last executing test programs: 6m13.638132324s ago: executing program 32 (id=17): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0}, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x1000, &(0x7f00000002c0)={0x400002d, 0xd5, 0xc08}) 5m37.144180161s ago: executing program 1 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 5m35.993794017s ago: executing program 3 (id=103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b4, 0x20241) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r8, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write(r7, &(0x7f00000000c0)='I', 0x1) r9 = accept4$unix(r8, 0x0, 0x0, 0x0) recvfrom$unix(r9, &(0x7f0000001540)=""/259, 0xf7, 0x10122, 0x0, 0xfffffffffffffc86) 5m35.897391457s ago: executing program 1 (id=104): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) close(0xffffffffffffffff) 5m34.245321815s ago: executing program 4 (id=109): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0) stat(0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x40}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, r1, 0xd352) add_key(&(0x7f0000000480)='rxrpc_s\x00', 0x0, &(0x7f0000000200)="48b1233c", 0x4, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000000c0)=0x3, 0x4) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r2, 0xffffffffffffffff, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open$dir(&(0x7f0000000240)='./bus\x00', 0x2002, 0x80) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 5m33.832739717s ago: executing program 3 (id=110): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54010000180033060000000000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000400000200000000000e7615d9092c1e3c0d7d600b078bb48ca3d917a4e36e556412f45a6a86c630fc05a4118656b16cc6c5617fddc1e92a332d9555828e225d7246f65034cdf5a9f6519b1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000007000000000000000048000200656362286369706865725f6e756c6c2900"/210], 0x154}}, 0x0) 5m33.791369218s ago: executing program 4 (id=111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 5m31.691393808s ago: executing program 3 (id=114): getdents64(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb1c25ce47c749b08) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0x0, 0x0, r5}, 0x0, 0x0) 5m29.477134878s ago: executing program 3 (id=117): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0005}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000340)={[{@resuid}, {@noblock_validity}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9b}}, {@nodiscard}]}, 0x0, 0x466, &(0x7f0000000400)="$eJzs3c9vFFUcAPDvzG4BQdmKiIKgVTQ2/mhpQeXgRaOJB01M9ICJl9oWgizU0JoIIVqNwaMh8W48mvgHGE+ejHoy8ap3Q0KQmIBeXDO7M7C77BbabtnKfj7Jwns7b+a9b2fe7Nv3dtsABtZI9k8ScWdE/BYRlUa2tcBI478rl85M/33pzHQStdobF5N6ucuXzkwXRYv9tuSZ0TQi/TTJK2k1f+r0salqdfZknh9fOP7e+Pyp008fPT51ZPbI7InJgwcP7J947tnJZ3oSZxbf5V0fzu3e+cpb516bPnTunZ++ydq7Y09je3McvTKSBf5nra5922O9rqzP/q1dizMp97s13KxSRGSna6je/ytRimsnrxIvf9LXxgFrKrtnb+y+ebEG3MaS6HcLgP4oXuiz97/F4xYNPdaFCy803gBlcV/JH40t5UjzMkNrWP9IRBxa/OfL7BFt8xC1DvMGAACr9X02/nmq0/gvjR1N5bbma0PDEXF3RGyLiHsiYntE3BtRL3tfRNy/zPrbl4auH3+m51cU2E3Kxn/P52tbreO/YvQXw6U8d1c9/qHk8NHq7L78ZzIaQxuz/ESngxeHeOnXz7vV3zz+yx5Z/cVYMD/I+XLbBN3M1MJUrwalFz6O2FXuFH9ydSUgiYidEbFreYfeWiSOPvH17m6Fbhz/EnqwzlT7KuLxxvlfjLb4C8nS65Pjm6I6u2+8uCqu9/MvZ1/vVv+q4u+B7Pxvbr3+20pU/kqa12vnl1/H2d8/6/qesrzC639D8mZ9TXdD/twHUwsLJyciNiSv1vMtz09e27fIF+Wz+Ef3du7/2/J9svgfiIjsIt4TEQ9GxEP5uXs4Ih6JiL1LxP/ji4++223bejj/Mx3vf1ev/+HW87/8ROnYD991q//m7n8H6qnR/Jn6/e8GujdnU15ipVczAAAA/P+k9c/GJ+nY1XSajo01PsO/PTan1bn5hScPz71/YqbxGfrhGEqLma5K03zoRLKYH7GRn8zniovt+/N54y9Kd9TzY9Nz1Zk+xw6DbkuX/p/5o9Tv1gFrzve1YHC19/90ibIXv13jxgC3lNd/GFz6Pwwu/R8GV6f+/1Fb3loA3J68/sPg0v9hUNUq+j8MLv0fBtJqvtffSGRHWcHuxe8v6bCpvMS39yXWSeLt/C83rJf2SDQlyj3o3X26IQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTYfwEAAP//uBLtyQ==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x8}, 0x18) 5m29.19557203s ago: executing program 1 (id=118): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="49730000000000000000670000007dd1a97eb491d5ffbb3ea843813a286f912968e03666b39cfec60fc13c1d6d2084fed3dd45173b15e90c63abee03e5c00849aac2315467666725ed94472adea004fbb18b10756d86b0c677ba78cbee66266e3981255931fb232b969b60e191ac"], 0x14}}, 0x1233c996511ec814) 5m26.580372223s ago: executing program 1 (id=121): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000740)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYBLOB="2c66fefb470f721c43121ffc27a11d06c5e375d3b012410fe2f581d9ab30ed7131b91b6b0f1e794ab538fc85c0e03ce4f240db8fb4df78f32f2a76bc249b005c9bf5f55e1b49ee2da6f492d1ce0125c401c16ee7b7a157a4953c188c2bec6580362f7990f88bb2a8bd1317c025029c13b5271b580b16cf04ff7dd9e16ff2dcee46633afb43c98a675be2f2b4d9ae978a89c2754836e7af8d9a55309f8c0000", @ANYRES8, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYRESHEX=0x0, @ANYRESOCT], 0x9, 0xc21, &(0x7f0000001e80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x101499, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x94d510, 0x0) mount$bpf(0x0, &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x232c033, &(0x7f0000000540)={[{@gid}]}) 5m26.220967474s ago: executing program 4 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) 5m25.362565938s ago: executing program 1 (id=124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2ced, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "eb810499"}]}}, 0x0}, 0x0) 5m25.351374069s ago: executing program 4 (id=125): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@stripe}, {@noblock_validity}]}, 0x83, 0x453, &(0x7f0000001f80)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x2008000, &(0x7f0000000440)=ANY=[@ANYBLOB="8ba10530f04a435f10203ce48b552624852220b25dc34e9886cc0e823918dabdb6637c537d453db9937504fdc8ec5e2f2b39bf82aa5f951e976f", @ANYBLOB="aacd1d6630d7b44c49df74341c5bd77616f04336e4558973bc74f6f8187fcbd7158fd887e3a9369443f256a16775f8cdfbe3481a5438ab2a8b258a4a33b687501ee3fd519a05f607e785e346bf4951f435f5a6846527092db6f8c7b1a7e6a287782ed75c22267b4759cbf0807429711f5c0e0c98763608cc066e22c73833b634663b26", @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYBLOB="55ac88cf517af1b04b090000000ec53f9628c15cb14edefde39762fe236b4ce8c60a7c43543970516a02d827011407c1362a6f3ee218574d1d03907f069e233eb8845406027ad215c6cb94b3c1660b0b307d92fda8f7ffffffddad398c29967c9b3a2a2f4e8bcaccaa614de8b11d51221fd15e41511f4946f3ea66f5e4386903f94da6eafe8f943cbc7fb75ab04f9afe9f69e5bc6c21ca487b92ca6050937ae8af3ec55050d716ee8cccf22ea07fbe0f0eac590000000000000000000000002c4a6956a304640a061636c8a834f9bdf9ce332357af4b2a62d0fda693f4f22bc69e7ac38c41e010a61f8de542", @ANYRES16, @ANYRES16=r0, @ANYRES32, @ANYRES8, @ANYRESDEC=0x0], 0x0, 0x1c7, &(0x7f0000000dc0)="$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") chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x20) 5m25.18470625s ago: executing program 3 (id=127): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x20002004}) 5m24.935141871s ago: executing program 4 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd19000, 0x115) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = timerfd_create(0x9, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1) 5m24.894938471s ago: executing program 1 (id=130): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 5m23.971889675s ago: executing program 33 (id=130): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 5m23.518306817s ago: executing program 3 (id=133): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write(r4, &(0x7f00000000c0)='I', 0x1) r6 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000001540)=""/259, 0xf7, 0x10122, 0x0, 0xfffffffffffffc86) 5m23.258403269s ago: executing program 34 (id=133): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x2, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write(r4, &(0x7f00000000c0)='I', 0x1) r6 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000001540)=""/259, 0xf7, 0x10122, 0x0, 0xfffffffffffffc86) 5m22.704056432s ago: executing program 4 (id=136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 5m22.366489203s ago: executing program 35 (id=136): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1m50.683359392s ago: executing program 7 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) userfaultfd(0x80801) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00'}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000200)="48b12300", 0x4, 0xffffffffffffffff) 1m50.616437322s ago: executing program 8 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff, 0x2, 0x0, 0x0, 0x8, 0x40}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x44, 0xfcffffff, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x38, 0x0, &(0x7f00000008c0)="b8b7f9c4606df22d4f83b2de94e16f336eb9a1a9cbb1e3c26e679cb7d4a60e207f59bfa09e6410e4d3333e52eb5a52320512916150751aa7"}) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000000)={0x3, 0x2, 0x4be0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m49.286104269s ago: executing program 8 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="20000000100001072abd7000000000000a0000000c0002006e6c383032313100445fa712adac4d9fd862a8f571abd26babc595ed331b6b597a20fe8ff039a958e1615de8b6aaabde148405e4bc13471e272c1339fbe87d604b434501b29ce8fe8a92df8d5df2e93f4a4a9a2c00bb638ab91b8ac6acb97f52b1a5ca4200000000000000002c74b0"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000000, 0x0) sendmsg$nl_generic(r4, 0x0, 0x4891) 1m49.20644893s ago: executing program 7 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x15, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01028000000000000800010000000900010073797a30000000002c000000030a01080000000000000000010040000900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a30000000005b17460000000000000001006d61746368000000240002800c000300b07346e358c219250b0001006367726f757000000800024000000000140000001100010000000000000000000000000a51fd58b4b07705399fbf7dabf6"], 0xd4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040), 0x1, 0x4fa, &(0x7f0000000a00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) fdatasync(r6) 1m45.653300316s ago: executing program 7 (id=547): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54010000180033060000000000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000400000200000000000e7615d9092c1e3c0d7d600b078bb48ca3d917a4e36e556412f45a6a86c630fc05a4118656b16cc6c5617fddc1e92a332d9555828e225d7246f65034cdf5a9f6519b1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000007000000000000000048000200656362286369706865725f6e756c6c2900"/210], 0x154}}, 0x0) 1m45.245413078s ago: executing program 8 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) userfaultfd(0x80801) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00'}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000200)="48b12300", 0x4, 0xffffffffffffffff) 1m44.613417722s ago: executing program 8 (id=549): r0 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5f3, &(0x7f0000000d40)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) chdir(&(0x7f0000001200)='./file0\x00') mount(&(0x7f0000000080)=@sr0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='gadgetfs\x00', 0x8000, &(0x7f0000000240)='exfat\x00') fallocate(r1, 0x100000011, 0x0, 0x28000000) syz_open_dev$sndctrl(0x0, 0x7ca6, 0x400) listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) mlockall(0x7) setresuid(0x0, 0xee01, 0x0) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f00000002c0)='./bus\x00') syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000440)='./file1\x00', 0x800, &(0x7f0000000c40)=ANY=[], 0x1, 0x153b, &(0x7f0000001f80)="$eJzs3AucTlXXAPC19t5nDImnSS7D3nsdnuSyTZLkkiSXJEmSJLeEpEleSUgMIUlDEpLLkMQQksvEpHG/3y8JSdIkSUhuyf5+E37qrb73/b73/fL+vln/3+/87DXnrH3WedZznuecg/m269BaTWpXb0RE8C/BC38kAUAsAAwEgLwAEABA+bjycYAB5JSY9K/thP17PZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/x1z/+Bn///x+Hv//9HMsuM/XJNmeu6AcT8sync/+yN+///VvDPbMT9z964/9lV7JUugP0H4PM/O8jxp2u4/9kb95+x7OxKP3++0gtE/sNegyM5LzTmrzp+xhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsL3DaX6YA4NL4StfFGGOMMcYYY4yxfx+f40pXwBhjjDHGGGOMsf97CAIkKAggBnJALOSEXCAA4GrIA3khAtdAHFwL+eA6yA8FoCAUgngoDEVAgwELBCEUhWIQheuhONwAJaAklILS4KAMJMCNUBZugnJwM5SHW6AC3AoVoRJUhipwG1SF26Ea3AHV4U6oATWhFtSGu6AO3A114R6oB/dCfbgPGsD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv+r/OehJ7wAvaA3JEEf6AsvQj/oDwPgJRgIL8MgeAUGw6uQDENgKLwGw+B1GA5vwAgYCaPgTRgNb8EYGAvjYDykwASYCG/DJHgHJsO7MAWmQipMg+nwHsyAmTAL3ofZ8AHMgbkwD+ZDGnwIC2AhpMNHsAg+hgxYDEtgKSyD5bACVsIqWA1rYC2sg/WwATbCJtgMW2ArbIPtsAM+gZ3wKeyC3bAHPoO98Pmv8gGSfunnf5d/6u/yuyEgoECBChXGYAzGYizmwlyYG3NjHsyDEYxgHMZhPsyH+TE/FsSCGI/xWASLoEGDhIRFsShGMYrFsTiWwBJYCkuhQ4cJmIBl8SYsh+WwPJbHClgBK2IlrIRVsApWxapYDathdayONbAG1sJaeBfehX2wLtbFelgP62P9S4+nsBE2wsbYGJtgE2yKTbEZNsMW2AJbYStsja2xDbbBdtgO22N77IAdMBETsSN2xE7YCTtjZ+yCXbArdsVu2B27Zz6fA/AFfAF7Yw3RB/tiX+yHyTkG4Ev4Er6Mg/AVfAVfxWQcgkPxNXwNX8fheBJH4EgchaOwqngLx+BYJDEeUzAFJ+JEnISTMKvQd3EqpuI0nI7TcQbOxJn4Ps7GD/ADnItzcT6mYRouwIWYjum4CE9hBi7GJbgUl+FyXIYrcRWuxDW4FtfgelyPG3EjbsbNuBW34nbcjp+gAsBPcTfuxmTci3txH+7D/bgfD+ABzMRMPIgH8RAewsN4GI/gETyKx/A4HsMTeAJP4ik8jafxLJ7Fc/hs/NeNPym5OhlEFiWUiBExIlbEilwil8gtcos8Io+IiIiIE3Ein8gn8ov8oqAoKOJFvCgiiggjjCARxgCAiIqoKC6KixKihCglSgknnEgQCaKsKCvKiXKivLhFVBC3ioqikmjrqogqoqpo56qJO0R1UV3UEDVFLVFb1BZ1RB1RV9QV9UQ9UV/UFw3E/aKh6IMD8EGR1ZkmYgg2FUOxmWgu5MVPsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHx1r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZEL+6gha8pasra8SybB3bKuvEfWk/fK+vI+2UDeLxvKB2Qj+aBsLB+STeTDsql8RDaTzWUL2VK2ko/K1vIx2Ua2le3k47K9fEJ2kE/KRPmU7Cj9xbfIM7KLfFZ2lc/JbrK77CF/luell71kbwl9QPaVL8p+sr8cEAsA8mU5SL4iB8tXZbIcIofK1+Qw+bocLt+QI+RIOUq+KUfLt+QYOVaOk+NlipwgJ8q35ST5jpws35VT5FSZKqfJAXLgLzPNkvIf5r/9B/mDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tzF1wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvmFUKVVaOVVGJagb/yf5qri6QZVQJX+Tf6m+pD+pr5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezLvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBebHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1b/4vxZp/zl+b0/WeAx10v31km6j+6rX9T9dH89QL+kB+qX9SD9ih6sX9XJeogeql/Tw/Trerh+Q4/QI/Uo/aYerd/SY/RYPU6P1yl6gp6o39aT9Dt6sn5XT9FTdaqepqfr9/QMPVPP0u/r2foDPUfP1fP0fJ2mP9QL9EKdrj/Si/THOkMv1kv0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/Qneqf+VO/Su/Ue/Zneqz/X+/QXer/+Uh/QX+lM/bU+qL/Rh/S3+rD+Th/R3+uj+pg+rn/QJ/SP+qQ+pU/rM/qs/kmf0z/r89pnXdxnfb0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSafyWfym/ymoClo4k28KWKKmCxkyBQ1RU3URE1xU9yUMCVMKVPKOONMgkkwZU1ZU86UM+VNeVPBVDAVTUVT2VQ2t5nbzO3mdnOHucPcae40NU1NU9vUNnVMHVPX1DX1TD1T39Q3DUwD09A0NI1MI9PYNDZNTBPT1DQ1zUwz08K0MK1MK9PatDZtTBvTzrQz7U1708F0MIkm0XQ0HU0n08l0Np1NF9PFdDVdTTfTzfQwPUxP09P0Mr1MkkkyfU1f08/0MwPMADPQDDSDzCAz2Aw2ySbZDDVDzTAzzAw3w80IM9KMyrpQNW+ZMWasGWfGmxSTYiaaiWaSmWQmm8lmipliUk2qmW6mmxlmhpllZpnZZraZY+aYeWaeSTNpZoFZYNJNullkFpkMk2GWmCVmmVlmVpgVZpVZZdaYNWYdrDMbzAazyWwyW8wWs81sMzvMDrPT7DS7zC6zx+wxe81es8/sM/vNfnPAHDCZJtMcNAfNIXPIHDaHzRFzxBw1R81xc9ycMCfMSXPSnDanzVlT4OL3pTexNqfNZa+yue3VNo/Na/8+LmgL2Xhb2Bax2ua3BX4TG2ttCVvSlrKlrbNlbIK98XdxRVvJVrZV7G22qr3dVvtdXMfebevae2w9e6+tbe/6TVzf3mcb2IdtQ0QA29w2ti1tE/uwbWofsc1sc9vCtrTt7RO2g33SJtqnbEf79O/iBXahXWVX2zV2rd1ld9vT9ow9ZL+1Z+1PtpftbQfal+0g+4odbF+1yXbI7+JR9k072r5lx9ixdpwd/7t4ip1qU+00O92+Z2fYmb+L0+yHdrZNt3PsXDvPzv8lzqop3X5kF9mPbYYNYIldapfZ5XaFXXmpVp/Xrrcb7Ea7035qt9itdpvdbndcuhC2u+0e+5ndaz+3B+03dr/90h6wh22m/fqXOOv4Dtvv7BH7vT1qj9nj9gd7wv6oLmVnHfsP9md73noLhAQkSVFAMZSDYikn5aKrKDddTXkoL0XoGoqjaykfXUf5qQAVpEIUT4WpCGkyZIkopKJUjKJ0PV0qrxSVJkdlKIFupLJ0E5Wjm6k83UIV6FaqSJWoMlWh26gq3U7V6A6qTndSDapJtag23UV16G6qS/dQPbqX6tN91IDup4b0ADWiB6kxPURN6GFqSo9QM2pOLagltaJHqTU9Rm2oLbWjx6k9PUEd6ElKpKeoIz1Nnehv1JmeoS70LHWl56gbdace9Dz1pBeoF/WmJOpDfelF6kf9aQC9RAPpZRpEr9BgepWSaQgNpddoGL1Ow+kNGkEjaRS9SaPpLRpDY2kcjacUmkAT6W2aRO/QZHqXptBUSqVpNJ3eoxk0k2bR+zSbPqA5NJfm0XxKow9pAS2kdPqIFtHHlEGLaQktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtAntJM+pV20m/bQZ7SXPqd99AXtpy/pAH1FmfQ1HaRv6BB9S4fpO9+bvqejdIyO0w90gn6kk3SKTtMZOks/0Tn6mc6TJwgxFKEMVRiEMWGOMDbMGeYKrwpzh1eHecK8YSS8JowLrw3zhdeF+cMCYcGwUBgfFg6LhDo0oQ0pDMOiYbEwGl4fFg9vCEuEJcNSYenQhWXChPDGsGx4U1guvDksH94SVghvDSuGlcKH760S3hZWDW8Pq4V3hNXDO8MaYc2wVlg7vCusE94d1g3vCeuF94blwvvCBuH9YcPwgbBR+GDYOHwobBI+HDYNHwmbhc3DFmHLsFX4aNg6fCxsE7YN24WPh+3DJ8IO4ZNhYvhU2DF8+pf19y388/VJYZ+wb/hi+GLo/T1yXnR+NC36YXRBdGE0PfpRdFH042hGdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3Rj1PvaOcChE0465QIX43K4WJfT5XJXudzuapfH5XURd42Lc9e6fO46l98VcAVdIRfvCrsiTjvjrCMXuqKumIu6611xd4Mr4Uq6Uq60c66MS3AtXSvXyrV2j7k2rq1r5x53j7sn3BPuSfeke8p1dE+7Tu5vrrN7xnVxz7pn3XOum+vuerjnXU83Ic+FczLJ9XV9XT/Xzw1wA9xAN9ANcoPcYDfYJbtkN9QNdcPcMDfcDXcj3Ag3yo1yo91oN8aNcePcOJfiUtxEN9FNcpPcZDfZTXFTXKpLddPddDfDzXBVZ17Yyxw3x81z81yaS3MLXNY1Y7pb5Ba5DJfhlrglbplb5la4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6b2+Z2uB1up9vpdvm8FyZ1e90+t8/td/vdAfeVy3Rfu4PuG3fIfesOu+/cEfe9O+qOuePuB3fC/ehOulPutDvjzrqf3Dn3szvvvEuJTIhMjLwdmRR5JzI58m5kSmRqJDUyLTI98l5kRmRmZFbk/cjsyAeROZG5kXmR+ZG0yIeRBZGFkfTIR5FFkY8jGZHFkSWRpZFlkeUR7wtvCX1RX8xH/fW+uL/Bl/AlfSlf2jtfxif4G31Zf5Mv52/25f0tvoK/1Vf0lXxl/4hv5pv7Fr6lb+Uf9a39Y76Nb+vb+cd9e/+E7+Cf9In+Kd/RP+07+b/5zv4Z38U/67v653w339338M/7nv4F38v39km+j+/rX/T9fH8/wL/kB/qX/SD/ih/sX/XJfogf6l/zw/zrfrh/w4/wI/2omDf96Eu3yDDep/gJfqJ/20/y7/jJ/l0/xU/1qX6an+7f8zP8TD/Lv+9n+w/8HD/Xz/PzfZr/0C/wC326/8gv8h/7DL/40kNlv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+k/9Lr/b7/Gf+b3+c7/Pf+H3+y/9Af+Vz/Rf+4P+G3/If+sP++/8Ef+9P+qP+eP+B3/C/+hP+lP+tD/jz/qf/Dn/sz/P/2eNMcYYY+yfMuHyUPx2zYXH+X3+IEf8auO+AHD11kKZv16fdUW5Lv+FcX8R3z4CAE/17vrgpaVGjaSkpIvbZkgIis0FuPQ3QVli4HK8GNrBE5AIbaHsH9bfX3Q/S/9g/ugtALl+lRMLl+PL838BgEl/MP+jj49aUCE8HfffzD8XoESxyzk54XK8GNr98nylLZT7k/oLtP6T+vHi/Dm/TAFo86uc3HA5vlx/AjwGT0Pib7ZkjDHGGGOMMcYu6C8qd750/3npX3z+0f15vLqckwMux//o/pwxxhhjjDHGGGNX3jPdezz5aGJi287/80G1/1XWPz1oCv9XM/PgDwfeA1z6iQKAf3FCgKyB/CuPYvNfsq/ki6fO369adsYH8J/Ryn/H4Ap/MDHGGGOMMcb+7S5f9P/25+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGVDf8WvE7vSx8gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdaf8VAAD//3aq+3A=") utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{}, {0x77359400}}) 