26] audit: type=1326 audit(1778146802.256:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 611.681281][ T26] audit: type=1326 audit(1778146802.285:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 611.765571][ T26] audit: type=1326 audit(1778146802.285:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 611.793984][ T26] audit: type=1326 audit(1778146802.285:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 611.863381][ T26] audit: type=1326 audit(1778146802.285:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 612.833831][ T26] audit: type=1326 audit(1778146802.285:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 612.866315][ T26] audit: type=1326 audit(1778146802.285:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 612.924767][ T26] audit: type=1326 audit(1778146802.285:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 612.939526][T11810] loop9: detected capacity change from 0 to 1764 [ 613.007181][ T26] audit: type=1326 audit(1778146802.285:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 613.105988][ T26] audit: type=1326 audit(1778146802.285:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11792 comm="syz.4.1787" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 613.148323][T11814] loop7: detected capacity change from 0 to 8192 [ 614.317076][T11842] loop4: detected capacity change from 0 to 256 [ 614.415975][T11842] FAT-fs (loop4): bogus number of FAT sectors [ 614.422432][T11842] FAT-fs (loop4): Can't find a valid FAT filesystem [ 614.614331][T11851] netlink: 'syz.9.1798': attribute type 6 has an invalid length. [ 617.597605][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 617.597624][ T26] audit: type=1326 audit(1778146807.831:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 617.775000][ T26] audit: type=1326 audit(1778146807.916:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 617.891097][ T26] audit: type=1326 audit(1778146807.916:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 618.710191][ T26] audit: type=1326 audit(1778146807.916:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 618.857393][ T26] audit: type=1326 audit(1778146807.916:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 618.883219][ T26] audit: type=1326 audit(1778146807.916:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 619.000720][ T26] audit: type=1326 audit(1778146807.916:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 620.339457][ T26] audit: type=1326 audit(1778146807.916:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 620.479727][ T26] audit: type=1326 audit(1778146807.916:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 620.575900][ T26] audit: type=1326 audit(1778146807.916:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11916 comm="syz.7.1821" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0e111dd9 code=0x7ffc0000 [ 622.549723][T12006] loop4: detected capacity change from 0 to 1024 [ 624.157390][ T4238] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 624.564072][ T4238] usb 10-1: Using ep0 maxpacket: 16 [ 624.724122][ T4238] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.838651][ T4238] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.124250][ T4238] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 625.183737][ T4238] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 625.239216][ T4238] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.420491][ T4238] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 625.439230][ T4238] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 625.450397][ T4238] usb 10-1: Manufacturer: syz [ 625.465861][ T4238] usb 10-1: config 0 descriptor?? [ 625.711104][T12069] loop4: detected capacity change from 0 to 1024 [ 625.980908][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 625.980926][ T26] audit: type=1326 audit(1778146815.670:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 626.089026][ T26] audit: type=1326 audit(1778146815.670:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 626.185936][ T26] audit: type=1326 audit(1778146815.670:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 626.219662][ T4238] rc_core: IR keymap rc-hauppauge not found [ 626.226151][ T4238] Registered IR keymap rc-empty [ 626.238577][T12028] udc-core: couldn't find an available UDC or it's busy [ 626.253444][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 