last executing test programs: 9m14.251579128s ago: executing program 1 (id=144): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x3f}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002040)=ANY=[@ANYBLOB='P&\x00', @ANYBLOB="000229bd7000fddbdf2583000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 9m12.716167168s ago: executing program 1 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) 9m11.639843842s ago: executing program 1 (id=150): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c00"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 9m10.132756271s ago: executing program 1 (id=156): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 9m9.022871836s ago: executing program 1 (id=161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) r0 = io_uring_setup(0x70fb, &(0x7f0000000140)={0x0, 0x1000, 0x10, 0x4800004, 0x3b7}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000002c0)='./file0\x00', 0x10, 0x1) fsync(r3) close_range(r0, 0xffffffffffffffff, 0x0) 9m8.392192434s ago: executing program 1 (id=165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 9m7.06421953s ago: executing program 32 (id=165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$eJzs3cFvHFcdB/DvrNeOt1TBaROaQxFWIhWkiMSJlUK4YBBCOVSoKoeercRprG6SKnFRWiFIAcEJiUP/gILkGweExD0oXLiUW68+VkLiEiEU9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn42qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9La/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuPJf8p55tJoZrMt95J/JJk57Hj3oBi18P7k4wAAAICnMvsE23z5UR7lbo726p2ifM2fr1Svl2fzfm5mLatZSzsruVq/hi5f9Tc21hfbG+uLN8qprA/3+71/7SmMmbqHqao2as8nqzVauZbVasnZXKmCuZpGd9+nk5O9eAbiGvBRGVPx3dqYkTXrtJY7+91O7yLsi+G3IhqPWbO1GVzSz8hCHVu55bFuBorqjZpkayZ2PTvNodpc1et0f0/n0+i/83P8AHL+Qj0vj+fXB5rzvepnopEqExd6o6+8Zh6fieTrf/nj29fbN9+9fu3OmWfnkHYxtcPyrWNicSATrzzXmWjucf2FKhMn+vXL+WF+nDOZz5u5ndX8JMtZy0o6dftyPZ7Ln3OPz9TSUO3N3SKZqc9L95yNE9N8flCVlnOq2vZoVlPkVq5mJa9X/y7kfL6Vi7mYSwNn+MSOcVfHVl31ja1Xfe9M/3Vk8Ke/URfKu9tvNu9yS4874p1G537p3vvLvB4byGt31D/sr3Vs4DpYGMjSS73sTI/sfG/3xi1vtZf7+OUuz4nJmqszUV5AvadEL7qXu5loVs+i7eP8951yu7RvdjrXl9/bof97W+qv1fNyWK1/dbe1e0afiv1VnqqXMlvfSYZHR9n2cv8uM9DW2RzL3bbhJ2653YmqrSh6V+qPcqsaANuv1Jn6d7jtPV2o2l4Z2bZYtZ0caBv6fSu30s7VCeQPgCfx97f7xbm8MNP6Z+vT1ietX7Wut96Y/f6Rbx95dSbTf5v+TnNh6rXGq8Wf80l+tvn6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHJ3Pvjw3eV2e+X26EJj56ahQitbl+zU85HR/RT1F/qMsa/nojCbZGhJ9T1HEw+jtTWMbYXOz5OJ56f3nVaj1/ltWWhuG1GjCktDS/60vcOP9hhhMd51cYCFRia706mMHgCHeFMCJuLc2o33zt354MNvrt5YfmflnZWb0xcvXlq4dPH1xXPXVtsrC92fhx0lcBA2H/qHHQkAAAAAAAAAAAAwrlEfDDj14m4fGhnrMx7+ZyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwLy6fSfN+ipxfOLtQ1jfWF9vl1CtvrtlM0mgkxU+T4kGylO6UuYHuivzhQToj9vPx6qW3Pnu48flmX83u+kmjnu/s8a1J7tVT5pNM1fOnMNTflafur/h37xjKhH3R6XSWni4+2B//DQAA//9KkvWS") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 7m25.502888879s ago: executing program 0 (id=442): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = syz_io_uring_setup(0x5838, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7m22.444000808s ago: executing program 0 (id=447): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x10042, &(0x7f0000000300)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@errors_continue}, {@nointegrity}, {@nointegrity}, {@discard}, {@uid}, {@errors_remount}, {@uid}]}, 0x24, 0x623a, &(0x7f0000002780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) 7m21.320978973s ago: executing program 0 (id=451): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4c4, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m20.495285154s ago: executing program 0 (id=453): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@quota}, {@grpjquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85", 0x1) 7m18.959791273s ago: executing program 0 (id=459): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18}]}, 0xfeb5}}, 0x0) 7m15.275568641s ago: executing program 0 (id=466): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10, @ANYBLOB="0174df"], 0x20}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m14.851142056s ago: executing program 33 (id=466): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10, @ANYBLOB="0174df"], 0x20}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m1.112663423s ago: executing program 2 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 7m0.132610906s ago: executing program 2 (id=501): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000000020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x438}}, 0x0, 0x0}, 0x0) 6m57.766029136s ago: executing program 2 (id=507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x2060400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) fadvise64(r0, 0x3, 0x8, 0x2) 6m56.897594958s ago: executing program 2 (id=508): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x22) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x1fe, 0x40000004, 0x10}) unlinkat(r3, &(0x7f00000003c0)='./file1\x00', 0x200) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r6, 0x2, 0x1) getdents64(r6, 0x0, 0x25) syz_io_uring_setup(0x31c7, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 6m55.483748956s ago: executing program 2 (id=509): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@quota}, {@grpjquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x5, 0x10, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300c6d6ae9ef30bea2a00400000000000001000000000000000000400", [0x5, 0x2]}) write$hidraw(r0, &(0x7f00000002c0)="85", 0x1) 6m49.217040777s ago: executing program 2 (id=517): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000006740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147042, 0x9c) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1a5c42, 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendfile(r1, r2, 0x0, 0x80000000) 6m33.665392057s ago: executing program 34 (id=517): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000006740)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@nobarrier}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x147042, 0x9c) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1a5c42, 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendfile(r1, r2, 0x0, 0x80000000) 3m9.646602456s ago: executing program 4 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0748670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r5], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) 3m6.542699916s ago: executing program 4 (id=1067): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffd}, {0x0, 0x80000000, 0x0, 0x8}, 0xffff0000, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x2, 0x33}, 0x0, @in=@private=0xa010102, 0x0, 0x3, 0x2, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 3m4.554252592s ago: executing program 4 (id=1070): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = syz_io_uring_setup(0x5838, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3m2.810659524s ago: executing program 4 (id=1076): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f00000002c0)='./file1\x00', 0x109042, 0x0) fallocate(r0, 0x41, 0x0, 0x6fffffc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x3829410, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) getpgid(0x0) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) pwrite64(r2, &(0x7f0000000180)="dd29", 0x2, 0x5) 3m1.209040535s ago: executing program 4 (id=1080): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 3m0.070364599s ago: executing program 4 (id=1084): syz_io_uring_setup(0x881, &(0x7f0000000480)={0x0, 0xe7ae, 0x0, 0x2, 0x4}, &(0x7f0000000440)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3fff, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x51) 2m59.743421724s ago: executing program 35 (id=1084): syz_io_uring_setup(0x881, &(0x7f0000000480)={0x0, 0xe7ae, 0x0, 0x2, 0x4}, &(0x7f0000000440)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3fff, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x51) 2m56.90970109s ago: executing program 6 (id=1099): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x11, 0x80}, 0x0, 0x2000040e, 0x7fffffff, {0x74, 0xf}, 0x80, 0x2}) 2m56.535551955s ago: executing program 6 (id=1101): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m53.361937286s ago: executing program 6 (id=1109): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5838, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m53.112977719s ago: executing program 6 (id=1111): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f00000002c0)='./file1\x00', 0x109042, 0x0) fallocate(r0, 0x41, 0x0, 0x6fffffc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x3829410, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) getpgid(0x0) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) pwrite64(r2, &(0x7f0000000180)="dd29", 0x2, 0x5) 2m51.241698233s ago: executing program 6 (id=1114): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xb5) 2m45.133920022s ago: executing program 6 (id=1138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cce9916ab00000002000000010000001c20"], 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x6080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) 2m44.821474286s ago: executing program 36 (id=1138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cce9916ab00000002000000010000001c20"], 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x6080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) 8.876927746s ago: executing program 5 (id=1501): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x8, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x11, 0x80}, 0x0, 0x2000040e, 0x7fffffff, {0x74, 0xf}, 0x80, 0x2}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000200)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c726f6469722c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c696f636861727365743d757466382c757466383d312c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c646973636172642c00512733c8ef1654be3cad5b8bbe4f"], 0x1, 0x369, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xb5) 8.792192396s ago: executing program 9 (id=1502): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000000020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x438}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff4f, &(0x7f0000000940)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27cb07"]) 7.594033942s ago: executing program 9 (id=1506): ioperm(0x0, 0x3, 0x2) unshare(0x20040400) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 7.496536643s ago: executing program 5 (id=1507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10040, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f0000000c80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000bff000/0x400000)=nil, 0x400000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 6.179748351s ago: executing program 9 (id=1510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000003d00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1, 0x7, 0x1, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, &(0x7f0000000400)}}], 0x2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/211, 0x20, 0x1, 0x0}, &(0x7f0000000000)=0x40) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) 5.41234449s ago: executing program 5 (id=1514): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x20, 0x0, @void}, 0x10) 4.971504606s ago: executing program 5 (id=1518): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000017000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000004700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000000000000c000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.61739286s ago: executing program 5 (id=1519): prlimit64(0x0, 0xa74f4d2231f8950a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) r1 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r1, 0x0, 0x0, 0xe7b, 0x0, 0x0) mkdir(0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) mount$9p_fd(0x0, 0x0, &(0x7f0000004380), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) read$FUSE(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) 4.575709761s ago: executing program 7 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 3.719722072s ago: executing program 8 (id=1521): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18c930f1870000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) 3.707168312s ago: executing program 3 (id=1522): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0xcf0a}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.415763396s ago: executing program 8 (id=1523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) 3.415396446s ago: executing program 3 (id=1524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000300000000000000000000009408fcfffeffffff95"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.390183996s ago: executing program 7 (id=1525): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10040, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f0000000c80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000bff000/0x400000)=nil, 0x400000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 2.726514915s ago: executing program 8 (id=1526): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 2.667615236s ago: executing program 3 (id=1527): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x10a20c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x6, 0x393, &(0x7f0000000b00)="$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") prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f00000001c0)=ANY=[], 0x4, 0x20c, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1a37c1, 0x1e6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.518680117s ago: executing program 8 (id=1528): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000500)={[{@delalloc}, {@data_err_abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10001}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xba, 0x8000000000000001, 0x6, 0x7, 0xb, 0xd}) 2.474577538s ago: executing program 3 (id=1529): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a01000019"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$char_usb(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.183600592s ago: executing program 7 (id=1530): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) 2.183099272s ago: executing program 9 (id=1531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000003d00)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1, 0x7, 0x1, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004080), 0x0, 0x0) dup3(r7, r6, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7fff, 0x0, 0xfffffffd, 0x11, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5, 0x4, 0x4], [0x80, 0x5, 0x0, 0x0, 0xfffffffe, 0xa, 0xfffffffe, 0x7f]], '\x00', [{}, {}, {0xfffffffb, 0x1}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0xa}, {0xf}, {0x9}, {0x0, 0x200000}, {0x161, 0xffff}, {0x8, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2}) 2.095314493s ago: executing program 5 (id=1532): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000000020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x438}}, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff4f, &(0x7f0000000940)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27cb070039027ad68134cc76951dd7b7ef951b95e5a6"]) 1.697468718s ago: executing program 8 (id=1533): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x8, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x48100) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000000c0)={{0x11, 0x80}, 0x0, 0x2000040e, 0x7fffffff, {0x74, 0xf}, 0x80, 0x2}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000200)=ANY=[@ANYBLOB="757466383d312c73686f72746e616d653d6d697865642c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c726f6469722c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c696f636861727365743d757466382c757466383d312c73686f72746e616d653d77696e39352c696f636861727365743d69736f383835392d312c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c646973636172642c00512733c8ef1654be3cad5b8bbe4f"], 0x1, 0x369, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xb5) 1.229653624s ago: executing program 7 (id=1534): syz_mount_image$udf(&(0x7f0000001080), &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200c9a, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x101042, 0x1bf) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) 1.128857945s ago: executing program 3 (id=1535): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 968.645108ms ago: executing program 9 (id=1536): r0 = syz_io_uring_setup(0x1585, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x1e76, 0x0, 0x6, 0x0, 0x0) 859.844309ms ago: executing program 7 (id=1537): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="f40200001300290a000000000000000007000000", @ANYRES64=r0], 0x2f4}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 673.480061ms ago: executing program 3 (id=1538): r0 = socket(0x3c, 0x2, 