1m42.603422161s ago: executing program 8 (id=555): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100feffffff00000000050000de180001801400020073797a5f74756e0000000000000000001800038014000280"], 0x44}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x2480) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b460a1a93c5209000000000000003d458dd4992861ac00", "90be8b000000140008000000007f000009000000008000"}}) shmget$private(0x0, 0x400000, 0x800, &(0x7f0000bff000/0x400000)=nil) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x1000400, 0x0) 1m41.280235378s ago: executing program 8 (id=557): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2001, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m40.75872352s ago: executing program 36 (id=557): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2001, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1m40.710971871s ago: executing program 7 (id=561): socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r1) 1m35.302516887s ago: executing program 7 (id=570): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x260079e92e484ee) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8a0c3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/65, 0x41) close(r1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 1m32.175500473s ago: executing program 7 (id=578): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) close(r2) 1m15.876592232s ago: executing program 37 (id=578): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) close(r2) 20.076095733s ago: executing program 5 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r5}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000200)="48b12300", 0x4, 0xffffffffffffffff) 20.073110873s ago: executing program 0 (id=734): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@nouid32}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 18.383642301s ago: executing program 2 (id=738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0xb}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x3ff, 0x2, 0x0, 0x0, 0x8, 0x40}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x44, 0xfcffffff, &(0x7f00000007c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x38, 0x0, &(0x7f00000008c0)="b8b7f9c4606df22d4f83b2de94e16f336eb9a1a9cbb1e3c26e679cb7d4a60e207f59bfa09e6410e4d3333e52eb5a52320512916150751aa7"}) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f0000000000)={0x3, 0x2, 0x4be0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 17.959446263s ago: executing program 5 (id=739): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)={{0x10, 0x71}, 0x1, 0x81, 0x9, {0x5, 0xe}, 0x9, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000000c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x1, 0x0, 0x7) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x8, 0x4) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xa) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) sendto$inet6(r4, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 16.270618041s ago: executing program 2 (id=741): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x7, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, 0x0, &(0x7f0000000000), 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9bMQ9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, r8, 0x331, 0x0, 0x1, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="510003000000", 0x6) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={0x0, @l2tp={0x2, 0x0, @local}, @l2tp={0x2, 0x0, @dev}, @can, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c24}) 15.940419693s ago: executing program 9 (id=742): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 15.509900505s ago: executing program 9 (id=743): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 14.098199742s ago: executing program 9 (id=745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 13.402414975s ago: executing program 9 (id=746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 13.164578777s ago: executing program 6 (id=747): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/102400, 0x19000) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) 12.732371419s ago: executing program 6 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 11.816611533s ago: executing program 2 (id=749): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r5}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000200)="48b12300", 0x4, 0xffffffffffffffff) 11.654323464s ago: executing program 6 (id=750): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x400080, 0x45) 10.311162711s ago: executing program 6 (id=751): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x260079e92e484ee) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8a0c3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/65, 0x41) close(r1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 9.535505274s ago: executing program 2 (id=752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd19000, 0x115) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = timerfd_create(0x9, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1) 7.530444434s ago: executing program 0 (id=753): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x6e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x100088) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x51a9497) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000100)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @note={0x5, 0x5, 0x7, 0x0, 0x81}}], 0x1c) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, 0x0) dup2(r6, r5) 6.916942327s ago: executing program 0 (id=754): pidfd_send_signal(0xffffffffffffffff, 0x1b, 0x0, 0x700) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe9) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x9) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) getsockname$qrtr(r0, &(0x7f0000000040), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 6.668624738s ago: executing program 6 (id=755): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.458352169s ago: executing program 2 (id=756): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(0x0, 0x84000) splice(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x80000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) open$dir(0x0, 0x40600, 0x90) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 5.415358234s ago: executing program 5 (id=757): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000280)) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x68, r6, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x68}}, 0x0) 4.651803548s ago: executing program 0 (id=758): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000640)=""/102400, 0x19000) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) 4.435320969s ago: executing program 0 (id=759): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5f3, &(0x7f0000000d40)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x100000011, 0x0, 0x28000000) 4.010322961s ago: executing program 0 (id=760): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r2, &(0x7f0000002100)=[{0x0}], 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) socket(0x2, 0x3, 0x6) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000d80)={0x1f, 0xb, 0x0, "2ac0749f7a19d71029970ac5e8092a6c6bd27d45d01f1af84d4f7d0b48a36eb2"}) socket$tipc(0x1e, 0x2, 0x0) fsopen(&(0x7f0000000040)='ocfs2\x00', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x40840, 0x0) 3.680773373s ago: executing program 5 (id=761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x34, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0xa, 0x0, 0x0, [0x0, 0x0]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x3, &(0x7f0000000300)={0x0, 0x1a, 0x4}, &(0x7f0000000380)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x44, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={0x0, @l2tp={0x2, 0x0, @local}, @l2tp={0x2, 0x0, @dev}, @can, 0x47}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.487527248s ago: executing program 5 (id=762): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r5}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000200)="48b12300", 0x4, 0xffffffffffffffff) 2.14243042s ago: executing program 6 (id=763): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000002380)={0x12, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) mmap(&(0x7f000012c000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0xca642000) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffe, 0x1e00, 0xfffffffe, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r11 = dup(0xffffffffffffffff) write$6lowpan_enable(r11, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={r14, 0x0, 0x0}, &(0x7f0000000180)=0x10) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4048aecb, &(0x7f0000000080)) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 1.806132282s ago: executing program 9 (id=764): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x6e) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x100088) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x51a9497) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000100)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @note={0x5, 0x5, 0x7, 0x0, 0x81}}], 0x1c) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, 0x0) dup2(r6, r5) 1.483803853s ago: executing program 2 (id=765): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000000000006005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x260079e92e484ee) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8a0c3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/65, 0x41) close(r1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 845.001606ms ago: executing program 9 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xd19000, 0x115) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = timerfd_create(0x9, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1) 0s ago: executing program 5 (id=767): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x808) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): 143.091124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.104587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.113906][ T2238] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 143.122850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.133121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.142841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.152302][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.159431][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.172238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.182000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.190984][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.198078][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.220634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.228864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.275424][ T4865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.302889][ T5063] loop2: detected capacity change from 0 to 1024 [ 143.308118][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.339461][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.356724][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.389655][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.401712][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.409209][ T5063] hfsplus: extend alloc file! (8192,65536,366) [ 143.450718][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.472387][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.547624][ T5071] input: syz0 as /devices/virtual/input/input8 [ 144.382381][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.393428][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.441383][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.449607][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.474123][ T2238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.485422][ T2238] usb 6-1: config 0 has no interfaces? [ 144.500093][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.514890][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.531192][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.549586][ T4856] device veth0_vlan entered promiscuous mode [ 144.579073][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.587435][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.619508][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.639977][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.649274][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.667609][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.692864][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.749451][ T2238] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.749913][ T4856] device veth1_vlan entered promiscuous mode [ 144.769478][ T2238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.780285][ T2238] usb 6-1: Product: syz [ 144.791069][ T2238] usb 6-1: Manufacturer: syz [ 144.823454][ T2238] usb 6-1: SerialNumber: syz [ 144.831512][ T2238] usb 6-1: config 0 descriptor?? [ 144.846959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.878216][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.931421][ T4856] device veth0_macvtap entered promiscuous mode [ 144.965938][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.995475][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.003038][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.047325][ T4856] device veth1_macvtap entered promiscuous mode [ 145.065086][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.086292][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.099785][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.122413][ T4865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.148062][ T4878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.162923][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.190483][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.212014][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.259811][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.280355][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.299675][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.320392][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.347769][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.366168][ T4856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.376904][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.392990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.418401][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.442627][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.480678][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.521508][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.537959][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.548972][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.561421][ T4856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.588009][ T4856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.614742][ T4856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.645278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.671635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.720588][ T4856] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.742595][ T4856] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.773929][ T4856] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.800324][ T4856] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.847040][ T4326] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.953262][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.971821][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.981885][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.991738][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.047792][ T4326] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.069240][ T4865] device veth0_vlan entered promiscuous mode [ 146.096740][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.108711][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.118122][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.126089][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.154186][ T4865] device veth1_vlan entered promiscuous mode [ 146.167004][ T5125] loop2: detected capacity change from 0 to 8 [ 146.211319][ T4326] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.269304][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.282049][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.295839][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.299894][ T5125] SQUASHFS error: Failed to read block 0x2d7: -5 [ 146.325325][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.334251][ T5125] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 146.343996][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.364445][ T4326] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.393273][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.404066][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.424214][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.433542][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.444676][ T4878] device veth0_vlan entered promiscuous mode [ 146.469278][ T4878] device veth1_vlan entered promiscuous mode [ 147.099412][ T4865] device veth0_macvtap entered promiscuous mode [ 148.084287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.092700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.152635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.183215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.394771][ T5151] Invalid option length (0) for dns_resolver key [ 149.431098][ T4248] usb 6-1: USB disconnect, device number 5 [ 149.717122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.795893][ T4865] device veth1_macvtap entered promiscuous mode [ 149.851308][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.893742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.912939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.923509][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.991103][ T4878] device veth0_macvtap entered promiscuous mode [ 150.023521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.033248][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.058583][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.083604][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.104329][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.122861][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.162534][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.192115][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.220717][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.250968][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.271845][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.311314][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.334728][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.345765][ T4878] device veth1_macvtap entered promiscuous mode [ 150.371274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.392237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.404274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.416641][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.431379][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.441930][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.453479][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.465342][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.478639][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.600829][ T5176] loop2: detected capacity change from 0 to 512 [ 150.628172][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.703541][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.742057][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.758900][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.770526][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.802974][ T5176] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 150.815286][ T4326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.837816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.851721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.873645][ T5176] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,grpquota,resgid=0x0000000000000000,usrjquota=,lazytime,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 150.907664][ T4865] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.916437][ T4865] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.936687][ T4865] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.937049][ T5176] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.977678][ T4865] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.040768][ T4326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.049805][ T5189] loop5: detected capacity change from 0 to 256 [ 151.080227][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.101311][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.116318][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.131030][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.153832][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.173075][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.183250][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.207430][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.225570][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.238928][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.257119][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.268185][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.288447][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.312565][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.348840][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.389227][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.574424][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.584460][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.594956][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.617784][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.501414][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.529659][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.587433][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.766248][ T5218] loop2: detected capacity change from 0 to 164 [ 152.795308][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.969769][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.085055][ T4878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.104243][ T4878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.725662][ T4878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.751077][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.760272][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.784268][ T4878] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.804009][ T4878] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.822706][ T4878] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.832027][ T4878] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.048254][ T4326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.168261][ T5226] netlink: 56 bytes leftover after parsing attributes in process `syz.6.176'. [ 154.348009][ T5226] loop6: detected capacity change from 0 to 512 [ 154.970556][ T5226] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.981647][ T5226] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.024872][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.083444][ T4326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.100563][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.134449][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.420266][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.420282][ T4221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.446862][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.481726][ T4221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.530541][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.140834][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.352308][ T4683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.379841][ T4683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.475285][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.670247][ T5263] loop7: detected capacity change from 0 to 512 [ 158.717308][ T5263] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 158.864829][ T5263] EXT4-fs (loop7): 1 truncate cleaned up [ 158.930720][ T5270] loop8: detected capacity change from 0 to 2048 [ 158.931721][ T5263] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 159.089478][ T5270] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.480556][ T5275] UDF-fs: error (device loop8): udf_read_inode: (ino 1345) failed !bh [ 159.556086][ T5275] UDF-fs: error (device loop8): udf_read_inode: (ino 1345) failed !bh [ 160.633498][ T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 160.865454][ T5293] loop8: detected capacity change from 0 to 512 [ 161.643246][ T5293] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 161.654913][ T5293] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.681356][ T7] usb 8-1: config 0 has an invalid interface number: 215 but max is 0 [ 161.728275][ T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.119877][ T7] usb 8-1: config 0 has no interface number 0 [ 162.141232][ T7] usb 8-1: config 0 interface 215 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 162.288571][ T7] usb 8-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice= f.0d [ 162.298407][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.318305][ T7] usb 8-1: config 0 descriptor?? [ 163.081131][ T4163] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 163.094247][ T4217] usb 8-1: USB disconnect, device number 2 [ 164.576137][ T5333] loop5: detected capacity change from 0 to 128 [ 164.792369][ T4163] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.877857][ T4163] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 165.306815][ T4163] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.352272][ T4163] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.406243][ T4163] usb 9-1: Product: syz [ 165.410479][ T4163] usb 9-1: Manufacturer: syz [ 165.496898][ T4163] usb 9-1: SerialNumber: syz [ 165.796286][ T4163] usb 9-1: can't set config #1, error -71 [ 165.804584][ T4163] usb 9-1: USB disconnect, device number 2 [ 165.934734][ T5355] loop7: detected capacity change from 0 to 512 [ 167.966212][ T5377] loop6: detected capacity change from 0 to 512 [ 169.027245][ T5355] EXT4-fs: error -4 creating inode table initialization thread [ 169.036966][ T5355] EXT4-fs (loop7): mount failed [ 171.855758][ T5410] loop2: detected capacity change from 0 to 2048 [ 172.333751][ T3545] loop2: p1 < > p4 [ 173.109542][ T4326] device hsr_slave_0 left promiscuous mode [ 173.113195][ T3545] loop2: p4 size 8388608 extends beyond EOD, [ 173.116252][ T4326] device hsr_slave_1 left promiscuous mode [ 173.126304][ T3545] truncated [ 173.153655][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.173926][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.207026][ T5425] loop8: detected capacity change from 0 to 1024 [ 173.217248][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.228967][ T3545] loop2: p1 < > p4 [ 173.239454][ T3545] loop2: p4 size 8388608 extends beyond EOD, truncated [ 173.252937][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.272024][ T4326] device bridge_slave_1 left promiscuous mode [ 173.290038][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 173.291510][ T5410] loop2: p1 < > p4 [ 173.321648][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.329946][ T5410] loop2: p4 size 8388608 extends beyond EOD, truncated [ 173.363072][ T5425] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 173.425274][ T4326] device bridge_slave_0 left promiscuous mode [ 173.440970][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.469552][ T5427] loop5: detected capacity change from 0 to 512 [ 173.535335][ T4326] device hsr_slave_0 left promiscuous mode [ 173.585912][ T4326] device hsr_slave_1 left promiscuous mode [ 173.605031][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.635482][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.678932][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.719188][ T5427] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noblock_validity,grpjquota=,nodioread_nolock,dioread_lock,,errors=continue. Quota mode: writeback. [ 173.741854][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.762204][ T4326] device bridge_slave_1 left promiscuous mode [ 173.771058][ T4326] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.795421][ T5427] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.853925][ T4326] device bridge_slave_0 left promiscuous mode [ 173.879909][ T4326] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.947513][ T5441] input: syz1 as /devices/virtual/input/input9 [ 173.975325][ T4326] device veth1_macvtap left promiscuous mode [ 174.006048][ T4326] device veth0_macvtap left promiscuous mode [ 174.083698][ T4326] device veth1_vlan left promiscuous mode [ 174.148554][ T4326] device veth0_vlan left promiscuous mode [ 174.157840][ T5435] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 174.236284][ T4502] udevd[4502]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 174.250342][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 174.261782][ T4326] device veth1_macvtap left promiscuous mode [ 174.270030][ T4326] device veth0_macvtap left promiscuous mode [ 174.306281][ T4326] device veth1_vlan left promiscuous mode [ 174.352422][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 174.356977][ T4845] udevd[4845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 174.396880][ T4326] device veth0_vlan left promiscuous mode [ 174.536109][ T4166] udevd[4166]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 174.561027][ T4845] udevd[4845]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 174.579793][ T5449] loop5: detected capacity change from 0 to 128 [ 174.660845][ T5449] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 174.709196][ T5449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.377377][ T4276] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.540922][ T5455] loop6: detected capacity change from 0 to 512 [ 175.844643][ T4276] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.882097][ T5455] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.894187][ T5455] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.201214][ T4276] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.478394][ T4276] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.605517][ T4276] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.785394][ T4276] usb 6-1: Product: syz [ 176.870212][ T4276] usb 6-1: Manufacturer: syz [ 176.874864][ T4276] usb 6-1: SerialNumber: syz [ 176.991941][ T4276] usb 6-1: selecting invalid altsetting 1 [ 177.862900][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 177.894284][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 177.927614][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.956883][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.116526][ T4326] bond0 (unregistering): Released all slaves [ 178.321782][ T5469] binder: 5466:5469 ioctl c0306201 0 returned -14 [ 178.741579][ T4276] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 178.762462][ T4276] usb 6-1: selecting invalid altsetting 1 [ 178.770586][ T4276] cdc_ncm 6-1:1.0: bind() failure [ 178.849624][ T4276] usb 6-1: USB disconnect, device number 6 [ 178.960650][ T5474] loop6: detected capacity change from 0 to 2048 [ 179.052213][ T5474] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.088871][ T5474] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.261041][ T5474] capability: warning: `syz.6.228' uses deprecated v2 capabilities in a way that may be insecure [ 179.308983][ T4326] team0 (unregistering): Port device team_slave_1 removed [ 179.311197][ T5474] fs-verity: sha256 using implementation "sha256-avx2" [ 179.340476][ T4326] team0 (unregistering): Port device team_slave_0 removed [ 179.395298][ T4326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.418565][ T5478] loop5: detected capacity change from 0 to 256 [ 179.455747][ T4326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.488511][ T5478] exfat: Bad value for 'uid' [ 180.429906][ T5483] netlink: 92 bytes leftover after parsing attributes in process `syz.5.229'. [ 181.025881][ T4326] bond0 (unregistering): Released all slaves [ 181.330835][ T5490] fuse: Bad value for 'user_id' [ 181.370857][ T5493] syz.7.234 sent an empty control message without MSG_MORE. [ 183.155726][ T5503] netlink: 56 bytes leftover after parsing attributes in process `syz.5.235'. [ 183.278219][ T5503] loop5: detected capacity change from 0 to 512 [ 184.175428][ T5503] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.186724][ T5503] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.155080][ T4189] Bluetooth: Frame is too long (len 16, expected len 4) [ 187.328577][ T5526] loop6: detected capacity change from 0 to 256 [ 187.535098][ T5533] loop2: detected capacity change from 0 to 2048 [ 189.712546][ T5542] binder: 5541:5542 ioctl c0306201 0 returned -14 [ 190.958752][ T5533] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 190.969386][ T5533] UDF-fs: Scanning with blocksize 512 failed [ 191.159433][ T5533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.799280][ T5566] Invalid option length (0) for dns_resolver key [ 193.328737][ T5572] loop6: detected capacity change from 0 to 2048 [ 193.762344][ T5558] netlink: 36 bytes leftover after parsing attributes in process `syz.8.247'. [ 193.835492][ T5581] loop7: detected capacity change from 0 to 512 [ 193.936975][ T5581] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 194.029549][ T5572] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000004,,errors=continue. Quota mode: none. [ 194.067740][ T5581] EXT4-fs (loop7): 1 truncate cleaned up [ 194.080085][ T5581] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 196.038571][ T5605] loop5: detected capacity change from 0 to 256 [ 196.083105][ T5601] mmap: syz.6.251 (5601): VmData 176009216 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 196.101260][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.251'. [ 196.176627][ T5605] exfat: Bad value for 'uid' [ 196.660445][ T5615] netlink: 92 bytes leftover after parsing attributes in process `syz.5.256'. [ 196.782807][ T5617] netlink: 56 bytes leftover after parsing attributes in process `syz.7.257'. [ 196.827657][ T5617] loop7: detected capacity change from 0 to 512 [ 197.942241][ T5623] Invalid option length (0) for dns_resolver key [ 199.043228][ T5617] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.054535][ T5617] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.243075][ T5633] loop8: detected capacity change from 0 to 1024 [ 199.404161][ T5633] hfsplus: extend alloc file! (8192,65536,366) [ 199.560692][ T5638] input: syz0 as /devices/virtual/input/input10 [ 200.690286][ T5646] loop6: detected capacity change from 0 to 1024 [ 200.817506][ T5646] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.912862][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.919278][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.962423][ T5646] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 202.499662][ T5629] binder: 5625:5629 ioctl c0306201 0 returned -14 [ 202.625534][ T5670] loop2: detected capacity change from 0 to 512 [ 202.703632][ T5670] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 202.746678][ T5670] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 202.903668][ T5670] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 202.933371][ T5670] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #16: comm syz.2.268: iget: bogus i_mode (5) [ 203.123663][ T5670] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.268: couldn't read orphan inode 16 (err -117) [ 203.157941][ T5670] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,jqfmt=vfsold,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,data_err=ignore,init_itable,errors=continue,,errors=continue. Quota mode: writeback. [ 205.482012][ T5707] loop6: detected capacity change from 0 to 1024 [ 206.577450][ T5716] loop7: detected capacity change from 0 to 256 [ 206.594320][ T5707] hfsplus: extend alloc file! (8192,65536,366) [ 206.667706][ T5716] exfat: Bad value for 'uid' [ 207.230847][ T5723] input: syz0 as /devices/virtual/input/input11 [ 209.327743][ T4220] Bluetooth: hci0: command 0x0406 tx timeout [ 209.519478][ T5734] loop2: detected capacity change from 0 to 256 [ 209.527152][ T5733] loop7: detected capacity change from 0 to 1024 [ 209.590561][ T5734] exfat: Deprecated parameter 'namecase' [ 209.604368][ T5733] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.647440][ T5734] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 209.813029][ T5733] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 209.890540][ T5734] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 211.013311][ T5752] loop5: detected capacity change from 0 to 1024 [ 211.086153][ T5752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.807698][ T5759] loop6: detected capacity change from 0 to 256 [ 211.990270][ T5759] exfat: Bad value for 'uid' [ 212.057877][ T5763] loop8: detected capacity change from 0 to 512 [ 212.168616][ T5763] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.281: dx entry: limit 1024 != root limit 124 [ 212.180775][ T5763] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.281: Corrupt directory, running e2fsck is recommended [ 212.316925][ T5763] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 212.325678][ T5763] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2219: inode #15: comm syz.8.281: corrupted in-inode xattr [ 212.349412][ T5763] EXT4-fs (loop8): Remounting filesystem read-only [ 212.356137][ T5763] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.281: couldn't read orphan inode 15 (err -117) [ 212.392333][ T5763] EXT4-fs (loop8): Remounting filesystem read-only [ 212.399017][ T5763] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 212.466286][ T5774] netlink: 92 bytes leftover after parsing attributes in process `syz.6.282'. [ 213.087957][ T5780] loop7: detected capacity change from 0 to 1024 [ 213.136023][ T5787] loop6: detected capacity change from 0 to 256 [ 213.230434][ T5790] loop2: detected capacity change from 0 to 128 [ 213.325130][ T5780] hfsplus: xattr searching failed [ 213.660680][ T5796] hfsplus: request for non-existent node 62977 in B*Tree [ 213.669106][ T5796] hfsplus: request for non-existent node 62977 in B*Tree [ 213.720184][ T5790] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.726459][ T5799] loop8: detected capacity change from 0 to 256 [ 213.770546][ T5790] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.071883][ T5780] hfsplus: request for non-existent node 62977 in B*Tree [ 214.134511][ T5799] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 214.157669][ T5780] hfsplus: request for non-existent node 62977 in B*Tree [ 214.196255][ T26] audit: type=1800 audit(1733214632.604:101): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.292" name="file1" dev="loop8" ino=1048630 res=0 errno=0 [ 214.340623][ T4683] hfsplus: b-tree write err: -5, ino 3 [ 214.575578][ T5809] loop7: detected capacity change from 0 to 1024 [ 215.270288][ T5809] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.426880][ T5809] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 215.931352][ T5830] binder: 5822:5830 ioctl c0306201 0 returned -14 [ 215.938171][ T5830] binder: 5822:5830 ioctl 4b68 20000000 returned -22 [ 218.715138][ T5848] loop7: detected capacity change from 0 to 164 [ 220.293497][ T5874] loop5: detected capacity change from 0 to 128 [ 220.451380][ T5874] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.482553][ T5874] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.845608][ T5883] loop6: detected capacity change from 0 to 256 [ 220.915341][ T5885] loop2: detected capacity change from 0 to 512 [ 220.932346][ T5883] exfat: Bad value for 'uid' [ 220.980486][ T5889] loop5: detected capacity change from 0 to 1024 [ 220.987184][ T5885] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.302: dx entry: limit 1024 != root limit 124 [ 220.999559][ T5885] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.302: Corrupt directory, running e2fsck is recommended [ 221.019386][ T5885] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 221.044207][ T5885] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.302: corrupted in-inode xattr [ 221.071151][ T5885] EXT4-fs (loop2): Remounting filesystem read-only [ 221.077786][ T5885] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.302: couldn't read orphan inode 15 (err -117) [ 221.093594][ T5885] EXT4-fs (loop2): Remounting filesystem read-only [ 221.100143][ T5885] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 221.312152][ T5896] netlink: 92 bytes leftover after parsing attributes in process `syz.6.301'. [ 221.439997][ T5889] hfsplus: xattr searching failed [ 221.955408][ T144] hfsplus: b-tree write err: -5, ino 3 [ 223.478824][ T5916] loop2: detected capacity change from 0 to 256 [ 223.602521][ T5916] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 223.802382][ T26] audit: type=1800 audit(1733214641.594:102): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.313" name="file1" dev="loop2" ino=1048631 res=0 errno=0 [ 225.281710][ T5937] loop7: detected capacity change from 0 to 128 [ 226.180758][ T5937] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 226.227517][ T5937] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.295073][ T5948] loop6: detected capacity change from 0 to 512 [ 226.513903][ T5958] loop2: detected capacity change from 0 to 256 [ 226.682734][ T5958] exfat: Bad value for 'uid' [ 226.876616][ T5948] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.319: dx entry: limit 1024 != root limit 124 [ 226.888966][ T5948] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.319: Corrupt directory, running e2fsck is recommended [ 226.917546][ T5951] binder: 5949:5951 ioctl c0306201 0 returned -14 [ 226.949440][ T5948] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 226.962400][ T5948] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.319: corrupted in-inode xattr [ 226.981965][ T5948] EXT4-fs (loop6): Remounting filesystem read-only [ 226.992166][ T5948] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.319: couldn't read orphan inode 15 (err -117) [ 227.014329][ T5951] binder: 5949:5951 ioctl 4b68 20000000 returned -22 [ 227.032425][ T5948] EXT4-fs (loop6): Remounting filesystem read-only [ 227.045165][ T5948] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 227.440357][ T5964] loop5: detected capacity change from 0 to 512 [ 227.462823][ T5964] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.546213][ T5965] netlink: 92 bytes leftover after parsing attributes in process `syz.2.321'. [ 228.216029][ T5964] EXT4-fs (loop5): 1 truncate cleaned up [ 228.241559][ T5964] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 229.177994][ T5987] loop7: detected capacity change from 0 to 256 [ 229.308216][ T5987] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 229.472002][ T26] audit: type=1800 audit(1733214646.889:103): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.326" name="file1" dev="loop7" ino=1048632 res=0 errno=0 [ 232.143231][ T6019] loop2: detected capacity change from 0 to 128 [ 232.338246][ T6020] binder: 6017:6020 ioctl c0306201 0 returned -14 [ 232.345713][ T6020] binder: 6017:6020 ioctl 4b68 20000000 returned -22 [ 233.902880][ T6025] netlink: 'syz.7.334': attribute type 16 has an invalid length. [ 233.936800][ T6025] netlink: 'syz.7.334': attribute type 17 has an invalid length. [ 233.958468][ T6019] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.058132][ T6019] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.222475][ T6031] loop8: detected capacity change from 0 to 256 [ 234.260480][ T6031] exfat: Bad value for 'uid' [ 234.829583][ T6046] netlink: 92 bytes leftover after parsing attributes in process `syz.8.335'. [ 235.389839][ T6047] loop2: detected capacity change from 0 to 512 [ 236.373359][ T6047] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.337: invalid indirect mapped block 256 (level 2) [ 236.673107][ T6047] EXT4-fs (loop2): 2 truncates cleaned up [ 236.709130][ T6047] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 236.783339][ T6047] EXT4-fs error (device loop2): ext4_check_all_de:664: inode #12: block 7: comm syz.2.337: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 236.852393][ T6062] loop8: detected capacity change from 0 to 256 [ 238.588894][ T6062] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 239.430707][ T26] audit: type=1800 audit(1733214656.216:104): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.341" name="file1" dev="loop8" ino=1048633 res=0 errno=0 [ 240.816853][ T6078] loop8: detected capacity change from 0 to 256 [ 241.113836][ T6078] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 241.228853][ T6082] loop2: detected capacity change from 0 to 128 [ 241.339240][ T6082] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.359794][ T6082] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.585184][ T6098] loop8: detected capacity change from 0 to 256 [ 241.733373][ T6098] exfat: Bad value for 'uid' [ 243.409148][ T6114] netlink: 92 bytes leftover after parsing attributes in process `syz.8.349'. [ 243.891346][ T6117] loop6: detected capacity change from 0 to 1024 [ 244.080548][ T6120] loop7: detected capacity change from 0 to 164 [ 244.087610][ T6117] hfsplus: extend alloc file! (8192,65536,366) [ 244.502707][ T6126] input: syz0 as /devices/virtual/input/input12 [ 245.050121][ T6131] loop2: detected capacity change from 0 to 256 [ 245.596008][ T6131] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 245.612911][ T4220] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 245.794685][ T26] audit: type=1800 audit(1733214662.147:105): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="file1" dev="loop2" ino=1048635 res=0 errno=0 [ 246.062021][ T4220] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.118220][ T4220] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 246.166673][ T4220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.268534][ T6155] netlink: 56 bytes leftover after parsing attributes in process `syz.8.355'. [ 246.283353][ T6155] loop8: detected capacity change from 0 to 512 [ 246.466868][ T4163] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 