626.272821][T12028] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 626.300840][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 626.339869][ T26] audit: type=1326 audit(1778146815.670:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 626.370195][ T26] audit: type=1326 audit(1778146815.670:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 626.378424][ T4238] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 626.487966][ T4268] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 626.787196][ T4268] usb 8-1: Using ep0 maxpacket: 32 [ 626.830073][ T4238] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input9 [ 626.852794][ T26] audit: type=1326 audit(1778146815.670:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 626.937922][ T4268] usb 8-1: config 170 has an invalid interface number: 149 but max is 0 [ 627.051819][ T4268] usb 8-1: config 170 has no interface number 0 [ 627.126005][ T4268] usb 8-1: config 170 interface 149 altsetting 7 endpoint 0x6 has an invalid bInterval 64, changing to 7 [ 627.190351][ T26] audit: type=1326 audit(1778146815.670:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 627.221396][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.249271][ T4268] usb 8-1: config 170 interface 149 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1023 [ 627.289840][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.295877][ T26] audit: type=1326 audit(1778146815.670:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 627.305127][ T4268] usb 8-1: config 170 interface 149 has no altsetting 0 [ 627.331018][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.407220][ T26] audit: type=1326 audit(1778146815.670:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 627.418073][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.506374][ T26] audit: type=1326 audit(1778146815.670:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.1866" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae92895dd9 code=0x7ffc0000 [ 627.543087][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.594665][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.621397][ T4268] usb 8-1: New USB device found, idVendor=10b8, idProduct=1f98, bcdDevice=90.1a [ 627.642476][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.653262][ T4268] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.678114][ T4268] usb 8-1: Product: syz [ 627.685427][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.688154][T12111] loop4: detected capacity change from 0 to 1024 [ 627.693413][ T4268] usb 8-1: Manufacturer: syz [ 627.724751][ T4268] usb 8-1: SerialNumber: syz [ 627.729865][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.781407][ T4238] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 627.803623][T12086] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 627.837040][ T4238] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 627.866925][ T4238] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 627.923382][ T4238] usb 10-1: USB disconnect, device number 3 [ 628.309062][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 628.551885][ T4268] dvb-usb: found a 'DiBcom STK807xPVR reference design' in warm state. [ 628.583148][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 628.606162][ T4268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 628.658605][ T4268] dvbdev: DVB: registering new adapter (DiBcom STK807xPVR reference design) [ 628.680999][ T4268] usb 8-1: media controller created [ 628.733308][ T4268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.754346][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 628.850736][ T4233] usb 5-1: config 6 has an invalid interface number: 162 but max is 0 [ 628.859198][ T4233] usb 5-1: config 6 has no interface number 0 [ 628.890447][ T4233] usb 5-1: config 6 interface 162 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 628.903223][ T4268] DVB: Unable to find symbol dib8000_attach() [ 628.920263][ T4268] dvb-usb: no frontend was attached by 'DiBcom STK807xPVR reference design' [ 628.934715][ T4233] usb 5-1: config 6 interface 162 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 32 [ 628.957457][ T4268] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 628.977986][ T4233] usb 5-1: config 6 interface 162 has no altsetting 0 [ 629.000549][ T4268] dvbdev: DVB: registering new adapter (DiBcom STK807xPVR reference design) [ 629.010359][ T4268] usb 