0x2) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) read$FUSE(r2, &(0x7f0000002900)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x4800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x1ffffffd, 0x0, 0x2, 0x1, 0x101, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002100181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 626.529402ms ago: executing program 9 (id=1539): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x10a20c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x6, 0x393, &(0x7f0000000b00)="$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") prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f00000001c0)=ANY=[], 0x4, 0x20c, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1a37c1, 0x1e6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 131.372348ms ago: executing program 7 (id=1540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10040, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f0000000c80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x0, 0x0, 0xffffffff, 0xf0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x5}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0xff000000], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000bff000/0x400000)=nil, 0x400000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 0s ago: executing program 8 (id=1541): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000100), 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) kernel console output (not intermixed with test programs): journal. Quota mode: none. [ 429.573216][ T8262] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 429.646747][ T6803] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 429.844077][ T6803] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.866589][ T6803] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 429.909875][ T6803] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 429.926546][ T6803] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 429.946100][ T6803] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.963224][ T8275] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 429.985800][ T6803] hub 8-1:1.0: bad descriptor, ignoring hub [ 430.004701][ T6803] hub: probe of 8-1:1.0 failed with error -5 [ 430.025497][ T6803] cdc_wdm 8-1:1.0: skipping garbage [ 430.039922][ T6803] cdc_wdm 8-1:1.0: skipping garbage [ 430.061618][ T6803] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 430.074881][ T6803] cdc_wdm 8-1:1.0: Unknown control protocol [ 430.136939][ T4300] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 430.265749][ T4829] usb 5-1: USB disconnect, device number 11 [ 430.287803][ C1] wdm_int_callback: 1038 callbacks suppressed [ 430.287828][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.301009][ C1] wdm_int_callback: 1038 callbacks suppressed [ 430.301029][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.314144][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.320964][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.326796][ T4300] usb 7-1: Using ep0 maxpacket: 16 [ 430.327442][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.334277][ T4300] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.338780][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.339206][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.362470][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.378827][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.385506][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.445371][ T4300] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 430.467464][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.476618][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.495284][ T4300] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.542288][ T4300] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.576743][ T4300] usb 7-1: Manufacturer: syz [ 430.607884][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.608559][ T4300] usb 7-1: config 0 descriptor?? [ 430.614525][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.614758][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.632343][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.639786][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.646524][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.663626][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.670829][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 430.686931][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 430.693687][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 431.669837][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 431.717362][ T7] usb 8-1: USB disconnect, device number 6 [ 431.786934][ T8317] autofs4:pid:8317:autofs_fill_super: called with bogus options [ 431.833236][ T26] audit: type=1326 audit(1746709898.273:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 431.919308][ T26] audit: type=1326 audit(1746709898.273:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 431.980391][ T26] audit: type=1326 audit(1746709898.273:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 432.039960][ T26] audit: type=1326 audit(1746709898.273:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 432.070908][ T26] audit: type=1326 audit(1746709898.273:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 432.146517][ T26] audit: type=1326 audit(1746709898.273:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 432.245424][ T26] audit: type=1326 audit(1746709898.273:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 432.358603][ T26] audit: type=1326 audit(1746709898.273:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.7.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea80b8e969 code=0x7ffc0000 [ 432.435543][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 433.671744][ T8338] blk_print_req_error: 2 callbacks suppressed [ 433.671759][ T8338] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.687777][ T8338] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.697175][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 433.707046][ T8338] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.716773][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 433.726520][ T8338] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 433.734213][ T8338] UDF-fs: Scanning with blocksize 512 failed [ 433.740869][ T8338] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.750408][ T8338] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.759807][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 433.769783][ T8338] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.779365][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 433.789243][ T8338] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 433.796911][ T8338] UDF-fs: Scanning with blocksize 1024 failed [ 433.803435][ T8338] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.813129][ T8338] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.822613][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 433.832415][ T8338] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.841912][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 433.851571][ T8338] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 433.859453][ T8338] UDF-fs: Scanning with blocksize 2048 failed [ 433.866041][ T8338] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 433.875713][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 433.885693][ T8338] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 433.895331][ T8338] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 433.903216][ T8338] UDF-fs: Scanning with blocksize 4096 failed [ 433.909322][ T8338] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 434.793237][ T4300] usb 7-1: USB disconnect, device number 8 [ 435.316056][ T8362] autofs4:pid:8362:autofs_fill_super: called with bogus options [ 436.509619][ T14] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 436.696846][ T14] usb 7-1: device descriptor read/64, error -71 [ 436.713010][ T8375] loop5: detected capacity change from 0 to 256 [ 436.801285][ T8375] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 436.976776][ T14] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 437.186797][ T14] usb 7-1: device descriptor read/64, error -71 [ 438.091574][ T14] usb usb7-port1: attempt power cycle [ 439.950579][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.957221][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.843789][ T7] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 441.316779][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 441.325270][ T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.384175][ T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.413350][ T7] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 441.454688][ T7] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 441.484786][ T7] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.510045][ T7] usb 8-1: Manufacturer: syz [ 441.550503][ T7] usb 8-1: config 0 descriptor?? [ 442.187634][ T8434] autofs4:pid:8434:autofs_fill_super: called with bogus options [ 443.300887][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 443.336338][ T7] usb 8-1: USB disconnect, device number 7 [ 443.370717][ T4339] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 443.567785][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 443.575400][ T4339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.597888][ T4339] usb 5-1: config 0 has no interfaces? [ 443.603538][ T4339] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 443.638813][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.641797][ T14] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 443.665219][ T4339] usb 5-1: config 0 descriptor?? [ 443.896865][ T14] usb 7-1: device descriptor read/64, error -71 [ 444.206906][ T14] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 444.365894][ T8472] loop5: detected capacity change from 0 to 1024 [ 444.397945][ T14] usb 7-1: device descriptor read/64, error -71 [ 444.544297][ T14] usb usb7-port1: attempt power cycle [ 444.607880][ T8472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 444.981874][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 445.650173][ T14] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 445.771305][ T14] usb 7-1: device descriptor read/8, error -71 [ 445.804734][ T8489] loop7: detected capacity change from 0 to 2048 [ 445.812620][ T8489] NILFS (loop7): unrecognized mount option " " [ 445.874339][ T4246] blk_print_req_error: 2 callbacks suppressed [ 445.874366][ T4246] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 445.963241][ T8497] autofs4:pid:8497:autofs_fill_super: called with bogus options [ 446.031945][ T8495] loop5: detected capacity change from 0 to 4096 [ 446.077826][ T8495] EXT4-fs (loop5): Test dummy encryption mode enabled [ 446.108285][ T8495] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 446.117037][ T14] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 446.134439][ T4262] usb 5-1: USB disconnect, device number 12 [ 446.171229][ T8495] System zones: 0-5 [ 446.208503][ T8495] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 446.236070][ T14] usb 7-1: device descriptor read/8, error -71 [ 446.377014][ T14] usb usb7-port1: unable to enumerate USB device [ 446.433207][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 446.497057][ T4299] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 446.705785][ T4299] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 446.876258][ T4299] usb 8-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 447.144973][ T4299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.243587][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 447.270147][ T4299] usb 8-1: config 0 descriptor?? [ 447.754265][ T8528] loop4: detected capacity change from 0 to 512 [ 447.761858][ T8528] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.769329][ T8528] EXT4-fs: Ignoring removed mblk_io_submit option [ 447.775812][ T8528] ext3: Unknown parameter 'pcr' [ 449.048664][ T14] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 449.244834][ T4299] wacom 0003:056A:0307.0003: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.7-1/input0 [ 449.267232][ T4299] usb 8-1: USB disconnect, device number 8 [ 449.277222][ T5174] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 449.306926][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 449.345237][ T4271] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 449.426804][ T14] usb 7-1: device descriptor read/64, error -71 [ 449.607636][ T26] audit: type=1326 audit(1746709916.053:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 449.706883][ T14] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 449.786872][ T26] audit: type=1326 audit(1746709916.053:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 449.945447][ T26] audit: type=1326 audit(1746709916.053:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 449.976303][ T26] audit: type=1326 audit(1746709916.053:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 450.935538][ T26] audit: type=1326 audit(1746709916.053:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 450.998277][ T8555] loop7: detected capacity change from 0 to 2048 [ 451.036610][ T8555] NILFS (loop7): unrecognized mount option " " [ 451.167554][ T26] audit: type=1326 audit(1746709916.053:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 451.251453][ T8550] autofs4:pid:8550:autofs_fill_super: called with bogus options [ 451.277421][ T26] audit: type=1326 audit(1746709916.053:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 451.372807][ T26] audit: type=1326 audit(1746709916.053:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 451.453291][ T26] audit: type=1326 audit(1746709916.053:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 451.535540][ T26] audit: type=1326 audit(1746709916.053:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f667b38e969 code=0x7ffc0000 [ 452.264138][ T8571] loop6: detected capacity change from 0 to 128 [ 452.362779][ T8571] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 452.394180][ T8571] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 452.675129][ T6437] EXT4-fs (loop6): unmounting filesystem. [ 453.640630][ T4829] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 453.832744][ T4829] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.877254][ T4829] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 453.890739][ T4829] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.901880][ T4829] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 453.912458][ T4829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.933886][ T4829] hub 7-1:1.0: bad descriptor, ignoring hub [ 453.940647][ T4829] hub: probe of 7-1:1.0 failed with error -5 [ 453.948043][ T4829] cdc_wdm 7-1:1.0: skipping garbage [ 453.953833][ T4829] cdc_wdm 7-1:1.0: skipping garbage [ 453.959664][ T4829] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 454.076511][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 454.931056][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.977216][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.049244][ T8608] autofs4:pid:8608:autofs_fill_super: called with bogus options [ 455.107287][ T4300] usb 7-1: USB disconnect, device number 18 [ 455.444278][ T8619] capability: warning: `syz.5.959' uses 32-bit capabilities (legacy support in use) [ 455.476592][ T8619] loop5: detected capacity change from 0 to 512 [ 456.056742][ T4339] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 456.246819][ T4339] usb 7-1: Using ep0 maxpacket: 16 [ 456.254747][ T4339] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.293120][ T4339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.321562][ T4339] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 456.338169][ T4339] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.354262][ T4339] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.363395][ T4339] usb 7-1: Manufacturer: syz [ 456.403239][ T4339] usb 7-1: config 0 descriptor?? [ 456.674657][ T8646] autofs4:pid:8646:autofs_fill_super: called with bogus options [ 456.924486][ T8651] loop7: detected capacity change from 0 to 256 [ 457.100561][ T8651] FAT-fs (loop7): Directory bread(block 64) failed [ 457.112671][ T8651] FAT-fs (loop7): Directory bread(block 65) failed [ 457.133710][ T8651] FAT-fs (loop7): Directory bread(block 66) failed [ 457.143101][ T8651] FAT-fs (loop7): Directory bread(block 67) failed [ 457.147050][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.150545][ T4271] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 457.166271][ T8651] FAT-fs (loop7): Directory bread(block 68) failed [ 457.176786][ T8651] FAT-fs (loop7): Directory bread(block 69) failed [ 457.184177][ T8651] FAT-fs (loop7): Directory bread(block 70) failed [ 457.191739][ T8651] FAT-fs (loop7): Directory bread(block 71) failed [ 457.199118][ T8651] FAT-fs (loop7): Directory bread(block 72) failed [ 457.207118][ T8651] FAT-fs (loop7): Directory bread(block 73) failed [ 458.882034][ T4754] usb 7-1: USB disconnect, device number 19 [ 459.151783][ C0] Unknown status report in ack skb [ 459.194598][ T8678] netlink: 'syz.5.982': attribute type 83 has an invalid length. [ 459.276103][ T8684] loop6: detected capacity change from 0 to 256 [ 459.314559][ T8685] autofs4:pid:8685:autofs_fill_super: called with bogus options [ 459.421504][ T26] kauditd_printk_skb: 120 callbacks suppressed [ 459.421521][ T26] audit: type=1800 audit(1746709925.863:456): pid=8684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.984" name="file2" dev="loop6" ino=1048650 res=0 errno=0 [ 459.534423][ T8688] loop5: detected capacity change from 0 to 512 [ 459.558415][ T8688] EXT4-fs: Ignoring removed nobh option [ 459.661312][ T8688] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 459.701493][ T8688] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 459.862655][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 461.456764][ T14] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 461.683739][ T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.705927][ T14] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.780321][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.821877][ T14] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 461.872845][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.911158][ T8711] loop7: detected capacity change from 0 to 736 [ 461.947061][ T14] hub 7-1:1.0: bad descriptor, ignoring hub [ 461.963615][ T14] hub: probe of 7-1:1.0 failed with error -5 [ 462.025394][ T14] cdc_wdm 7-1:1.0: skipping garbage [ 462.055393][ T14] cdc_wdm 7-1:1.0: skipping garbage [ 462.095856][ T14] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 462.345251][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.447795][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.594793][ T8715] loop7: detected capacity change from 0 to 256 [ 462.617308][ T4754] usb 7-1: USB disconnect, device number 20 [ 462.691335][ T8715] exfat: Deprecated parameter 'utf8' [ 462.738161][ T8715] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 462.797784][ T8718] autofs4:pid:8718:autofs_fill_super: called with bogus options [ 464.046929][ T8723] loop6: detected capacity change from 0 to 512 [ 464.164242][ T8723] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.997: inode #1: comm syz.6.997: iget: illegal inode # [ 464.203556][ T8735] loop7: detected capacity change from 0 to 512 [ 464.321910][ T8723] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.997: error while reading EA inode 1 err=-117 [ 464.393171][ T8723] EXT4-fs (loop6): 1 orphan inode deleted [ 465.658318][ T8735] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 465.667671][ T8723] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 465.697792][ T8735] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 465.716293][ T8735] System zones: 0-2, 18-18, 34-35 [ 465.837827][ T8735] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 465.953161][ T6867] EXT4-fs (loop7): unmounting filesystem. [ 466.121918][ T8749] loop7: detected capacity change from 0 to 1024 [ 466.149315][ T6437] EXT4-fs (loop6): unmounting filesystem. [ 466.161382][ T8749] journal_path: Lookup failure for './file0' [ 466.188196][ T8749] EXT4-fs: error: could not find journal device path [ 467.383252][ T4339] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 467.930768][ T4339] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.941326][ T4339] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.950579][ T4339] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.963919][ T4339] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 467.978907][ T4339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.996555][ T8758] autofs4:pid:8758:autofs_fill_super: called with bogus options [ 468.012572][ T4339] hub 7-1:1.0: bad descriptor, ignoring hub [ 468.026753][ T4339] hub: probe of 7-1:1.0 failed with error -5 [ 468.033715][ T4339] cdc_wdm 7-1:1.0: skipping garbage [ 468.039370][ T4339] cdc_wdm 7-1:1.0: skipping garbage [ 468.044833][ T4339] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 468.453816][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.479620][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.627094][ T4301] usb 7-1: USB disconnect, device number 21 [ 469.933256][ T14] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 471.555332][ T14] usb 8-1: unable to read config index 0 descriptor/all [ 471.577063][ T14] usb 8-1: can't read configurations, error -71 [ 471.710131][ C0] Unknown status report in ack skb [ 471.716008][ T8791] netlink: 'syz.7.1021': attribute type 83 has an invalid length. [ 471.935954][ T8793] autofs4:pid:8793:autofs_fill_super: called with bogus options [ 475.441419][ T14] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 475.637726][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 475.668180][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.753418][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.781921][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 475.820466][ T14] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 475.852614][ T14] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 475.902061][ T14] usb 6-1: Manufacturer: syz [ 475.944533][ T14] usb 6-1: config 0 descriptor?? [ 477.659346][ T8831] loop6: detected capacity change from 0 to 512 [ 477.711307][ T8831] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 477.727501][ T8831] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 477.776348][ T8831] System zones: 0-2, 18-18, 34-35 [ 477.828061][ T8831] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 477.954444][ T6437] EXT4-fs (loop6): unmounting filesystem. [ 478.026333][ T8839] loop7: detected capacity change from 0 to 512 [ 478.087414][ T8839] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 478.156956][ T8839] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.252297][ T26] audit: type=1800 audit(1746709944.693:457): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1033" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 478.301327][ T8846] autofs4:pid:8846:autofs_fill_super: called with bogus options [ 478.340267][ T26] audit: type=1800 audit(1746709944.753:458): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1033" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 478.400159][ T6867] EXT4-fs (loop7): unmounting filesystem. [ 479.828880][ T8848] loop6: detected capacity change from 0 to 1024 [ 479.857608][ T14] usb 6-1: USB disconnect, device number 13 [ 479.938089][ T8848] journal_path: Lookup failure for './file0' [ 479.944385][ T8848] EXT4-fs: error: could not find journal device path [ 480.149315][ T8858] loop5: detected capacity change from 0 to 256 [ 481.320482][ T8858] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 481.796860][ T4829] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 483.369277][ T4829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.396701][ T4829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 483.406059][ T4829] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.448267][ T4829] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 483.466715][ T4829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.495188][ T4829] hub 5-1:1.0: bad descriptor, ignoring hub [ 483.523068][ T4829] hub: probe of 5-1:1.0 failed with error -5 [ 483.537197][ T4829] cdc_wdm 5-1:1.0: skipping garbage [ 483.542547][ T4829] cdc_wdm 5-1:1.0: skipping garbage [ 483.564501][ T4829] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 483.895347][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.925056][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.147648][ T4829] usb 5-1: USB disconnect, device number 13 [ 484.870860][ T8892] loop6: detected capacity change from 0 to 512 [ 484.882492][ T8893] loop7: detected capacity change from 0 to 512 [ 484.915555][ T8894] autofs4:pid:8894:autofs_fill_super: called with bogus options [ 484.928238][ T8892] EXT4-fs (loop6): Test dummy encryption mode enabled [ 484.935172][ T8892] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 484.973700][ T8893] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1049: invalid indirect mapped block 256 (level 2) [ 484.989586][ T8892] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.1043: bad orphan inode 131083 [ 485.008294][ T8893] EXT4-fs (loop7): 2 truncates cleaned up [ 485.026997][ T8892] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 485.033403][ T8893] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 485.242843][ T8892] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 13: comm syz.6.1043: path /94/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 485.893997][ T6867] EXT4-fs (loop7): unmounting filesystem. [ 486.073314][ T6437] EXT4-fs (loop6): unmounting filesystem. [ 487.128857][ T8907] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.138485][ T8907] I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.148074][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 487.158161][ T8907] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.167526][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 487.177241][ T8907] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 487.185677][ T8907] UDF-fs: Scanning with blocksize 512 failed [ 487.192456][ T8907] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.202184][ T8907] I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.211891][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 487.222062][ T8907] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.232000][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 487.241747][ T8907] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 487.249543][ T8907] UDF-fs: Scanning with blocksize 1024 failed [ 487.256438][ T8907] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.266474][ T8907] I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.276297][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 487.286096][ T8907] I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.295731][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 487.305342][ T8907] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 487.313006][ T8907] UDF-fs: Scanning with blocksize 2048 failed [ 487.319467][ T8907] I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 487.329033][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 487.339434][ T8907] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 487.349060][ T8907] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 487.356746][ T8907] UDF-fs: Scanning with blocksize 4096 failed [ 487.362857][ T8907] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 490.739926][ T8930] loop6: detected capacity change from 0 to 1764 [ 493.025191][ T8941] autofs4:pid:8941:autofs_fill_super: called with bogus options [ 496.211851][ T4829] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 497.236725][ T4829] usb 8-1: Using ep0 maxpacket: 32 [ 497.244674][ T4829] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.344218][ T4829] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 497.471283][ T4829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.553053][ T4829] usb 8-1: config 0 descriptor?? [ 499.092708][ T4300] usb 8-1: USB disconnect, device number 11 [ 499.312385][ T9005] loop4: detected capacity change from 0 to 1024 [ 499.532765][ T9009] loop5: detected capacity change from 0 to 512 [ 499.540399][ T9005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 499.559881][ T9009] EXT4-fs (loop5): Test dummy encryption mode enabled [ 499.684793][ T4300] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 499.878611][ T9009] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 500.150525][ T4300] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 500.236765][ T4300] usb 8-1: config 0 has no interface number 0 [ 500.257464][ T4300] usb 8-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 500.288572][ T4300] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 500.319820][ T9009] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1078: bad orphan inode 131083 [ 500.357793][ T4300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.376881][ T9009] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 500.387568][ T9005] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.1076: Invalid inode table block 5 in block_group 0 [ 500.412351][ T4300] usb 8-1: Product: syz [ 500.441948][ T9005] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.1076: Invalid inode table block 5 in block_group 0 [ 500.442562][ T4300] usb 8-1: Manufacturer: syz [ 500.482463][ T9005] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 500.503702][ T9005] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #15: comm syz.4.1076: mark_inode_dirty error [ 500.515244][ T4300] usb 8-1: SerialNumber: syz [ 500.529387][ T4300] usb 8-1: config 0 descriptor?? [ 500.652234][ T4255] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 500.847294][ T4255] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 501.121422][ T4255] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 501.390842][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.397520][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.429020][ T4255] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #2: comm syz-executor: mark_inode_dirty error [ 501.443704][ T4300] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 501.472757][ T4300] keyspan 8-1:0.133: unsupported endpoint type 0 [ 501.506552][ T5623] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm kworker/u4:25: Invalid inode table block 5 in block_group 0 [ 501.525041][ T5623] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm kworker/u4:25: Invalid inode table block 5 in block_group 0 [ 501.525269][ T4300] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 501.548965][ T4255] EXT4-fs (loop4): unmounting filesystem. [ 501.563409][ T4300] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 501.571947][ T4300] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 501.596086][ T4300] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 501.626557][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 501.671746][ T4300] usb 8-1: USB disconnect, device number 12 [ 501.753789][ T4300] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 501.778933][ T4300] keyspan 8-1:0.133: device disconnected [ 501.894488][ T9030] loop5: detected capacity change from 0 to 128 [ 501.942786][ T9030] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 501.970303][ T4382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.981494][ T4829] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 502.006820][ T9030] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 502.084737][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 502.097029][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1081'. [ 502.149476][ T4829] usb 7-1: device descriptor read/64, error -71 [ 502.178321][ T4382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.387689][ T4382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.434259][ T4829] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 502.553423][ T9039] loop5: detected capacity change from 0 to 1764 [ 502.563938][ T4382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.616996][ T4829] usb 7-1: device descriptor read/64, error -71 [ 502.813955][ T4829] usb usb7-port1: attempt power cycle [ 503.440122][ T4267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 503.455949][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 503.465651][ T4267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 503.474105][ T4267] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 503.482586][ T4267] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 503.490602][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 503.732714][ T4382] tipc: Disabling bearer [ 503.740185][ T4382] tipc: Disabling bearer [ 503.776975][ T4382] tipc: Left network mode [ 503.889713][ T4829] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 503.927692][ T4829] usb 7-1: device descriptor read/8, error -71 [ 504.237027][ T4829] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 504.343097][ T4829] usb 7-1: device descriptor read/8, error -71 [ 504.648496][ T4829] usb usb7-port1: unable to enumerate USB device [ 505.192899][ T9044] chnl_net:caif_netlink_parms(): no params data found [ 506.039247][ T4267] Bluetooth: hci4: command 0x0409 tx timeout [ 506.793794][ T9044] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.862641][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.907796][ T9044] device bridge_slave_0 entered promiscuous mode [ 506.986989][ T14] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 507.065278][ T9044] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.075394][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.094499][ T9044] device bridge_slave_1 entered promiscuous mode [ 507.117065][ T9103] loop5: detected capacity change from 0 to 256 [ 507.144748][ T26] audit: type=1800 audit(1746709973.583:459): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1103" name="file2" dev="loop5" ino=1048656 res=0 errno=0 [ 507.182182][ T14] usb 7-1: Using ep0 maxpacket: 32 [ 507.189844][ T14] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 507.206239][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.239450][ T14] usb 7-1: config 0 descriptor?? [ 507.293847][ T14] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 507.343021][ T9044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.414607][ T9044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.752578][ T14] gspca_nw80x: reg_r err -32 [ 507.757937][ T14] nw80x: probe of 7-1:0.0 failed with error -32 [ 507.766998][ T14] usb 7-1: USB disconnect, device number 26 [ 508.116902][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 508.633851][ T9044] team0: Port device team_slave_0 added [ 508.672933][ T6803] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 508.731078][ T9044] team0: Port device team_slave_1 added [ 508.889569][ T6803] usb 6-1: device descriptor read/64, error -71 [ 508.935041][ T9130] loop6: detected capacity change from 0 to 1024 [ 509.108212][ T9130] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 509.180807][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.197038][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.306862][ T6803] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 509.536839][ T6803] usb 6-1: device descriptor read/64, error -71 [ 509.680502][ T6803] usb usb6-port1: attempt power cycle [ 509.714416][ T9044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.760723][ T9142] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz.6.1111: Invalid inode table block 5 in block_group 0 [ 509.935371][ T9142] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz.6.1111: Invalid inode table block 5 in block_group 0 [ 510.021877][ T4382] device hsr_slave_0 left promiscuous mode [ 510.045868][ T4382] device hsr_slave_1 left promiscuous mode [ 510.051958][ T9142] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 510.065162][ T9142] EXT4-fs error (device loop6): ext4_dirty_inode:6118: inode #15: comm syz.6.1111: mark_inode_dirty error [ 510.078122][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.085956][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.094606][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.102943][ T9142] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz.6.1111: Invalid inode table block 5 in block_group 0 [ 510.235975][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.247376][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 510.259043][ T4382] device bridge_slave_1 left promiscuous mode [ 510.263271][ T9142] EXT4-fs error (device loop6): ext4_get_max_inline_size:116: inode #15: comm syz.6.1111: can't get inode location 15 [ 510.265523][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.287550][ T4382] device bridge_slave_0 left promiscuous mode [ 510.293846][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.298875][ T9142] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz.6.1111: Invalid inode table block 5 in block_group 0 [ 510.380374][ T6803] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 510.448014][ T6803] usb 6-1: device descriptor read/8, error -71 [ 510.709597][ T6437] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 510.724785][ T6803] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 511.046468][ T6803] usb 6-1: device descriptor read/8, error -71 [ 511.140409][ T6437] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 511.176387][ T4382] device veth1_macvtap left promiscuous mode [ 511.197769][ T6803] usb usb6-port1: unable to enumerate USB device [ 511.233117][ T4382] device veth0_macvtap left promiscuous mode [ 511.256111][ T6437] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 511.256906][ T4382] device veth1_vlan left promiscuous mode [ 511.294021][ T6437] EXT4-fs (loop6): unmounting filesystem. [ 511.302178][ T4382] device veth0_vlan left promiscuous mode [ 511.325891][ T9152] loop5: detected capacity change from 0 to 256 [ 511.404251][ T26] audit: type=1800 audit(1746709977.843:460): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1115" name="file2" dev="loop5" ino=1048657 res=0 errno=0 [ 512.296763][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 513.098957][ T9173] loop5: detected capacity change from 0 to 512 [ 513.166688][ T9173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 513.245277][ T9173] EXT4-fs (loop5): 1 truncate cleaned up [ 513.257651][ T9173] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 513.285383][ T9177] trusted_key: encrypted_key: insufficient parameters specified [ 513.318227][ T26] audit: type=1800 audit(1746709979.763:461): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1122" name="file1" dev="loop5" ino=16 res=0 errno=0 [ 513.320529][ T9173] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 513.392576][ T9173] EXT4-fs (loop5): Remounting filesystem read-only [ 513.432106][ T9173] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1122: invalid indirect mapped block 3489660928 (level 0) [ 513.451965][ T9173] EXT4-fs (loop5): Remounting filesystem read-only [ 513.458732][ T9173] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1122: invalid indirect mapped block 6 (level 1) [ 513.482680][ T9173] EXT4-fs (loop5): Remounting filesystem read-only [ 513.542730][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 513.692668][ T9182] loop5: detected capacity change from 0 to 2048 [ 513.782092][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 513.796331][ T9182] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 513.805203][ T9182] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.923058][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 513.931920][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 514.064214][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.158292][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.747170][ T9208] trusted_key: encrypted_key: insufficient parameters specified [ 515.907833][ T9212] loop5: detected capacity change from 0 to 256 [ 515.918567][ T4382] bond0 (unregistering): Released all slaves [ 515.966994][ T9212] FAT-fs (loop5): Directory bread(block 64) failed [ 515.973665][ T9212] FAT-fs (loop5): Directory bread(block 65) failed [ 515.981088][ T9212] FAT-fs (loop5): Directory bread(block 66) failed [ 515.988876][ T9212] FAT-fs (loop5): Directory bread(block 67) failed [ 515.995730][ T9212] FAT-fs (loop5): Directory bread(block 68) failed [ 516.003012][ T9212] FAT-fs (loop5): Directory bread(block 69) failed [ 516.010287][ T9212] FAT-fs (loop5): Directory bread(block 70) failed [ 516.020599][ T9212] FAT-fs (loop5): Directory bread(block 71) failed [ 516.027820][ T9212] FAT-fs (loop5): Directory bread(block 72) failed [ 516.035129][ T9212] FAT-fs (loop5): Directory bread(block 73) failed [ 516.169138][ T9044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.177629][ T9044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.246469][ T9044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.064064][ T9044] device hsr_slave_0 entered promiscuous mode [ 517.083352][ T9044] device hsr_slave_1 entered promiscuous mode [ 517.092575][ T9044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.106768][ T9044] Cannot create hsr debugfs directory [ 518.718934][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 518.746230][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 518.756706][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 518.778660][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 518.787299][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 518.795014][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.040614][ T2897] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.082455][ T9044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 519.293814][ T9044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 519.619065][ T2897] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.074921][ T9044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 520.397090][ T126] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 520.399141][ T2897] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.421526][ T9044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 520.627022][ T126] usb 8-1: Using ep0 maxpacket: 32 [ 520.658831][ T126] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 520.709125][ T126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.107689][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 521.121146][ T126] usb 8-1: config 0 descriptor?? [ 521.144448][ T126] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 521.352385][ T9290] loop5: detected capacity change from 0 to 256 [ 521.399490][ T26] audit: type=1800 audit(1746709987.843:462): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1150" name="file2" dev="loop5" ino=1048658 res=0 errno=0 [ 521.423120][ T2897] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.516921][ T9255] chnl_net:caif_netlink_parms(): no params data found [ 521.550021][ T126] gspca_nw80x: reg_r err -32 [ 521.554733][ T126] nw80x: probe of 8-1:0.0 failed with error -32 [ 521.611141][ T126] usb 8-1: USB disconnect, device number 13 [ 521.831587][ T9044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.030903][ T9255] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.044986][ T9300] loop5: detected capacity change from 0 to 1764 [ 522.052387][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.088622][ T9255] device bridge_slave_0 entered promiscuous mode [ 522.130668][ T9255] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.286089][ T9255] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.295290][ T9255] device bridge_slave_1 entered promiscuous mode [ 523.150896][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 523.232031][ T9304] loop7: detected capacity change from 0 to 512 [ 523.289712][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.306002][ T9310] trusted_key: encrypted_key: insufficient parameters specified [ 523.306265][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.326283][ T9044] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.406373][ T9304] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1153: invalid indirect mapped block 256 (level 2) [ 523.435056][ T9255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.469212][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.478943][ T9304] EXT4-fs (loop7): 2 truncates cleaned up [ 523.516862][ T9304] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 523.536507][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.557346][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.564575][ T5778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.725562][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.961945][ T9255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.014685][ T6867] EXT4-fs (loop7): unmounting filesystem. [ 525.253462][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 526.817518][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 527.012754][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 527.057599][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.064860][ T5778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.095632][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 527.114322][ T9344] loop7: detected capacity change from 0 to 256 [ 527.256136][ T9255] team0: Port device team_slave_0 added [ 527.306884][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 527.808742][ T27] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 528.056982][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 528.092436][ T27] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 528.106979][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 528.124782][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 528.142202][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 528.151725][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 528.154997][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.161026][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 528.185171][ T9351] loop7: detected capacity change from 0 to 1764 [ 528.216357][ T27] usb 6-1: config 0 descriptor?? [ 528.249913][ T27] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 528.403309][ T9255] team0: Port device team_slave_1 added [ 529.318536][ T27] gspca_nw80x: reg_w err -110 [ 529.395975][ T27] nw80x: probe of 6-1:0.0 failed with error -110 [ 529.437092][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 529.461957][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 529.483373][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 529.515769][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 529.583736][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 529.626824][ T9044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 529.647729][ T9359] loop7: detected capacity change from 0 to 128 [ 529.700529][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.707688][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.748157][ T9291] blk_print_req_error: 2 callbacks suppressed [ 529.748174][ T9291] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.775456][ T9255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.796028][ T9359] loop7: detected capacity change from 0 to 16 [ 529.813998][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.828286][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.854828][ T9359] erofs: (device loop7): mounted with root inode @ nid 36. [ 529.878463][ T9359] syz.7.1166: attempt to access beyond end of device [ 529.878463][ T9359] loop7: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 529.906796][ T9255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.125614][ T9255] device hsr_slave_0 entered promiscuous mode [ 530.166457][ T9255] device hsr_slave_1 entered promiscuous mode [ 530.185103][ T9255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.216289][ T9255] Cannot create hsr debugfs directory [ 530.329052][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 530.337816][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.547272][ T4829] usb 6-1: USB disconnect, device number 18 [ 531.604447][ T9044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.303696][ T9399] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.315456][ T9399] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.325172][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 533.335870][ T9399] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.345978][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 533.356075][ T9399] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 533.364018][ T9399] UDF-fs: Scanning with blocksize 512 failed [ 533.371031][ T9399] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.381442][ T9399] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.391080][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 533.401300][ T9399] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.411025][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 533.420857][ T9399] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 533.429066][ T9399] UDF-fs: Scanning with blocksize 1024 failed [ 533.436217][ T9399] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.446441][ T9399] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.456156][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 533.466535][ T9399] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.476343][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 533.486206][ T9399] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 533.494452][ T9399] UDF-fs: Scanning with blocksize 2048 failed [ 533.503485][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 533.513421][ T9399] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 533.523258][ T9399] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 533.531077][ T9399] UDF-fs: Scanning with blocksize 4096 failed [ 533.537224][ T9399] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 534.295915][ T9255] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 535.321863][ T9255] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 535.356100][ T9255] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 535.475837][ T9255] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 536.557248][ T2897] device hsr_slave_0 left promiscuous mode [ 536.602678][ T2897] device hsr_slave_1 