246.478107][ T4220] usb 7-1: config 0 descriptor?? [ 246.613540][ T6155] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.624748][ T6155] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.738620][ T4220] usb 7-1: USB disconnect, device number 2 [ 247.472893][ T4163] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.493940][ T4163] usb 8-1: config 0 has no interfaces? [ 249.356036][ T26] audit: type=1326 audit(1733214665.506:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 249.448208][ T6183] loop6: detected capacity change from 0 to 256 [ 249.633456][ T26] audit: type=1326 audit(1733214665.525:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 249.687191][ T6183] exfat: Bad value for 'uid' [ 249.708248][ T26] audit: type=1326 audit(1733214665.525:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 249.732521][ T6191] loop8: detected capacity change from 0 to 1024 [ 249.904057][ T6191] hfsplus: extend alloc file! (8192,65536,366) [ 250.060058][ T6196] loop2: detected capacity change from 0 to 164 [ 250.118295][ T26] audit: type=1326 audit(1733214665.525:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 250.198347][ T6202] netlink: 92 bytes leftover after parsing attributes in process `syz.6.365'. [ 250.835833][ T6208] input: syz0 as /devices/virtual/input/input14 [ 251.662947][ T26] audit: type=1326 audit(1733214665.525:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 251.686304][ T26] audit: type=1326 audit(1733214665.590:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 251.712558][ T26] audit: type=1326 audit(1733214665.590:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e19538f53 code=0x7ffc0000 [ 251.735307][ T26] audit: type=1326 audit(1733214665.590:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e195379cf code=0x7ffc0000 [ 251.757637][ T26] audit: type=1326 audit(1733214665.590:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8e19538fa7 code=0x7ffc0000 [ 251.781434][ T26] audit: type=1326 audit(1733214665.590:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e19537880 code=0x7ffc0000 [ 251.812460][ T26] audit: type=1326 audit(1733214665.590:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e19538b1b code=0x7ffc0000 [ 252.037453][ T26] audit: type=1326 audit(1733214665.693:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e19537b7a code=0x7ffc0000 [ 252.175795][ T26] audit: type=1326 audit(1733214665.693:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8e19537b7a code=0x7ffc0000 [ 252.319458][ T26] audit: type=1326 audit(1733214665.815:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6181 comm="syz.6.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8e19537787 code=0x7ffc0000 [ 253.092200][ T4163] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 253.145984][ T4163] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.202874][ T4163] usb 8-1: Product: syz [ 253.207272][ T4163] usb 8-1: Manufacturer: syz [ 253.252049][ T4163] usb 8-1: config 0 descriptor?? [ 253.284969][ T6238] loop2: detected capacity change from 0 to 256 [ 253.469490][ T4163] usb 8-1: can't set config #0, error -71 [ 253.477911][ T4163] usb 8-1: USB disconnect, device number 3 [ 253.777798][ T6238] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 254.666675][ T7] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 255.051969][ T7] usb 9-1: config 0 has an invalid interface number: 39 but max is 0 [ 255.078670][ T7] usb 9-1: config 0 has no interface number 0 [ 255.122896][ T7] usb 9-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 255.341765][ T7] usb 9-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 255.382918][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.439623][ T7] usb 9-1: Product: syz [ 255.444161][ T7] usb 9-1: Manufacturer: syz [ 255.474209][ T7] usb 9-1: SerialNumber: syz [ 255.496603][ T7] usb 9-1: config 0 descriptor?? [ 255.519997][ T6267] fuse: Bad value for 'fd' [ 255.711713][ T6273] loop7: detected capacity change from 0 to 512 [ 255.858162][ T6273] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.382: dx entry: limit 1024 != root limit 124 [ 255.872063][ T6273] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.382: Corrupt directory, running e2fsck is recommended [ 255.890497][ T6273] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 255.904086][ T6273] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.382: corrupted in-inode xattr [ 255.929180][ T6273] EXT4-fs (loop7): Remounting filesystem read-only [ 255.937423][ T6273] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.382: couldn't read orphan inode 15 (err -117) [ 255.952055][ T6273] EXT4-fs (loop7): Remounting filesystem read-only [ 255.958655][ T6273] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 256.280064][ T7] usb 9-1: USB disconnect, device number 3 [ 256.637042][ T6288] binder: 6279:6288 ioctl 4b68 20000000 returned -22 [ 258.309173][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 258.607536][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 258.622642][ T4845] udevd[4845]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.950303][ T6313] netlink: 56 bytes leftover after parsing attributes in process `syz.7.390'. [ 260.115431][ T6314] loop7: detected capacity change from 0 to 512 [ 262.282074][ T6314] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 262.293795][ T6314] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.755911][ T6332] loop7: detected capacity change from 0 to 256 [ 262.884430][ T6332] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 263.101066][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 263.101082][ T26] audit: type=1800 audit(1733214678.369:150): pid=6332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.393" name="file1" dev="loop7" ino=1048637 res=0 errno=0 [ 263.337586][ T4220] Bluetooth: hci3: command 0x0406 tx timeout [ 266.588342][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.594788][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.688499][ T6383] Invalid option length (0) for dns_resolver key [ 267.574730][ T6393] netlink: 56 bytes leftover after parsing attributes in process `syz.8.404'. [ 268.292864][ T6403] fuse: Invalid rootmode [ 269.442144][ T6418] loop2: detected capacity change from 0 to 1024 [ 269.746066][ T6418] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 269.878144][ T6418] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 270.771994][ T6442] loop6: detected capacity change from 0 to 256 [ 271.637354][ T6442] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 272.040595][ T26] audit: type=1800 audit(1733214686.723:151): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.412" name="file1" dev="loop6" ino=1048638 res=0 errno=0 [ 273.281718][ T6465] Invalid option length (0) for dns_resolver key [ 274.349842][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz.2.416'. [ 274.603332][ T6473] loop2: detected capacity change from 0 to 512 [ 275.289096][ T6473] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.300497][ T6473] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.249944][ T6495] fuse: Invalid rootmode [ 279.284293][ T6514] netlink: 'syz.5.422': attribute type 2 has an invalid length. [ 281.418955][ T6535] loop6: detected capacity change from 0 to 256 [ 281.477682][ T6536] loop7: detected capacity change from 0 to 1024 [ 281.664612][ T6536] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.685343][ T6535] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 281.784851][ T26] audit: type=1800 audit(1733214695.835:152): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.425" name="file1" dev="loop6" ino=1048652 res=0 errno=0 [ 281.861494][ T6536] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 282.838178][ T6555] Invalid option length (0) for dns_resolver key [ 283.398791][ T6559] loop6: detected capacity change from 0 to 512 [ 284.435765][ T6559] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.429: dx entry: limit 1024 != root limit 124 [ 284.448082][ T6559] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.429: Corrupt directory, running e2fsck is recommended [ 284.475486][ T6559] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 284.490257][ T6559] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.429: corrupted in-inode xattr [ 284.512436][ T6559] EXT4-fs (loop6): Remounting filesystem read-only [ 284.519583][ T6559] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.429: couldn't read orphan inode 15 (err -117) [ 284.537124][ T6559] EXT4-fs (loop6): Remounting filesystem read-only [ 284.543894][ T6559] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 286.198326][ T6581] fuse: Invalid rootmode [ 287.539729][ T6617] netlink: 'syz.2.433': attribute type 2 has an invalid length. [ 288.963903][ T6638] Invalid option length (0) for dns_resolver key [ 289.237583][ T6643] loop5: detected capacity change from 0 to 1024 [ 290.338206][ T6643] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 290.754488][ T6643] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 291.834694][ T6655] binder: 6652:6655 ioctl c0306201 0 returned -14 [ 291.899397][ T6656] binder: 6652:6656 ioctl 4b68 20000000 returned -22 [ 293.412922][ T6676] fuse: Bad value for 'rootmode' [ 295.344706][ T6699] loop6: detected capacity change from 0 to 1024 [ 295.375831][ T6694] Invalid option length (0) for dns_resolver key [ 295.432394][ T6699] hfsplus: extend alloc file! (8192,65536,366) [ 295.686400][ T6709] input: syz0 as /devices/virtual/input/input15 [ 295.741088][ T6708] loop7: detected capacity change from 0 to 128 [ 296.163227][ T6708] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.258674][ T6708] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.824978][ T6717] Invalid option length (0) for dns_resolver key [ 298.278932][ T6724] binder: 6715:6724 ioctl c0306201 0 returned -14 [ 298.586620][ T6727] loop5: detected capacity change from 0 to 1024 [ 298.717309][ T6727] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.921027][ T6727] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 300.019235][ T6744] loop8: detected capacity change from 0 to 256 [ 300.270364][ T6744] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 300.458870][ T26] audit: type=1800 audit(1733214713.301:153): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.439" name="file1" dev="loop8" ino=1048666 res=0 errno=0 [ 300.531076][ T6761] fuse: Bad value for 'rootmode' [ 302.679186][ T6784] Invalid option length (0) for dns_resolver key [ 303.619644][ T6792] loop2: detected capacity change from 0 to 1024 [ 303.706860][ T6792] hfsplus: extend alloc file! (8192,65536,366) [ 304.746641][ T6798] input: syz0 as /devices/virtual/input/input16 [ 305.480061][ T6808] binder: 6801:6808 ioctl c0306201 0 returned -14 [ 305.543553][ T6810] binder: 6801:6810 ioctl 4b68 20000000 returned -22 [ 307.395951][ T4220] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 308.242598][ T6824] loop5: detected capacity change from 0 to 1024 [ 308.367240][ T6824] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.433649][ T4220] usb 7-1: Using ep0 maxpacket: 32 [ 308.529245][ T6824] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 308.562231][ T4220] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 308.763938][ T6835] Invalid option length (0) for dns_resolver key [ 308.776171][ T4220] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 309.855898][ T4220] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.988923][ T6840] loop6: detected capacity change from 0 to 256 [ 310.160617][ T6840] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 310.216986][ T4220] usb 7-1: Product: syz [ 310.265461][ T26] audit: type=1800 audit(1733214722.488:154): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.472" name="file1" dev="loop6" ino=1048667 res=0 errno=0 [ 311.256981][ T4220] usb 7-1: Manufacturer: syz [ 311.261626][ T4220] usb 7-1: SerialNumber: syz [ 311.339711][ T4220] usb 7-1: config 0 descriptor?? [ 311.582005][ T6857] loop2: detected capacity change from 0 to 2048 [ 312.298856][ T4220] usb 7-1: can't set config #0, error -71 [ 312.371263][ T6857] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.474: bad orphan inode 8192 [ 312.391089][ T4220] usb 7-1: USB disconnect, device number 3 [ 312.442687][ T6857] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.766170][ T6876] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.474: Invalid inode bitmap blk 3171692 in block_group 0 [ 312.920942][ T6876] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 313.157634][ T4175] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 1768304430 in block_group 0 [ 313.225376][ T4175] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 313.258608][ T4175] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor: Invalid inode bitmap blk 3171692 in block_group 0 [ 313.320653][ T4175] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 313.394439][ T4175] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor: Invalid inode bitmap blk 3171692 in block_group 0 [ 313.496964][ T4175] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 313.584559][ T4175] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor: Invalid inode bitmap blk 3171692 in block_group 0 [ 313.631547][ T4175] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 313.697535][ T6895] fuse: Bad value for 'rootmode' [ 314.063397][ T6909] loop7: detected capacity change from 0 to 2048 [ 314.188801][ T6912] binder: 6904:6912 ioctl c0306201 0 returned -14 [ 314.432372][ T6914] binder: 6904:6914 ioctl 4b68 20000000 returned -22 [ 316.103175][ T6909] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.167469][ T26] audit: type=1800 audit(1733214728.008:155): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.476" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 316.252494][ T6909] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 316.292784][ T6909] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 316.334064][ T6909] EXT4-fs (loop7): This should not happen!! Data will be lost [ 316.334064][ T6909] [ 316.372305][ T6909] EXT4-fs (loop7): Total free blocks count 0 [ 316.386543][ T6909] EXT4-fs (loop7): Free/Dirty block details [ 316.392637][ T6909] EXT4-fs (loop7): free_blocks=2415919104 [ 316.408062][ T6909] EXT4-fs (loop7): dirty_blocks=32 [ 316.429655][ T6909] EXT4-fs (loop7): Block reservation details [ 316.493215][ T6909] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 316.997326][ T4278] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 317.042676][ T4278] EXT4-fs (loop7): This should not happen!! Data will be lost [ 317.042676][ T4278] [ 318.393677][ T6938] loop6: detected capacity change from 0 to 256 [ 318.515677][ T6938] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cb2, utbl_chksum : 0xe619d30d) [ 318.742404][ T26] audit: type=1800 audit(1733214730.412:156): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.487" name="file1" dev="loop6" ino=1048668 res=0 errno=0 [ 319.342526][ T6947] loop5: detected capacity change from 0 to 512 [ 319.547727][ T6954] loop2: detected capacity change from 0 to 128 [ 319.985127][ T6947] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 320.000396][ T6947] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.008446][ T6954] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.023488][ T6954] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.114811][ T6969] loop7: detected capacity change from 0 to 512 [ 320.222851][ T6969] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.493: bg 0: block 5: invalid block bitmap [ 320.337473][ T6969] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 320.405805][ T6954] fscrypt: Error allocating hmac(sha512): -4 [ 320.468866][ T6980] loop5: detected capacity change from 0 to 256 [ 320.482730][ T6969] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.493: invalid indirect mapped block 3 (level 2) [ 321.141794][ T6969] EXT4-fs (loop7): 1 orphan inode deleted [ 321.166532][ T6969] EXT4-fs (loop7): 1 truncate cleaned up [ 321.174972][ T6969] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 322.002447][ T6993] loop7: detected capacity change from 0 to 256 [ 322.075922][ T6996] fuse: Unknown parameter 'use00000000000000000000' [ 322.122269][ T6993] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 322.510664][ T7006] Invalid option length (0) for dns_resolver key [ 323.454005][ T7010] loop2: detected capacity change from 0 to 1024 [ 323.708901][ T7010] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.887305][ T7010] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 328.422984][ T7078] Invalid option length (0) for dns_resolver key [ 329.552455][ T7081] fuse: Unknown parameter 'use00000000000000000000' [ 329.844862][ T7090] process 'syz.7.515' launched '/dev/fd/3' with NULL argv: empty string added [ 332.636400][ T7124] Invalid option length (0) for dns_resolver key [ 333.506651][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 333.523512][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.930457][ T7151] loop2: detected capacity change from 0 to 1024 [ 334.974906][ T7153] loop6: detected capacity change from 0 to 256 [ 335.046963][ T7151] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.209528][ T7151] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 335.404931][ T7153] exfat: Deprecated parameter 'utf8' [ 335.414130][ T7153] exfat: Deprecated parameter 'namecase' [ 335.421158][ T7153] exfat: Deprecated parameter 'utf8' [ 335.583475][ T7153] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 335.869050][ T7153] attempt to access beyond end of device [ 335.869050][ T7153] loop6: rw=524288, want=34359738496, limit=256 [ 335.916185][ T7153] attempt to access beyond end of device [ 335.916185][ T7153] loop6: rw=0, want=34359738496, limit=256 [ 336.105498][ T26] audit: type=1800 audit(1733214746.653:157): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.527" name="file1" dev="loop6" ino=1048672 res=0 errno=0 [ 337.415770][ T7186] fuse: Unknown parameter 'use00000000000000000000' [ 339.393453][ T7210] Invalid option length (0) for dns_resolver key [ 339.903903][ T7211] binder: 7205:7211 ioctl c0306201 0 returned -14 [ 339.967868][ T7213] binder: 7205:7213 ioctl 4b68 20000000 returned -22 [ 340.576352][ T4250] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 341.709463][ T4250] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.903184][ T4250] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.913982][ T7221] netlink: 56 bytes leftover after parsing attributes in process `syz.7.538'. [ 341.976218][ T7227] loop7: detected capacity change from 0 to 512 [ 342.051930][ T4250] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 342.074498][ T4250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 342.125606][ T4250] usb 7-1: SerialNumber: syz [ 342.276778][ T4250] usb 7-1: can't set config #1, error -71 [ 342.312163][ T4250] usb 7-1: USB disconnect, device number 4 [ 342.470017][ T7227] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 342.574953][ T7227] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.098624][ T7267] loop6: detected capacity change from 0 to 512 [ 344.326766][ T7267] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.545: dx entry: limit 1024 != root limit 124 [ 344.465315][ T7267] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.545: Corrupt directory, running e2fsck is recommended [ 344.482019][ T26] audit: type=1326 audit(1733214754.492:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39b280f19 code=0x7ffc0000 [ 344.561997][ T7267] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 344.640580][ T7281] Invalid option length (0) for dns_resolver key [ 344.705527][ T26] audit: type=1326 audit(1733214754.530:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39b280f19 code=0x7ffc0000 [ 345.075049][ T7278] loop7: detected capacity change from 0 to 256 [ 345.087371][ T7267] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.545: corrupted in-inode xattr [ 345.141656][ T7284] loop8: detected capacity change from 0 to 1024 [ 345.163958][ T7278] exfat: Bad value for 'uid' [ 345.191159][ T7267] EXT4-fs (loop6): Remounting filesystem read-only [ 345.239212][ T26] audit: type=1326 audit(1733214754.576:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa39b280f19 code=0x7ffc0000 [ 345.265916][ T7267] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.545: couldn't read orphan inode 15 (err -117) [ 345.407246][ T7267] EXT4-fs (loop6): Remounting filesystem read-only [ 345.472838][ T26] audit: type=1326 audit(1733214754.586:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39b280f19 code=0x7ffc0000 [ 345.475903][ C1] blk_update_request: operation not supported error, dev loop8, sector 0 op 0x9:(WRITE_ZEROES) flags 0x800800 phys_seg 0 prio class 0 [ 345.676587][ T7293] loop5: detected capacity change from 0 to 164 [ 346.058800][ T7267] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 346.099358][ T26] audit: type=1326 audit(1733214754.595:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa39b280f19 code=0x7ffc0000 [ 346.216014][ T26] audit: type=1326 audit(1733214754.595:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa39b280f53 code=0x7ffc0000 [ 346.327231][ T26] audit: type=1326 audit(1733214754.782:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa39b27f9cf code=0x7ffc0000 [ 346.450490][ T26] audit: type=1326 audit(1733214755.044:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa39b280fa7 code=0x7ffc0000 [ 346.469427][ T7301] fuse: Unknown parameter 'user_i00000000000000000000' [ 346.600783][ T26] audit: type=1326 audit(1733214755.044:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa39b27f880 code=0x7ffc0000 [ 346.976570][ T26] audit: type=1326 audit(1733214755.044:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.7.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39b280b1b code=0x7ffc0000 [ 348.402577][ T5131] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.642783][ T5131] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.791376][ T5131] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.948708][ T5131] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.127407][ T7328] Invalid option length (0) for dns_resolver key [ 349.778571][ T7339] loop5: detected capacity change from 0 to 164 [ 349.784330][ T7338] loop6: detected capacity change from 0 to 256 [ 354.507838][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 354.515387][ T6566] Bluetooth: hci3: command 0x0409 tx timeout [ 354.554289][ T7388] fuse: Unknown parameter 'user_i00000000000000000000' [ 354.939749][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.011566][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.083095][ T7355] device bridge_slave_0 entered promiscuous mode [ 355.326017][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.457650][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.518672][ T7355] device bridge_slave_1 entered promiscuous mode [ 355.773534][ T5131] device hsr_slave_0 left promiscuous mode [ 355.833391][ T7412] netlink: 56 bytes leftover after parsing attributes in process `syz.6.572'. [ 356.228955][ T5131] device hsr_slave_1 left promiscuous mode [ 356.259987][ T5131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.267573][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.307764][ T5131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.331273][ T5131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.416290][ T7421] loop5: detected capacity change from 0 to 164 [ 356.467719][ T5131] device bridge_slave_1 left promiscuous mode [ 356.522722][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.597111][ T5131] device bridge_slave_0 left promiscuous mode [ 356.662193][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.727982][ T6566] Bluetooth: hci3: command 0x041b tx timeout [ 356.875285][ T5131] device veth1_macvtap left promiscuous mode [ 356.888801][ T5131] device veth0_macvtap left promiscuous mode [ 356.920506][ T5131] device veth1_vlan left promiscuous mode [ 356.926396][ T5131] device veth0_vlan left promiscuous mode [ 358.741019][ T5131] team0 (unregistering): Port device team_slave_1 removed [ 358.779371][ T5131] team0 (unregistering): Port device team_slave_0 removed [ 358.819760][ T5131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.860693][ T5131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.951253][ T2238] Bluetooth: hci3: command 0x040f tx timeout [ 359.371033][ T5131] bond0 (unregistering): Released all slaves [ 359.470834][ T7459] netlink: 56 bytes leftover after parsing attributes in process `syz.6.582'. [ 359.488671][ T7459] loop6: detected capacity change from 0 to 512 [ 359.602541][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.613695][ T7459] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 359.626041][ T7459] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.763248][ T7454] device syz_tun entered promiscuous mode [ 359.810194][ T7454] device syz_tun left promiscuous mode [ 359.936786][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.172281][ T7355] team0: Port device team_slave_0 added [ 360.281300][ T7355] team0: Port device team_slave_1 added [ 361.164042][ T4220] Bluetooth: hci3: command 0x0419 tx timeout [ 361.636106][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.643093][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.725342][ T7488] fuse: Unknown parameter 'user_i00000000000000000000' [ 361.769910][ T7355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.842282][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.911684][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.709395][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.832259][ T7355] device hsr_slave_0 entered promiscuous mode [ 362.913884][ T7355] device hsr_slave_1 entered promiscuous mode [ 363.692669][ T7355] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 363.769346][ T7355] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 363.845729][ T7355] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 363.896644][ T7355] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 364.083264][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.106594][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.484592][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.814641][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.631557][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.755698][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.765967][ T7540] loop2: detected capacity change from 0 to 512 [ 366.784074][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.791251][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.893168][ T7540] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.597: dx entry: limit 1024 != root limit 124 [ 366.925776][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.955323][ T7540] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.597: Corrupt directory, running e2fsck is recommended [ 366.994398][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 367.041447][ T7540] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 367.070825][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.114127][ T7540] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.597: corrupted in-inode xattr [ 367.146747][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.153911][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.218678][ T7540] EXT4-fs (loop2): Remounting filesystem read-only [ 367.241655][ T7540] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.597: couldn't read orphan inode 15 (err -117) [ 367.285713][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 367.319660][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.328264][ T7540] EXT4-fs (loop2): Remounting filesystem read-only [ 367.353068][ T7540] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 367.392205][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.416497][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.481900][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.561424][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.620831][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.691893][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.764423][ T7355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.831183][ T7355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.832336][ T7564] fuse: Unknown parameter 'user_id00000000000000000000' [ 367.885045][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.920083][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.972425][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.584936][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.592642][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.692007][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.288684][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.330946][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.150683][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.172419][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.242584][ T7355] device veth0_vlan entered promiscuous mode [ 370.261273][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.787906][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.874162][ T7355] device veth1_vlan entered promiscuous mode [ 370.916849][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.124930][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.173361][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.248173][ T7355] device veth0_macvtap entered promiscuous mode [ 371.320255][ T7355] device veth1_macvtap entered promiscuous mode [ 371.383050][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.429754][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.481235][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.861114][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.971250][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.054904][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.281380][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.408542][ T7637] loop6: detected capacity change from 0 to 512 [ 372.414965][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.511254][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.594255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 372.611875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 372.685925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.783733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.944489][ T7637] EXT4-fs warning (device loop6): dx_probe:893: inode #2: comm syz.6.610: dx entry: limit 1024 != root limit 124 [ 372.970730][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.004061][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.036272][ T7637] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.610: Corrupt directory, running e2fsck is recommended [ 373.049161][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.049185][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.049208][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.167509][ T7637] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 373.183725][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.229323][ T7637] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.610: corrupted in-inode xattr [ 373.244376][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.296706][ T7637] EXT4-fs (loop6): Remounting filesystem read-only [ 373.303341][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.349737][ T7637] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.610: couldn't read orphan inode 15 (err -117) [ 373.372595][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.382661][ T7651] fuse: Unknown parameter 'user_id00000000000000000000' [ 373.393219][ T7637] EXT4-fs (loop6): Remounting filesystem read-only [ 373.399761][ T7637] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,grpquota,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 373.426217][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 373.492706][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 373.529791][ T7355] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.548722][ T7355] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.615389][ T7355] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.635347][ T7355] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.365927][ T4221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.374825][ T4221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.551630][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.781480][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.978608][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.990102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 375.608132][ T7685] Invalid option length (0) for dns_resolver key [ 376.819692][ T7670] chnl_net:caif_netlink_parms(): no params data found [ 377.309423][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.369872][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.387325][ T2238] Bluetooth: hci5: command 0x0409 tx timeout [ 377.436610][ T7670] device bridge_slave_0 entered promiscuous mode [ 377.552942][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.591955][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.685134][ T7670] device bridge_slave_1 entered promiscuous mode [ 377.993981][ T7670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.061609][ T7670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.546488][ T7670] team0: Port device team_slave_0 added [ 378.592915][ T7670] team0: Port device team_slave_1 added [ 379.332093][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.345028][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.487049][ T7670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.536240][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.560397][ T2238] Bluetooth: hci5: command 0x041b tx timeout [ 379.567273][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.837329][ T7670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.566443][ T7751] netlink: 'syz.2.630': attribute type 2 has an invalid length. [ 381.438472][ T7670] device hsr_slave_0 entered promiscuous mode [ 381.546409][ T7670] device hsr_slave_1 entered promiscuous mode [ 381.582643][ T7670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.590306][ T7670] Cannot create hsr debugfs directory [ 381.783712][ T2238] Bluetooth: hci5: command 0x040f tx timeout [ 382.407392][ T7768] loop5: detected capacity change from 0 to 256 [ 383.996320][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 387.410889][ T7670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 387.494447][ T7670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 387.544513][ T7670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 387.570131][ T7670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 387.822011][ T7826] fuse: Unknown parameter 'user_id00000000000000000000' [ 387.909398][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.975684][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 388.005733][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 388.065676][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.108588][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 388.108606][ T26] audit: type=1326 audit(1733214795.309:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 388.181455][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 388.205534][ T7833] loop2: detected capacity change from 0 to 256 [ 388.230861][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 388.262583][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.269729][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.273533][ T7833] exfat: Bad value for 'uid' [ 388.298726][ T26] audit: type=1326 audit(1733214795.309:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 388.367998][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.407269][ T26] audit: type=1326 audit(1733214795.346:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 388.444884][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.477728][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.484867][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.557621][ T26] audit: type=1326 audit(1733214795.346:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 388.604659][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.638634][ T26] audit: type=1326 audit(1733214795.346:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 388.662390][ T26] audit: type=1326 audit(1733214795.346:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 388.721820][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.750965][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.789882][ T7836] netlink: 92 bytes leftover after parsing attributes in process `syz.2.646'. [ 388.893271][ T26] audit: type=1326 audit(1733214795.346:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1c34caf53 code=0x7ffc0000 [ 389.103065][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 389.144082][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.187211][ T26] audit: type=1326 audit(1733214795.356:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb1c34c99cf code=0x7ffc0000 [ 389.210888][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.275857][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.325722][ T7670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.363140][ T26] audit: type=1326 audit(1733214795.356:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb1c34cafa7 code=0x7ffc0000 [ 389.386980][ T26] audit: type=1326 audit(1733214795.356:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7832 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1c34c9880 code=0x7ffc0000 [ 389.481329][ T7670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.576847][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 389.619467][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.644810][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.668441][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 389.732622][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 389.982019][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 392.081913][ T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.105807][ T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.168248][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 394.155778][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 394.304156][ T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.393460][ T7670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.487876][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 394.487891][ T26] audit: type=1326 audit(1733214801.277:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 394.534173][ T7882] loop2: detected capacity change from 0 to 256 [ 394.562202][ T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.614817][ T26] audit: type=1326 audit(1733214801.315:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 394.647336][ T7882] exfat: Bad value for 'uid' [ 394.688444][ T7891] Invalid option length (0) for dns_resolver key [ 394.720703][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 394.776225][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 394.899119][ T26] audit: type=1326 audit(1733214801.315:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 395.222350][ T26] audit: type=1326 audit(1733214801.315:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 395.329580][ T7894] netlink: 92 bytes leftover after parsing attributes in process `syz.2.656'. [ 395.620380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 395.648127][ T26] audit: type=1326 audit(1733214801.315:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 395.671858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 395.729546][ T7670] device veth0_vlan entered promiscuous mode [ 395.766585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 395.776718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.865222][ T26] audit: type=1326 audit(1733214801.315:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb1c34caf19 code=0x7ffc0000 [ 395.933688][ T7670] device veth1_vlan entered promiscuous mode [ 395.955883][ T7902] loop2: detected capacity change from 0 to 512 [ 395.964831][ T7901] fuse: Bad value for 'fd' [ 395.995095][ T26] audit: type=1326 audit(1733214801.315:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1c34caf53 code=0x7ffc0000 [ 396.064882][ T26] audit: type=1326 audit(1733214801.315:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb1c34c99cf code=0x7ffc0000 [ 396.105904][ T7902] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 396.183757][ T7670] device veth0_macvtap entered promiscuous mode [ 396.193180][ T26] audit: type=1326 audit(1733214801.315:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb1c34cafa7 code=0x7ffc0000 [ 396.240572][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.289948][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.316770][ T7902] EXT4-fs (loop2): 1 truncate cleaned up [ 396.328386][ T7902] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 396.356867][ T26] audit: type=1326 audit(1733214801.315:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.2.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1c34c9880 code=0x7ffc0000 [ 396.373843][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.394219][ T7670] device veth1_macvtap entered promiscuous mode [ 396.729820][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.783738][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.969583][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.101049][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.101113][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.101150][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.101364][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.101380][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.101430][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.101463][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.104254][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.107348][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.109768][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.116613][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.128732][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.128771][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.128806][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.128849][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.128894][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.128932][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.128969][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.129011][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.129055][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.129093][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.133070][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.133614][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 397.668001][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 397.709163][ T7670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.709206][ T7670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.709239][ T7670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.709269][ T7670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.946148][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.946249][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.033585][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.033665][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.037225][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.138460][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 398.145545][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 398.182068][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.182144][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.185226][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.411954][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 398.566268][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 398.566305][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.577838][ T23] usb 3-1: config 0 descriptor?? [ 398.633273][ T23] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 399.430964][ T7949] input: syz0 as /devices/virtual/input/input17 [ 400.062383][ T23] gspca_sonixj: reg_w1 err -71 [ 400.308012][ T7960] Invalid option length (0) for dns_resolver key [ 400.325548][ T23] sonixj: probe of 3-1:0.0 failed with error -71 [ 400.802350][ T23] usb 3-1: USB disconnect, device number 4 [ 402.157383][ T4276] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 402.628552][ T4276] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.071936][ T4276] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.102681][ T7977] fuse: Bad value for 'fd' [ 403.355796][ T4276] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.378105][ T7986] loop6: detected capacity change from 0 to 256 [ 403.558636][ T4276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.570932][ T4276] usb 3-1: Product: syz [ 403.575322][ T4276] usb 3-1: Manufacturer: syz [ 403.580264][ T4276] usb 3-1: SerialNumber: syz [ 404.509358][ T4276] usb 3-1: 0:2 : does not exist [ 404.570093][ T144] device hsr_slave_0 left promiscuous mode [ 404.595012][ T4276] usb 3-1: USB disconnect, device number 5 [ 404.723272][ T144] device hsr_slave_1 left promiscuous mode [ 404.744472][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.752096][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.826823][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.924058][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.943573][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.033807][ T144] device bridge_slave_1 left promiscuous mode [ 405.126337][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.166181][ T4845] udevd[4845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.969204][ T144] device bridge_slave_0 left promiscuous mode [ 405.984356][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.091633][ T144] device veth1_macvtap left promiscuous mode [ 406.136097][ T144] device veth0_macvtap left promiscuous mode [ 406.142235][ T144] device veth1_vlan left promiscuous mode [ 406.229435][ T144] device veth0_vlan left promiscuous mode [ 407.784929][ T144] team0 (unregistering): Port device team_slave_1 removed [ 408.043698][ T144] team0 (unregistering): Port device team_slave_0 removed [ 408.098087][ T8042] netlink: 56 bytes leftover after parsing attributes in process `syz.0.681'. [ 408.288527][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.417842][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.887541][ T144] bond0 (unregistering): Released all slaves [ 409.174193][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 409.174210][ T26] audit: type=1326 audit(1733214815.020:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.0.