8-1: media controller created [ 629.061191][ T4268] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 629.174993][ T4233] usb 5-1: New USB device found, idVendor=094b, idProduct=0001, bcdDevice=84.10 [ 629.195986][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.224610][ T4233] usb 5-1: Product: syz [ 629.232509][ T4268] DVB: Unable to find symbol dib8000_attach() [ 629.232517][ T4233] usb 5-1: Manufacturer: syz [ 629.232539][ T4233] usb 5-1: SerialNumber: syz [ 629.242798][ T4268] dvb-usb: no frontend was attached by 'DiBcom STK807xPVR reference design' [ 629.310480][T12121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 629.318291][T12121] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 629.492177][ T4268] rc_core: IR keymap rc-dib0700-rc5 not found [ 629.498596][ T4268] Registered IR keymap rc-empty [ 629.525852][ T4268] dvb-usb: could not initialize remote control. [ 629.545289][ T4268] dvb-usb: DiBcom STK807xPVR reference design successfully initialized and connected. [ 629.614999][ T4268] usb 8-1: USB disconnect, device number 17 [ 629.674766][ T4233] ipaq 5-1:6.162: PocketPC PDA converter detected [ 629.692576][ T4233] usb 5-1: active config #6 != 1 ?? [ 629.731948][ T4268] dvb-usb: DiBcom STK807xPVR reference design successfully deinitialized and disconnected. [ 629.735792][ T4233] usb 5-1: USB disconnect, device number 5 [ 630.186811][ T4268] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 630.764495][ T4268] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.870747][ T4268] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 630.998213][ T4268] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.041990][T12176] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.1886'. [ 631.075484][ T4268] usb 8-1: config 0 descriptor?? [ 631.141388][ T4268] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 631.198985][T12181] loop9: detected capacity change from 0 to 1024 [ 631.535043][T12195] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1879'. [ 631.834397][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 631.834416][ T26] audit: type=1326 audit(1778146821.152:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.060727][ T26] audit: type=1326 audit(1778146821.198:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.114751][ T26] audit: type=1326 audit(1778146821.198:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.175667][ T26] audit: type=1326 audit(1778147590.333:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.251462][ T26] audit: type=1326 audit(1778147590.333:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.303817][ T26] audit: type=1326 audit(1778147590.333:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.386850][ T26] audit: type=1326 audit(1778147590.354:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.436099][ T26] audit: type=1326 audit(1778147590.354:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.465296][ T26] audit: type=1326 audit(1778147590.386:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 633.496980][ T26] audit: type=1326 audit(1778147590.386:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.8.1891" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82bc704dd9 code=0x7ffc0000 [ 634.374366][T12242] xt_hashlimit: size too large, truncated to 1048576 [ 634.511950][ T4230] usb 8-1: USB disconnect, device number 18 [ 636.515531][ T4235] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 636.915703][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.017124][ T4235] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 637.113078][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.240449][ T4235] usb 5-1: config 0 descriptor?? [ 637.282866][ T4235] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 637.528396][T12315] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1911'. [ 638.404356][T12337] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 638.676683][T12353] netlink: 'syz.6.1922': attribute type 29 has an invalid length. [ 638.702467][T12353] netlink: 'syz.6.1922': attribute type 29 has an invalid length. [ 638.728364][T12356] netlink: 'syz.6.1922': attribute type 29 has an invalid length. [ 639.785236][ T4268] usb 5-1: USB disconnect, device number 6 [ 641.545267][T12404] netlink: 'syz.4.1933': attribute type 4 has an invalid length. [ 641.590729][T12407] loop7: detected capacity change from 0 to 128 [ 