left promiscuous mode [ 536.627497][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.635653][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.892588][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.003498][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.130225][ T2897] device bridge_slave_1 left promiscuous mode [ 537.304238][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.328318][ T2897] device bridge_slave_0 left promiscuous mode [ 537.344005][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.461338][ T2897] device veth1_macvtap left promiscuous mode [ 537.468598][ T2897] device veth0_macvtap left promiscuous mode [ 537.475279][ T2897] device veth1_vlan left promiscuous mode [ 537.482026][ T2897] device veth0_vlan left promiscuous mode [ 537.814993][ T9444] loop5: detected capacity change from 0 to 1764 [ 539.862067][ T9459] loop5: detected capacity change from 0 to 512 [ 540.027213][ T9459] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1188: invalid indirect mapped block 256 (level 2) [ 540.158873][ T9459] EXT4-fs (loop5): 2 truncates cleaned up [ 540.164931][ T9459] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 541.448750][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 544.133901][ T2897] team0 (unregistering): Port device team_slave_1 removed [ 545.161305][ T2897] team0 (unregistering): Port device team_slave_0 removed [ 545.359101][ T9501] loop5: detected capacity change from 0 to 1764 [ 546.557890][ T2897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.773389][ T2897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.390915][ T9521] loop5: detected capacity change from 0 to 256 [ 548.424061][ T26] audit: type=1800 audit(1746710014.863:463): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1203" name="file2" dev="loop5" ino=1048659 res=0 errno=0 [ 549.256844][ T4339] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 549.478813][ T4339] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.493107][ T4339] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.537009][ T4339] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 549.557146][ T4339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 549.694669][ T4339] usb 6-1: SerialNumber: syz [ 549.856511][ T2897] bond0 (unregistering): Released all slaves [ 550.066909][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 550.081243][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.111935][ T4339] usb 6-1: 0:2 : does not exist [ 551.237664][ T4339] usb 6-1: unit 120 not found! [ 551.278242][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.302812][ T4339] usb 6-1: unit 48 not found! [ 551.306952][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.523142][ T4339] usb 6-1: USB disconnect, device number 19 [ 552.541214][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.604893][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.852968][ T9044] device veth0_vlan entered promiscuous mode [ 552.874606][ T9553] loop5: detected capacity change from 0 to 2048 [ 553.451312][ T9291] udevd[9291]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.906167][ T9553] NILFS (loop5): unrecognized mount option " " [ 554.297070][ T9255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.313488][ T9044] device veth1_vlan entered promiscuous mode [ 554.482850][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.516198][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.600608][ T9255] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.608836][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.627409][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.651108][ T9044] device veth0_macvtap entered promiscuous mode [ 554.717164][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 554.725930][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.773621][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.793347][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.801274][ T5623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.868094][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.877786][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.902945][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.910594][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.966957][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 555.005688][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 555.028421][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 555.325885][ T9044] device veth1_macvtap entered promiscuous mode [ 555.385710][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 555.395629][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.367581][ T9567] blk_print_req_error: 3 callbacks suppressed [ 556.367763][ T9567] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.386925][ T9567] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.399255][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 556.411601][ T9567] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.422334][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 556.433727][ T9567] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 556.443695][ T9567] UDF-fs: Scanning with blocksize 512 failed [ 556.456889][ T9567] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.570475][ T9567] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.584144][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 556.600957][ T9567] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.614613][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 556.627325][ T9567] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 556.636423][ T9567] UDF-fs: Scanning with blocksize 1024 failed [ 556.648229][ T9567] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.703614][ T9567] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.723983][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 556.742114][ T9567] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.767219][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 556.769771][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.791263][ T9567] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 556.800430][ T9567] UDF-fs: Scanning with blocksize 2048 failed [ 556.810525][ T9567] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 556.822637][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 556.834222][ T9567] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 556.844447][ T9567] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 556.852737][ T9567] UDF-fs: Scanning with blocksize 4096 failed [ 556.859179][ T9567] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 557.164604][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.211338][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.249784][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.294705][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.188331][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 559.237165][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 559.287696][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.356910][ T9255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 559.405285][ T9044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.463829][ T9044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.516761][ T9044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.566009][ T9044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.629990][ T9044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.670342][ T9044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.698412][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.727119][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.757371][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.790529][ T9044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.816840][ T9044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.866867][ T9044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.906694][ T9044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.934707][ T9044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.986762][ T9044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.009054][ T9044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.021658][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.037673][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.102020][ T9044] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.166797][ T9044] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.226741][ T9044] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.286820][ T9044] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.597934][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 560.608102][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 560.650792][ T9255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.790626][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.837915][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.901311][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.947483][ T4895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.083692][ T4895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.016742][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 562.818016][ T9639] trusted_key: encrypted_key: insufficient parameters specified [ 562.831628][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.838276][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.643578][ T9663] loop5: detected capacity change from 0 to 256 [ 563.802449][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 563.857479][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 563.980511][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 564.017458][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 564.040532][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 564.081914][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 564.148509][ T9255] device veth0_vlan entered promiscuous mode [ 564.216103][ T4267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.228261][ T4267] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.239701][ T4267] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.259166][ T9255] device veth1_vlan entered promiscuous mode [ 564.276910][ T4267] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.287464][ T4267] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 564.294878][ T4267] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 564.309978][ T9674] loop5: detected capacity change from 0 to 1024 [ 564.317477][ T9674] EXT4-fs: Ignoring removed mblk_io_submit option [ 564.324367][ T9674] EXT4-fs: Ignoring removed orlov option [ 564.330256][ T9674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 564.475726][ T9674] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 564.662343][ T9255] device veth0_macvtap entered promiscuous mode [ 564.702749][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 564.732789][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 564.787353][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 564.817593][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 564.854112][ T9255] device veth1_macvtap entered promiscuous mode [ 565.827759][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 565.926899][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 566.018074][ T2897] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 566.119045][ T9687] loop5: detected capacity change from 0 to 8 [ 566.415104][ T4267] Bluetooth: hci5: command 0x0409 tx timeout [ 566.461723][ T9694] trusted_key: encrypted_key: insufficient parameters specified [ 568.076509][ T9687] SQUASHFS error: zlib decompression failed, data probably corrupt [ 568.086542][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.116677][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.126554][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.176706][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.196669][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.208609][ T9687] SQUASHFS error: Failed to read block 0x4e8: -5 [ 568.246830][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.258980][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1244'. [ 568.276329][ T26] audit: type=1800 audit(2000000000.120:464): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1241" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 568.286772][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.349474][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.374624][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.411655][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.426863][ T4272] Bluetooth: hci5: command 0x041b tx timeout [ 568.455241][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.556769][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.570351][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.595134][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.643755][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.693894][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.725230][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.768629][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.776299][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.805466][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.872417][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 568.881659][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 569.049912][ T2897] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.104129][ T9255] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.124465][ T9255] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.165975][ T9255] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.360691][ T9255] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.625473][ T9722] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1249'. [ 570.212525][ T9671] chnl_net:caif_netlink_parms(): no params data found [ 570.507108][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 570.578249][ T2897] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.006936][ T9731] trusted_key: encrypted_key: insufficient parameters specified [ 571.785470][ T5767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.803715][ T5767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.948321][ T4895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.618918][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 572.765608][ T4895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.882294][ T2897] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.943753][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 572.954455][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 573.277300][ T9743] netlink: 'syz.3.1254': attribute type 11 has an invalid length. [ 573.307357][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1255'. [ 573.344531][ T2897] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.491700][ T9671] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.553016][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.607530][ T9671] device bridge_slave_0 entered promiscuous mode [ 573.673842][ T9671] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.710324][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.754181][ T9671] device bridge_slave_1 entered promiscuous mode [ 573.763517][ T9760] loop9: detected capacity change from 0 to 2048 [ 573.910907][ T9760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 574.058638][ T9671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.143368][ T9762] netlink: 42 bytes leftover after parsing attributes in process `syz.3.1258'. [ 574.166523][ T9671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.799139][ T9671] team0: Port device team_slave_0 added [ 574.903269][ T9671] team0: Port device team_slave_1 added [ 575.179540][ T9778] loop9: detected capacity change from 0 to 1764 [ 576.389178][ T9671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.396192][ T9671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.521006][ T9671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.570485][ T9794] loop5: detected capacity change from 0 to 8 [ 577.721343][ T9794] SQUASHFS error: zlib decompression failed, data probably corrupt [ 577.747123][ T9794] SQUASHFS error: Failed to read block 0x4e8: -5 [ 577.777802][ T26] audit: type=1800 audit(2000000009.630:465): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1265" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 577.839405][ T9671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.846549][ T9671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.006666][ T9671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.181326][ T9805] loop9: detected capacity change from 0 to 512 [ 579.528033][ T9805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 579.641015][ T9805] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 