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d697f0f19 code=0x0 [ 409.409489][ T8022] netlink: 'syz.2.678': attribute type 2 has an invalid length. [ 409.451002][ T8014] infiniband syz2: set active [ 409.456115][ T8014] infiniband syz2: added team_slave_1 [ 409.472714][ T8014] infiniband syz2: Couldn't open port 1 [ 409.519550][ T8014] RDS/IB: syz2: added [ 409.524495][ T8014] smc: adding ib device syz2 with port count 1 [ 409.530975][ T8014] smc: ib device syz2 port 1 has pnetid [ 409.955741][ T8070] loop2: detected capacity change from 0 to 256 [ 411.054312][ T8080] loop6: detected capacity change from 0 to 1024 [ 411.207777][ T8086] fuse: Bad value for 'fd' [ 411.248408][ T8080] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 411.356570][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 411.365746][ T4218] Bluetooth: hci5: command 0x0411 tx timeout [ 411.396317][ T8097] loop9: detected capacity change from 0 to 164 [ 411.547972][ T8080] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 412.132519][ T4221] wlan1: Trigger new scan to find an IBSS to join [ 414.199348][ T26] audit: type=1326 audit(1733214819.716:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0148d2f19 code=0x7ffc0000 [ 414.714312][ T8142] loop9: detected capacity change from 0 to 256 [ 414.943993][ T26] audit: type=1326 audit(1733214820.184:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0148d2f19 code=0x7ffc0000 [ 414.985682][ T8142] exfat: Bad value for 'uid' [ 415.223732][ T26] audit: type=1326 audit(1733214820.193:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc0148d2f19 code=0x7ffc0000 [ 415.386464][ T8154] netlink: 92 bytes leftover after parsing attributes in process `syz.9.702'. [ 415.422959][ T8153] Invalid option length (0) for dns_resolver key [ 415.429706][ T4221] wlan1: Trigger new scan to find an IBSS to join [ 415.470295][ T26] audit: type=1326 audit(1733214820.193:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0148d2f19 code=0x7ffc0000 [ 415.519679][ T26] audit: type=1326 audit(1733214820.193:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0148d2f19 code=0x7ffc0000 [ 415.648004][ T26] audit: type=1326 audit(1733214820.193:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc0148d2f19 code=0x7ffc0000 [ 415.807269][ T26] audit: type=1326 audit(1733214820.193:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0148d2f53 code=0x7ffc0000 [ 416.003690][ T8161] loop6: detected capacity change from 0 to 164 [ 416.481172][ T26] audit: type=1326 audit(1733214820.193:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0148d19cf code=0x7ffc0000 [ 416.499715][ T8164] loop2: detected capacity change from 0 to 1024 [ 416.558145][ T26] audit: type=1326 audit(1733214820.193:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc0148d2fa7 code=0x7ffc0000 [ 416.598857][ T8164] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.748423][ T26] audit: type=1326 audit(1733214820.193:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc0148d1880 code=0x7ffc0000 [ 416.836517][ T8164] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 416.870320][ T8172] ksmbd: Unknown IPC event: 6, ignore. [ 417.083960][ T26] audit: type=1326 audit(1733214820.193:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8140 comm="syz.9.702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0148d2b1b code=0x7ffc0000 [ 417.587705][ T8186] fuse: Unknown parameter '0x0000000000000004' [ 418.555859][ T4274] wlan1: Creating new IBSS network, BSSID 0a:47:da:99:ce:b0 [ 420.787319][ T8229] loop9: detected capacity change from 0 to 1024 [ 420.900819][ T8235] Invalid option length (0) for dns_resolver key [ 421.085415][ T8229] hfsplus: extend alloc file! (8192,65536,366) [ 422.009740][ T8240] input: syz0 as /devices/virtual/input/input18 [ 422.666131][ T8246] loop2: detected capacity change from 0 to 164 [ 423.008026][ T8245] loop9: detected capacity change from 0 to 256 [ 424.101974][ T8262] loop2: detected capacity change from 0 to 1024 [ 424.258738][ T8262] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.413701][ T8262] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,nouid32,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue. Quota mode: writeback. [ 426.368710][ T6915] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 426.477663][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 426.477678][ T26] audit: type=1326 audit(1733214831.204:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 426.545473][ T8306] loop6: detected capacity change from 0 to 256 [ 426.586226][ T26] audit: type=1326 audit(1733214831.232:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 426.619580][ T8306] exfat: Bad value for 'uid' [ 426.644805][ T26] audit: type=1326 audit(1733214831.251:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 426.771889][ T26] audit: type=1326 audit(1733214831.251:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 426.799088][ T8306] netlink: 92 bytes leftover after parsing attributes in process `syz.6.726'. [ 426.810650][ T6915] usb 3-1: Using ep0 maxpacket: 8 [ 426.939086][ T8317] netlink: 56 bytes leftover after parsing attributes in process `syz.9.728'. [ 426.985094][ T8317] loop9: detected capacity change from 0 to 512 [ 427.054402][ T6915] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 427.253274][ T6915] usb 3-1: config 179 has no interface number 0 [ 427.502778][ T8317] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 427.514471][ T8317] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.591007][ T26] audit: type=1326 audit(1733214831.251:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 427.615014][ T6915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 427.626652][ T6915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 427.638640][ T6915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.638710][ T26] audit: type=1326 audit(1733214831.251:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 427.650514][ T6915] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 427.685258][ T6915] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 427.720455][ T6915] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 427.747122][ T6915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.777882][ T26] audit: type=1326 audit(1733214831.251:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e19538f53 code=0x7ffc0000 [ 427.954426][ T8295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 428.280080][ T26] audit: type=1326 audit(1733214831.270:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e195379cf code=0x7ffc0000 [ 428.584001][ T26] audit: type=1326 audit(1733214831.270:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8e19538fa7 code=0x7ffc0000 [ 428.705186][ T26] audit: type=1326 audit(1733214831.270:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.6.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e19537880 code=0x7ffc0000 [ 428.900753][ T8336] fuse: Unknown parameter '0x0000000000000004' [ 428.954924][ T6915] usb 3-1: USB disconnect, device number 6 [ 428.960931][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 428.961104][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 429.122813][ T8342] input: syz0 as /devices/virtual/input/input19 [ 429.805368][ T8349] Invalid option length (0) for dns_resolver key [ 431.911934][ T8378] binder: 8367:8378 ioctl c0306201 0 returned -14 [ 433.564826][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 433.564843][ T26] audit: type=1326 audit(1733214837.837:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 433.668029][ T8391] loop6: detected capacity change from 0 to 256 [ 433.686120][ T26] audit: type=1326 audit(1733214837.837:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 433.786927][ T26] audit: type=1326 audit(1733214837.847:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 433.841420][ T8391] exfat: Bad value for 'uid' [ 433.930463][ T26] audit: type=1326 audit(1733214837.847:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 434.005537][ T26] audit: type=1326 audit(1733214837.847:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 434.107763][ T26] audit: type=1326 audit(1733214837.847:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8e19538f19 code=0x7ffc0000 [ 434.173287][ T26] audit: type=1326 audit(1733214837.847:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8e19538f53 code=0x7ffc0000 [ 434.277435][ T26] audit: type=1326 audit(1733214837.847:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8e195379cf code=0x7ffc0000 [ 434.383677][ T8391] netlink: 92 bytes leftover after parsing attributes in process `syz.6.740'. [ 434.668954][ T26] audit: type=1326 audit(1733214837.847:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8e19538fa7 code=0x7ffc0000 [ 434.931585][ T26] audit: type=1326 audit(1733214837.921:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz.6.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e19537880 code=0x7ffc0000 [ 438.678509][ T8449] Invalid option length (0) for dns_resolver key [ 439.485642][ T8470] fuse: Unknown parameter '0x0000000000000004' [ 442.969318][ T8510] sp0: Synchronizing with TNC [ 443.026846][ T8511] sp0: Found TNC [ 443.685477][ T4276] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 443.694862][ T8509] [U] è` [ 444.027964][ T4276] usb 7-1: Using ep0 maxpacket: 16 [ 444.198792][ T4276] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 444.412700][ T4276] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 444.456755][ T4276] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.464959][ T4276] usb 7-1: Product: syz [ 444.474491][ T4276] usb 7-1: Manufacturer: syz [ 444.492960][ T4276] usb 7-1: SerialNumber: syz [ 444.509191][ T4276] usb 7-1: config 0 descriptor?? [ 446.147571][ T4276] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 446.509502][ T4276] usb 1-1: device descriptor read/64, error -71 [ 446.871203][ T4276] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 447.347289][ T1324] usb 7-1: USB disconnect, device number 5 [ 447.457787][ T8575] Invalid option length (0) for dns_resolver key [ 447.490736][ T4276] usb 1-1: device descriptor read/64, error -71 [ 447.619379][ T4276] usb usb1-port1: attempt power cycle [ 447.667990][ T8581] loop2: detected capacity change from 0 to 256 [ 448.110837][ T4276] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 448.228517][ T4276] usb 1-1: device descriptor read/8, error -71 [ 448.572781][ T4276] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 448.736345][ T5379] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.822535][ T8604] fuse: Unknown parameter '0x0000000000000004' [ 451.223608][ T5379] ------------[ cut here ]------------ [ 451.229464][ T5379] no supported rates for sta (null) (0xffffffff, band 1) in rate_mask 0x0 with flags 0x0 [ 451.239980][ T5379] WARNING: CPU: 0 PID: 5379 at net/mac80211/rate.c:376 __rate_control_send_low+0x653/0x890 [ 451.250040][ T5379] Modules linked in: [ 451.254008][ T5379] CPU: 0 PID: 5379 Comm: kworker/u4:16 Not tainted 5.15.173-syzkaller #0 [ 451.262431][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 451.272537][ T5379] Workqueue: phy13 ieee80211_roc_work [ 451.278015][ T5379] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 451.284288][ T5379] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 20 87 b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 cd ca 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 451.304000][ T5379] RSP: 0018:ffffc9000347f5a8 EFLAGS: 00010246 [ 451.310151][ T5379] RAX: 78b1adae781bba00 RBX: 0000000000000008 RCX: ffff88802c8d9dc0 [ 451.318176][ T5379] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 451.326264][ T5379] RBP: ffff888026194a28 R08: ffffffff81669a1c R09: fffff5200068fdf5 [ 451.334301][ T5379] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 451.342334][ T5379] R13: 0000000000000008 R14: 0000000000000000 R15: 00000000ffffffff [ 451.350354][ T5379] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 451.359273][ T5379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.365869][ T5379] CR2: 00007fff9f65ed58 CR3: 0000000034ddd000 CR4: 00000000003526f0 [ 451.373896][ T5379] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 451.381930][ T5379] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 451.389915][ T5379] Call Trace: [ 451.393237][ T5379] [ 451.396172][ T5379] ? __warn+0x15b/0x300 [ 451.400437][ T5379] ? __rate_control_send_low+0x653/0x890 [ 451.406119][ T5379] ? report_bug+0x1b7/0x2e0 [ 451.410740][ T5379] ? handle_bug+0x3d/0x70 [ 451.415112][ T5379] ? exc_invalid_op+0x16/0x40 [ 451.419830][ T5379] ? asm_exc_invalid_op+0x16/0x20 [ 451.424913][ T5379] ? __wake_up_klogd+0xcc/0x100 [ 451.429786][ T5379] ? __rate_control_send_low+0x653/0x890 [ 451.435477][ T5379] ? __rate_control_send_low+0x653/0x890 [ 451.441152][ T5379] rate_control_send_low+0x1a8/0x770 [ 451.446511][ T5379] rate_control_get_rate+0x20a/0x5d0 [ 451.451840][ T5379] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 451.457533][ T5379] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 451.463528][ T5379] invoke_tx_handlers_late+0xb2/0x17f0 [ 451.469049][ T5379] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 451.474866][ T5379] ieee80211_tx+0x2df/0x460 [ 451.479390][ T5379] ? ieee80211_skb_resize+0x640/0x640 [ 451.484776][ T5379] ? __bpf_trace_softirq+0x10/0x10 [ 451.489913][ T5379] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 451.495718][ T5379] ieee80211_handle_roc_started+0x284/0x3e0 [ 451.501642][ T5379] _ieee80211_start_next_roc+0x705/0xa20 [ 451.507276][ T5379] ieee80211_roc_work+0x2b/0x40 [ 451.512168][ T5379] process_one_work+0x8a1/0x10c0 [ 451.517111][ T5379] ? worker_detach_from_pool+0x260/0x260 [ 451.522761][ T5379] ? _raw_spin_lock_irqsave+0x120/0x120 [ 451.528301][ T5379] ? kthread_data+0x4e/0xc0 [ 451.532822][ T5379] ? wq_worker_running+0x97/0x170 [ 451.537855][ T5379] worker_thread+0xaca/0x1280 [ 451.542593][ T5379] kthread+0x3f6/0x4f0 [ 451.546655][ T5379] ? rcu_lock_release+0x20/0x20 [ 451.551564][ T5379] ? kthread_blkcg+0xd0/0xd0 [ 451.556192][ T5379] ret_from_fork+0x1f/0x30 [ 451.560616][ T5379] [ 451.563657][ T5379] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 451.570922][ T5379] CPU: 0 PID: 5379 Comm: kworker/u4:16 Not tainted 5.15.173-syzkaller #0 [ 451.579321][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 451.589365][ T5379] Workqueue: phy13 ieee80211_roc_work [ 451.594883][ T5379] Call Trace: [ 451.598155][ T5379] [ 451.601081][ T5379] dump_stack_lvl+0x1e3/0x2d0 [ 451.605853][ T5379] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 451.611507][ T5379] ? panic+0x860/0x860 [ 451.615578][ T5379] ? __rate_control_send_low+0x5b0/0x890 [ 451.621225][ T5379] ? __rate_control_send_low+0x5b0/0x890 [ 451.626871][ T5379] panic+0x318/0x860 [ 451.630763][ T5379] ? __warn+0x16a/0x300 [ 451.634928][ T5379] ? fb_is_primary_device+0xd0/0xd0 [ 451.640124][ T5379] ? ret_from_fork+0x1f/0x30 [ 451.644710][ T5379] ? __rate_control_send_low+0x653/0x890 [ 451.650343][ T5379] __warn+0x2b2/0x300 [ 451.654471][ T5379] ? __rate_control_send_low+0x653/0x890 [ 451.660101][ T5379] report_bug+0x1b7/0x2e0 [ 451.664434][ T5379] handle_bug+0x3d/0x70 [ 451.668584][ T5379] exc_invalid_op+0x16/0x40 [ 451.673100][ T5379] asm_exc_invalid_op+0x16/0x20 [ 451.677960][ T5379] RIP: 0010:__rate_control_send_low+0x653/0x890 [ 451.684226][ T5379] Code: 84 c0 48 8b 14 24 0f 85 d9 01 00 00 8b 0a 48 c7 c7 20 87 b8 8b 4c 89 f6 44 89 fa 44 8b 44 24 0c 44 8b 4c 24 08 e8 cd ca 7d f7 <0f> 0b e9 75 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e3 f9 ff [ 451.703897][ T5379] RSP: 0018:ffffc9000347f5a8 EFLAGS: 00010246 [ 451.709967][ T5379] RAX: 78b1adae781bba00 RBX: 0000000000000008 RCX: ffff88802c8d9dc0 [ 451.717992][ T5379] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 451.725962][ T5379] RBP: ffff888026194a28 R08: ffffffff81669a1c R09: fffff5200068fdf5 [ 451.733927][ T5379] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 451.741902][ T5379] R13: 0000000000000008 R14: 0000000000000000 R15: 00000000ffffffff [ 451.749969][ T5379] ? __wake_up_klogd+0xcc/0x100 [ 451.755233][ T5379] ? __rate_control_send_low+0x653/0x890 [ 451.760878][ T5379] rate_control_send_low+0x1a8/0x770 [ 451.766185][ T5379] rate_control_get_rate+0x20a/0x5d0 [ 451.771489][ T5379] ieee80211_tx_h_rate_ctrl+0xc6e/0x1990 [ 451.777141][ T5379] ? ieee80211_tx_h_select_key+0x16a0/0x16a0 [ 451.783127][ T5379] invoke_tx_handlers_late+0xb2/0x17f0 [ 451.788676][ T5379] ? invoke_tx_handlers_early+0xa0d/0x1d00 [ 451.794480][ T5379] ieee80211_tx+0x2df/0x460 [ 451.798977][ T5379] ? ieee80211_skb_resize+0x640/0x640 [ 451.804370][ T5379] ? __bpf_trace_softirq+0x10/0x10 [ 451.809506][ T5379] __ieee80211_tx_skb_tid_band+0x164/0x200 [ 451.815311][ T5379] ieee80211_handle_roc_started+0x284/0x3e0 [ 451.821227][ T5379] _ieee80211_start_next_roc+0x705/0xa20 [ 451.826877][ T5379] ieee80211_roc_work+0x2b/0x40 [ 451.831835][ T5379] process_one_work+0x8a1/0x10c0 [ 451.836797][ T5379] ? worker_detach_from_pool+0x260/0x260 [ 451.842438][ T5379] ? _raw_spin_lock_irqsave+0x120/0x120 [ 451.848006][ T5379] ? kthread_data+0x4e/0xc0 [ 451.852503][ T5379] ? wq_worker_running+0x97/0x170 [ 451.857550][ T5379] worker_thread+0xaca/0x1280 [ 451.862238][ T5379] kthread+0x3f6/0x4f0 [ 451.866307][ T5379] ? rcu_lock_release+0x20/0x20 [ 451.871168][ T5379] ? kthread_blkcg+0xd0/0xd0 [ 451.875786][ T5379] ret_from_fork+0x1f/0x30 [ 451.880237][ T5379] [ 451.883552][ T5379] Kernel Offset: disabled [ 451.888173][ T5379] Rebooting in 86400 seconds..