642.137449][T12415] netlink: 'syz.4.1936': attribute type 29 has an invalid length. [ 642.186577][T12415] netlink: 'syz.4.1936': attribute type 29 has an invalid length. [ 642.198131][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 642.251819][T12417] netlink: 'syz.4.1936': attribute type 29 has an invalid length. [ 643.791312][T12450] loop7: detected capacity change from 0 to 16 [ 643.852970][T12450] /dev/loop7: Can't open blockdev [ 644.575666][T12469] netlink: 'syz.9.1949': attribute type 29 has an invalid length. [ 644.673668][T12469] netlink: 'syz.9.1949': attribute type 29 has an invalid length. [ 644.764401][T12471] netlink: 'syz.9.1949': attribute type 29 has an invalid length. [ 648.232790][T12505] loop9: detected capacity change from 0 to 16 [ 648.362021][T12505] erofs: (device loop9): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 649.056277][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.062735][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.207942][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1958'. [ 649.239434][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1958'. [ 649.801432][T12539] loop7: detected capacity change from 0 to 2048 [ 650.319103][T12551] loop7: detected capacity change from 0 to 128 [ 650.409226][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1968'. [ 650.451528][T12559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.481723][T12559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.778784][T12646] netlink: 'syz.8.1993': attribute type 13 has an invalid length. [ 654.948893][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 655.012072][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.025786][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.329884][T12665] loop9: detected capacity change from 0 to 1024 [ 656.266461][ T4232] Bluetooth: hci3: command 0x2016 tx timeout [ 658.464151][T12722] loop4: detected capacity change from 0 to 1024 [ 661.592281][T12752] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2017'. [ 663.622964][T12789] loop7: detected capacity change from 0 to 256 [ 663.926630][T12789] /dev/loop7: Can't open blockdev [ 666.537825][T12818] loop7: detected capacity change from 0 to 2048 [ 668.571042][T12831] netlink: 'syz.6.2036': attribute type 72 has an invalid length. [ 673.158951][T12920] loop9: detected capacity change from 0 to 8192 [ 675.526009][T12959] loop4: detected capacity change from 0 to 8192 [ 675.600306][ T4180] loop4: p1 p2 p4 < > [ 675.604793][ T4180] loop4: partition table partially beyond EOD, truncated [ 675.635138][ T4180] loop4: p1 start 16777216 is beyond EOD, truncated [ 675.642184][ T4180] loop4: p2 size 515840 extends beyond EOD, truncated [ 675.710940][ T4180] loop4: p4 start 16777216 is beyond EOD, truncated [ 675.727721][T12959] loop4: p1 p2 p4 < > [ 675.734745][T12959] loop4: partition table partially beyond EOD, truncated [ 675.757770][T12959] loop4: p1 start 16777216 is beyond EOD, truncated [ 675.764638][T12959] loop4: p2 size 515840 extends beyond EOD, truncated [ 675.804814][T12959] loop4: p4 start 16777216 is beyond EOD, truncated [ 676.826248][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 677.031881][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 681.334641][ T4238] Bluetooth: hci4: command 0x0406 tx timeout [ 681.499564][T13028] 9pnet_rdma: rdma_create_trans (13028): problem binding to privport: 13 [ 683.735505][T13049] netlink: 216 bytes leftover after parsing attributes in process `syz.9.2080'. [ 684.270347][ T4288] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 684.338710][ T4288] Bluetooth: hci3: Injecting HCI hardware error event [ 684.371749][ T4191] Bluetooth: hci3: hardware error 0x00 [ 689.516681][T13088] loop4: detected capacity change from 0 to 512 [ 689.681913][T13088] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 690.615469][T13097] ================================================================== [ 690.624858][T13097] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x130d/0x3c90 [ 690.633536][T13097] Read of size 1 at addr ffff888023c9ec00 by task kworker/u5:0/13097 [ 690.642705][T13097] [ 690.645147][T13097] CPU: 0 PID: 13097 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 690.653065][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 690.663158][T13097] Workqueue: hci3 hci_rx_work [ 690.668182][T13097] Call Trace: [ 690.671741][T13097] [ 690.675027][T13097] dump_stack_lvl+0x188/0x250 [ 690.679888][T13097] ? show_regs_print_info+0x20/0x20 [ 690.685210][T13097] ? load_image+0x400/0x400 [ 690.689841][T13097] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 690.695711][T13097] ? mutex_lock_io_nested+0x60/0x60 [ 690.701270][T13097] print_address_description+0x60/0x2d0 [ 690.706857][T13097] ? hci_le_meta_evt+0x130d/0x3c90 [ 690.712183][T13097] kasan_report+0xdf/0x130 [ 690.716739][T13097] ? hci_le_meta_evt+0x130d/0x3c90 [ 690.722321][T13097] hci_le_meta_evt+0x130d/0x3c90 [ 690.727317][T13097] ? hci_remote_host_features_evt+0x280/0x280 [ 690.734223][T13097] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 690.740239][T13097] ? mark_lock+0x94/0x320 [ 690.744603][T13097] ? mutex_unlock+0x10/0x10 [ 690.749232][T13097] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 690.755255][T13097] ? lock_chain_count+0x20/0x20 [ 690.760382][T13097] ? __rwlock_init+0x140/0x140 [ 690.765546][T13097] hci_event_packet+0xe48/0x1370 [ 690.770607][T13097] ? lockdep_hardirqs_on+0x94/0x140 [ 690.775842][T13097] ? rcu_lock_release+0x20/0x20 [ 690.780854][T13097] ? hci_send_to_monitor+0x9c/0x4a0 [ 690.786169][T13097] hci_rx_work+0x255/0xa10 [ 690.790887][T13097] process_one_work+0x85f/0x1010 [ 690.795980][T13097] ? worker_detach_from_pool+0x240/0x240 [ 690.801653][T13097] ? lockdep_hardirqs_off+0x70/0x100 [ 690.807228][T13097] ? _raw_spin_lock_irq+0xb7/0xf0 [ 690.812672][T13097] ? _raw_spin_lock_irqsave+0x100/0x100 [ 690.818435][T13097] ? wq_worker_running+0x97/0x170 [ 690.823818][T13097] worker_thread+0xaa6/0x1290 [ 690.829114][T13097] ? lockdep_hardirqs_on+0x94/0x140 [ 690.834908][T13097] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 690.841302][T13097] kthread+0x436/0x520 [ 690.845485][T13097] ? rcu_lock_release+0x20/0x20 [ 690.850803][T13097] ? kthread_blkcg+0xd0/0xd0 [ 690.855523][T13097] ret_from_fork+0x1f/0x30 [ 690.860087][T13097] [ 690.863217][T13097] [ 690.865662][T13097] Allocated by task 13110: [ 690.870099][T13097] __kasan_kmalloc+0xb5/0xf0 [ 690.874721][T13097] __alloc_skb+0x22c/0x750 [ 690.879168][T13097] vhci_write+0xbc/0x450 [ 690.883668][T13097] vfs_write+0x745/0xd60 [ 690.887943][T13097] ksys_write+0x152/0x260 [ 690.892484][T13097] do_syscall_64+0x4c/0xa0 [ 690.896930][T13097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 690.903225][T13097] [ 690.905582][T13097] Last potentially related work creation: [ 690.911309][T13097] kasan_save_stack+0x35/0x60 [ 690.916018][T13097] kasan_record_aux_stack+0xb8/0x100 [ 690.921685][T13097] call_rcu+0x189/0x950 [ 690.925966][T13097] dev_shutdown+0x5e6/0x710 [ 690.930804][T13097] unregister_netdevice_many+0xa2c/0x19f0 [ 690.937002][T13097] default_device_exit_batch+0x364/0x3c0 [ 690.943020][T13097] cleanup_net+0x791/0xba0 [ 690.947839][T13097] process_one_work+0x85f/0x1010 [ 690.953237][T13097] worker_thread+0xaa6/0x1290 [ 690.958071][T13097] kthread+0x436/0x520 [ 690.962427][T13097] ret_from_fork+0x1f/0x30 [ 690.966958][T13097] [ 690.969316][T13097] The buggy address belongs to the object at ffff888023c9e800 [ 690.969316][T13097] which belongs to the cache kmalloc-1k of size 1024 [ 690.984048][T13097] The buggy address is located 0 bytes to the right of [ 690.984048][T13097] 1024-byte region [ffff888023c9e800, ffff888023c9ec00) [ 690.998435][T13097] The buggy address belongs to the page: [ 691.004547][T13097] page:ffffea00008f2600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23c98 [ 691.014991][T13097] head:ffffea00008f2600 order:3 compound_mapcount:0 compound_pincount:0 [ 691.023691][T13097] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 691.032082][T13097] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41dc0 [ 691.040807][T13097] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 691.049821][T13097] page dumped because: kasan: bad access detected [ 691.057139][T13097] page_owner tracks the page as allocated [ 691.063054][T13097] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4233, ts 70971254818, free_ts 70878921142 [ 691.080888][T13097] get_page_from_freelist+0x1bbd/0x1ca0 [ 691.087036][T13097] __alloc_pages+0x1ee/0x480 [ 691.091691][T13097] new_slab+0xc0/0x4b0 [ 691.096986][T13097] ___slab_alloc+0x80a/0xdd0 [ 691.101860][T13097] __kmalloc+0x1cd/0x330 [ 691.106122][T13097] ___neigh_create+0x6d2/0x2250 [ 691.111274][T13097] ip6_finish_output2+0x9f6/0x1510 [ 691.116774][T13097] NF_HOOK+0x163/0x460 [ 691.120968][T13097] mld_sendpack+0x6f2/0xc00 [ 691.125669][T13097] mld_ifc_work+0x836/0xb40 [ 691.130285][T13097] process_one_work+0x85f/0x1010 [ 691.135428][T13097] worker_thread+0xaa6/0x1290 [ 691.140134][T13097] kthread+0x436/0x520 [ 691.144221][T13097] ret_from_fork+0x1f/0x30 [ 691.148918][T13097] page last free stack trace: [ 691.153797][T13097] free_unref_page_prepare+0x637/0x6c0 [ 691.159853][T13097] free_unref_page+0x8f/0x2a0 [ 691.164844][T13097] __unfreeze_partials+0x1a5/0x200 [ 691.170411][T13097] put_cpu_partial+0x12d/0x190 [ 691.175196][T13097] qlist_free_all+0x35/0x90 [ 691.179915][T13097] kasan_quarantine_reduce+0x150/0x160 [ 691.185854][T13097] __kasan_slab_alloc+0x2f/0xd0 [ 691.190832][T13097] slab_post_alloc_hook+0x4c/0x380 [ 691.196051][T13097] kmem_cache_alloc+0x100/0x290 [ 691.200922][T13097] sock_alloc_inode+0x17/0xb0 [ 691.205718][T13097] new_inode_pseudo+0x5f/0x210 [ 691.210912][T13097] __sock_create+0x129/0x900 [ 691.215615][T13097] __sys_socket+0xe2/0x170 [ 691.220058][T13097] __x64_sys_socket+0x76/0x80 [ 691.225121][T13097] do_syscall_64+0x4c/0xa0 [ 691.229655][T13097] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 691.236887][T13097] [ 691.239375][T13097] Memory state around the buggy address: [ 691.245212][T13097] ffff888023c9eb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.253790][T13097] ffff888023c9eb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 691.262155][T13097] >ffff888023c9ec00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.270422][T13097] ^ [ 691.274611][T13097] ffff888023c9ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.283224][T13097] ffff888023c9ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 691.291858][T13097] ================================================================== [ 691.300222][T13097] Disabling lock debugging due to kernel taint [ 691.310754][T13097] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 691.318261][T13097] CPU: 0 PID: 13097 Comm: kworker/u5:0 Tainted: G B syzkaller #0 [ 691.327315][T13097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 691.337936][T13097] Workqueue: hci3 hci_rx_work [ 691.342651][T13097] Call Trace: [ 691.346214][T13097] [ 691.349163][T13097] dump_stack_lvl+0x188/0x250 [ 691.354185][T13097] ? show_regs_print_info+0x20/0x20 [ 691.359693][T13097] ? load_image+0x400/0x400 [ 691.364314][T13097] panic+0x2e5/0x810 [ 691.368235][T13097] ? bpf_jit_dump+0xd0/0xd0 [ 691.372933][T13097] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 691.379118][T13097] ? _raw_spin_unlock+0x40/0x40 [ 691.384080][T13097] ? hci_le_meta_evt+0x130d/0x3c90 [ 691.389477][T13097] check_panic_on_warn+0x80/0xa0 [ 691.394440][T13097] ? hci_le_meta_evt+0x130d/0x3c90 [ 691.399672][T13097] end_report+0x6d/0xf0 [ 691.403855][T13097] kasan_report+0x102/0x130 [ 691.408574][T13097] ? hci_le_meta_evt+0x130d/0x3c90 [ 691.413806][T13097] hci_le_meta_evt+0x130d/0x3c90 [ 691.418960][T13097] ? hci_remote_host_features_evt+0x280/0x280 [ 691.425227][T13097] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 691.430884][T13097] ? mark_lock+0x94/0x320 [ 691.435321][T13097] ? mutex_unlock+0x10/0x10 [ 691.440017][T13097] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 691.446017][T13097] ? lock_chain_count+0x20/0x20 [ 691.450985][T13097] ? __rwlock_init+0x140/0x140 [ 691.455861][T13097] hci_event_packet+0xe48/0x1370 [ 691.460924][T13097] ? lockdep_hardirqs_on+0x94/0x140 [ 691.466157][T13097] ? rcu_lock_release+0x20/0x20 [ 691.471037][T13097] ? hci_send_to_monitor+0x9c/0x4a0 [ 691.476258][T13097] hci_rx_work+0x255/0xa10 [ 691.480713][T13097] process_one_work+0x85f/0x1010 [ 691.485819][T13097] ? worker_detach_from_pool+0x240/0x240 [ 691.491850][T13097] ? lockdep_hardirqs_off+0x70/0x100 [ 691.497257][T13097] ? _raw_spin_lock_irq+0xb7/0xf0 [ 691.502541][T13097] ? _raw_spin_lock_irqsave+0x100/0x100 [ 691.508558][T13097] ? wq_worker_running+0x97/0x170 [ 691.513704][T13097] worker_thread+0xaa6/0x1290 [ 691.518667][T13097] ? lockdep_hardirqs_on+0x94/0x140 [ 691.524159][T13097] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 691.530401][T13097] kthread+0x436/0x520 [ 691.534585][T13097] ? rcu_lock_release+0x20/0x20 [ 691.539634][T13097] ? kthread_blkcg+0xd0/0xd0 [ 691.544246][T13097] ret_from_fork+0x1f/0x30 [ 691.548691][T13097] [ 691.552261][T13097] Kernel Offset: disabled [ 691.557988][T13097] Rebooting in 86400 seconds..