580.735131][ T9827] loop9: detected capacity change from 0 to 1764 [ 580.839364][ T9671] device hsr_slave_0 entered promiscuous mode [ 580.878372][ T9671] device hsr_slave_1 entered promiscuous mode [ 583.383163][ T4307] kworker/dying (4307) used greatest stack depth: 19464 bytes left [ 584.989905][ T9870] loop9: detected capacity change from 0 to 1024 [ 585.064443][ T9870] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 585.115005][ T9870] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1285: bg 0: block 260: invalid block bitmap [ 585.258387][ T9870] EXT4-fs error (device loop9): ext4_free_inode:355: comm syz.9.1285: bit already cleared for inode 15 [ 585.388536][ T9255] EXT4-fs (loop9): unmounting filesystem. [ 589.027584][ T2897] device hsr_slave_0 left promiscuous mode [ 589.053414][ T2897] device hsr_slave_1 left promiscuous mode [ 589.086972][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.094463][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.149226][ T2897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.163180][ T2897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.184489][ T2897] device bridge_slave_1 left promiscuous mode [ 589.196930][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.216482][ T2897] device bridge_slave_0 left promiscuous mode [ 589.225195][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.363136][ T2897] device veth1_macvtap left promiscuous mode [ 589.391026][ T2897] device veth0_macvtap left promiscuous mode [ 589.404622][ T2897] device veth1_vlan left promiscuous mode [ 589.413787][ T2897] device veth0_vlan left promiscuous mode [ 590.739930][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'. [ 590.845465][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1295'. [ 591.046855][ T22] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 591.288127][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.308155][ T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.339453][ T22] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 591.374449][ T22] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.396516][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.474642][ T22] usb 6-1: config 0 descriptor?? [ 592.069117][ T22] usbhid 6-1:0.0: can't add hid device: -71 [ 592.126327][ T22] usbhid: probe of 6-1:0.0 failed with error -71 [ 592.138040][ T22] usb 6-1: USB disconnect, device number 20 [ 592.419064][ T2897] team0 (unregistering): Port device team_slave_1 removed [ 592.507188][ T2897] team0 (unregistering): Port device team_slave_0 removed [ 593.465846][ T2897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.562404][ T2897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.773045][ T9960] loop5: detected capacity change from 0 to 1764 [ 596.011534][ T2897] bond0 (unregistering): Released all slaves [ 596.892368][ T9965] loop9: detected capacity change from 0 to 1024 [ 597.130727][ T9671] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 597.200409][ T9671] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 597.276448][ T9671] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 597.356514][ T9671] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 599.372996][ T9994] loop9: detected capacity change from 0 to 1024 [ 599.437320][ T9671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.614424][ T9994] hfsplus: xattr searching failed [ 599.622489][ T9671] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.641095][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 599.659853][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.712432][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.762725][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.795354][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.803007][ T5778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.834884][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.845630][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.861972][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.869275][ T5778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.891361][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.999053][ T5778] hfsplus: bad catalog file entry [ 600.004758][ T5778] hfsplus: b-tree write err: -5, ino 3 [ 600.017687][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.045564][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.313908][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 600.681542][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.786430][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.812792][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 600.832892][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.863333][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 600.893533][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.990128][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.039687][ T5765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.119171][ T9671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.972863][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.997622][ T5778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.013064][ T9671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.716343][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 605.748671][ T126] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 605.956701][ T126] usb 10-1: Using ep0 maxpacket: 8 [ 605.963872][ T126] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 606.016652][ T126] usb 10-1: config 179 has no interface number 0 [ 606.023100][ T126] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 606.073767][ T126] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 606.116810][ T126] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 606.156650][ T126] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 606.205445][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 606.216974][ T126] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 606.226247][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.245071][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 606.265320][T10063] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 606.304601][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 606.368964][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 606.431115][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 606.479527][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 606.519102][ T9671] device veth0_vlan entered promiscuous mode [ 606.564928][ T4754] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input16 [ 606.650729][ T9671] device veth1_vlan entered promiscuous mode [ 606.766323][ T126] usb 10-1: USB disconnect, device number 2 [ 606.772485][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 606.772531][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 606.817508][ T9671] device veth0_macvtap entered promiscuous mode [ 606.835375][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 606.853271][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 606.861784][ T126] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 606.881769][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 606.925498][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.963721][ T9671] device veth1_macvtap entered promiscuous mode [ 607.006861][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 607.018392][ T5766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 607.061810][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.089519][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.109368][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.140756][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.171337][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.197242][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.218921][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.238223][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.255426][ T9671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.720898][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 608.740589][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 608.829593][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.845674][T10111] loop5: detected capacity change from 0 to 1024 [ 608.861251][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.939668][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.975249][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.993221][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.016752][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.036664][ T9671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.048820][ T9671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.067476][ T5765] hfsplus: b-tree write err: -5, ino 4 [ 609.075733][ T9671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.286221][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 609.316335][ T5623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.976723][ T9671] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.985498][ T9671] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.063938][ T9671] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.073564][ T9671] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.129618][T10127] loop9: detected capacity change from 0 to 256 [ 611.210035][T10127] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xff48ad06, utbl_chksum : 0xe619d30d) [ 611.357026][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.398714][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.467131][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 611.519908][ T5767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.562360][ T5767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.808028][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 613.966530][T10153] blk_print_req_error: 2 callbacks suppressed [ 613.973179][T10153] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 613.984134][T10153] I/O error, dev loop5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 613.994336][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 614.005630][T10153] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.015514][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 614.025296][T10153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 614.033198][T10153] UDF-fs: Scanning with blocksize 512 failed [ 614.043050][T10153] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.054121][T10153] I/O error, dev loop5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.063779][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 614.074819][T10153] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.084560][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 614.094389][T10153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 614.102200][T10153] UDF-fs: Scanning with blocksize 1024 failed [ 614.111396][T10153] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.121897][T10153] I/O error, dev loop5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.131671][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 614.142331][T10153] I/O error, dev loop5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.152153][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 614.162094][T10153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 614.169921][T10153] UDF-fs: Scanning with blocksize 2048 failed [ 614.178440][T10153] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 614.189128][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 614.200077][T10153] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 614.209892][T10153] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 614.217682][T10153] UDF-fs: Scanning with blocksize 4096 failed [ 614.223874][T10153] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 616.154107][T10181] loop8: detected capacity change from 0 to 512 [ 616.278767][T10181] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1361: invalid indirect mapped block 256 (level 2) [ 617.241846][T10181] EXT4-fs (loop8): 2 truncates cleaned up [ 617.247949][T10181] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 618.062767][ T9671] EXT4-fs (loop8): unmounting filesystem. [ 621.561165][T10228] loop9: detected capacity change from 0 to 256 [ 621.672743][T10228] FAT-fs (loop9): Directory bread(block 64) failed [ 621.715602][T10228] FAT-fs (loop9): Directory bread(block 65) failed [ 621.722894][T10228] FAT-fs (loop9): Directory bread(block 66) failed [ 621.735972][T10228] FAT-fs (loop9): Directory bread(block 67) failed [ 621.747048][T10228] FAT-fs (loop9): Directory bread(block 68) failed [ 621.763883][T10228] FAT-fs (loop9): Directory bread(block 69) failed [ 621.809345][T10228] FAT-fs (loop9): Directory bread(block 70) failed [ 621.856713][T10228] FAT-fs (loop9): Directory bread(block 71) failed [ 621.863494][T10228] FAT-fs (loop9): Directory bread(block 72) failed [ 621.921480][T10228] FAT-fs (loop9): Directory bread(block 73) failed [ 623.037294][T10246] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 624.123157][T10228] syz.9.1380: attempt to access beyond end of device [ 624.123157][T10228] loop9: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 624.210080][T10228] syz.9.1380: attempt to access beyond end of device [ 624.210080][T10228] loop9: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 624.266538][ T26] audit: type=1800 audit(2000000056.110:466): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1380" name="file1" dev="loop9" ino=1048669 res=0 errno=0 [ 624.283189][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.294382][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.683538][T10260] loop9: detected capacity change from 0 to 512 [ 625.749416][T10260] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1384: invalid indirect mapped block 256 (level 2) [ 625.792160][T10260] EXT4-fs (loop9): 2 truncates cleaned up [ 625.912495][T10260] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 626.140558][T10268] loop8: detected capacity change from 0 to 1764 [ 626.459353][ T9255] EXT4-fs (loop9): unmounting filesystem. [ 627.076866][T10287] loop5: detected capacity change from 0 to 1024 [ 627.174123][T10288] loop9: detected capacity change from 0 to 512 [ 627.247579][T10288] EXT4-fs: Ignoring removed nobh option [ 628.331873][T10288] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 628.401012][T10300] loop5: detected capacity change from 0 to 128 [ 628.407699][T10288] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 628.454209][T10288] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1389: Corrupt directory, running e2fsck is recommended [ 628.468787][T10300] EXT4-fs: Ignoring removed nobh option [ 628.515974][T10300] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 628.626178][T10288] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 628.684092][T10304] device bridge1 entered promiscuous mode [ 628.707905][T10300] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 628.750966][T10288] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.1389: corrupted in-inode xattr [ 628.815845][T10288] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1389: couldn't read orphan inode 15 (err -117) [ 628.844583][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 628.884319][T10288] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 629.027453][T10284] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 629.046771][T10284] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 629.137623][T10284] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1389: Corrupt directory, running e2fsck is recommended [ 629.515305][ T9255] EXT4-fs (loop9): unmounting filesystem. [ 629.616799][ T4754] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 631.184323][T10329] loop8: detected capacity change from 0 to 512 [ 631.286903][ T4754] usb 6-1: Using ep0 maxpacket: 16 [ 631.294415][T10329] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1399: invalid indirect mapped block 256 (level 2) [ 631.325424][ T4754] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.406159][ T4754] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.463028][ T4754] usb 6-1: config 0 interface 0 has no altsetting 0 [ 631.498168][T10329] EXT4-fs (loop8): 2 truncates cleaned up [ 631.503986][T10329] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 631.523457][ T4754] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 631.581792][ T4754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.842583][ T4754] usb 6-1: config 0 descriptor?? [ 632.103796][ T9671] EXT4-fs (loop8): unmounting filesystem. [ 632.356378][ T4754] hid (null): bogus close delimiter [ 632.807019][ T4754] usb 6-1: USB disconnect, device number 21 [ 632.884135][T10354] loop8: detected capacity change from 0 to 1764 [ 637.648366][T10367] blk_print_req_error: 2 callbacks suppressed [ 637.648413][T10367] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.665674][T10367] I/O error, dev loop9, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.675470][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 637.686800][T10367] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.696445][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 637.706199][T10367] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 637.714539][T10367] UDF-fs: Scanning with blocksize 512 failed [ 637.724818][T10367] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.735472][T10367] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.745124][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 637.755977][T10367] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.765971][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 637.775713][T10367] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 637.783784][T10367] UDF-fs: Scanning with blocksize 1024 failed [ 637.793573][T10367] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.804078][T10367] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.813931][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 637.824602][T10367] I/O error, dev loop9, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.834372][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 637.844261][T10367] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 637.852072][T10367] UDF-fs: Scanning with blocksize 2048 failed [ 637.860637][T10367] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 637.870932][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 637.881567][T10367] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 637.891553][T10367] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 637.899426][T10367] UDF-fs: Scanning with blocksize 4096 failed [ 637.905606][T10367] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 639.078230][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1407'. [ 641.036695][ T4300] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 641.109932][T10392] loop5: detected capacity change from 0 to 1764 [ 641.248454][ T4300] usb 9-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 641.517365][ T4300] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 641.526313][ T4300] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 641.684122][ T4300] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 641.708458][ T4267] Bluetooth: hci1: command 0x0406 tx timeout [ 641.745988][ T4300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.771553][T10398] loop9: detected capacity change from 0 to 256 [ 641.828996][T10398] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 641.874340][ T4300] hub 9-1:1.0: bad descriptor, ignoring hub [ 641.913143][ T4300] hub: probe of 9-1:1.0 failed with error -5 [ 641.954177][ T4300] cdc_wdm 9-1:1.0: skipping garbage [ 641.996325][ T4300] cdc_wdm 9-1:1.0: skipping garbage [ 642.023792][ T4300] cdc_wdm: probe of 9-1:1.0 failed with error -22 [ 642.227960][T10385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.271991][T10385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.440608][ T27] usb 9-1: USB disconnect, device number 2 [ 645.690420][T10464] loop8: detected capacity change from 0 to 1024 [ 646.145061][ T9291] blk_print_req_error: 2 callbacks suppressed [ 646.145076][ T9291] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 646.172836][T10464] loop8: detected capacity change from 0 to 512 [ 646.222457][T10471] loop5: detected capacity change from 0 to 512 [ 646.254327][T10464] EXT4-fs: Ignoring removed mblk_io_submit option [ 646.269539][T10465] loop9: detected capacity change from 0 to 2048 [ 646.330293][T10471] EXT4-fs (loop5): orphan cleanup on readonly fs [ 646.341675][T10465] NILFS (loop9): unrecognized mount option " " [ 646.423060][T10464] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.1426: invalid block [ 646.467984][T10471] EXT4-fs (loop5): 1 orphan inode deleted [ 646.520457][ T5623] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 646.533720][T10464] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1426: invalid indirect mapped block 10 (level 1) [ 646.590979][T10464] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1426: invalid indirect mapped block 8 (level 1) [ 646.597319][ T5623] EXT4-fs error (device loop5): ext4_release_dquot:6838: comm kworker/u4:25: Failed to release dquot type 1 [ 646.708614][T10471] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 646.718290][T10464] EXT4-fs (loop8): 1 truncate cleaned up [ 646.724057][T10464] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 646.801294][T10483] loop9: detected capacity change from 0 to 256 [ 646.881455][T10483] exfat: Deprecated parameter 'utf8' [ 646.901385][T10483] exfat: Deprecated parameter 'utf8' [ 646.933385][T10483] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 647.571009][T10492] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.582319][T10492] I/O error, dev loop9, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.591972][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 647.603504][T10492] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.613192][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 647.623115][T10492] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 647.630918][T10492] UDF-fs: Scanning with blocksize 512 failed [ 647.641142][T10492] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.651992][T10492] I/O error, dev loop9, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.661605][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 647.672441][T10492] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.682135][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 647.691945][T10492] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 647.699746][T10492] UDF-fs: Scanning with blocksize 1024 failed [ 647.708253][T10492] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.718659][T10492] I/O error, dev loop9, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.728348][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 647.739056][T10492] I/O error, dev loop9, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 647.748751][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 647.758933][T10492] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 647.766822][T10492] UDF-fs: Scanning with blocksize 2048 failed [ 647.776382][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 647.787089][T10492] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 647.796900][T10492] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 647.804661][T10492] UDF-fs: Scanning with blocksize 4096 failed [ 647.810893][T10492] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1) [ 649.111098][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 650.759289][ T9671] EXT4-fs (loop8): unmounting filesystem. [ 652.026398][T10525] capability: warning: `syz.3.1439' uses deprecated v2 capabilities in a way that may be insecure [ 654.147925][T10541] blk_print_req_error: 3 callbacks suppressed [ 654.147972][T10541] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.165402][T10541] I/O error, dev loop8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.175081][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 654.186246][T10541] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.195884][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 654.205619][T10541] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 654.213423][T10541] UDF-fs: Scanning with blocksize 512 failed [ 654.223888][T10541] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.234863][T10541] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.244656][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 654.255431][T10541] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.265141][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 654.275055][T10541] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 654.283037][T10541] UDF-fs: Scanning with blocksize 1024 failed [ 654.292189][T10541] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.302592][T10541] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.312298][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 654.323158][T10541] I/O error, dev loop8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.332855][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 654.342657][T10541] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 654.350554][T10541] UDF-fs: Scanning with blocksize 2048 failed [ 654.359342][T10541] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 654.369649][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 654.380381][T10541] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 654.390372][T10541] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 654.398152][T10541] UDF-fs: Scanning with blocksize 4096 failed [ 654.404455][T10541] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 655.410749][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1442'. [ 655.867157][ T6803] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 656.058707][ T6803] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.086873][ T6803] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 656.132135][ T6803] usb 10-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 656.172670][ T6803] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.203786][ T6803] usb 10-1: config 0 descriptor?? [ 656.657801][ T6803] cypress 0003:04B4:DE61.0005: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.9-1/input0 [ 656.857744][ T6803] usb 10-1: USB disconnect, device number 3 [ 657.661806][T10591] loop5: detected capacity change from 0 to 512 [ 657.669408][T10591] EXT4-fs: Ignoring removed mblk_io_submit option [ 657.675943][T10591] EXT4-fs: Ignoring removed mblk_io_submit option [ 657.765575][T10591] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 657.847646][T10591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 657.855874][T10591] System zones: 1-12 [ 657.926896][T10591] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.1445: corrupted in-inode xattr [ 657.940732][T10591] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1445: couldn't read orphan inode 15 (err -117) [ 657.957800][T10591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 658.439364][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 658.493591][T10597] loop9: detected capacity change from 0 to 1024 [ 658.884808][T10606] hfsplus: xattr searching failed [ 659.762819][ T26] audit: type=1804 audit(2000000091.600:467): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1454" name="/newroot/39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop9" ino=3 res=1 errno=0 [ 659.938101][ T5778] hfsplus: b-tree write err: -5, ino 3 [ 663.009748][ T6803] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 663.179383][T10649] loop9: detected capacity change from 0 to 128 [ 663.198765][ T6803] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 663.226814][ T6803] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 663.288161][T10649] loop9: detected capacity change from 0 to 16 [ 663.301803][ T6803] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 663.367981][T10649] erofs: (device loop9): mounted with root inode @ nid 36. [ 663.427485][ T6803] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 663.462722][T10649] syz.9.1475: attempt to access beyond end of device [ 663.462722][T10649] loop9: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 663.515750][ T6803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.569217][ T6803] hub 6-1:1.0: bad descriptor, ignoring hub [ 663.637305][ T6803] hub: probe of 6-1:1.0 failed with error -5 [ 663.660840][ T6803] cdc_wdm 6-1:1.0: skipping garbage [ 663.696716][ T6803] cdc_wdm 6-1:1.0: skipping garbage [ 663.716152][ T6803] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 663.993723][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.060043][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.206826][ T9235] usb 6-1: USB disconnect, device number 22 [ 664.512256][ T6803] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 664.930873][T10677] netlink: 'syz.7.1470': attribute type 11 has an invalid length. [ 665.017241][ T6803] usb 9-1: Using ep0 maxpacket: 8 [ 665.039159][ T6803] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 665.199362][ T6803] usb 9-1: config 179 has no interface number 0 [ 665.208814][ T6803] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 665.224660][T10685] netlink: 276 bytes leftover after parsing attributes in process `syz.7.1471'. [ 665.235309][ T6803] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 665.253941][ T6803] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.272253][ T6803] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 665.483674][ T6803] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 665.493757][ T6803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.520423][T10666] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 666.365983][ T7] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 666.455543][ T6803] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input17 [ 666.566968][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 666.574008][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.626166][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 666.654447][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 666.678952][ T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 666.692542][ T7] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.727584][ T7] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 666.747697][ T6803] usb 9-1: USB disconnect, device number 3 [ 666.747763][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 666.747812][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 666.777918][ T6803] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 666.792559][ T7] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 666.814212][ T7] usb 6-1: Manufacturer: syz [ 666.851690][ T7] usb 6-1: config 0 descriptor?? [ 667.197664][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 667.201853][ T7] rc_core: IR keymap rc-hauppauge not found [ 667.228535][ T7] Registered IR keymap rc-empty [ 667.234280][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 667.286981][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 667.372598][ T7] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 667.483076][ T7] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18 [ 667.729286][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 667.766758][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 667.806730][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 667.846947][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 668.605693][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 668.672674][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 668.727377][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 668.766675][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 668.807424][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 668.835853][T10733] loop8: detected capacity change from 0 to 512 [ 668.846803][ T7] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 668.887935][ T7] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 669.086432][ T7] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.119097][ T7] usb 6-1: USB disconnect, device number 23 [ 669.132085][T10733] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.1484: bad orphan inode 11862016 [ 669.144664][T10733] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 669.623110][T10733] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.861124][T10752] 9pnet_fd: Insufficient options for proto=fd [ 670.967739][ T9671] EXT4-fs (loop8): unmounting filesystem. [ 671.025658][T10762] loop5: detected capacity change from 0 to 512 [ 671.163306][T10762] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1492: bad orphan inode 17 [ 671.220257][T10762] ext4_test_bit(bit=16, block=4) = 1 [ 671.225611][T10762] is_bad_inode(inode)=0 [ 671.266991][T10762] NEXT_ORPHAN(inode)=0 [ 671.271612][T10762] max_ino=32 [ 671.296622][T10762] i_nlink=1 [ 671.306508][T10762] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 671.401912][T10770] loop8: detected capacity change from 0 to 512 [ 671.409581][T10770] ext4: Unknown parameter 'dont_hash' [ 671.476869][T10704] blk_print_req_error: 2 callbacks suppressed [ 671.476889][T10704] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 671.509063][T10770] loop8: detected capacity change from 0 to 512 [ 671.541980][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 671.653759][T10770] EXT4-fs (loop8): 1 orphan inode deleted [ 671.667807][ T5766] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 671.687139][ T5766] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:39: Failed to release dquot type 1 [ 671.695161][T10770] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 671.738413][T10770] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.185588][T10794] loop5: detected capacity change from 0 to 1764 [ 675.604281][T10819] loop5: detected capacity change from 0 to 512 [ 675.665864][T10820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.775634][T10819] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1507: invalid indirect mapped block 256 (level 2) [ 675.882338][T10819] EXT4-fs (loop5): 2 truncates cleaned up [ 675.894000][T10819] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 676.525599][ T4998] EXT4-fs (loop5): unmounting filesystem. [ 676.651617][ T9671] EXT4-fs (loop8): unmounting filesystem. [ 677.032571][T10850] loop8: detected capacity change from 0 to 1764 [ 679.549391][T10896] loop8: detected capacity change from 0 to 1024 [ 679.585819][T10896] EXT4-fs: Ignoring removed nobh option [ 679.594692][T10896] EXT4-fs: Ignoring removed bh option [ 679.605819][T10896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 679.636145][T10896] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 679.696974][T10896] EXT4-fs warning (device loop8): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 680.016332][ T9671] EXT4-fs (loop8): unmounting filesystem. [ 680.276943][ T4300] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 680.496855][ T4300] usb 6-1: Using ep0 maxpacket: 16 [ 680.508825][ T4300] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.592949][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 680.726638][ T4300] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 680.746936][ T4300] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 680.780817][ T4300] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 680.854359][ T4300] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 680.870796][T10919] loop8: detected capacity change from 0 to 1764 [ 680.883657][ T4300] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 680.961090][ T4300] usb 6-1: Manufacturer: syz [ 681.012796][ T4300] usb 6-1: config 0 descriptor?? [ 787.016531][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 787.023586][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9671/1:b..l P10644/1:b..l [ 787.033663][ C0] (detected by 0, t=10502 jiffies, g=56025, q=110 ncpus=2) [ 787.041343][ C0] task:udevd state:R running task stack:23584 pid:10644 ppid:3624 flags:0x00004002 [ 787.054629][ C0] Call Trace: [ 787.057944][ C0] [ 787.060996][ C0] __schedule+0x10e9/0x40d0 [ 787.065723][ C0] ? arch_stack_walk+0xf2/0x140 [ 787.070652][ C0] ? mark_lock+0x94/0x320 [ 787.075132][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 787.081053][ C0] ? lock_chain_count+0x20/0x20 [ 787.086047][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 787.091371][ C0] preempt_schedule_irq+0xb1/0x150 [ 787.096515][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 787.102450][ C0] ? rcu_is_watching+0x11/0xa0 [ 787.107254][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 787.113097][ C0] irqentry_exit+0x63/0x70 [ 787.117641][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.123744][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x17a/0x1c0 [ 787.130726][ C0] Code: ff 4d 85 ed 75 16 e8 65 ac 9c ff eb 15 e8 5e ac 9c ff e8 c9 f9 2a 08 4d 85 ed 74 ea e8 4f ac 9c ff fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 66 43 c7 44 27 09 00 00 43 c6 44 27 0b 00 [ 787.150801][ C0] RSP: 0018:ffffc9000c5bf7a0 EFLAGS: 00000293 [ 787.156903][ C0] RAX: ffffffff81e41751 RBX: 0000000000000000 RCX: ffff888029cc8000 [ 787.164984][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 787.172977][ C0] RBP: ffffc9000c5bf850 R08: dffffc0000000000 R09: fffffbfff1bfd03e [ 787.180986][ C0] R10: fffffbfff1bfd03e R11: 1ffffffff1bfd03d R12: dffffc0000000000 [ 787.188997][ C0] R13: 0000000000000200 R14: ffffffff81e41d0e R15: 1ffff920018b7ef4 [ 787.197089][ C0] ? set_root+0x15e/0x3a0 [ 787.201545][ C0] ? seqcount_lockdep_reader_access+0x171/0x1c0 [ 787.207833][ C0] ? terminate_walk+0x430/0x430 [ 787.212727][ C0] ? lockdep_init_map_type+0x9d/0x880 [ 787.218226][ C0] ? memset+0x1e/0x40 [ 787.222337][ C0] set_root+0x15e/0x3a0 [ 787.226537][ C0] nd_jump_root+0x2a7/0x410 [ 787.231079][ C0] path_init+0x3e5/0x1200 [ 787.235450][ C0] ? percpu_counter_add_batch+0x13b/0x160 [ 787.241208][ C0] path_openat+0x187/0x2e70 [ 787.245840][ C0] ? verify_lock_unused+0x140/0x140 [ 787.251071][ C0] ? kasan_set_track+0x60/0x70 [ 787.255875][ C0] ? do_sys_openat2+0xcf/0x490 [ 787.260676][ C0] ? __x64_sys_openat+0x135/0x160 [ 787.265729][ C0] ? do_syscall_64+0x4c/0xa0 [ 787.270351][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.276562][ C0] ? verify_lock_unused+0x140/0x140 [ 787.281797][ C0] ? do_filp_open+0x3c0/0x3c0 [ 787.286519][ C0] do_filp_open+0x1c1/0x3c0 [ 787.291054][ C0] ? vfs_tmpfile+0x480/0x480 [ 787.295691][ C0] ? _raw_spin_unlock+0x24/0x40 [ 787.300576][ C0] ? alloc_fd+0x58f/0x630 [ 787.304951][ C0] do_sys_openat2+0x142/0x490 [ 787.309678][ C0] ? __ia32_sys_newlstat+0x180/0x180 [ 787.314998][ C0] ? do_symlinkat+0x3a4/0x3f0 [ 787.319707][ C0] ? do_sys_open+0xe0/0xe0 [ 787.324158][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 787.330265][ C0] ? lock_chain_count+0x20/0x20 [ 787.335157][ C0] __x64_sys_openat+0x135/0x160 [ 787.340048][ C0] do_syscall_64+0x4c/0xa0 [ 787.344502][ C0] ? clear_bhb_loop+0x45/0xa0 [ 787.349207][ C0] ? clear_bhb_loop+0x45/0xa0 [ 787.353914][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.359850][ C0] RIP: 0033:0x7f32bc3169a4 [ 787.364304][ C0] RSP: 002b:00007ffd1d9c31d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 787.372751][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f32bc3169a4 [ 787.380746][ C0] RDX: 0000000000080241 RSI: 00007ffd1d9c3718 RDI: 00000000ffffff9c [ 787.388740][ C0] RBP: 00007ffd1d9c3718 R08: 0000000000000004 R09: 0000000000000001 [ 787.396913][ C0] R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000080241 [ 787.404994][ C0] R13: 000056421184672e R14: 0000000000000001 R15: 000056421da8c910 [ 787.413007][ C0] [ 787.416049][ C0] task:syz-executor state:R running task stack:21792 pid:9671 ppid:9647 flags:0x00004000 [ 787.426939][ C0] Call Trace: [ 787.430233][ C0] [ 787.433188][ C0] __schedule+0x10e9/0x40d0 [ 787.437746][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 787.443688][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 787.449878][ C0] preempt_schedule_notrace+0xca/0x110 [ 787.455584][ C0] ? preempt_schedule_common+0xd0/0xd0 [ 787.461067][ C0] ? stack_trace_save+0x98/0xe0 [ 787.465950][ C0] preempt_schedule_notrace_thunk+0x16/0x18 [ 787.471886][ C0] kvm_sched_clock_read+0x2a/0x40 [ 787.476945][ C0] sched_clock_cpu+0x6e/0x250 [ 787.481648][ C0] ? __reset_page_owner+0x1a0/0x1a0 [ 787.486874][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 787.492537][ C0] ? __folio_alloc+0xe/0x30 [ 787.497076][ C0] ? wp_page_copy+0x26c/0x1640 [ 787.501867][ C0] ? handle_mm_fault+0x1ca6/0x3e70 [ 787.507014][ C0] __set_page_owner_handle+0x1a9/0x3c0 [ 787.512509][ C0] __set_page_owner+0x41/0x60 [ 787.517396][ C0] post_alloc_hook+0x173/0x1a0 [ 787.522289][ C0] get_page_from_freelist+0x1a26/0x1ac0 [ 787.527900][ C0] ? __next_zones_zonelist+0x99/0x120 [ 787.533312][ C0] __alloc_pages+0x1df/0x4e0 [ 787.537949][ C0] ? zone_statistics+0x170/0x170 [ 787.543027][ C0] ? wp_page_copy+0xc15/0x1640 [ 787.547905][ C0] ? verify_lock_unused+0x140/0x140 [ 787.553234][ C0] __folio_alloc+0xe/0x30 [ 787.557597][ C0] vma_alloc_folio+0x4a3/0x900 [ 787.562409][ C0] wp_page_copy+0x26c/0x1640 [ 787.567030][ C0] ? do_wp_page+0xaf4/0x1680 [ 787.571662][ C0] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 787.577344][ C0] handle_mm_fault+0x1ca6/0x3e70 [ 787.582318][ C0] ? mt_find+0x145/0x810 [ 787.586610][ C0] ? numa_migrate_prep+0x250/0x250 [ 787.591766][ C0] ? lock_chain_count+0x20/0x20 [ 787.596755][ C0] ? lock_mm_and_find_vma+0xae/0x2f0 [ 787.602155][ C0] do_user_addr_fault+0x51f/0xb10 [ 787.607316][ C0] exc_page_fault+0x60/0x100 [ 787.611949][ C0] asm_exc_page_fault+0x22/0x30 [ 787.616927][ C0] RIP: 0033:0x7f629b34d528 [ 787.621582][ C0] RSP: 002b:00007ffde9b136d0 EFLAGS: 00010246 [ 787.627687][ C0] RAX: 0000000000000000 RBX: 00007f629b583ca0 RCX: 00007f629b3851d3 [ 787.635708][ C0] RDX: 000000000000005e RSI: 0000000000000000 RDI: 0000000001200011 [ 787.643703][ C0] RBP: 00007f629b583ca0 R08: 0000000000000000 R09: 0000000000000001 [ 787.651787][ C0] R10: 000055556c46a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 787.659955][ C0] R13: ffffffffffffffa8 R14: 0000000000000006 R15: 00007ffde9b13880 [ 787.667984][ C0] [ 787.671031][ C0] rcu: rcu_preempt kthread starved for 10563 jiffies! g56025 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 787.682343][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 787.692522][ C0] rcu: RCU grace-period kthread stack dump: [ 787.698659][ C0] task:rcu_preempt state:R running task stack:27464 pid:16 ppid:2 flags:0x00004000 [ 787.709500][ C0] Call Trace: [ 787.712802][ C0] [ 787.715855][ C0] __schedule+0x10e9/0x40d0 [ 787.720421][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 787.726534][ C0] schedule+0xb9/0x180 [ 787.730640][ C0] schedule_timeout+0x15c/0x280 [ 787.735524][ C0] ? console_conditional_schedule+0x40/0x40 [ 787.741449][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 787.747551][ C0] ? update_process_times+0x1b0/0x1b0 [ 787.752968][ C0] ? prepare_to_swait_event+0x335/0x350 [ 787.758811][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 787.763699][ C0] ? rcu_gp_kthread+0x380/0x380 [ 787.768582][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 787.774600][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 787.779427][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 787.784304][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 787.789636][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 787.795064][ C0] rcu_gp_kthread+0x95/0x380 [ 787.799878][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 787.805156][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 787.811187][ C0] ? __kthread_parkme+0x162/0x1c0 [ 787.815404][ T4301] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { [ 787.816430][ C0] kthread+0x29d/0x330 [ 787.816468][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 787.816486][ C0] ? kthread_blkcg+0xd0/0xd0 [ 787.839410][ C0] ret_from_fork+0x1f/0x30 [ 787.840212][ T3624] udevd[3624]: worker [10704] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 787.843867][ C0] [ 787.843878][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 787.843907][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.137-syzkaller #0 [ 787.854203][ T4301] P10644 [ 787.856982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 787.857002][ C0] RIP: 0010:default_idle+0xb/0x10 [ 787.857039][ C0] Code: 48 89 df e8 67 3a b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d b7 a2 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 787.857054][ C0] RSP: 0018:ffffffff8c607d88 EFLAGS: 000002c6 [ 787.857071][ C0] RAX: 1e8f88c179290f00 RBX: ffffffff8a1900d7 RCX: 1e8f88c179290f00 [ 787.857085][ C0] RDX: 0000000000000001 RSI: ffffffff8a6bfe00 RDI: ffffffff8abf0da0 [ 787.857097][ C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6aee [ 787.857109][ C0] R10: ffffed10171c6aee R11: 1ffff110171c6aed R12: 0000000000000000 [ 787.857121][ C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfd07e [ 787.857135][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 787.857151][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.857164][ C0] CR2: 0000555557bed5c8 CR3: 000000005d72c000 CR4: 00000000003506f0 [ 787.857181][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 787.857192][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 787.857204][ C0] Call Trace: [ 787.857213][ C0] [ 787.857219][ C0] default_idle_call+0x84/0xc0 [ 787.864499][ T4301] P9671 [ 787.872313][ C0] do_idle+0x1fc/0x570 [ 788.014578][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 788.019798][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 788.025963][ C0] ? schedule_idle+0x57/0x90 [ 788.030588][ C0] cpu_startup_entry+0x3f/0x60 [ 788.035364][ C0] rest_init+0x2dc/0x300 [ 788.039613][ C0] ? time_init+0x33/0x33 [ 788.043873][ C0] arch_call_rest_init+0xa/0xa [ 788.048652][ C0] start_kernel+0x490/0x539 [ 788.053181][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 788.059091][ C0] [ 788.104702][ T3624] udevd[3624]: worker [10644] /devices/virtual/block/loop8 is taking a long time [ 788.112719][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.120504][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=1072 sent=0 n=-1 (errno 32: Broken pipe) [ 788.149564][ T4301] } 10615 jiffies s: 17341 root: 0x0/. [ 788.154438][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.162174][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.246778][ T4301] rcu: blocking rcu_node structures (internal RCU debug): [ 788.546583][ T4300] rc_core: IR keymap rc-hauppauge not found [ 788.552632][ T4300] Registered IR keymap rc-empty [ 788.557929][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.586638][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.617259][ T4300] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 788.631261][ T4300] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 788.689937][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.726639][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.756646][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.786644][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.816652][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.846636][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.876646][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.906665][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.936635][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 788.976758][ T4300] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 789.007852][ T4300] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 789.015900][ T4300] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 790.406959][ T6803] usb 6-1: USB disconnect, device number 24 [ 790.513284][ T4311] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.818397][ T4311] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.925889][ T4311] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.995450][ T4311] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.139016][ T4311] device hsr_slave_0 left promiscuous mode [ 792.145739][ T4311] device hsr_slave_1 left promiscuous mode [ 792.154508][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.162333][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.172054][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.179585][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.187331][ T4311] device bridge_slave_1 left promiscuous mode [ 792.194016][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.203504][ T4311] device bridge_slave_0 left promiscuous mode [ 792.210042][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.242169][ T4311] device veth1_macvtap left promiscuous mode [ 792.248401][ T4311] device veth0_macvtap left promiscuous mode [ 792.254650][ T4311] device veth1_vlan left promiscuous mode [ 792.260534][ T4311] device veth0_vlan left promiscuous mode [ 792.934579][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 792.993274][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 793.050933][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.111741][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.802387][ T4311] bond0 (unregistering): Released all slaves [ 794.525677][ T4311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.627595][ T4311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.710807][ T4311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.798605][ T4311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.020540][ T4311] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.096191][ T4311] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.181355][ T4311] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.261615][ T4311] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.521660][ T4311] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.613234][ T4311] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.687913][ T4311] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.748654][ T4311] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.002534][ T4311] tipc: Disabling bearer [ 796.008513][ T4311] tipc: Disabling bearer [ 796.014314][ T4311] tipc: Left network mode [ 796.196777][ T4311] bond1: (slave ip6gretap1): Releasing backup interface [ 796.203789][ T4311] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 7a:1c:fd:a0:4f:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts