last executing test programs: 29m34.096628023s ago: executing program 32 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") r6 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) sendfile(r5, r6, 0x0, 0x8000000000f54) 29m2.086034868s ago: executing program 33 (id=229): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) sendmsg$nl_route(r0, 0x0, 0x40010) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) futimesat(r7, 0x0, &(0x7f0000000280)={{0x0, 0xea60}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101480) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20179e01}) 27m36.946218948s ago: executing program 34 (id=297): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) sendmsg$nl_route(r0, 0x0, 0x40010) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) futimesat(r7, 0x0, &(0x7f0000000280)={{0x0, 0xea60}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101480) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20179e01}) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)) 19m32.84219882s ago: executing program 35 (id=1161): r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x345, 0x0, 0xa}]}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000003c0), 0x2, 0x24e, &(0x7f0000002440)="$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") creat(0x0, 0x0) mknod$loop(0x0, 0x80, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r3, 0x2, 0x0) getdents(r3, 0x0, 0x58) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 16m52.282146348s ago: executing program 36 (id=1465): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000005026144174,uid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',codepage=cp1251,\x00'], 0x1, 0x152e, &(0x7f0000004a00)="$eJzs3AucTtX6OPDnWWvtMSTeJrkMa61n8yaXZZIklyS5JEmSJLklJE1yJCExhCQNSUguQxJDSC4T0rjf75eEJkmTJCEhlfX/TMzf6dS5/M7pHOdz5vl+Pu/Het61n7WfvZ95vXtvl6+7D6/TrG7NJkQE/xK88EsSAMQCwGAAyA8AAQBUjKsYlzWfW2LSv7YT9se6P/VyV8AuJ+5/zsb9z9m4/zkb9z9n4/7nbNz/nI37n7Nx/xnLybbOKHIVv3Lui5//52T8/f8/JLPc+M/Xl7umB0DMP5rC/c/ZuP//s4J/ZCPuf87G/c+pYi93Aey/AH/+c4Jcf3WG+5+zcf8Zy8ku9/Pny/2CyH/ZOTiW+0Jj/v97wb/3+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsf+As/4SBQDZ48tdF2OMMcYYY4wxxv44PtflroAxxhhjjDHGGGP/fggCJCgIIAZyQSzkhjwgAOBKyAf5IQJXQRxcDQXgGigIhaAwFIF4KArFQIMBCwQhFIcSEIVroSRcB6WgNJSBsuCgHCTA9VAeboAKcCNUhJugEtwMlaEKVIVqcAtUh1uhBtwGNeF2qAW1oQ7UhTugHtwJ9eEuaAB3Q0O4BxrBvdAY7oMmcD80hQegGTwIzeEhaAEtoRW0hjb/VP6z0Buegz7QF5KgH/SH52EADIRB8AIMhhdhCLwEQ+FlSIZhMBxegRHwKoyE12AUjIYx8DqMhTdgHIyHCTARUmASTIY3YQq8BVPhbZgG0yEVZsBMeAdmwWyYA+/CXHgP5sF8WAALIQ3eh0WwGJbAB7AUPoR0WAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEXbAbPoI98DHshX2wHz6BDPj0b+fnzu5xdv6Zv8jvgYCAAgUqVBiDMRiLsZgH82BezIv5MB9GMIJxGIcFsAAWxIJYGAtjPMZjMSyGBg0SEhbH4hjFKJbEklgKS2EZLIMOHSZgApbHG7ACVsCKWBErYSWsjFWwClbDalgdq2MNrIE1sSbWwlpYB+vgHXgH9sP6WB8bYANsiA2zH09hE2yCTbEpNsNm2BybYwtsga2wFbbBNtgW22I7bIcdsAN2xI7YCTthIiZiZ+yMXbALdsWu2A27YXfsjj2wJ/bMfDYX4HP4HPbFWqIf9sf+OACTcw3CF/AFfBGH4Ev4Er6MyTgMh+Mr+Aq+iiPxNI7C0TgGx2B18QaOw/FIYiKmYApOxsk4BadgVqFv43RMxRk4E2fiLJyNs/FdnIvv4Xs4H+fjQkzDNFyEi3EJLsGleAbTcRkuxxW4ElfhSlyDa3ENrscNuB434SbcgltwG27DHbgDd+Eu/AgVAH6M+3AfJmMGZuABPIAH8SAewkOYiZl4GA/jETyCR/EoHsNjeBxP4Ek8gafwFJ7GM+jlhRP6Ez4d/2XTj0qvSwaRRQklYkSMiBWxIo/II/KKvCKfyCciIiLiRJwoIAqIgqKgKCwKi3gRL4qJYsIII0iEMQAgoiIqSoqSopQoJcqIMsIJJxJEgigvyosKooKoKG4SlcTNorKoItq7aqKaqC46uBriNlFT1BS1RG1RR9QVdUU9UU/UF/VFA9FANBQNRSNxr2gs+uEgvF9kdaaZGIbNxXBsIVqKi4cCbcVIbCfaiw7iUTEaR2En0dYliidEZzEOu4g/ifH4lOgmJmJ38YzoIXqKXuJZ0Vu0c31EXzEV+4n+YjoOEAPFIPGCmIW1xbs4N3cd8bJIFsPEcPGKWIivipHiNTFKjBZjxOtirHhDjBPjxQQxUaSISWKyeFNMEW+JqeJtMU1MF6lihpgp3hGzxGwxR7wr5or3xDwxXywQC0WaeF8sEovFEvGBWCo+FOlimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaInWKX2C0+EnvEx2Kv2Cf2i09EhvhUHBCfiYPic3FIfCEyxZfisPhKHBFfi6PiG3FMfCuOixPipPhOnBLfi9PijDgrfhDnxI/iJ/GzOC+8AIlSSCmVDGSMzCVjZW6ZR14h88rg4tm9SsbJq2UBeY0sKAvJwrKIjJdFZTGppZFWkgxlcVlCRuW1sqS8TpaSpWUZWVY6WU4myOtleXmDrCBvlBXlTbKSvFlWllVkVVlN3iKry1slRC7so5asLevIuvIOmQR3yvryLtlA3i0byntkI3mvbCzvk03k/bKpfEA2kw/K5vIh2UK2lK1ka9lGPizbykdkO9ledpCPyo7yMdlJPi4T5ROys8z+aX9KdpNPy+7yGdlD9pS95M/yvPSyj+wroR/I/vJ5OUAOlINiAUC+KIfIl+RQ+bJMlsPkcPmKHCFflSPla3KUHC3HyNflWPmGHCfHywlyokyRk+Rk+aacIt+SU+XbcpqcLlPlDDlIDv5lpTlS/t38N38nf+gve98it8ptcrvcIXfKXXK3/EjukXvkXrlX7pf7ZYbMkAfkAXlQHpSH5CGZKTPlYXlYHpFH5FF5VB6Tx+RxeUL+IL+Tp+T38rQ8I8/IH+Q5eU7+dPEcgEIllFRKBSpG5VKxKrfKo65QedWVKp/KryLqKhWnrlYF1DWqoCqkCqsiKl4VVcWUVkZZRSpUxVUJFVXX4sUfGFVGlVVOlVMJ6vr/S74qqa5TpVTpX+Vn15f0V+pro9qotqqtaqfaqQ6qg+qoOqpOqpNKVImqs+qsuqguqqvqqrqpbqq76q56qB6ql+qleqveqo/qo5JUkuqvnlcD1EA1SL2gBqsX1RA1RA1VQ1WySlbD1XA1Qo1QI9VINUqNUmPUGDVWjVXj1Dg1QU1QKSpFTVaT1RQ1RU1VU9U0NU2lqlQ1U81Us9QsNUfNUXPVXDVPzVML1AKVptLUIrVILTnnvVdLVbpappapFWqFWqVWqTVqjVqn1qkNaoPapDapdLVVbVXb1Xa1U+1Uu9VutUftUXvVXrVf7VcZKkMdUAfUQXVQHVKHVKbKVIfVYXVEHVFH1VF1TB1Tx9VxdVKdVKfUKXVanVZn1Vl1Tp1TP6mf1Hl1PuuyLxCBCFSggpggJogNYoM8QZ4gb5A3yBfkCyJBJIgL4oICwTVBwaBQUDgoEsQHRYNigQ5MYANxsenR4NqgZHBdUCooHZQJygYuKBckBNcH5YMbggrBjUHF4KagUnBzUDmoElQNqgW3BNWDW4MawW1BzeD2oFZQO6gT1A3uCOoFdwb1g7uCBsHdQcPgnqBRcG/QOLgvaBLcHzQNHgiaBQ8GzYOHghZBy6BV0Dpo84eu7/3pQo+4PrqvTtL9dH/9vB6gB+pB+gU9WL+oh+iX9FD9sk7Ww/Rw/YoeoV/VI/VrepQercfo1/VY/YYep8frCXqiTtGT9GT9pp6i39JT9dt6mp6uU/UMPVO/o2fp2XqOflfP1e/peXq+XqAX6jT9vl6kF+sl+gO9VH+o0/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79A79S69W3+k9+iP9V69T+/Xn+gM/ak+oD/TB/Xn+pD+QmfqL/Vh/ZU+or/WR/U3+pj+Vh/XJ/RJ/Z0+pb/Xp/UZfVb/oM/p2Ivd9FkX91lf70YZZWJMjIk1sSaPyWPymrwmn8lnIiZi4kycKWAKmIKmoClsCpt4E2+KmWImCxkyxU1xEzVRU9KUNKVMKVPGlDHOOJNgEkx5U95UMBVMRVPRVDKVTGVT2VQ1Vc0t5hZzq7nV3GZuM7eb201tU9vUNXVNPVPP1Df1TQPTwDQ0DU0j08g0No1NE9PENDVNTTPTzDQ3zU0L08K0Mq1MG9PGtDVtTTvTznQwHUxH09F0Mp1Mokk0nU1n08V0MV1NV9PNdDPdTXfTw/QwvUwv09v0Nn1MH5Nkkkx/098MMAPMIDPIDDaDzRAzxAw1Q02ySTbDzXAzwowwI81IM8qMNmOyLlTNG2acGW8mmIkmxaSYyWaymWKmmKlmqplmpplUk2pmmplmlpll5pg5Zq6Za+aZeWaBWWDSTJpZZBaZJWaJWWqWmnSTbpab5WalWWlWm9VmrVlr1pv1ZiNsNJvNZrPVbDXbzXaz0+w0u81us8fsMXvNXrPf7DcZJsMcMAfMQXPQHDKHTKbJNIfNYXPEHDFHzVFzzBwzx81xc9KcNKfMKXPanDZnzVlzzhS6+H3pTazNbfPYK2xee6XNZ/Pbv4wL2yI23ha1xay2BW2hX8XGWlvKlrZlbFnrbDmbYK//TVzZVrFVbTV7i61ub7U1fhPXs3fa+vYu28DebevaO34VN7T32Eb2QdsYEcC2tE1ta9vMPmib24dsC9vStrKtbUf7mO1kH7eJ9gnb2T75m3iRXWzX2nV2vd1g99p99qz9wR6xX9tz9kfbx/a1g+2Ldoh9yQ61L9tkO+w38Rj7uh1r37Dj7Hg7wU78TTzNTrepdoadad+xs+zs38Rp9n071y6x8+x8u8Au/CXOqmmJ/cAutR/adBvAcrvCrrSr7Gq7JrtWn99uspvtFrvHfmy32x12p91ld2dfCNt9dr/9xGbYT+1h+5U9aD+3h+xRm2m//CXOOr6j9ht7zH5rj9sT9qT9zp6y36vs7Kxj/87+bM9bb4GQgCQpCiiGclEs5aY8dAXlpSspH+WnCF1FcXQ1FaBrqCAVosJUhOKpKBUjTYYsEYVUnEpQlK6l7PLKUFlyVI4S6HoqTzdQBbqRKtJNVIlupspUhapSNbqFqtOtVINuo5p0O9Wi2lSH6tIdVI/upPp0FzWgu6kh3UON6F5qTPdRE7qfmtID1IwepOb0ELWgltSKWlMbepja0iPUjtpTB3qUOtJj1Ikep0R6gjrTk9SF/kRd6SnqRk9Td3qGelBP6kXPUm96jvpQX0qiftSfnqcBNJAG0Qs0mF6kIfQSDaWXKZmG0XB6hUbQqzSSXqNRNJrG0Os0lt6gcTSeJtBESqFJNJnepCn0Fk2lt2kaTadUmkEz6R2aRbNpDr1Lc+k9mkfzaQEtpDR6nxbRYlpCH9BS+pDSaRktpxW0klbRalpDa2kdracNtJE20WbaQltpG22nHbSTdtFu+oj20Me0l/bRfvqEMuhTOkCf0UH6nA7RF5RJX9Jh+oqO0Nd0lL7xfelbOk4n6CR9R6foezpNGVde6NCP9BP9TOfJE4QYilCGKgzCmDBXGBvmDvOEV4R5wyvDfGH+MBJeFcaFV4cFwmvCgmGhsHBYJIwPi4bFQh2a0IYUhmHxsEQYDa8NS4bXhaXC0mGZsGzownJhQnh9WD68IawQ3hhWDG8KK4U3h5XDKuGDd1cLbwmrh7eGNcLbwprh7WGtsHZYJ6wb3hHWC+8M64d3hQ3Cu8MK4T1ho/DesHF4X9gkvD9sGj4QNgsfDJuHD4UtwpZhq7B12CZ8OGwbPhK2C9uHHcJHw47hY2Gn8PEwMXwi7Bw++cv8PYv/+nxS2C/sHz4fPh96f5dcEF0YTYu+H10UXRxdEv0gujT6YTQ9uiy6PLoiujK6Kro6uia6Nrouuj66Iboxuim6Obol6n3dXODQCSedcoGLcblcrMvt8rgrXF53pcvn8ruIu8rFuatdAXeNK+gKucKuiIt3RV0xp51x1pELXXFXwkXdta6ku86VcqVdGVfWOVfOJbjWro1r49q6R1w71951cI+6R91j7jH3uHvcPeE6uyddF/cn19U95bq5p93T7hnXw/V0vdyzrreblO9Cx5Ncf9ffDXAD3CA3yA12g90QN8QNdUNdskt2w91wN8KNcCPdSDfKjXJj3Bg31o1149w4N8FNcCkuxU12k90UN8VNdVPdNDfNpbpUN9PNdLPcLFd99oW9zHPz3AK3wKW5NLfIZV0zLnFL3VKX7tLdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O91ut9vtcXvcXp//wqIuwx1wB9xBd9Adcl+4TPelO+y+ckfc1+6o+8Ydc9+64+6EO+m+c6fc9+60O+POuh/cOfej+8n97M4771IikyKTI29GpkTeikyNvB2ZFpkeSY3MiMyMvBOZFZkdmRN5NzI38l5kXmR+ZEFkYSQt8n5kUWRxZEnkg8jSyIeR9MiyyPLIisjKyKqI90W3h764L+Gj/lpf0l/nS/nSvowv650v5xP89b68v8FX8Df6iv4mX8nf7Cv7Kr6qf8i38C19K9/at/EP+7b+Ed/Ot/cd/KO+o3/Md/KP+0T/hO/sn/Rd/J98V/+U7+af9t39M76H7+l7+Wd9b/+c7+P7+iTfz/f3z/sBfqAf5F/wg/2Lfoh/yQ/1L/tkP8wP96/4Ef5VP9K/5kf50X5MzOt+bPYtMkz0KX6Sn+zf9FP8W36qf9tP89N9qp/hZ/p3/Cw/28/x7/q5/j0/z8/3C/xCn+bf94v8Yr/Ef+CX+g99ul+W/cDRr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2H/k9/mO/1+/z+/0nPsN/6g/4z/xB/7k/5L/wmf5Lf9h/5Y/4r/1R/40/5r/1x/0Jf9J/50/57/1pf8af9T/4c/5H/5P/2Z/nf7PGGGOMMfYPmXRpKH49c+Fxfr/fyRF/tnF/ALhyR5HMS7O5IOuKcmPBC9FAEd8xAgBP9O1+f/arVq2kpKSLW6dLCErMB8j+k6AsMXApXgYd4DFIhPZQ/nfrHyh6nqO/s370JoA8f5YTC5fiS+t/BoBJv7P+w4+OWVQpPBv3N9afD1CqxKWc3HApXgYdfnm+0h4q/JX6C7X9O/Xn/jwFoN2f5eSFS/Gl+hPgEXgSEn+15e/4JvNvzzPGGGOMMcYY+580UFTtmn3/mf03Pn/v/jxeXcrJBZfiv3d/zhhjjDHGGGOMscvvqZ69Hn84MbF91//7oMY/lfUPD5rDv2tlHvzuwHuA7HcUAPyLCwJkDeR/8ii2/Uf2lXzxo/OXUyt/8AH8d7Tyjxhc5t+YGGOMMcYYY3+4Sxf9v35fXa6CGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxHOg/8d+JXe5jZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxi63/xcAAP//DH307g==") socket$unix(0x1, 0x5, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 12m12.321529952s ago: executing program 37 (id=1995): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x8) r5 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$eJzsljurE0EUx/8zk7vJFUWwtLHwggq6d3ejIsgF01hZCD6ChWAwa4iuBpIUJiAxn8DezsKPIWjrh5Boo02stF6Zx2YnIZt3iHDPrzj578zZ2fNYzgYEQRxbfnz/O4j/HP0sADiJA+TN+i+R+nDL/1vh95svd26X3z3++DU/cPennRnHiz8/B+BzSaA9unf87gPzex98pB+A45LRZTC4Rj8Bx0OjQzA8Mvq5pRvS33Wf1aPQfdqIqlJ40vjSBNIUJ+Mb9hmqVnzM2m91ui8qURQ2tyjm1W9Y4jhK4hPj+y50tJ5VPx8cvtFFMNwz+gbySW10Saz8z+bS/MXM/B0sleTNy8CSFZGhLPGIM6cyW+UAWK0xe5vrPd6aV3ab71CGEFAi6eiGThYZWwKbzUIOpjk+yO2gqmu9UdN7IWZ259MtfU+yEvf0tfI5ndHcuLdghA5WySudT/EHhgvW/NSj5L361MgWHrY63Sv1l5VaWAtfBUHxunfV864Fh2oQaTtj/u2r+XQiPX/qN0niMAevK+1209d2dB1oOzlxmYlv2Oe4eD5dcybOLSRiL13jypeNbRMEQfxPnANTM1nN5USYrwms/7p3dxgjQRAEQRAEQRAEQRDr8S8AAP//p+Y+dA==") r6 = open(0x0, 0x4000, 0x0) sendfile(r5, r6, 0x0, 0x8000000000f54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) 12m0.205945115s ago: executing program 5 (id=2025): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xbf, 0x4) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0) 11m59.128124666s ago: executing program 5 (id=2027): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000000840)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3084409, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x40) 11m57.528254951s ago: executing program 5 (id=2032): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0xb6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000) 11m54.624225064s ago: executing program 5 (id=2034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0xfc}}, 0x0) 11m54.228170291s ago: executing program 5 (id=2036): socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setrlimit(0xd, &(0x7f0000000040)={0x1, 0x1}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) 11m52.820776491s ago: executing program 5 (id=2040): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x200040) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x9}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m37.59610821s ago: executing program 38 (id=2040): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x200040) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x9}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m12.394436757s ago: executing program 0 (id=2304): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x17, 0x0, 0x0) 9m11.784075822s ago: executing program 0 (id=2306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x4, 0x9, 0xa, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x20, 0x9, 0xffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@ifindex=r5, r3, 0x5, 0x38, 0x0, @void, @void, @void, @value=r6}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000a40)='./file0\x00') r7 = openat$cgroup_procs(r4, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000300)=r0, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 9m8.442236153s ago: executing program 0 (id=2308): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() getrlimit(0x2, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 9m3.321264415s ago: executing program 0 (id=2319): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x800000, &(0x7f0000000240)={[{@nofavordynmods}, {@name={'name', 0x3d, 'cgroup\x00'}}, {@subsystem='devices'}]}) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000002f80)={[{@utf8}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_remount}, {@utf8}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x4}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x4, 0x153c, &(0x7f0000003080)="$eJzs3Am4TtX6APD3XWvt45D0dZLhsNZ6N18yLJIkQ5IMSZIkSaaEpJNcSUgcMiUdkpAMh2Q4hGQ4cdIxz/OQkCSdJAnJlKz/c8JV/7r3dkf3uef9Pc9+vvXutdfa7/7eb9uDh286D6nRqGbVBkQE/xS88JEIALEAMAAArgGAAADKxpWNy+zPLjHxn9sJ+9d6KOVKZ8CuJK5/1sb1z9q4/lkb1z9r4/pnbVz/rI3rn7Vx/RnLyjZNy38tL1l34ff/WRlf//+HZJQc88Waktd3AYj5o0O4/lkb1/9/VvBHNuL6Z21c/6wq9konwP4L8PmfFWT7iz1c/6yN689YVnal3z//+xf5V/shkhW+g79y/IwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2H/AaX+ZAoBL7SudF2OMMcYYY4wxxv51fLYrnQFjjDHGGGOMMcb+/RAESFAQQAxkg1jIDjlAAMDVkAuugQhcC3FwHeSG6yEP5IV8kB/ioQAUBA0GLBCEUAgKQxRugCJwIxSFYlAcSoCDklAKboLScDOUgVugLNwK5eA2KA8VoCJUgtuhMtwBVeBOqAp3QTWoDjWgJtwNteAeqA33Qh24D+rC/VAPHoD68CA0gIegITwMjeARaAyPQhNoCs2gObT4h8a/AN3hRegBPSERekFveAn6QF/oB/1hALwMA+EVGASvQhIMhiHwGgyF12EYvAHDYQSMhDdhFLwFo2EMjIVxkAzjYQK8DRPhHZgEk2EKTIUUmAbT4V2YATNhFrwHs+F9mANzYR7Mh1T4ABbAQkiDD2ERfATpsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAw74RPYBbthz5/r9/eMP/WL8Z/CXuiCgIACBSpUGIMxGIuxmANzYE7MibkwF0YwgnEYh7kxN+bBPJgP82E8xmNBLIgGDRISFsJCGMUoFsEiWBSLYnEsjg4dlsJSWBpvxjJYBstiWSyH5bA8VsAKWAkrYWWsjFWwClbFqlgNq2ENrIF3493YC2tjbayDdbAu1r30egobYANsiA2xETbCxtgYm2ATbIbNsAW2wJbYElthK2yDbbAttsV22A4TMAHbY3vsgB2wI3bETtgJO2Nn7IJdsWvGC9kAX8QXsSdWE72wN/bGPpiUrR/2x/74Mg7EV/AVfBWTcDAOwdfwNXwdh+FJHI4jcCSOxMriLRyNY5DEOEzGZJyAE3AiTsRJOBkn41RMwWk4HafjDJyJM/E9nI3v4/s4F+fifEzFVFyACzEN03ARnsJ0XIxLcCkuw+W4DFfiKlyJa3AtrsH1uB434kbcjJtxK27F7bgdP0YFgJ/gbtyNSbgX9+I+3If7cT8ewAOYgRl4EA/iITyEh/EwHsEjeBSP4XE8hifwBJ7EU3gaT+NZPIvn8Ln4rxp+XGx1EohMSigRI2JErIgVOUQOkVPkFLlELhEREREn4kRukVvkEXlEPpFPxIt4UVAUFEYYQSKMAQARFVFRRBQRRUVRUVwUF044UUqUEqVFaVFGlBFlxa2inLhNlBcVRGtXSVQSlUUbV0XcKaqKqqKaqC5qiJqipqglaonaoraoI+qIuqKuqCceEPVFL+yHD4nMyjQSg7GxGIJNRFMhL54BLcUwbCVaizbiCTECh2M70dIliKdFezEaO4g/iTH4rOgkxmFn8bzoIrqKbuIF0V20cj1ETzEJe4neYir2EX1FP9FfzMDq4j2cnb2GeFUkicFiiHhNzMfXxTDxhhguRoiR4k0xSrwlRosxYqwYJ5LFeDFBvC0minfEJDFZTBFTRYqYJqaLd8UMMVPMEu+J2eJ9MUfMFfPEfJEqPhALxEKRJj4Ui8RHIl0sFkvEUrFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFax7fR2sUN8LHaKT8QusVvsEZ+KveIzsU98LvaLL8QB8aXIEF+Jg+JrcUh8Iw6Lb8UR8Z04Ko6J4+J7cUL8IE6KU+K0OCPOih/FOfGTOC+8AIlSSCmVDGSMzCZjZXaZQ14lc8oAev387V4r4+R1Mre8XuaReWU+mV/GywKyoNTSSCtJhrKQLCyj8gZZRN4oi8pisrgsIZ0sKUvJm2RpebMsI2+RZeWtspy8TZaXFWRFWUneLivLOyRELlSwmqwua8ia8m6ZCPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JRPk07K99Bd/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VSXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpPJcrycIN+WE+U7cpKcLKfIqTJFTpP9Ls40S8q/Of7tX47PvPTKaXLQz3vfKDfJzXKL3Cq3ye1yh/xY7pQ75S65S+6Re+ReuVfuk/vkfrlfHpAHZIbMkAflQXlIHpKH5WF5RB6RR+UxeUZ+L0/IH+RJeUqekmfkWXlWnrv4HYBCJZRUSgUqRmVTsSq7yqGuUjnV1SqXukZF1LUqTl2ncqvrVR6VV+VT+VW8KqAKKq2MsopUqAqpwiqqbsCLp6Mqrkoop0qqUuqmv2e8KqJuVEVVsV+Nv5Rf4l/Ir4VqoVqqlqqVaqXaqDaqrWqr2ql2KkElqPaqveqgOqiOqqPqpDqpzqqz6qK6qG6qm+quuqseqodKVImqt3pJ9VF9VT/VXw1QL6uBaqAapAapJJWkhqghaqgaqoapYWq4Gq5GqpFqlBqlRqvRaqwaq5JVspqgJqiJaqKapCapKWqKSlEparqarmaoGWqWmqVmq9lqjpqj5ql5KlWlqgVqgUpTaWqRWqTS1WK1WC1VS9VytVytVCvVarVarVVr1Xq1XqWrTWqT2qK2qG1qm9qhdqidaqfapXapPWqP2qv2qn1qn9qv9qsD6oDKUBnqoDqoDqlD6rA6rI6oI+qoOqqOq+PqhDqhTqqT6rQ6rc6qs+qcOqfOq/MKAgEiEIEKVBATxASxQWyQI8gR5AxyBrmCXEEkiARxQVyQO7g+yBPkDfIF+YP4oEBQMNCBCWwgLhY9GtwQFAluDIoGxYLiQYnABSWDUsFNQeng5qBMcEtQNrg1KBfcFpQPKgQVg0rB7UHl4I6gSnBnUDW4K6gWVA9qBDWDu4NawT1B7eDeoE5wX1A3uD+oFzwQ1A8yf1oPBQ2Dh4NGwSNB4+DRoEnQNGgWNA9a/EvmfzBoEGTO7/3JvI+7HrqnTtS9dG/9ku6j++p+ur8eoF/WA/UrepB+VSfpwXqIfk0P1a/rYfoNPVyP0CP1m3qUfkuP1mP0WD1OJ+vxeoJ+W0/U7+hJerKeoqfqFD1NT9fv6hl6pp6l39Oz9ft6jp6r5+n5OlV/oBfohTpNf6gX6Y90ul6sl+ileplerlfolXqVXq3X6LV6nV6vN+iNepPerLforXqb3q536I/1Tv2J3qV36z36U71Xf6b36c/1fv2FPqC/1Bn6K31Qf60P6W/0Yf2tPqK/00f1MX1cf69P6B/0SX1Kn9Zn9Fn9oz6nf9Lntc+8uc+8vBtllIkxMSbWxJocJofJaXKaXCaXiZiIiTNxJrfJbfKYPCafyWfiTbwpaAqaTGTIFDKFTNRETRFTxBQ1RU1xU9w440wpU8qUNqVNGVPGlDVlTTlTzpQ35U1FU9Hcbm43d5g7zJ3mTnOXuctUN9VNTVPT1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MM9PMtDAtTEvT0rQyrUwb08a0NW1NO9POJJgE0960Nx1MB9PRdDSdTCfT2XQ2XUwX0810M91Nd9PD9DCJJtH0Nr1NH9PH9DP9zAAzwAw0A80gM8gkmSQzxAwxQ81QM8wMM8PNCDMy80bVvGVGmzFmrBlnkk2ymWAmmIlmoplkJpkpZopJMSlmupluZpgZZpaZZWab2WaOmWPmmXkm1aSaBWaBSTNpZpFZZNJNullilphlZplZYVaYVWaVWWPWmHWwzmwwG8wms8lsMVvMNrPN7DA7zE6z0+wyu8wes8fsNXvNPrPP7Df7zQFzwGSYDHPQHDSHzCFz2Bw2R8wRc9QcNcfNcXPCnDAnDSiA0+asyXvxeulNrM1uc9irbE57tc1lr7H/P85n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lE2wT9v29pnfxAvsQrvKrrZr7Fq7y+62p+0Ze8h+Y8/aH20P29MOsC/bgfYVO8i+apPs4N/EI+2bdpR9y462Y+xYO+438RQ71abYaXa6fdfOsDN/E6faD+xsm2bn2Ll2np3/c5yZU5r90C6yH9l0G8ASu9Qus8vtCrvyz7kutevtBrvR7rSf2C12q91mt9sdl26E7W67x35q99rP7EH7td1vv7AH7GGbYb/6Oc48vsP2W3vEfmeP2mP2uP3enrA/qEujM4/9e/uTPW+9BUICkqQooBjKRrGUnXLQVZSTrqZcdA1F6FqKo+soN11PeSgv5aP8FE8FqCBpMmSJKKRCVJiidANdSq84lSBHJakU3USl6WYqQ7dQWbqVytFtVJ4qUEWqRLdTZbqDqtCdVJXuompUnWpQTbqbatE9VJvupTp0H9Wl+6kePUD16UFqQA9RQ3qYGtEj1JgepSbUlJpRc2pBj1FLepxaUWtqQ09QW3qS2tFTlEBPU3t6hjrQn6gjPUud6DnqTM9TF+pK3egF6k4vUg/qSYnUi3rTS9SH+lI/6k8D6GUaSK/QIHqVkmgwDaHXaCi9TsPoDRpOI2gkvUmj6C0aTWNoLI2jZBpPE+htmkjv0CSaTFNoKqXQNJpO79IMmkmz6D2aTe/THJpL82g+pdIHtIAWUhp9SIvoI0qnxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoY9pJn9Au2k176FPaS5/RPvqc9tMXdIC+pAz6ig7S13SIvqHD9K3vSd/RUTpGx+l7OkE/0Ek6RafpDJ2lH+kc/UTnyROEGIpQhioMwpgwWxgbZg9zhFeFOcOrw1zhNWEkvDaMC68Lc4fXh3nCvGG+MH8YHxYIC4Y6NKENKQzDQmHhMBreEBYJbwyLhsXC4mGJ0IUlw1LhTWHp8OawTHhLWDa8NSwX3haWDyuEj9xXKbw9rBzeEVYJ7wyrhneF1cLqYY2wZnh3WCu8J6wd3hvWCe8Ly4T3h/XCB8L64YNhg/ChsGH4cNgofCRsHD4aNgmbhs3C5mGL8LGwZfh42CpsHbYJnwjbhk+G7cKnwoTw6bB9+MzP/fcv/Mv9iWGvsHf4UvhS6P29cl50fjQ1+kF0QXRhNC36YXRR9KNoenRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T7mtnAoRNOOuUCF+OyuViX3eVwV7mc7mqXy13jIu5aF+euc7nd9S6Py+vyufwu3hVwBZ12xllHLnSFXGEXdTe4Iu5GV9QVc8VdCedcSVfKNXctXAvX0j3uWrnWro17wj3hnnRPuqfcU+5p19494zq4P7mO7lnXyT3nnnPPuy6uq+vmXnDd3fhcF87JRNfb9XZ9XB/Xz/VzA9wAN9ANdIPcIJfkktwQN8QNdUPdMDfMDXfD3Ug30o1yo9xoN9qNdWNdskt2E9wEN9FNdJPcJDfFTXEpLsVNd9PdDDfDVZ55YS9z3Bw3z81zqS7VLXCZ94xpbpFb5NJdulvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vlr7kwqdvr9rl9br/b7w64L12G+8oddF+7Q+4bd9h9646479xRd8wdd9+7E+4Hd9KdcqfdGXfW/ejOuZ/ceeddcmR8ZELk7cjEyDuRSZHJkSmRqZGUyLTI9Mi7kRmRmZFZkfcisyPvR+ZE5kbmReZHUiMfRBZEFkbSIh9GFkU+iqRHFkeWRJZGlkWWR7wvsCX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS/ubfRl/iy/rb/Xl/G2+vK/gK/pHfRPf1DfzzX0L/5hv6R/3rXxr38Y/4dv6J307/5RP8E/79v4Z38H/yXf0z/pO/jnf2T/vu/iuvpt/wXf3L/oevqdP9L18b/+S7+P7+n6+vx/gX/YD/St+kH/VJ/nBfoh/zQ/1r/th/g0/3I/wI2Pe9KMuPSLDOJ/sx/sJ/m0/0b/jJ/nJfoqf6lP8ND/dv+tn+Jl+ln/Pz/bv+zl+rp/n5/tU/4Ff4Bf6NP+hX+Q/8ul+8aWXkn6FX+lX+dV+jV/r1/n1foPf6Df5zX6L3+q3+e1+h//Y7/Sf+F1+t9/jP/V7/Wd+n//c7/df+AP+S5/hv/IH/df+kP/GH/bf+iP+O3/UH/PH/ff+hP/Bn/Sn/Gl/xp/1P/pz/id/nv/NGmOMMcbYHzL+cvPSq9yYCx8XXuf3+p0x4hcb9waAq7fmz/hlf+Yd5bo8F9p9RXzbCAA83bPzQ5eWatUSExMvbpsuISg8F+DS3wT9OYGL8WJoA09CArSG0r+bf1/R9Sz9jfmjtwLk+MWYWLgcX57/cwBM/J35H3ti5IJy4em4vzL/XICihS+PyQ6X48XQ5uf3K62hzF/IP2/Lv5F/9i+SAVr9YkxOuBxfzr8UPA7PQMKvtvwr2v6xzRhjjDHGGGOM/W/oKyp2vPT8GVxc93vP5/Hq8phscDn+W8/njDHGGGOMMcYYu/Ke7drtqccSElp3/PsbVf6hUX+40Rh+rwvg37rTrNzwHuDSGgUA/+SEAJkN+Z88is3/kX0lXTx1/n/XsjM+gP+OUv7jjbF/XnOF/2BijDHGGGOM/ctdvvv/9Xp1pRJijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcayoP/E/yt2pY+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+LwAA//8j8vzJ") r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x80, &(0x7f0000000480)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x2, 0xc040) 9m2.124926203s ago: executing program 0 (id=2323): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612", @ANYRESDEC], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)=0x80000000) 9m1.58414539s ago: executing program 0 (id=2325): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x280841e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x3, 0x10100001dfffdf, 0x0, 0x108}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 8m59.528433208s ago: executing program 39 (id=2325): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x280841e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000000c0)={0x3, 0x10100001dfffdf, 0x0, 0x108}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 7m39.66551163s ago: executing program 2 (id=2521): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x11, 0x0, 0x8000000) write$P9_RUNLINKAT(r0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) r3 = eventfd(0x7fc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) mmap(&(0x7f00003b0000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x4) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 7m36.910471917s ago: executing program 2 (id=2526): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 7m36.316294218s ago: executing program 2 (id=2530): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x8}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xc1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x200000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0x9500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) 7m35.296172199s ago: executing program 2 (id=2533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000002980)='.\x00', &(0x7f00000029c0), 0x800000, &(0x7f0000000240)={[{@nofavordynmods}, {@name={'name', 0x3d, 'cgroup\x00'}}, {@subsystem='devices'}]}) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000002f80)={[{@utf8}, {}, {@uid={'uid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_remount}, {@utf8}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x4}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x4, 0x153c, &(0x7f0000003080)="$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") r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 7m34.686604095s ago: executing program 2 (id=2535): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@lazytime}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f00000009c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x11, 0x0, 0x8000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580)) r2 = eventfd(0x7fc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) mmap(&(0x7f00003b0000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x4) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 7m34.114810742s ago: executing program 2 (id=2537): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140), 0x1, 0x50d, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x2, '\x00', @a}) openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) 7m33.200569466s ago: executing program 40 (id=2537): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000140), 0x1, 0x50d, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x2, '\x00', @a}) openat(0xffffffffffffff9c, &(0x7f0000000700)='mnt/encrypted_dir/file\x00', 0x42, 0x180) 4m36.548283498s ago: executing program 9 (id=2872): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup3(r0, r1, 0x80000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x800) 4m36.34412681s ago: executing program 9 (id=2873): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') sched_getaffinity(0x0, 0x8, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000780)={0x5, 0x0, [{0x30000, 0xa6, &(0x7f0000000540)=""/166}, {0xeeee8000, 0x1000, &(0x7f00000014c0)=""/4096}, {0x26000, 0x23, &(0x7f0000000480)=""/35}, {0xf000, 0x22, &(0x7f0000000180)=""/34}, {0x0, 0xdc, &(0x7f0000000640)=""/220}]}) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003c08030300ecff3f000000030000980000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900", 0x3f) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000200)=""/6, 0x6}], 0x1, 0x400, 0x101) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m32.043248854s ago: executing program 9 (id=2884): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@lazytime}, {@abort}, {@auto_da_alloc}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@block_validity}]}, 0x11, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f00000004c0)=""/241, 0xf1}], 0x4) keyctl$session_to_parent(0x12) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 4m29.319463739s ago: executing program 9 (id=2891): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x10102, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000300)={0x11, 0x8, 0x0, 0x1, 0xaa, 0x6, @broadcast}, 0x14) 4m28.865485405s ago: executing program 9 (id=2893): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e20, 0x6, 0x4e22, 0xfc00, 0x2, 0x20, 0x0, 0x1d, 0x0, 0xee01}, {0x3, 0x0, 0x3, 0x0, 0x5, 0x1, 0x83a, 0x4}, {0x8, 0x7, 0x5, 0x7}, 0x100, 0x6e6bb0, 0x2, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0xd4}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x2, 0xee, 0x1, 0x80000001, 0x2}}, 0xe8) 4m28.475968243s ago: executing program 9 (id=2894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0xe, 0xffffffffffffffff, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00008d6000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r3 = socket(0x1, 0x5, 0x0) close(r3) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0/file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5fb, &(0x7f0000001800)="$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") dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(&(0x7f0000002d80)='./file0\x00', 0x0) 4m13.173912928s ago: executing program 41 (id=2894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000300)={0xe, 0xffffffffffffffff, 0x1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00008d6000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r3 = socket(0x1, 0x5, 0x0) close(r3) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0/file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5fb, &(0x7f0000001800)="$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") dup(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(&(0x7f0000002d80)='./file0\x00', 0x0) 2m44.917559159s ago: executing program 1 (id=3094): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0xb6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}}, 0x20044000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x4040, 0x10208}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) 2m41.750021803s ago: executing program 1 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x801, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x10200, 0x42004}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 2m40.113205819s ago: executing program 1 (id=3103): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) 2m38.827571372s ago: executing program 1 (id=3105): writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 2m38.053271238s ago: executing program 1 (id=3107): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0xb6) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x40}]}, 0x2c}}, 0x20044000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x4040, 0x10208}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) 2m33.632960089s ago: executing program 1 (id=3113): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x2000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x300) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 2m17.818109079s ago: executing program 42 (id=3113): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000300)=0x2000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x300) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 1m15.785769809s ago: executing program 7 (id=3299): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x168, 0x10, 0x0, 0xb, 0x260, 0x250, 0x250, 0x260, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'tunl0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffffff, 0xff], 'veth1_vlan\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x21, 0xff, 0x1, 0x52}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000000c0)=0x3) unshare(0x22060400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1m14.626245554s ago: executing program 7 (id=3300): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1m10.823416s ago: executing program 7 (id=3308): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x168, 0x10, 0x0, 0xb, 0x260, 0x250, 0x250, 0x260, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'tunl0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffffff, 0xff], 'veth1_vlan\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x21, 0xff, 0x1, 0x52}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f00000000c0)=0x3) unshare(0x22060400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1m9.729373607s ago: executing program 7 (id=3311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', 0x0) 1m7.560012755s ago: executing program 7 (id=3315): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@lazytime}, {@abort}, {@auto_da_alloc}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@block_validity}]}, 0x11, 0x5d8, &(0x7f0000000c00)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000300)=""/176, 0xb0}, {&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f00000004c0)=""/241, 0xf1}], 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1m7.186483705s ago: executing program 7 (id=3316): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1m6.423968705s ago: executing program 43 (id=3316): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 17.831774474s ago: executing program 3 (id=3388): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) setuid(0xee01) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x1f, 0x400, 0x2008, 0x403, 0xee, 0x0, 0x100ff, 0x0, 0x0, 0x40, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) 16.822429117s ago: executing program 3 (id=3389): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @rand_addr, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e21, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/122, 0x7a, 0x2101, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) accept4(0xffffffffffffffff, &(0x7f0000000240)=@x25, 0x0, 0x80800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) 13.462704454s ago: executing program 3 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x140, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_MASTER={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x140}}, 0x8800) 12.714428516s ago: executing program 4 (id=3398): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) setuid(0xee01) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x1f, 0x400, 0x2008, 0x403, 0xee, 0x0, 0x100ff, 0x0, 0x0, 0x40, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) 11.76773915s ago: executing program 3 (id=3399): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) fcntl$setpipe(r0, 0x407, 0x9) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) ustat(0x4, &(0x7f0000000000)) 11.626065654s ago: executing program 4 (id=3400): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x1d) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10.563030847s ago: executing program 6 (id=3401): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 7.780006901s ago: executing program 4 (id=3403): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @rand_addr, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e21, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/122, 0x7a, 0x2101, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) 7.755017217s ago: executing program 6 (id=3404): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x801, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x10200, 0x42004}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffffffff, 0xc68, 0x3}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r5}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x404000, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r8, 0x0, 0x0) read$FUSE(r8, &(0x7f00000047c0)={0x2020}, 0x2020) r9 = socket(0x18, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000002240)="9000000018001f2fb9409b52ffff65580200be04020c060560020b02430c1600ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000200000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x24000040, 0x0, 0x0) 5.499514219s ago: executing program 6 (id=3406): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x5608, 0x1) 5.374936356s ago: executing program 8 (id=3407): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0x0, &(0x7f00000001c0)={0x0, 0x6, 0x7, 0x22, 0x200, 0xcbf4, 0x9, 0x401, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x5c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc44b}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb1500001801", @ANYRES32, @ANYBLOB="0000000000000000b7080000000f396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d00000000fddbdf2502001000bc9a00060000002008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 5.320526536s ago: executing program 4 (id=3408): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) setuid(0xee01) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x1f, 0x400, 0x2008, 0x403, 0xee, 0x0, 0x100ff, 0x0, 0x0, 0x40, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) 5.314404165s ago: executing program 3 (id=3409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0xc, 0x0, &(0x7f0000000440)=[@dead_binder_done], 0x54, 0x0, &(0x7f0000000480)="0cce0523552df5799e844ca6558f6adffcf24e07e5aafad225a33a8e32337edc3c2fbfc0bc8e4b3186f8a3370b1f55a74ae0226a953523162a7a9f41178a9e3faa7b1913c6f39572ca71b3990d00e4f182d285a6"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 5.212167425s ago: executing program 6 (id=3410): socket$inet6_tcp(0xa, 0x1, 0x0) userfaultfd(0x801) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fcntl$dupfd(r0, 0x406, r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x7f) dup(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x686cc0, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB="07b0cf7e2c89"], 0x0) 4.287412614s ago: executing program 8 (id=3411): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc0853c21ee312b754d0701db", 0x7a}, {&(0x7f00000003c0)="5238e95e63ee39039afbdcc3623762630b41620ad9c3ba2e00e019dd2a6d12b41daf39e8a94ebfb013cd351ea18c923617691c1ff8a55cafd19518d9ba95411af2f1bfa8d10cde6696d503887396d47677c9c8d2197e677aca63c919ba13cd532d707f0cc3c03813e4b03eb3bee052f4410191b5c81e4aff290bce080945cc24f16b3da715a177e3b1c5dafc5d15a50802013c63f017086b240b1e50875cf19e5fd0d1536d00510e64a5b5", 0xab}, {&(0x7f0000000500)="23355c484a99f50fe80290dad71777c07547ba6775a98ce83fd6c7031048db3f6cc0829e59806f8b94c170faf06472d63b65d24f52ef895f5bfb0b98cebbd1a6d72b1b", 0x43}, {&(0x7f0000000600)="9e1d7cffeebcc56f4a1cd2cebf23c21f5951c799bf8c8d62efca81f675745d0f6114880da308a45e71eb6d09080cd8a7a6afc5912915b9a1575c0ba983d07725aa072d2ad688e93c6073c1", 0x4b}, {&(0x7f0000000780)="1c5f4bb563d6ef2ffbb46cb2b02454214c50a988a9cd0d8b4ec20810aca4b2efa0acccf7f1ae615e5a985b570424d4421f111a30122bedb13152a3959b7caf873e0846e5744ee93fd80558d6dad07296391225706724c9f8b6f7fd1f816cb091f9d30d12a020b173b105ac383f1af7be3982", 0x72}, {&(0x7f0000000840)="55b2f45a82e979ee13cfa93f385d876f372e49b02d643c72db8e0e97739ef4a3fd8e6104505786b8afbd549b2e9adbcf0d17b0f665810f5d862724a67e881efcad7b931b40cffd764f7d3c4467c1f6016b9297758569e5cc6f100909bb06f333ef7c5b855debc260fbe4375e24d564bf3138fc11868e1e5ed62f056da9857b6aae08339f0090cd456c46666e143d0f5159b5ab732224c690", 0x98}, {&(0x7f0000000940)="d361df209d9688a550cc85099cada97bd2fa7d9612b994fa0f7103b8281c97bd23fdc09c0b961e0a54ab8d2368153f3acfe3efc15ec04c622970c18164a407", 0x3f}], 0x7}}], 0x2, 0x2090) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7}, @raw32={[0x2, 0x66704740, 0x8000000]}}, {0x2, 0xff, 0x5, 0x83, @tick=0x1, {0xfd, 0x1}, {0x3}, @note={0x81, 0x0, 0xe}}, {0xf2, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0x1, 0x3}, {0x6, 0xb}}}, {0x0, 0x80, 0x0, 0x0, @tick=0xf791, {0xfb, 0x9}, {0x8, 0x4}, @ext={0x0, 0x0}}], 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf2510000000050035000900ed0008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 3.964757485s ago: executing program 8 (id=3412): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.556726404s ago: executing program 6 (id=3413): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/162, 0xa2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 2.452175064s ago: executing program 4 (id=3414): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x3, 0xff) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x10102, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) recvfrom$packet(r0, 0x0, 0x0, 0x40, &(0x7f0000000300)={0x11, 0x8, 0x0, 0x1, 0xaa, 0x6, @broadcast}, 0x14) 1.67303298s ago: executing program 8 (id=3415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x134, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_MASTER={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x134}}, 0x8800) 1.539389105s ago: executing program 8 (id=3416): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1.225890877s ago: executing program 6 (id=3417): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @rand_addr, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e21, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/122, 0x7a, 0x2101, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) 1.18555678s ago: executing program 3 (id=3418): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) fcntl$setpipe(r0, 0x407, 0x9) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) ustat(0x4, &(0x7f0000000000)) 894.43µs ago: executing program 4 (id=3419): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x5}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 8 (id=3420): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0x0, &(0x7f00000001c0)={0x0, 0x6, 0x7, 0x22, 0x200, 0xcbf4, 0x9, 0x401, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x5c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc44b}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040800}, 0x1) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r7, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd8d00000000fddbdf2502001000bc9a00060000002008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) kernel console output (not intermixed with test programs): 4609][ T990] hsr_slave_0: left promiscuous mode [ 1378.495636][ T990] hsr_slave_1: left promiscuous mode [ 1378.544956][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1378.556002][ T7905] usb 2-1: USB disconnect, device number 3 [ 1378.583231][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.630961][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.647162][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.695990][ T990] bridge_slave_1: left allmulticast mode [ 1378.701722][ T990] bridge_slave_1: left promiscuous mode [ 1378.707857][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.805757][ T990] bridge_slave_0: left allmulticast mode [ 1378.811495][ T990] bridge_slave_0: left promiscuous mode [ 1378.834184][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.847202][T16780] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 1378.904457][T16779] loop9: detected capacity change from 0 to 2048 [ 1378.957882][ T990] veth1_macvtap: left promiscuous mode [ 1378.981008][ T990] veth0_macvtap: left promiscuous mode [ 1379.006170][T16779] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.019517][ T990] veth1_vlan: left promiscuous mode [ 1379.035609][ T990] veth0_vlan: left promiscuous mode [ 1379.246920][T16777] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1379.429264][T16777] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 96 with error 28 [ 1379.651062][T16777] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1379.651062][T16777] [ 1379.936768][T16777] EXT4-fs (loop9): Total free blocks count 0 [ 1380.242959][T16777] EXT4-fs (loop9): Free/Dirty block details [ 1380.250209][T16777] EXT4-fs (loop9): free_blocks=2415919504 [ 1380.257200][T16777] EXT4-fs (loop9): dirty_blocks=240 [ 1380.262469][T16777] EXT4-fs (loop9): Block reservation details [ 1380.268547][T16777] EXT4-fs (loop9): i_reserved_data_blocks=15 [ 1380.412183][T16795] loop1: detected capacity change from 0 to 512 [ 1380.447393][T16779] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 1380.548654][T16795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.596085][T16795] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.646445][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.962361][T16814] input: syz0 as /devices/virtual/input/input7 [ 1382.037758][T16816] loop3: detected capacity change from 0 to 512 [ 1382.095224][T16816] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1382.135415][T16816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1382.154508][T16816] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.2243: bad orphan inode 131083 [ 1382.293119][T16819] loop9: detected capacity change from 0 to 512 [ 1382.425370][T16816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.186215][T16824] binder: 16823:16824 ioctl c018620c 2000000001c0 returned -22 [ 1383.659136][T16816] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1383.985609][T16816] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1385.012907][T16838] loop1: detected capacity change from 0 to 1024 [ 1385.025863][T16838] EXT4-fs: inline encryption not supported [ 1385.097992][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.105189][T16838] EXT4-fs: Ignoring removed bh option [ 1385.153709][T16838] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1385.345241][T16838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1385.411638][T16838] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4045: comm syz.1.2250: Allocating blocks 385-513 which overlap fs metadata [ 1385.444845][T16838] EXT4-fs (loop1): Remounting filesystem read-only [ 1386.417342][T16837] EXT4-fs (loop1): pa ffff888076d98570: logic 16, phys. 129, len 24 [ 1386.722662][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1386.800628][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1386.861495][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.949662][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1387.054058][T16855] loop9: detected capacity change from 0 to 256 [ 1387.144062][T16855] FAT-fs (loop9): Directory bread(block 64) failed [ 1387.151220][T16855] FAT-fs (loop9): Directory bread(block 65) failed [ 1387.189790][T16855] FAT-fs (loop9): Directory bread(block 66) failed [ 1387.319563][T16855] FAT-fs (loop9): Directory bread(block 67) failed [ 1387.354941][T16855] FAT-fs (loop9): Directory bread(block 68) failed [ 1387.388125][T16855] FAT-fs (loop9): Directory bread(block 69) failed [ 1387.400616][T16855] FAT-fs (loop9): Directory bread(block 70) failed [ 1387.407779][T16855] FAT-fs (loop9): Directory bread(block 71) failed [ 1387.436508][T16855] FAT-fs (loop9): Directory bread(block 72) failed [ 1387.444611][T16855] FAT-fs (loop9): Directory bread(block 73) failed [ 1387.527298][T16855] syz.9.2254: attempt to access beyond end of device [ 1387.527298][T16855] loop9: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1387.734073][T16859] loop3: detected capacity change from 0 to 512 [ 1388.403804][ T28] audit: type=1326 audit(1772697054.557:16046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16861 comm="syz.9.2256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f260599c799 code=0x0 [ 1389.554292][ T990] bond0 (unregistering): Released all slaves [ 1389.699281][T16873] loop3: detected capacity change from 0 to 128 [ 1389.796397][T16873] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1389.814549][T16873] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.869611][T16873] EXT4-fs warning (device loop3): ext4_group_extend:1897: can't read last block, resize aborted [ 1390.002558][T15912] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1390.021677][T16648] hsr_slave_0: entered promiscuous mode [ 1390.161764][T16648] hsr_slave_1: entered promiscuous mode [ 1390.954527][T16884] overlayfs: missing 'lowerdir' [ 1391.144825][ T5853] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1391.352217][ T5853] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1391.373648][ T5853] usb 4-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 1391.401999][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.445707][ T5853] usb 4-1: Product: syz [ 1391.464801][ T5853] usb 4-1: Manufacturer: syz [ 1391.469488][ T5853] usb 4-1: SerialNumber: syz [ 1391.760377][ T5853] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1391.813276][ T5853] usb 4-1: unit 14 not found! [ 1392.694625][ T5853] usb 4-1: USB disconnect, device number 5 [ 1392.787867][T16907] loop3: detected capacity change from 0 to 128 [ 1392.788858][T16164] udevd[16164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1392.871835][T16907] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1392.944604][T16907] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.009647][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.033658][T16648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1394.079272][T16922] loop9: detected capacity change from 0 to 128 [ 1394.120894][T16648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1394.129880][T16922] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1394.153339][T16907] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1394.170961][T16907] fscrypt (loop3, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 1394.264767][T16922] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.326394][T16648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1394.470919][T15912] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1394.569306][T16648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1394.826557][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1395.489801][T15426] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1395.647869][T16648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.703950][T16648] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.755639][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.762918][ T6974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.791178][T16951] loop9: detected capacity change from 0 to 512 [ 1395.809823][ T6974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.817088][ T6974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.865188][T16951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1395.907156][T16951] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.033399][T16648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1396.158543][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1396.905707][T16648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.098474][T16648] veth0_vlan: entered promiscuous mode [ 1398.196628][T16648] veth1_vlan: entered promiscuous mode [ 1398.363253][T16648] veth0_macvtap: entered promiscuous mode [ 1398.453350][T16648] veth1_macvtap: entered promiscuous mode [ 1398.579950][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.635370][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.704632][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.750321][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.799291][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1398.860642][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1398.916149][T16648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.973545][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.050551][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.098345][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.129900][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.140043][T16648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1399.224900][T16648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.280738][T16648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.292066][T16648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.312718][T16648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.323123][T16648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.354770][T16648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.409437][T16980] loop9: detected capacity change from 0 to 2048 [ 1399.496289][T16980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.814272][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.827443][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.844834][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.952921][T10667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.015369][T10667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.020683][T16999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1401.034002][T17001] loop0: detected capacity change from 0 to 128 [ 1401.065970][T17001] EXT4-fs: inline encryption not supported [ 1401.111329][T17001] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1401.156551][T17001] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1401.192947][T17001] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1401.768921][T16648] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1401.804908][T17013] xt_CT: No such helper "pptp" [ 1403.284720][ T28] audit: type=1107 audit(1772697069.427:16047): pid=17031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1404.534359][T17032] syz.0.2281 (17032) used greatest stack depth: 17864 bytes left [ 1406.660721][T17068] loop0: detected capacity change from 0 to 512 [ 1406.880248][T17068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.956982][T17068] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1407.242227][T16648] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.066366][T17072] loop1: detected capacity change from 0 to 40427 [ 1409.094980][T17090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2292'. [ 1409.114412][T17072] F2FS-fs (loop1): invalid crc value [ 1409.160095][T17072] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1409.400952][T17072] F2FS-fs (loop1): Start checkpoint disabled! [ 1409.407334][T17095] loop3: detected capacity change from 0 to 256 [ 1409.469794][T17095] FAT-fs (loop3): Directory bread(block 64) failed [ 1409.491096][T17095] FAT-fs (loop3): Directory bread(block 65) failed [ 1409.497917][T17072] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1409.505274][T17095] FAT-fs (loop3): Directory bread(block 66) failed [ 1409.505433][T17095] FAT-fs (loop3): Directory bread(block 67) failed [ 1409.505531][T17095] FAT-fs (loop3): Directory bread(block 68) failed [ 1409.505560][T17095] FAT-fs (loop3): Directory bread(block 69) failed [ 1409.505654][T17095] FAT-fs (loop3): Directory bread(block 70) failed [ 1409.505682][T17095] FAT-fs (loop3): Directory bread(block 71) failed [ 1409.505788][T17095] FAT-fs (loop3): Directory bread(block 72) failed [ 1409.505815][T17095] FAT-fs (loop3): Directory bread(block 73) failed [ 1411.557057][T17119] loop3: detected capacity change from 0 to 4096 [ 1411.568176][T17119] EXT4-fs: inline encryption not supported [ 1411.574300][T17119] ext4: Unknown parameter 'nouser_xattr' [ 1412.651388][T17125] tipc: Started in network mode [ 1412.656510][T17125] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 1412.665540][T17125] tipc: Enabling of bearer rejected, failed to enable media [ 1414.560851][T17131] loop1: detected capacity change from 0 to 40427 [ 1417.465788][T17143] loop1: detected capacity change from 0 to 16 [ 1417.577348][T17143] erofs: (device loop1): mounted with root inode @ nid 36. [ 1418.320989][T17150] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1418.502070][T17154] loop3: detected capacity change from 0 to 4096 [ 1418.519260][T17154] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1418.565012][T17154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.886595][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.505036][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1421.597982][T17202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.638600][T17202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.694751][T17196] tipc: Started in network mode [ 1421.704806][T17196] tipc: Node identity 9aed1cd777e3, cluster identity 4711 [ 1421.713345][T17196] tipc: Enabled bearer , priority 0 [ 1421.755097][T17197] syzkaller0: entered promiscuous mode [ 1421.764234][T17197] syzkaller0: entered allmulticast mode [ 1423.068665][T17217] cgroup: No subsys list or none specified [ 1423.092664][T17217] loop0: detected capacity change from 0 to 256 [ 1423.250527][T17217] exfat: Deprecated parameter 'utf8' [ 1423.383884][T17217] exfat: Deprecated parameter 'utf8' [ 1423.406028][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.412821][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.637548][T17217] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d) [ 1423.961670][ T28] audit: type=1800 audit(1772697090.117:16048): pid=17217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2319" name="bus" dev="loop0" ino=1048752 res=0 errno=0 [ 1424.084230][T17195] tipc: Resetting bearer [ 1424.171647][T17195] tipc: Disabling bearer [ 1424.203451][T13455] tipc: Node number set to 3977125079 [ 1424.232069][T17224] syz_tun: entered allmulticast mode [ 1424.607373][T17224] syz_tun: left allmulticast mode [ 1424.613622][ T7905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1424.646728][T17230] loop9: detected capacity change from 0 to 512 [ 1424.796161][T17230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1424.818546][ T7905] usb 2-1: Using ep0 maxpacket: 16 [ 1424.881933][ T7905] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.943307][T17230] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1425.064820][ T7905] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.370449][ T7905] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1426.176815][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1426.210670][T17187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.519171][T17187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.564365][ T7905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1426.571161][ T7905] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1426.583470][ T7905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.600975][ T7905] usb 2-1: config 0 descriptor?? [ 1426.759645][T17187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.936513][T17187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.341889][ T5853] usb 2-1: USB disconnect, device number 4 [ 1427.810705][T17263] loop9: detected capacity change from 0 to 128 [ 1427.869766][T17263] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1427.938051][T17263] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1427.957228][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1427.968315][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1427.978001][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1427.988402][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1428.004031][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1428.105450][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1428.142044][T17270] loop1: detected capacity change from 0 to 2048 [ 1428.196022][T17270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1428.262231][T15426] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1428.327485][T17270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1428.400539][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.673477][T17286] loop1: detected capacity change from 0 to 512 [ 1429.798081][T17286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.902501][T17292] can0: slcan on ptm0. [ 1429.913744][T17286] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1430.175106][T11621] Bluetooth: hci2: command tx timeout [ 1430.932476][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1431.027838][T17291] can0 (unregistered): slcan off ptm0. [ 1431.113636][T17314] loop9: detected capacity change from 0 to 256 [ 1431.181611][T17314] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1431.803108][T17265] chnl_net:caif_netlink_parms(): no params data found [ 1432.177455][T17327] loop3: detected capacity change from 0 to 512 [ 1432.206593][T17327] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1432.213442][T17327] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1432.254778][T11621] Bluetooth: hci2: command tx timeout [ 1432.466755][T17327] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.2345: bad orphan inode 131083 [ 1432.528240][T17327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.208536][T17265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.232610][T17265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.261058][T17265] bridge_slave_0: entered allmulticast mode [ 1433.299767][T17265] bridge_slave_0: entered promiscuous mode [ 1433.369233][T17187] hsr_slave_0: left promiscuous mode [ 1433.384251][T17187] hsr_slave_1: left promiscuous mode [ 1433.407063][T17187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1433.423752][T17187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1433.433975][T17187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1433.449217][T17187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1433.460329][T17187] bridge_slave_1: left allmulticast mode [ 1433.470431][T17187] bridge_slave_1: left promiscuous mode [ 1433.478993][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.492807][T17187] bridge_slave_0: left allmulticast mode [ 1433.509714][T17187] bridge_slave_0: left promiscuous mode [ 1433.521275][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.572811][T17187] veth1_vlan: left promiscuous mode [ 1433.582371][T17187] veth0_vlan: left promiscuous mode [ 1434.335227][T11621] Bluetooth: hci2: command tx timeout [ 1434.939620][T17347] loop1: detected capacity change from 0 to 512 [ 1434.946734][T17347] ext4: Unknown parameter 'rootcontext' [ 1435.204410][T17345] loop9: detected capacity change from 0 to 40427 [ 1435.290533][T17345] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x7ffff [ 1435.309905][T17345] F2FS-fs (loop9): invalid crc value [ 1435.374343][T17345] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1435.544957][T17345] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1436.416901][T11621] Bluetooth: hci2: command tx timeout [ 1438.087465][T15426] syz-executor: attempt to access beyond end of device [ 1438.087465][T15426] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1438.122109][T15426] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 1438.134936][T17354] xt_CT: No such helper "pptp" [ 1438.641194][T17187] team0 (unregistering): Port device team_slave_1 removed [ 1438.790610][T17187] team0 (unregistering): Port device team_slave_0 removed [ 1438.898181][T17358] loop9: detected capacity change from 0 to 256 [ 1439.023287][T17187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.296956][T17187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.685610][T16772] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1439.885005][T16772] usb 2-1: Using ep0 maxpacket: 16 [ 1439.893994][T16772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.907288][T17187] bond0 (unregistering): Released all slaves [ 1439.911766][T16772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1439.940566][T16772] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1439.949889][T16772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.966450][T16772] usb 2-1: Product: syz [ 1439.970840][T16772] usb 2-1: Manufacturer: syz [ 1439.976000][T16772] usb 2-1: SerialNumber: syz [ 1440.159725][T17339] netlink: 'syz.3.2345': attribute type 4 has an invalid length. [ 1440.308633][T17265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1440.328033][T16772] usb 2-1: 0:2 : does not exist [ 1440.338694][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.348022][T16772] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1440.355841][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.375766][T17265] bridge_slave_1: entered allmulticast mode [ 1440.416439][T17265] bridge_slave_1: entered promiscuous mode [ 1440.448074][T16772] usb 2-1: USB disconnect, device number 5 [ 1440.579393][T17265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.611060][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.652533][T17265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.795939][T17265] team0: Port device team_slave_0 added [ 1440.842882][T17265] team0: Port device team_slave_1 added [ 1440.932052][T17375] loop3: detected capacity change from 0 to 256 [ 1440.967818][T17265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.008331][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.064540][T17375] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1441.094853][T17265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.174129][T17265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.215191][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.289455][T17265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.381245][T17265] hsr_slave_0: entered promiscuous mode [ 1441.419062][T17265] hsr_slave_1: entered promiscuous mode [ 1441.531246][T17384] loop1: detected capacity change from 0 to 256 [ 1441.575502][T17384] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1441.688159][ T28] audit: type=1800 audit(1772697107.837:16049): pid=17384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2359" name="file1" dev="loop1" ino=1048761 res=0 errno=0 [ 1442.843783][T17391] loop3: detected capacity change from 0 to 512 [ 1442.890597][T17391] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2362: bg 0: block 255: padding at end of block bitmap is not set [ 1442.913753][T17391] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 1442.961996][T17395] loop1: detected capacity change from 0 to 2048 [ 1442.968765][T17391] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2362: invalid indirect mapped block 1 (level 1) [ 1443.008904][T17391] EXT4-fs (loop3): 1 truncate cleaned up [ 1443.030531][T17391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.058321][T17395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.199245][T17395] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1443.233825][T17399] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3938794901 (252082873664 ns) > initial count (134139874880 ns). Using initial count to start timer. [ 1443.330941][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.561503][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.853766][T17423] loop1: detected capacity change from 0 to 16 [ 1445.963862][T17423] erofs: (device loop1): mounted with root inode @ nid 36. [ 1446.195497][T17423] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 1446.294561][T17426] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1446.318151][T17265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1446.325348][T17423] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 1446.872921][T17428] xt_CT: No such helper "pptp" [ 1446.926399][T17265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1447.010495][T17265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1447.072397][T17265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1447.270551][T17432] loop3: detected capacity change from 0 to 512 [ 1447.290584][T17432] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 1447.420274][T17265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.532036][T17265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.565287][T17187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.572516][T17187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.657060][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.664413][T17188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.047517][T17440] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1448.859721][T17449] loop3: detected capacity change from 0 to 128 [ 1449.884763][T17455] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1449.904486][T17265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.926448][T17455] FAT-fs (loop3): Filesystem has been set read-only [ 1450.154602][T17265] veth0_vlan: entered promiscuous mode [ 1450.323959][T17265] veth1_vlan: entered promiscuous mode [ 1450.341351][T17457] loop3: detected capacity change from 0 to 128 [ 1450.423090][T17457] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1450.504333][T17457] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1450.562852][T17265] veth0_macvtap: entered promiscuous mode [ 1450.604419][T17457] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.645557][T17265] veth1_macvtap: entered promiscuous mode [ 1450.778488][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.850160][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.904833][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.968008][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.044338][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.090895][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.136742][T17265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.149893][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.291317][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.324146][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.355030][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.374101][T17265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.385149][T17265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.397064][T17265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.410238][T17265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.444926][T17265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.453722][T17265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.487958][T17265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.528009][T15912] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1451.748395][T17187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.768130][T17187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.893569][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.944979][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.175324][T17480] Illegal XDP return value 4294967274 on prog (id 204) dev syz_tun, expect packet loss! [ 1454.108938][T17490] loop2: detected capacity change from 0 to 512 [ 1454.143642][T17490] EXT4-fs: Ignoring removed nobh option [ 1454.374058][T17490] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #3: comm syz.2.2384: corrupted inode contents [ 1454.482909][T17490] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #3: comm syz.2.2384: mark_inode_dirty error [ 1454.580955][T17490] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #3: comm syz.2.2384: corrupted inode contents [ 1454.595630][T17500] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1454.644505][T17490] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.2384: mark_inode_dirty error [ 1454.731643][T17490] Quota error (device loop2): write_blk: dquota write failed [ 1454.797365][T17490] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1454.864039][T17490] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.2384: Failed to acquire dquot type 0 [ 1454.917676][T17502] tipc: Failed to remove unknown binding: 66,1,1/0:136863669/136863671 [ 1454.948154][T17502] tipc: Failed to remove unknown binding: 66,1,1/0:136863669/136863671 [ 1454.957127][T17502] tipc: Failed to remove unknown binding: 66,1,1/0:136863669/136863671 [ 1454.975158][T17490] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.2384: corrupted inode contents [ 1455.101015][T17490] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #16: comm syz.2.2384: mark_inode_dirty error [ 1455.188013][T17490] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.2384: corrupted inode contents [ 1455.246521][T17490] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.2384: mark_inode_dirty error [ 1455.316053][T17490] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.2384: corrupted inode contents [ 1455.394849][T17490] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1455.414303][T17512] loop9: detected capacity change from 0 to 512 [ 1455.445560][T17490] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #16: comm syz.2.2384: corrupted inode contents [ 1455.489799][T17512] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1455.529381][T17490] EXT4-fs error (device loop2): ext4_truncate:4294: inode #16: comm syz.2.2384: mark_inode_dirty error [ 1455.558278][T17512] EXT4-fs error (device loop9): ext4_init_orphan_info:584: comm syz.9.2388: inode #0: comm syz.9.2388: iget: illegal inode # [ 1455.578185][T17490] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1455.603397][T17490] EXT4-fs (loop2): 1 truncate cleaned up [ 1455.644878][T17490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.661964][T17518] loop3: detected capacity change from 0 to 512 [ 1455.687162][T17512] EXT4-fs (loop9): get orphan inode failed [ 1455.693419][T17512] EXT4-fs (loop9): mount failed [ 1455.734509][T17490] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1455.791790][T17518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.874456][T17518] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.188763][T17265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.455169][T17527] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1456.809909][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.825774][T17538] loop9: detected capacity change from 0 to 512 [ 1457.833136][T17538] EXT4-fs: Ignoring removed i_version option [ 1457.862593][T17538] EXT4-fs: Ignoring removed bh option [ 1457.926236][T17538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.051233][T17538] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1458.186647][T17538] EXT4-fs error (device loop9): ext4_resize_begin:62: comm syz.9.2395: resize_inode disabled but reserved GDT blocks non-zero [ 1458.397790][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.836877][ T5809] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1458.883752][ T5809] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1459.024901][T16772] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1459.242397][T16772] usb 2-1: Using ep0 maxpacket: 16 [ 1459.249864][T17570] loop9: detected capacity change from 0 to 512 [ 1459.267159][T16772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.287019][T16772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1459.313838][T16772] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1459.325382][T16772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.343883][T16772] usb 2-1: Product: syz [ 1459.360919][T17570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.378970][T16772] usb 2-1: Manufacturer: syz [ 1459.383656][T16772] usb 2-1: SerialNumber: syz [ 1459.410200][T17570] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.705548][T16772] usb 2-1: 0:2 : does not exist [ 1459.769123][T16772] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1460.458034][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.526637][T16772] usb 2-1: USB disconnect, device number 6 [ 1460.752608][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.859079][T17585] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1461.718803][T17609] loop1: detected capacity change from 0 to 1024 [ 1461.824259][T17611] loop3: detected capacity change from 0 to 256 [ 1461.846202][T17609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1461.874330][T17609] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1461.927647][T17611] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 1461.983216][T17586] loop9: detected capacity change from 0 to 40427 [ 1462.052370][T17586] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1462.101241][T17586] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1462.159797][T17586] F2FS-fs (loop9): invalid crc value [ 1462.188720][T17609] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1462.219101][T17586] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1462.389686][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.463503][T17586] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1462.505396][T17586] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1464.455191][T17636] loop2: detected capacity change from 0 to 40427 [ 1464.639473][T17636] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 1464.679617][T17636] F2FS-fs (loop2): invalid crc value [ 1464.829359][T17636] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1464.998939][T17636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1466.042544][T17633] loop3: detected capacity change from 0 to 2034 [ 1467.043638][T17265] syz-executor: attempt to access beyond end of device [ 1467.043638][T17265] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1467.095135][T17265] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1468.113073][T17680] overlayfs: failed to resolve './file0': -2 [ 1468.183870][T17680] loop3: detected capacity change from 0 to 512 [ 1468.450375][T17680] EXT4-fs (loop3): 1 truncate cleaned up [ 1468.464051][T17680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1469.636270][T17693] loop1: detected capacity change from 0 to 4096 [ 1469.675330][T17693] EXT4-fs: Ignoring removed nobh option [ 1469.746851][T17693] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1469.801242][T17693] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1469.886123][T17693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.105320][T17693] EXT4-fs (loop1): shut down requested (0) [ 1470.143174][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.189649][T17701] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1470.206156][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 1470.348987][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.194839][T13459] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1471.394809][T13459] usb 2-1: Using ep0 maxpacket: 16 [ 1471.468563][T13459] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.512243][T13459] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1471.553994][T13459] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1471.613205][T13459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.700385][T13459] usb 2-1: Product: syz [ 1471.735284][T13459] usb 2-1: Manufacturer: syz [ 1471.757962][T13459] usb 2-1: SerialNumber: syz [ 1472.064042][T13459] usb 2-1: 0:2 : does not exist [ 1472.130770][T13459] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1472.195023][T13459] usb 2-1: USB disconnect, device number 7 [ 1472.337728][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1472.360207][T17749] loop2: detected capacity change from 0 to 512 [ 1472.384220][T17749] EXT4-fs: Ignoring removed orlov option [ 1472.462695][T17749] EXT4-fs (loop2): 1 truncate cleaned up [ 1472.479191][T17749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.631289][T17265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.884082][T17761] loop2: detected capacity change from 0 to 1024 [ 1472.917757][T17761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1473.030699][T17761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1473.424879][T13485] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1473.648534][T13485] usb 3-1: Using ep0 maxpacket: 16 [ 1473.659400][T13485] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.687654][T13485] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.712897][T13485] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1473.744463][T13485] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1473.762319][T13485] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1473.782053][T13485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.866362][T13485] usb 3-1: config 0 descriptor?? [ 1474.001642][T17732] loop3: detected capacity change from 0 to 40427 [ 1474.281089][T17771] loop1: detected capacity change from 0 to 40427 [ 1474.292500][T13485] hid (null): invalid report_size 29287 [ 1474.306376][T17771] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1474.339561][T17771] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1474.372011][T17771] F2FS-fs (loop1): invalid crc value [ 1474.407522][T17771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1474.508109][T13485] usb 3-1: USB disconnect, device number 5 [ 1474.666058][T17771] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1474.698973][T17771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1474.849251][ T28] audit: type=1800 audit(1772697141.007:16050): pid=17806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2443" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=10 res=0 errno=0 [ 1475.128574][T17265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.295074][T13459] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1478.274749][T13459] usb 4-1: Using ep0 maxpacket: 16 [ 1478.292043][T13459] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.314829][T13459] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1478.337453][T13459] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1478.365160][T13459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.440147][T17844] loop9: detected capacity change from 0 to 16 [ 1478.459807][T17844] erofs: (device loop9): mounted with root inode @ nid 36. [ 1478.571319][T13459] usb 4-1: Product: syz [ 1478.575760][T13459] usb 4-1: Manufacturer: syz [ 1479.287337][T13459] usb 4-1: SerialNumber: syz [ 1479.501976][T13459] usb 4-1: 0:2 : does not exist [ 1479.526836][T13459] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1479.634216][T13459] usb 4-1: USB disconnect, device number 6 [ 1479.725458][T17856] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1479.794615][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1479.939911][T17861] loop9: detected capacity change from 0 to 512 [ 1479.986331][T17861] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1480.000844][T17861] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1480.906851][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1481.195000][T17881] loop9: detected capacity change from 0 to 256 [ 1481.260470][T17881] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1483.651086][T17909] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2468'. [ 1483.707448][T17909] gretap0: entered promiscuous mode [ 1483.716877][T17909] netlink: 'syz.2.2468': attribute type 1 has an invalid length. [ 1483.724742][T17909] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2468'. [ 1484.821135][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.828706][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.563568][T17946] loop3: detected capacity change from 0 to 40427 [ 1486.598894][T17946] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1486.662411][T17946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1486.700290][T17946] F2FS-fs (loop3): invalid crc value [ 1486.811976][T17946] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1489.020198][T17974] loop2: detected capacity change from 0 to 512 [ 1489.094288][T17974] EXT4-fs: Ignoring removed oldalloc option [ 1489.206294][T17974] EXT4-fs (loop2): 1 truncate cleaned up [ 1489.272247][T17974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1490.643473][T17265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.784822][T13459] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1490.999982][T13459] usb 10-1: Using ep0 maxpacket: 32 [ 1491.031585][T13459] usb 10-1: config 210 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.070137][T13459] usb 10-1: config 210 has 2 interfaces, different from the descriptor's value: 3 [ 1491.230933][T13459] usb 10-1: config 210 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1491.245323][T13459] usb 10-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 1491.254524][T13459] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.272594][T13459] usb 10-1: Product: syz [ 1491.284952][T13459] usb 10-1: Manufacturer: syz [ 1491.289720][T13459] usb 10-1: SerialNumber: syz [ 1491.353628][T18007] binder: 18006:18007 unknown command 1074553619 [ 1491.373498][T18007] binder: 18006:18007 ioctl c0306201 200000000040 returned -22 [ 1491.400257][T18007] binder: 18006:18007 unknown command 1074553620 [ 1491.416810][T18007] binder: 18006:18007 ioctl c0306201 200000000640 returned -22 [ 1491.537266][T13459] usb 10-1: Fast Track Pro config OK [ 1491.567632][T13459] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1491.594787][T13459] usb 10-1: 0:2 : does not exist [ 1491.678755][T13459] usb 10-1: USB disconnect, device number 8 [ 1491.725534][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:210.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1492.080542][T18017] loop1: detected capacity change from 0 to 4096 [ 1492.091855][T18017] EXT4-fs: inline encryption not supported [ 1492.098918][T18017] ext4: Unknown parameter 'nouser_xattr' [ 1493.665669][T15756] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1494.473913][T18020] loop9: detected capacity change from 0 to 2048 [ 1494.582691][T18020] Alternate GPT is invalid, using primary GPT. [ 1494.622042][T18020] loop9: p2 p3 p7 [ 1494.853672][T18020] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2489'. [ 1494.950661][T18020] gretap0: entered promiscuous mode [ 1495.014927][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1495.050884][T18023] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2489'. [ 1495.075203][T18023] 0ªî{X¹¦: renamed from gretap0 [ 1495.159016][T18023] 0ªî{X¹¦: left promiscuous mode [ 1495.164171][T18023] 0ªî{X¹¦: entered allmulticast mode [ 1495.292829][T18023] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1497.270638][T18043] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1497.586183][ T51] Bluetooth: hci3: sending frame failed (-49) [ 1497.596580][T11621] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 1498.734863][T13459] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1498.790494][T18064] tipc: Started in network mode [ 1498.804149][T18064] tipc: Node identity ea99604c879d, cluster identity 4711 [ 1498.827132][T18064] tipc: Enabled bearer , priority 0 [ 1498.866455][T18064] syzkaller0: entered promiscuous mode [ 1499.020575][T13459] usb 3-1: Using ep0 maxpacket: 16 [ 1499.041625][T18064] syzkaller0: entered allmulticast mode [ 1499.077475][T13459] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.154358][T13459] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.191765][T13459] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1499.227470][T18064] tipc: Resetting bearer [ 1499.259561][T13459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.297092][T13459] usb 3-1: Product: syz [ 1499.302100][T18069] loop9: detected capacity change from 0 to 1024 [ 1499.321757][T13459] usb 3-1: Manufacturer: syz [ 1499.327087][T18063] tipc: Resetting bearer [ 1499.341777][T18069] EXT4-fs: inline encryption not supported [ 1499.359148][T13459] usb 3-1: SerialNumber: syz [ 1499.398567][T18069] EXT4-fs: Ignoring removed bh option [ 1499.478709][T18069] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1499.538808][T18063] tipc: Disabling bearer [ 1499.569833][T18069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.612769][T18077] loop1: detected capacity change from 0 to 1024 [ 1499.640523][T18077] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 1499.657003][T13459] usb 3-1: 0:2 : does not exist [ 1499.671368][T13459] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1499.683246][T18077] System zones: 0-1, 3-36 [ 1499.712038][T18069] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4045: comm syz.9.2500: Allocating blocks 385-513 which overlap fs metadata [ 1499.768322][T18077] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.2501: bad orphan inode 134217728 [ 1499.822751][T13459] usb 3-1: USB disconnect, device number 7 [ 1499.858541][T18077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.906098][T18069] EXT4-fs (loop9): Remounting filesystem read-only [ 1500.009601][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1500.747853][ T28] audit: type=1804 audit(2000000018.100:16051): pid=18086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2501" name="/newroot/97/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 1500.939345][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.963279][T18068] EXT4-fs (loop9): pa ffff88805a32fae0: logic 16, phys. 129, len 24 [ 1501.609187][T18107] loop2: detected capacity change from 0 to 1024 [ 1502.398481][T18107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1502.792684][T17265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.456512][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.464144][T18145] usb usb8: usbfs: process 18145 (syz.9.2513) did not claim interface 0 before use [ 1505.499503][ T2973] Bluetooth: hci3: Frame reassembly failed (-84) [ 1506.798268][T18167] loop2: detected capacity change from 0 to 1024 [ 1506.819415][T18167] EXT4-fs: inline encryption not supported [ 1506.844931][T18167] EXT4-fs: Ignoring removed bh option [ 1506.864144][T18167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1506.946792][T18167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1507.034728][ T23] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1507.080223][T18167] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4045: comm syz.2.2521: Allocating blocks 385-513 which overlap fs metadata [ 1507.133099][T18167] EXT4-fs (loop2): Remounting filesystem read-only [ 1507.535517][T11621] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1507.542216][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 1507.549117][T18142] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 1507.557792][ T23] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.570178][ T23] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1507.584730][ T23] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1507.606979][ T23] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1507.616521][ T23] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1507.625101][ T23] usb 10-1: Manufacturer: syz [ 1507.645706][ T23] usb 10-1: config 0 descriptor?? [ 1507.687754][ T23] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1507.765567][T18166] EXT4-fs (loop2): pa ffff888078ae5d98: logic 16, phys. 129, len 24 [ 1509.501298][T13485] usb 10-1: USB disconnect, device number 9 [ 1509.536733][T17265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.201896][T18221] cgroup: No subsys list or none specified [ 1511.257682][T18221] loop2: detected capacity change from 0 to 256 [ 1511.286505][T18221] exfat: Deprecated parameter 'utf8' [ 1511.291974][T18221] exfat: Deprecated parameter 'utf8' [ 1511.353681][T18221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d) [ 1511.444728][ T7905] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1511.479833][ T28] audit: type=1800 audit(2000000028.820:16052): pid=18221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2533" name="bus" dev="loop2" ino=1048768 res=0 errno=0 [ 1511.549852][T18225] loop1: detected capacity change from 0 to 256 [ 1511.581276][T18225] exfat: Deprecated parameter 'namecase' [ 1511.661867][ T7905] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.662561][T18225] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1511.730818][ T7905] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1511.772687][ T7905] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.830497][ T7905] usb 10-1: config 0 descriptor?? [ 1512.286515][ T7905] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 1512.301135][ T7905] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0007/input/input9 [ 1512.383594][ T990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.615992][ T7905] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 1512.746161][ T7905] usb 10-1: USB disconnect, device number 10 [ 1512.804958][ T5809] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1512.849374][ T990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.918697][T18236] fido_id[18236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1513.015132][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1513.032103][ T990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.053934][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.075784][ T5809] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1513.119060][ T5809] usb 4-1: config 1 has no interface number 1 [ 1513.140900][ T5809] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1513.179122][ T5809] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1513.223753][ T5809] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1513.243074][ T5809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1513.259289][ T990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.270348][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.285105][ T5809] usb 4-1: Product: syz [ 1513.289348][ T5809] usb 4-1: Manufacturer: syz [ 1514.121315][ T5809] usb 4-1: SerialNumber: syz [ 1514.499752][ T5809] usb 4-1: USB disconnect, device number 7 [ 1514.596386][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: Permission denied [ 1515.805941][T15430] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1515.817274][T15430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1515.827038][T15430] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1515.837045][T15430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1515.853891][T15430] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1515.861595][T15430] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1516.032116][T18267] loop9: detected capacity change from 0 to 1024 [ 1516.098142][T18267] EXT4-fs: inline encryption not supported [ 1516.104122][T18267] EXT4-fs: Ignoring removed bh option [ 1516.148137][T18267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1516.265947][T18267] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.441242][T18267] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4045: comm syz.9.2545: Allocating blocks 385-513 which overlap fs metadata [ 1516.528235][T18267] EXT4-fs (loop9): Remounting filesystem read-only [ 1516.780405][T18268] loop1: detected capacity change from 0 to 40427 [ 1516.841836][T18268] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1516.876376][T18268] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1516.949778][T18268] F2FS-fs (loop1): invalid crc value [ 1516.957138][T18266] EXT4-fs (loop9): pa ffff88805a32f3a0: logic 16, phys. 129, len 24 [ 1516.976443][T18268] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1517.096340][T18268] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1517.113721][T18268] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1517.173089][T18297] loop3: detected capacity change from 0 to 128 [ 1517.266827][T18297] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1517.310809][T18297] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.346947][T18297] EXT4-fs (loop3): shut down requested (2) [ 1517.353234][T18297] fscrypt (loop3, inode 12): Error -5 getting encryption context [ 1517.436660][T15912] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1517.588879][T18262] chnl_net:caif_netlink_parms(): no params data found [ 1517.716379][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.086189][ T51] Bluetooth: hci2: command tx timeout [ 1518.653231][ T990] hsr_slave_0: left promiscuous mode [ 1518.686834][ T990] hsr_slave_1: left promiscuous mode [ 1518.716323][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.757375][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.783214][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1518.810388][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.849612][ T990] bridge_slave_1: left allmulticast mode [ 1518.880110][ T990] bridge_slave_1: left promiscuous mode [ 1518.911024][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.952952][ T990] bridge_slave_0: left allmulticast mode [ 1518.980923][ T990] bridge_slave_0: left promiscuous mode [ 1519.010207][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.118603][ T990] veth1_macvtap: left promiscuous mode [ 1519.124314][ T990] veth0_macvtap: left promiscuous mode [ 1519.131854][ T990] veth1_vlan: left promiscuous mode [ 1519.137410][ T990] veth0_vlan: left promiscuous mode [ 1520.095261][ T51] Bluetooth: hci2: command tx timeout [ 1520.731542][ T990] team0 (unregistering): Port device team_slave_1 removed [ 1520.810589][ T990] team0 (unregistering): Port device team_slave_0 removed [ 1520.886872][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.973349][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.595185][T13469] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1521.631617][ T990] bond0 (unregistering): Released all slaves [ 1521.795184][T13469] usb 4-1: Using ep0 maxpacket: 16 [ 1521.804698][T13469] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.824708][T13469] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1521.837911][T13469] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1521.849704][T13469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.858312][T13469] usb 4-1: Product: syz [ 1521.862533][T13469] usb 4-1: Manufacturer: syz [ 1521.867607][T13469] usb 4-1: SerialNumber: syz [ 1521.904427][T18262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.955899][T18262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.963230][T18262] bridge_slave_0: entered allmulticast mode [ 1522.002523][T18262] bridge_slave_0: entered promiscuous mode [ 1522.013408][T18262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.026642][T18262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.034132][T18262] bridge_slave_1: entered allmulticast mode [ 1522.071746][T18262] bridge_slave_1: entered promiscuous mode [ 1522.107610][T13469] usb 4-1: 0:2 : does not exist [ 1522.132809][T13469] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1522.174985][ T51] Bluetooth: hci2: command tx timeout [ 1522.207545][T18262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.217170][T13469] usb 4-1: USB disconnect, device number 8 [ 1522.273209][T18262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.302851][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.391790][T18262] team0: Port device team_slave_0 added [ 1522.403486][T18262] team0: Port device team_slave_1 added [ 1522.466608][T18262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.482887][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.527402][T18262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.549433][T18262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.561262][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.594013][T18262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.659962][T18262] hsr_slave_0: entered promiscuous mode [ 1522.670796][T18262] hsr_slave_1: entered promiscuous mode [ 1522.864301][T18346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1522.875533][T18346] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1522.916154][T18346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1522.955073][T18346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1522.992271][T18362] loop9: detected capacity change from 0 to 1024 [ 1523.005520][T18362] EXT4-fs: inline encryption not supported [ 1523.018492][T18362] EXT4-fs: Ignoring removed bh option [ 1523.030899][T18362] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1523.060171][T18346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1523.114988][T18346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1523.138728][T18346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1523.174277][T18346] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1523.287217][T18362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.353473][T18346] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1524.237091][T18375] loop1: detected capacity change from 0 to 16 [ 1524.258949][T15430] Bluetooth: hci1: command 0x0406 tx timeout [ 1524.297133][T18375] erofs: (device loop1): mounted with root inode @ nid 36. [ 1525.025013][T15430] Bluetooth: hci0: command 0x0406 tx timeout [ 1525.145134][T15430] Bluetooth: hci4: command 0x0406 tx timeout [ 1525.214998][T15430] Bluetooth: hci2: command 0x0c1a tx timeout [ 1525.540463][T18397] loop1: detected capacity change from 0 to 512 [ 1525.564841][T13469] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1525.586958][T18397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 1525.608448][T18397] System zones: 1-12 [ 1525.657202][T18397] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2565: missing EA_INODE flag [ 1525.707675][T18397] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2565: error while reading EA inode 12 err=-117 [ 1525.744290][T18397] EXT4-fs (loop1): 1 orphan inode deleted [ 1525.765126][T13469] usb 4-1: Using ep0 maxpacket: 8 [ 1525.772705][T18397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.780907][T18262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1525.794039][T13469] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1525.818181][T13469] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 92, changing to 7 [ 1525.841985][T18262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1525.851629][T13469] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1525.869739][T18262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1525.892681][T13469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.909201][T13469] usb 4-1: Product: syz [ 1525.916092][T13469] usb 4-1: Manufacturer: syz [ 1525.920771][T13469] usb 4-1: SerialNumber: syz [ 1525.928298][T18262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1526.017598][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.180290][T13469] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1526.210948][T13469] usb 4-1: 2:1 : bogus bTerminalLink 3 [ 1526.282583][T18262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.342771][T18262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.349567][T15430] Bluetooth: hci1: command 0x0406 tx timeout [ 1526.389831][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.397089][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.447439][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.454755][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.489974][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.530869][T13469] usb 4-1: USB disconnect, device number 9 [ 1526.650056][T18414] overlay: Unknown parameter '/' [ 1527.146692][T15430] Bluetooth: hci0: command 0x0406 tx timeout [ 1527.192928][T16164] udevd[16164]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1527.224729][T15430] Bluetooth: hci4: command 0x0406 tx timeout [ 1527.234144][T18262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1527.292524][T18262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.305398][T15430] Bluetooth: hci2: command 0x0c1a tx timeout [ 1528.060325][T18438] loop9: detected capacity change from 0 to 16 [ 1528.088217][T18438] erofs: (device loop9): mounted with root inode @ nid 36. [ 1528.180958][T18262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.385247][T15430] Bluetooth: hci2: command 0x0c1a tx timeout [ 1529.755682][T18419] loop3: detected capacity change from 0 to 40427 [ 1529.854266][T18419] F2FS-fs (loop3): invalid crc value [ 1529.891581][T18419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1530.145668][T18419] F2FS-fs (loop3): Start checkpoint disabled! [ 1530.170073][T18419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1530.681849][T18470] loop1: detected capacity change from 0 to 512 [ 1530.689190][T18470] EXT4-fs: Ignoring removed nobh option [ 1530.715978][T18470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1530.723060][T18470] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2574: casefold flag without casefold feature [ 1530.741727][T18470] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2574: error while reading EA inode 11 err=-117 [ 1530.759021][T18470] EXT4-fs (loop1): 1 orphan inode deleted [ 1530.766692][T18470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1530.820346][T18262] veth0_vlan: entered promiscuous mode [ 1530.834185][T18262] veth1_vlan: entered promiscuous mode [ 1530.931979][T18262] veth0_macvtap: entered promiscuous mode [ 1531.028265][T18262] veth1_macvtap: entered promiscuous mode [ 1531.085781][T10662] kworker/u4:17: attempt to access beyond end of device [ 1531.085781][T10662] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1531.125888][T10662] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1531.146961][T10662] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1531.415185][T18474] overlayfs: failed to resolve './file2': -2 [ 1531.470310][T10662] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1531.965693][T18262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.024768][T18262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.065084][T18262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.104589][T18262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.144903][T18262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1532.164694][T18262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.196287][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.196630][T18262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1532.231262][T18262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.256226][T18262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.272103][T18262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.304986][T18262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.345009][T18262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.372838][T18262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.411247][T18262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.501444][T18262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.524133][T18262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.533651][T18262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.543076][T18262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.868136][T18483] loop3: detected capacity change from 0 to 512 [ 1533.302142][T18483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1533.659062][T18483] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.706084][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.763920][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1533.976152][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1533.984143][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.114771][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1534.317445][ T28] audit: type=1107 audit(2000000051.570:16053): pid=18482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1534.852145][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1534.881197][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.946808][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1534.977891][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.019599][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1535.051098][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.110216][ T23] usb 2-1: Product: syz [ 1535.114462][ T23] usb 2-1: Manufacturer: syz [ 1535.145974][ T23] usb 2-1: SerialNumber: syz [ 1535.553397][ T23] usb 2-1: 0:2 : does not exist [ 1536.514967][T18523] loop3: detected capacity change from 0 to 16 [ 1536.541214][ T23] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1537.785144][T18523] erofs: (device loop3): mounted with root inode @ nid 36. [ 1538.098277][ T23] usb 2-1: USB disconnect, device number 8 [ 1538.387774][T18533] loop9: detected capacity change from 0 to 512 [ 1538.395187][T18533] EXT4-fs: Ignoring removed nobh option [ 1538.478292][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1538.605539][T18533] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1538.639904][T18533] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.2584: casefold flag without casefold feature [ 1538.667315][T18533] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2584: error while reading EA inode 11 err=-117 [ 1538.685232][T18533] EXT4-fs (loop9): 1 orphan inode deleted [ 1538.694148][T18533] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1540.285443][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.581893][T18574] loop4: detected capacity change from 0 to 16 [ 1542.713420][T18574] erofs: (device loop4): mounted with root inode @ nid 36. [ 1542.763356][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1543.094747][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1543.251354][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.430356][ T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1543.462792][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1543.492493][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.502684][ T23] usb 2-1: Product: syz [ 1543.529141][ T23] usb 2-1: Manufacturer: syz [ 1543.544467][ T23] usb 2-1: SerialNumber: syz [ 1543.689480][T18584] loop3: detected capacity change from 0 to 512 [ 1543.697419][T18584] EXT4-fs: Ignoring removed nobh option [ 1543.734028][T18584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1543.741629][T18584] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2597: casefold flag without casefold feature [ 1543.761711][T18584] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2597: error while reading EA inode 11 err=-117 [ 1543.781242][T18584] EXT4-fs (loop3): 1 orphan inode deleted [ 1543.789060][T18584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1544.018041][ T23] usb 2-1: 0:2 : does not exist [ 1544.028866][ T23] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1544.053272][ T23] usb 2-1: USB disconnect, device number 9 [ 1544.690876][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.830729][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.274669][T18598] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2592'. [ 1546.272778][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.279288][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.762158][T18624] loop3: detected capacity change from 0 to 4096 [ 1547.796339][T18624] EXT4-fs: Ignoring removed mblk_io_submit option [ 1547.816877][T18624] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1547.925245][T18624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1548.010737][T18632] loop4: detected capacity change from 0 to 16 [ 1548.072417][T18632] erofs: (device loop4): mounted with root inode @ nid 36. [ 1548.660756][T18624] EXT4-fs error (device loop3): __ext4_remount:6752: comm syz.3.2603: Abort forced by user [ 1548.852736][T18624] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1549.049254][T18637] loop4: detected capacity change from 0 to 512 [ 1549.071681][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.095179][T18637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1551.177242][T18653] loop3: detected capacity change from 0 to 4096 [ 1551.184758][T18653] EXT4-fs: inline encryption not supported [ 1551.190845][T18653] ext4: Unknown parameter 'nouser_xattr' [ 1551.964981][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.276823][T18656] loop9: detected capacity change from 0 to 512 [ 1552.424143][T18656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1552.504989][T18656] ext4 filesystem being mounted at /144/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1553.584351][ T5853] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1553.614994][ T28] audit: type=1107 audit(2000000070.400:16054): pid=18654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1553.681817][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1553.834846][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 1553.914875][ T5853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.954908][ T5853] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1554.008021][ T5853] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1554.024008][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.045103][ T5853] usb 2-1: Product: syz [ 1554.049415][ T5853] usb 2-1: Manufacturer: syz [ 1555.966933][ T5853] usb 2-1: SerialNumber: syz [ 1556.051557][ T5853] usb 2-1: can't set config #1, error -71 [ 1556.098098][ T5853] usb 2-1: USB disconnect, device number 10 [ 1557.453472][T18699] loop3: detected capacity change from 0 to 16 [ 1557.611462][T18699] erofs: (device loop3): mounted with root inode @ nid 36. [ 1557.984711][ T5853] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1558.314713][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 1558.379166][ T5853] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.421076][ T5853] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1558.441537][ T5853] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1558.451500][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.488077][ T5853] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1558.517062][ T5853] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 1558.563949][ T5853] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 1558.704522][T18689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2616'. [ 1558.715727][T18689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2616'. [ 1558.806168][ T5853] usb 2-1: USB disconnect, device number 11 [ 1560.102517][T18730] loop9: detected capacity change from 0 to 4096 [ 1560.113651][T18730] EXT4-fs: inline encryption not supported [ 1560.120791][T18730] ext4: Unknown parameter 'nouser_xattr' [ 1563.106656][T18742] xt_CT: No such helper "pptp" [ 1563.765129][T13456] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1563.794681][ T28] audit: type=1107 audit(2000000081.140:16055): pid=18757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1563.995352][T13456] usb 10-1: Using ep0 maxpacket: 32 [ 1564.007518][T13456] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1564.026371][T13456] usb 10-1: config 0 has no interface number 0 [ 1564.032931][T13456] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1564.077851][T13456] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1564.096687][T13456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.123471][T13456] usb 10-1: Product: syz [ 1564.131425][T13456] usb 10-1: Manufacturer: syz [ 1564.146829][T13456] usb 10-1: SerialNumber: syz [ 1564.177435][T13456] usb 10-1: config 0 descriptor?? [ 1564.204862][T18749] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1564.484260][T18749] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1565.152546][T18783] tipc: Enabled bearer , priority 0 [ 1565.161205][T18783] syzkaller0: entered promiscuous mode [ 1565.167447][T18783] syzkaller0: entered allmulticast mode [ 1565.296292][T18785] tipc: Resetting bearer [ 1565.748162][T18789] vcan0: entered allmulticast mode [ 1566.121851][T18782] tipc: Resetting bearer [ 1566.332570][T18782] tipc: Disabling bearer [ 1566.411642][T16772] tipc: Node number set to 1829003340 [ 1566.715640][T13456] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1566.790459][T13456] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1566.863546][T13456] asix: probe of 10-1:0.188 failed with error -71 [ 1566.956233][T13456] usb 10-1: USB disconnect, device number 11 [ 1567.071541][T18803] loop3: detected capacity change from 0 to 16 [ 1567.086538][T18803] erofs: (device loop3): mounted with root inode @ nid 36. [ 1568.199714][ T28] audit: type=1107 audit(2000000085.530:16056): pid=18807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1569.854804][T16772] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1570.104770][T16772] usb 2-1: Using ep0 maxpacket: 16 [ 1570.180210][T18838] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1570.907350][T16772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.935743][T16772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1570.959022][T16772] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1570.968385][T16772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.014856][T16772] usb 2-1: Product: syz [ 1571.024831][T16772] usb 2-1: Manufacturer: syz [ 1571.040585][T16772] usb 2-1: SerialNumber: syz [ 1572.455832][T16772] usb 2-1: 0:2 : does not exist [ 1572.546523][T16772] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1572.838868][T16772] usb 2-1: USB disconnect, device number 12 [ 1573.747214][T18855] xt_CT: No such helper "pptp" [ 1573.922076][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1574.433249][T18866] loop9: detected capacity change from 0 to 4096 [ 1574.444896][T18866] EXT4-fs: inline encryption not supported [ 1574.451961][T18866] ext4: Unknown parameter 'nouser_xattr' [ 1579.305118][ T7905] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1579.645038][ T7905] usb 10-1: Using ep0 maxpacket: 16 [ 1579.933717][T18911] xt_CT: No such helper "pptp" [ 1579.992659][ T7905] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.049200][ T7905] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1580.144343][ T7905] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1580.185497][ T7905] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.206519][ T7905] usb 10-1: Product: syz [ 1580.210860][ T7905] usb 10-1: Manufacturer: syz [ 1580.224347][ T7905] usb 10-1: SerialNumber: syz [ 1580.474489][ T7905] usb 10-1: 0:2 : does not exist [ 1580.496642][ T7905] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1580.770403][ T7905] usb 10-1: USB disconnect, device number 12 [ 1581.329244][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1582.481362][T18931] loop9: detected capacity change from 0 to 512 [ 1582.563184][T18931] EXT4-fs (loop9): Invalid default hash set in the superblock [ 1582.584350][T18917] loop4: detected capacity change from 0 to 40427 [ 1582.593443][T18917] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1582.602614][T18917] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1582.659672][T18917] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1582.832024][T18939] loop9: detected capacity change from 0 to 256 [ 1582.920631][T18917] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1582.956759][T18917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1584.890658][T18953] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1586.464880][T13459] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1586.505277][T18966] loop1: detected capacity change from 0 to 512 [ 1586.538080][T18966] EXT4-fs: Ignoring removed nobh option [ 1586.589390][T18966] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1586.649995][T18966] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2672: casefold flag without casefold feature [ 1586.679044][T18966] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2672: error while reading EA inode 11 err=-117 [ 1586.694979][T13459] usb 10-1: Using ep0 maxpacket: 16 [ 1586.911247][T18966] EXT4-fs (loop1): 1 orphan inode deleted [ 1587.156847][T18966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1587.506798][T13459] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.534648][T13459] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1587.612648][T13459] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1587.634673][T13459] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.668494][T13459] usb 10-1: Product: syz [ 1587.706966][T13459] usb 10-1: Manufacturer: syz [ 1587.731737][T13459] usb 10-1: SerialNumber: syz [ 1587.994093][T13459] usb 10-1: 0:2 : does not exist [ 1588.032767][T13459] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1588.104916][T13459] usb 10-1: USB disconnect, device number 13 [ 1588.205477][T15756] udevd[15756]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1588.268777][T18990] loop3: detected capacity change from 0 to 512 [ 1588.372782][T18990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1588.431691][T18990] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.600842][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.117033][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.600092][T19015] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1590.836147][T19029] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1593.494792][T13485] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1593.717562][T13485] usb 10-1: Using ep0 maxpacket: 16 [ 1593.782864][T13485] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.794924][T19058] loop1: detected capacity change from 0 to 4096 [ 1593.845661][T19058] EXT4-fs: Ignoring removed nobh option [ 1593.907723][T13485] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1593.926509][T19058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1594.044916][T19058] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1594.081175][T19058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1594.138373][T13485] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1594.147703][T13485] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.155976][T13485] usb 10-1: Product: syz [ 1594.160813][T13485] usb 10-1: Manufacturer: syz [ 1594.165695][T13485] usb 10-1: SerialNumber: syz [ 1594.335139][T19058] EXT4-fs error (device loop1): __ext4_remount:6752: comm syz.1.2690: Abort forced by user [ 1594.411238][T19058] EXT4-fs (loop1): Remounting filesystem read-only [ 1594.447889][T19058] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1594.490526][T13485] usb 10-1: 0:2 : does not exist [ 1594.541975][T13485] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1594.614028][T13485] usb 10-1: USB disconnect, device number 14 [ 1594.699207][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.735358][T16164] udevd[16164]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.064825][T15430] Bluetooth: hci2: command 0x0c1a tx timeout [ 1601.501551][T19137] loop1: detected capacity change from 0 to 512 [ 1601.535027][T19137] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1601.569376][T19137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1601.669907][T19137] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm syz.1.2705: Invalid block bitmap block 0 in block_group 0 [ 1601.720840][T19137] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 1601.790646][T19137] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.2705: attempt to clear invalid blocks 983261 len 1 [ 1601.864013][T19137] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2705: Invalid inode table block 0 in block_group 0 [ 1602.014153][T19137] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1602.256344][T19137] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1602.543288][T19148] xt_CT: No such helper "pptp" [ 1602.587000][T19137] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2705: Invalid inode table block 0 in block_group 0 [ 1602.682896][T19137] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1602.771252][T19137] EXT4-fs error (device loop1): ext4_truncate:4294: inode #11: comm syz.1.2705: mark_inode_dirty error [ 1602.805259][T19137] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1602.845863][T19137] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2705: Invalid inode table block 0 in block_group 0 [ 1602.891165][T19137] EXT4-fs (loop1): 1 truncate cleaned up [ 1602.898403][T19137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1603.703070][T19162] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2705: Invalid inode table block 0 in block_group 0 [ 1603.819775][T19163] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm syz.1.2705: Invalid inode table block 0 in block_group 0 [ 1603.951587][T19163] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 1603.992986][T19163] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #2: comm syz.1.2705: mark_inode_dirty error [ 1604.404388][T19166] loop4: detected capacity change from 0 to 512 [ 1604.416045][T17188] EXT4-fs error (device loop1): __ext4_get_inode_loc:4489: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 1604.508307][T19166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1604.546175][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.649096][T19166] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1605.305307][ T28] audit: type=1107 audit(2000000122.620:16057): pid=19165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1606.026950][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.209579][T19214] loop3: detected capacity change from 0 to 256 [ 1607.705526][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.712080][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.405161][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1608.511520][T19243] loop9: detected capacity change from 0 to 512 [ 1608.621403][T19243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1608.622633][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1608.658935][T19248] loop4: detected capacity change from 0 to 512 [ 1608.666559][T19248] EXT4-fs: Ignoring removed nobh option [ 1608.686695][T19248] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1608.691200][T19243] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1608.699945][T19248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2725: casefold flag without casefold feature [ 1608.725136][T19248] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2725: error while reading EA inode 11 err=-117 [ 1608.745074][T19248] EXT4-fs (loop4): 1 orphan inode deleted [ 1608.752232][T19248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1608.984885][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.004667][ T23] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1609.013979][ T23] usb 4-1: config 1 has no interface number 0 [ 1609.027061][ T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 246, changing to 7 [ 1609.039089][ T23] usb 4-1: config 1 interface 1 has no altsetting 2 [ 1609.577098][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 1609.622383][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.679123][ T23] usb 4-1: Product: syz [ 1609.683370][ T23] usb 4-1: Manufacturer: syz [ 1609.728968][ T23] usb 4-1: SerialNumber: syz [ 1609.786606][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1610.046134][ T23] usb 4-1: USB disconnect, device number 10 [ 1610.445309][ T28] audit: type=1107 audit(2000000127.800:16058): pid=19242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1612.735312][ T5853] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1613.107549][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.138752][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.155106][ T5853] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1613.164235][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.201843][ T5853] usb 2-1: config 0 descriptor?? [ 1613.239413][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.642658][ T5853] holtek_kbd 0003:04D9:A055.0008: item fetching failed at offset 5/7 [ 1613.663032][ T5853] holtek_kbd: probe of 0003:04D9:A055.0008 failed with error -22 [ 1613.843138][ T5853] usb 2-1: USB disconnect, device number 13 [ 1615.209759][T19327] xt_CT: No such helper "pptp" [ 1615.890923][T19340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1616.310723][T19351] loop9: detected capacity change from 0 to 128 [ 1616.374429][T19351] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1616.393910][T19351] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1617.180393][T19361] loop4: detected capacity change from 0 to 16 [ 1617.232696][T19361] erofs: (device loop4): mounted with root inode @ nid 36. [ 1617.551707][T15426] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1617.792023][T19369] loop9: detected capacity change from 0 to 512 [ 1617.912488][T19369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1617.944826][T19369] ext4 filesystem being mounted at /169/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1618.401911][ T28] audit: type=1107 audit(2000000135.750:16059): pid=19368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1619.016989][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.178791][T19402] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1624.492231][T19441] loop1: detected capacity change from 0 to 512 [ 1624.555501][T19441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1624.612998][T19441] ext4 filesystem being mounted at /163/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.130563][ T28] audit: type=1107 audit(2000000142.410:16060): pid=19440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1625.746511][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.931439][T19462] loop1: detected capacity change from 0 to 512 [ 1625.939929][T19462] EXT4-fs: Ignoring removed nobh option [ 1625.958319][T19462] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1625.969240][T19462] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.2762: casefold flag without casefold feature [ 1625.996751][T19462] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2762: error while reading EA inode 11 err=-117 [ 1626.024817][T19462] EXT4-fs (loop1): 1 orphan inode deleted [ 1626.032048][T19462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1627.111989][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.179502][T19467] xt_CT: No such helper "pptp" [ 1628.466625][T19486] tipc: Started in network mode [ 1628.472138][T19486] tipc: Node identity ac1414aa, cluster identity 4711 [ 1628.488770][T19486] tipc: Enabling of bearer rejected, failed to enable media [ 1631.092485][T19512] loop4: detected capacity change from 0 to 2048 [ 1631.192473][T19512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1631.408522][T19520] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1229: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1631.485908][T19520] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 1631.534941][T19520] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1631.534941][T19520] [ 1631.566488][T19520] EXT4-fs (loop4): Total free blocks count 0 [ 1631.572582][T19520] EXT4-fs (loop4): Free/Dirty block details [ 1631.597249][T19520] EXT4-fs (loop4): free_blocks=2415919104 [ 1631.611826][T19520] EXT4-fs (loop4): dirty_blocks=64 [ 1631.629315][T19520] EXT4-fs (loop4): Block reservation details [ 1631.650988][T19520] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 1631.961517][T10665] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1104 with error 28 [ 1632.567538][T19535] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1633.028964][T19542] vcan0: entered allmulticast mode [ 1633.851891][T19546] loop4: detected capacity change from 0 to 512 [ 1633.859511][T19546] EXT4-fs: Ignoring removed nobh option [ 1633.886846][T19546] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1633.894210][T19546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2772: casefold flag without casefold feature [ 1633.909705][T19546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2772: error while reading EA inode 11 err=-117 [ 1633.922796][T19546] EXT4-fs (loop4): 1 orphan inode deleted [ 1633.930085][T19546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1634.045402][T19548] tipc: Enabled bearer , priority 0 [ 1634.121059][T19555] syzkaller0: entered promiscuous mode [ 1634.152238][T19555] syzkaller0: entered allmulticast mode [ 1634.775973][T19548] tipc: Resetting bearer [ 1634.844527][T19547] tipc: Resetting bearer [ 1634.865155][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1635.013027][T19547] tipc: Disabling bearer [ 1635.907211][T19573] loop1: detected capacity change from 0 to 128 [ 1637.135874][T19573] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1637.153253][T19573] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1637.195211][T13459] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1637.214858][T13459] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1637.645507][T15642] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1639.051058][T19606] loop4: detected capacity change from 0 to 512 [ 1639.058660][T19606] EXT4-fs: Ignoring removed nobh option [ 1639.116843][T19606] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1639.126200][T19606] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2787: casefold flag without casefold feature [ 1639.142681][T19606] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2787: error while reading EA inode 11 err=-117 [ 1639.167648][T19606] EXT4-fs (loop4): 1 orphan inode deleted [ 1639.175112][T19606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1640.437935][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.091948][T19624] loop9: detected capacity change from 0 to 512 [ 1641.141432][T19624] EXT4-fs: Ignoring removed bh option [ 1641.280735][T19624] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1641.384521][T19624] EXT4-fs (loop9): 1 truncate cleaned up [ 1641.397665][T19624] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1642.135563][T19641] loop1: detected capacity change from 0 to 16 [ 1642.384001][T19641] erofs: (device loop1): mounted with root inode @ nid 36. [ 1644.297754][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.453494][T19656] loop3: detected capacity change from 0 to 512 [ 1644.462106][T19656] EXT4-fs: Ignoring removed nobh option [ 1644.496964][T19656] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1644.505951][T19656] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2797: casefold flag without casefold feature [ 1644.527114][T19656] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2797: error while reading EA inode 11 err=-117 [ 1644.549488][T19656] EXT4-fs (loop3): 1 orphan inode deleted [ 1644.557792][T19656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1645.789586][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.890762][T19671] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1648.042513][T19700] loop1: detected capacity change from 0 to 16 [ 1648.960776][T19701] loop9: detected capacity change from 0 to 4096 [ 1648.991381][T19701] EXT4-fs: inline encryption not supported [ 1649.004140][T19701] ext4: Unknown parameter 'nouser_xattr' [ 1649.886901][T19700] erofs: (device loop1): mounted with root inode @ nid 36. [ 1652.065279][T19717] loop4: detected capacity change from 0 to 512 [ 1652.072599][T19717] EXT4-fs: Ignoring removed nobh option [ 1652.078938][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1652.116117][T19717] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1652.123063][T19717] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2809: casefold flag without casefold feature [ 1652.152277][T19717] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2809: error while reading EA inode 11 err=-117 [ 1652.168597][T19717] EXT4-fs (loop4): 1 orphan inode deleted [ 1652.176078][T19717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1652.505068][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1652.565667][ T23] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1652.611540][ T23] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1652.933017][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.948208][T19723] overlay: ./file0 is not a directory [ 1652.994646][ T23] usb 4-1: Product: syz [ 1653.022790][ T23] usb 4-1: Manufacturer: syz [ 1653.061566][ T23] usb 4-1: SerialNumber: syz [ 1653.102667][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 1653.217177][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.452379][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1653.513393][ T23] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 1656.320043][T19757] loop3: detected capacity change from 0 to 4096 [ 1656.913382][T19757] EXT4-fs: inline encryption not supported [ 1656.919715][T19757] ext4: Unknown parameter 'nouser_xattr' [ 1660.494794][T16772] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1660.717277][T16772] usb 4-1: config 120 has an invalid interface number: 125 but max is 0 [ 1660.747103][T16772] usb 4-1: config 120 has no interface number 0 [ 1660.753493][T16772] usb 4-1: config 120 interface 125 has no altsetting 0 [ 1660.818249][T16772] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 1660.833837][T16772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.854810][T16772] usb 4-1: Product: syz [ 1660.859053][T16772] usb 4-1: Manufacturer: syz [ 1660.884047][T16772] usb 4-1: SerialNumber: syz [ 1660.998310][T19786] loop1: detected capacity change from 0 to 512 [ 1661.108086][T16164] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1661.130022][T16772] ums-usbat 4-1:120.125: USB Mass Storage device detected [ 1661.160814][ T28] audit: type=1326 audit(2000000178.510:16061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19784 comm="syz.1.2821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f00f099c799 code=0x0 [ 1661.262724][T16772] usb 4-1: USB disconnect, device number 12 [ 1662.177265][T19779] loop9: detected capacity change from 0 to 40427 [ 1662.216009][T19779] F2FS-fs (loop9): invalid crc value [ 1662.714240][T19779] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1664.682145][T19779] F2FS-fs (loop9): Start checkpoint disabled! [ 1665.913022][T19830] loop4: detected capacity change from 0 to 4096 [ 1665.920600][T19830] EXT4-fs: inline encryption not supported [ 1665.926823][T19830] ext4: Unknown parameter 'nouser_xattr' [ 1667.549540][T19837] overlay: Bad value for 'redirect_dir' [ 1669.155259][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.161638][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.207798][T19853] loop4: detected capacity change from 0 to 128 [ 1669.443677][ T28] audit: type=1326 audit(2000000186.790:16062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.1.2836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00f099c799 code=0x0 [ 1669.573694][T19862] loop1: detected capacity change from 0 to 512 [ 1669.635457][T19862] ext4: Unknown parameter 'rootcontext' [ 1669.764894][T15756] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1669.884622][T19864] 9pnet_fd: Insufficient options for proto=fd [ 1669.938262][T19864] loop9: detected capacity change from 0 to 512 [ 1669.949469][T19864] ext4: Unknown parameter 'rootcontext' [ 1674.803431][T19919] loop3: detected capacity change from 0 to 4096 [ 1674.814705][T19919] EXT4-fs: inline encryption not supported [ 1674.821744][T19919] ext4: Unknown parameter 'nouser_xattr' [ 1676.911905][T19930] loop1: detected capacity change from 0 to 1024 [ 1677.056162][T19930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1677.149915][T19930] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1677.402093][T19936] binder: 19935:19936 ioctl 4018620d 0 returned -22 [ 1677.561465][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1678.016199][T19942] loop3: detected capacity change from 0 to 256 [ 1678.196315][T19942] FAT-fs (loop3): Directory bread(block 64) failed [ 1678.202943][T19942] FAT-fs (loop3): Directory bread(block 65) failed [ 1678.268067][T19942] FAT-fs (loop3): Directory bread(block 66) failed [ 1678.317265][T19942] FAT-fs (loop3): Directory bread(block 67) failed [ 1678.335485][T19942] FAT-fs (loop3): Directory bread(block 68) failed [ 1678.343027][T19942] FAT-fs (loop3): Directory bread(block 69) failed [ 1678.394929][T19942] FAT-fs (loop3): Directory bread(block 70) failed [ 1678.405787][T19942] FAT-fs (loop3): Directory bread(block 71) failed [ 1678.412496][T19942] FAT-fs (loop3): Directory bread(block 72) failed [ 1678.456279][T19942] FAT-fs (loop3): Directory bread(block 73) failed [ 1681.819465][T19992] loop3: detected capacity change from 0 to 4096 [ 1681.827551][T19992] EXT4-fs: inline encryption not supported [ 1681.833744][T19992] ext4: Unknown parameter 'nouser_xattr' [ 1687.974643][ T5853] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1690.574677][T13450] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1690.904955][T13450] usb 5-1: device descriptor read/64, error -71 [ 1691.184799][T13450] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1691.364709][T13450] usb 5-1: device descriptor read/64, error -71 [ 1691.489319][T13450] usb usb5-port1: attempt power cycle [ 1691.619505][T20066] input: syz1 as /devices/virtual/input/input10 [ 1691.954049][T13450] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1692.099311][T13450] usb 5-1: device descriptor read/8, error -71 [ 1692.597774][T13450] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1692.705934][T13450] usb 5-1: device descriptor read/8, error -71 [ 1692.886485][T13450] usb usb5-port1: unable to enumerate USB device [ 1692.986917][T20082] loop1: detected capacity change from 0 to 256 [ 1693.065345][T20082] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1693.134797][T20082] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1693.134923][T13485] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1693.213255][T20082] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 1693.354693][T13485] usb 4-1: Using ep0 maxpacket: 16 [ 1693.369738][T13485] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.400430][T13485] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1693.467199][T13485] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1693.493370][T13485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.530907][T13485] usb 4-1: Product: syz [ 1693.550085][T13485] usb 4-1: Manufacturer: syz [ 1693.564708][T13485] usb 4-1: SerialNumber: syz [ 1693.840995][T13485] usb 4-1: 0:2 : does not exist [ 1693.919402][T13485] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1694.000101][T13485] usb 4-1: USB disconnect, device number 13 [ 1694.034915][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1694.120196][T19907] udevd[19907]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1694.423773][T20108] loop9: detected capacity change from 0 to 1024 [ 1694.465991][T20108] EXT4-fs: Ignoring removed i_version option [ 1694.472102][T20108] EXT4-fs: inline encryption not supported [ 1694.541030][T20108] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1694.628806][T20108] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1697.001523][T15426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1697.468726][T20113] loop1: detected capacity change from 0 to 40427 [ 1697.501262][T20113] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1697.519121][T20140] loop3: detected capacity change from 0 to 4096 [ 1697.540454][T20113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1697.563375][T20140] EXT4-fs: inline encryption not supported [ 1697.577421][T20140] ext4: Unknown parameter 'nouser_xattr' [ 1697.631206][T20113] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 1698.119781][T20156] loop9: detected capacity change from 0 to 512 [ 1698.205812][T20156] EXT4-fs: Ignoring removed bh option [ 1698.335014][T20156] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1698.681134][T20156] EXT4-fs (loop9): 1 truncate cleaned up [ 1699.162133][T20156] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1700.289539][T20177] loop3: detected capacity change from 0 to 512 [ 1700.588659][T20177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1700.646528][T20177] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1701.099867][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.364152][T20189] input: syz0 as /devices/virtual/input/input11 [ 1703.550860][T20212] loop4: detected capacity change from 0 to 4096 [ 1703.558406][T20212] EXT4-fs: inline encryption not supported [ 1703.564514][T20212] ext4: Unknown parameter 'nouser_xattr' [ 1705.834454][T19907] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1706.171888][T20230] loop3: detected capacity change from 0 to 1024 [ 1706.225814][T20230] EXT4-fs: Ignoring removed orlov option [ 1706.296942][T20230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1706.640661][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.560453][T20257] loop4: detected capacity change from 0 to 256 [ 1711.690503][T20279] loop1: detected capacity change from 0 to 4096 [ 1711.698111][T20279] EXT4-fs: inline encryption not supported [ 1711.704206][T20279] ext4: Unknown parameter 'nouser_xattr' [ 1712.070538][T20284] loop4: detected capacity change from 0 to 256 [ 1712.185891][T20284] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 1712.337933][T20287] loop3: detected capacity change from 0 to 512 [ 1712.437159][T20287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 1712.514477][T20287] System zones: 1-12 [ 1712.575446][T20287] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2920: missing EA_INODE flag [ 1712.626526][T20287] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2920: error while reading EA inode 12 err=-117 [ 1712.746331][T20287] EXT4-fs (loop3): 1 orphan inode deleted [ 1712.799210][T20287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.998253][T19907] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1713.383550][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1716.128635][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1716.297515][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1716.306604][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1716.330020][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1716.338656][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1716.347156][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1717.084161][T20153] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1717.537410][T20312] chnl_net:caif_netlink_parms(): no params data found [ 1718.175025][T20312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.182455][T20312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.222465][T20312] bridge_slave_0: entered allmulticast mode [ 1718.261477][T20312] bridge_slave_0: entered promiscuous mode [ 1718.414999][T15430] Bluetooth: hci3: command tx timeout [ 1718.417330][T10662] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.534144][T20312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.571429][T20312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.615116][T20312] bridge_slave_1: entered allmulticast mode [ 1718.622714][T20312] bridge_slave_1: entered promiscuous mode [ 1718.715936][T10662] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.894481][T10662] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.941371][T20312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.958489][T20312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1719.057396][T10662] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1719.147217][T20312] team0: Port device team_slave_0 added [ 1719.173120][T20312] team0: Port device team_slave_1 added [ 1719.280540][T20312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1719.314292][T20312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.371494][T20312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1719.493621][T20312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.524737][T20312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.568274][T20312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.799492][T20312] hsr_slave_0: entered promiscuous mode [ 1719.847895][T20312] hsr_slave_1: entered promiscuous mode [ 1719.865116][T20312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1719.872758][T20312] Cannot create hsr debugfs directory [ 1719.943027][T10662] tipc: Left network mode [ 1720.071843][T20373] loop3: detected capacity change from 0 to 4096 [ 1720.079684][T20373] EXT4-fs: inline encryption not supported [ 1720.085877][T20373] ext4: Unknown parameter 'nouser_xattr' [ 1720.126230][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 1720.495564][T15430] Bluetooth: hci3: command tx timeout [ 1721.104720][ T5853] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1721.308613][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 1721.323167][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.343953][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1721.391986][ T5853] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1721.410426][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.434807][ T5853] usb 5-1: Product: syz [ 1721.439197][ T5853] usb 5-1: Manufacturer: syz [ 1721.464798][ T5853] usb 5-1: SerialNumber: syz [ 1721.717778][ T5853] usb 5-1: 0:2 : does not exist [ 1721.748847][ T5853] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1721.840579][ T5853] usb 5-1: USB disconnect, device number 6 [ 1722.735112][T20385] No such timeout policy "syz1" [ 1724.917348][T19907] udevd[19907]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1724.936779][T15430] Bluetooth: hci3: command tx timeout [ 1725.895091][ T5809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1726.095687][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 1726.113296][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.154674][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.179116][ T5809] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1726.204873][ T5809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.225406][T20396] loop1: detected capacity change from 0 to 128 [ 1726.265993][ T5809] usb 5-1: config 0 descriptor?? [ 1726.336915][T20396] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1726.367878][T20396] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1726.748973][ T5809] ntrig 0003:1B96:0008.000A: collection stack underflow [ 1726.782014][ T5809] ntrig 0003:1B96:0008.000A: item 0 4 0 12 parsing failed [ 1726.807154][ T5809] ntrig 0003:1B96:0008.000A: parse failed [ 1726.813234][ T5809] ntrig: probe of 0003:1B96:0008.000A failed with error -22 [ 1726.995190][T15430] Bluetooth: hci3: command tx timeout [ 1727.002203][ T7905] usb 5-1: USB disconnect, device number 7 [ 1727.156713][T15642] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1728.083509][T20419] loop1: detected capacity change from 0 to 512 [ 1728.139015][T20419] EXT4-fs: Ignoring removed i_version option [ 1728.195248][T20419] EXT4-fs: Ignoring removed bh option [ 1728.332990][T20419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1728.377624][T20419] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1728.644888][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.744905][T20444] loop1: detected capacity change from 0 to 4096 [ 1729.753214][T20444] EXT4-fs: inline encryption not supported [ 1729.759440][T20444] ext4: Unknown parameter 'nouser_xattr' [ 1729.850691][T20442] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1729.861031][T13485] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1730.760522][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.767007][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.806899][T13485] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1730.816806][T13485] usb 4-1: config 0 has no interface number 0 [ 1730.822969][T13485] usb 4-1: config 0 interface 214 has no altsetting 0 [ 1730.842207][T13485] usb 4-1: New USB device found, idVendor=0403, idProduct=bca2, bcdDevice=f5.a0 [ 1730.851592][T13468] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1730.859440][T13485] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.871423][T13485] usb 4-1: Product: syz [ 1730.878113][T13485] usb 4-1: Manufacturer: syz [ 1730.882885][T13485] usb 4-1: SerialNumber: syz [ 1730.892805][T13485] usb 4-1: config 0 descriptor?? [ 1731.067605][T13468] usb 5-1: Using ep0 maxpacket: 16 [ 1731.080900][T13468] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.091924][T13468] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1731.126382][T13485] usb 4-1: USB disconnect, device number 14 [ 1731.145797][T13468] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1731.163507][T13468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.184658][T13468] usb 5-1: Product: syz [ 1731.194670][T13468] usb 5-1: Manufacturer: syz [ 1731.205119][T13468] usb 5-1: SerialNumber: syz [ 1731.291595][T10662] hsr_slave_0: left promiscuous mode [ 1731.305650][T10662] hsr_slave_1: left promiscuous mode [ 1731.321537][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1731.336848][T10662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1731.358110][T10662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1731.374746][T10662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.392860][T10662] bridge_slave_1: left allmulticast mode [ 1731.402407][T10662] bridge_slave_1: left promiscuous mode [ 1731.413052][T10662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.450014][T10662] bridge_slave_0: left allmulticast mode [ 1731.456254][T13468] usb 5-1: 0:2 : does not exist [ 1731.466341][T10662] bridge_slave_0: left promiscuous mode [ 1731.472287][T10662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.483713][T13468] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1731.529610][T13468] usb 5-1: USB disconnect, device number 8 [ 1731.638833][T20442] udevd[20442]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1731.676492][T10662] veth1_macvtap: left promiscuous mode [ 1731.682404][T10662] veth0_macvtap: left promiscuous mode [ 1731.714903][T10662] veth1_vlan: left promiscuous mode [ 1731.720325][T10662] veth0_vlan: left promiscuous mode [ 1732.485773][T20475] loop1: detected capacity change from 0 to 512 [ 1732.543223][T20475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1732.666053][T20475] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1732.719910][T20484] mmap: syz.3.2950 (20484) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1733.080021][T20466] slcan: can't register candev [ 1733.221286][T20466] Falling back ldisc for ttyS3. [ 1733.688551][ T28] audit: type=1326 audit(2000000251.020:16063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.4.2951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x0 [ 1734.084748][T17400] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1734.319964][T17400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1734.332685][T17400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1734.384293][T17400] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1734.394251][T17400] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.428594][T17400] usb 5-1: Product: syz [ 1734.432968][T17400] usb 5-1: Manufacturer: syz [ 1734.437985][T17400] usb 5-1: SerialNumber: syz [ 1734.475286][T17400] usb 5-1: config 0 descriptor?? [ 1734.508024][T17400] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1734.733479][T10662] team0 (unregistering): Port device team_slave_1 removed [ 1734.849312][T10662] team0 (unregistering): Port device team_slave_0 removed [ 1734.982814][T10662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1735.026625][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1735.123213][T10662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1737.067406][T10662] bond0 (unregistering): Released all slaves [ 1737.273865][T20483] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1737.283592][T20483] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1737.293327][T20483] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1737.370387][T20489] netlink: 'syz.4.2951': attribute type 15 has an invalid length. [ 1737.384607][T20489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2951'. [ 1737.587823][T20312] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1737.635119][T17400] usb 5-1: USB disconnect, device number 9 [ 1737.718655][T20312] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1737.787782][T20312] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1737.872835][T20312] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1738.019084][T20514] loop1: detected capacity change from 0 to 256 [ 1738.149383][T20514] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 1738.730105][T20507] team0: Device vlan0 is already an upper device of the team interface [ 1739.561717][T20312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1739.569081][T20523] loop1: detected capacity change from 0 to 512 [ 1739.616783][T20523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 1739.658423][T20312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1739.671906][T20523] System zones: 1-12 [ 1739.705945][T20523] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2958: missing EA_INODE flag [ 1739.754155][T17188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.761462][T17188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1739.794239][T20523] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2958: error while reading EA inode 12 err=-117 [ 1739.816515][T20523] EXT4-fs (loop1): 1 orphan inode deleted [ 1739.826115][T20523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1739.849080][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.856374][T17188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1739.910193][T20502] loop3: detected capacity change from 0 to 40427 [ 1739.931682][T20502] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 1739.957442][T20502] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1740.023101][T20502] F2FS-fs (loop3): invalid crc value [ 1740.063816][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.573871][T20547] loop1: detected capacity change from 0 to 128 [ 1740.605686][T20547] EXT4-fs: Ignoring removed nobh option [ 1740.671187][T20547] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1740.781074][T20312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.805717][T20547] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1741.117932][T15642] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1741.657499][T20542] loop4: detected capacity change from 0 to 40427 [ 1741.714772][T20542] F2FS-fs (loop4): invalid crc value [ 1741.767756][T20542] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1741.982504][ T28] audit: type=1326 audit(2000000259.330:16064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20577 comm="syz.3.2964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3599c799 code=0x0 [ 1741.989487][T20542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1742.079797][T20312] veth0_vlan: entered promiscuous mode [ 1742.138132][T20312] veth1_vlan: entered promiscuous mode [ 1742.193883][ T28] audit: type=1800 audit(2000000259.540:16065): pid=20542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2960" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1742.293943][T20312] veth0_macvtap: entered promiscuous mode [ 1742.303167][T20583] syz.4.2960: attempt to access beyond end of device [ 1742.303167][T20583] loop4: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 1742.341087][T20312] veth1_macvtap: entered promiscuous mode [ 1742.405440][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.451050][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.464833][T20542] syz.4.2960: attempt to access beyond end of device [ 1742.464833][T20542] loop4: rw=2049, sector=77824, nr_sectors = 872 limit=40427 [ 1742.533794][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.578433][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.604005][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1742.614745][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.627339][T20312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1742.639303][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1742.650526][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.660860][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1742.671864][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.690921][T20312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1742.712381][T20312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1742.737460][T20312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1742.803048][T20312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.836051][T20312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.846605][T20312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1742.858049][T20312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.064135][T17188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.095384][T17188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1743.213160][T17187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.317636][T17187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.456234][T18262] syz-executor: attempt to access beyond end of device [ 1744.456234][T18262] loop4: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 1744.516850][T18262] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1744.839906][T20609] loop3: detected capacity change from 0 to 256 [ 1744.931037][T20609] FAT-fs (loop3): Directory bread(block 64) failed [ 1744.968589][T20609] FAT-fs (loop3): Directory bread(block 65) failed [ 1744.990179][T20609] FAT-fs (loop3): Directory bread(block 66) failed [ 1745.004819][T20609] FAT-fs (loop3): Directory bread(block 67) failed [ 1745.029902][T20609] FAT-fs (loop3): Directory bread(block 68) failed [ 1745.050799][T20609] FAT-fs (loop3): Directory bread(block 69) failed [ 1745.093934][T20609] FAT-fs (loop3): Directory bread(block 70) failed [ 1745.116258][T20609] FAT-fs (loop3): Directory bread(block 71) failed [ 1745.122999][T20609] FAT-fs (loop3): Directory bread(block 72) failed [ 1745.158271][T20609] FAT-fs (loop3): Directory bread(block 73) failed [ 1745.174635][T16772] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1745.364850][T16772] usb 7-1: Using ep0 maxpacket: 16 [ 1745.386055][T16772] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.412107][T16772] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1745.449541][T16772] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1745.517657][T16772] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.582190][T16772] usb 7-1: Product: syz [ 1745.638032][T16772] usb 7-1: Manufacturer: syz [ 1745.653263][T16772] usb 7-1: SerialNumber: syz [ 1745.891045][T20621] can0: slcan on ttyS3. [ 1746.492793][T16772] usb 7-1: 0:2 : does not exist [ 1746.525053][T20624] loop3: detected capacity change from 0 to 512 [ 1746.533497][T20622] can0 (unregistered): slcan off ttyS3. [ 1746.550637][T16772] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1746.602573][T20624] EXT4-fs: Ignoring removed orlov option [ 1746.661961][T16772] usb 7-1: USB disconnect, device number 4 [ 1746.724949][T20624] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1746.745718][T20624] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1746.755969][T19901] udevd[19901]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1746.784862][T19901] udevd[19901]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1746.815208][T20624] EXT4-fs (loop3): 1 truncate cleaned up [ 1746.822355][T20624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1747.126900][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.614704][T13459] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1748.627553][T13459] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.644093][T13459] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1748.657634][T13459] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1748.666987][T13459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.684582][T13459] usb 4-1: Product: syz [ 1748.688844][T13459] usb 4-1: Manufacturer: syz [ 1748.693941][T13459] usb 4-1: SerialNumber: syz [ 1748.705576][T13459] usb 4-1: config 0 descriptor?? [ 1749.116787][T20667] No such timeout policy "syz1" [ 1749.913903][T20642] loop1: detected capacity change from 0 to 40427 [ 1749.965474][T20642] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1749.993538][T13459] usb 4-1: USB disconnect, device number 15 [ 1750.036009][T20642] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1750.091540][T20642] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1751.749204][T20690] loop4: detected capacity change from 0 to 256 [ 1751.822374][T20690] FAT-fs (loop4): Directory bread(block 64) failed [ 1751.854381][T20690] FAT-fs (loop4): Directory bread(block 65) failed [ 1751.905130][T20690] FAT-fs (loop4): Directory bread(block 66) failed [ 1751.944993][T20690] FAT-fs (loop4): Directory bread(block 67) failed [ 1752.006769][T20690] FAT-fs (loop4): Directory bread(block 68) failed [ 1752.013467][T20690] FAT-fs (loop4): Directory bread(block 69) failed [ 1752.021026][T20690] FAT-fs (loop4): Directory bread(block 70) failed [ 1752.028010][T20690] FAT-fs (loop4): Directory bread(block 71) failed [ 1752.034781][T20690] FAT-fs (loop4): Directory bread(block 72) failed [ 1752.041371][T20690] FAT-fs (loop4): Directory bread(block 73) failed [ 1752.059027][T20690] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1752.911708][T20702] No such timeout policy "syz1" [ 1757.015618][T20734] loop3: detected capacity change from 0 to 16 [ 1757.338061][T20734] erofs: (device loop3): mounted with root inode @ nid 36. [ 1759.698751][T20758] No such timeout policy "syz1" [ 1760.634000][T20768] loop1: detected capacity change from 0 to 1024 [ 1760.678891][T20768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1760.757064][T20768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1762.038497][T20801] loop4: detected capacity change from 0 to 1024 [ 1762.075797][T20801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1762.780591][T20801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1763.139641][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.371252][T20815] loop4: detected capacity change from 0 to 512 [ 1763.377647][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1763.412945][T20815] EXT4-fs: Ignoring removed bh option [ 1763.443635][T20815] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1763.510909][T20815] EXT4-fs (loop4): 1 truncate cleaned up [ 1763.527889][T20815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1763.564649][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1763.582586][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.600140][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1763.622720][ T23] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1763.642419][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.654589][ T23] usb 4-1: Product: syz [ 1763.658833][ T23] usb 4-1: Manufacturer: syz [ 1763.673683][ T23] usb 4-1: SerialNumber: syz [ 1763.817981][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.937734][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1763.967586][ T23] usb 4-1: 0:2 : does not exist [ 1763.997466][ T23] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1764.110657][ T23] usb 4-1: USB disconnect, device number 16 [ 1764.135881][ T28] audit: type=1326 audit(2000000281.490:16066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20823 comm="syz.4.3008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x0 [ 1765.473682][T20847] No such timeout policy "syz1" [ 1765.717401][T20442] udevd[20442]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1767.169302][T20875] loop1: detected capacity change from 0 to 128 [ 1767.276180][T20875] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1767.380455][T20875] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1767.506046][T20889] loop4: detected capacity change from 0 to 1024 [ 1767.533283][T20889] EXT4-fs: Ignoring removed bh option [ 1767.576972][T20889] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1767.624323][T20889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1768.051944][T15642] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1768.397065][T20885] loop3: detected capacity change from 0 to 40427 [ 1768.442828][T20885] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1768.484050][T20885] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1768.515808][T20885] F2FS-fs (loop3): invalid crc value [ 1768.547713][T20885] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1768.718473][T20885] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1768.774665][T20885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1768.794460][T20907] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4045: comm syz.4.3017: Allocating blocks 497-513 which overlap fs metadata [ 1768.911154][T20907] EXT4-fs (loop4): pa ffff88805a32f910: logic 48, phys. 177, len 21 [ 1768.919533][T20907] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5386: group 0, free 0, pa_free 1 [ 1769.164949][T13485] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1769.224770][ T5853] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1769.424639][ T5853] usb 7-1: Using ep0 maxpacket: 16 [ 1769.431785][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1769.474724][ T5853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.504997][ T5853] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1769.595388][ T5853] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1769.608580][T13485] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1769.661520][T13485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.852577][T13485] usb 2-1: Product: syz [ 1770.008172][T13485] usb 2-1: Manufacturer: syz [ 1770.283300][T13485] usb 2-1: SerialNumber: syz [ 1770.434659][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.442775][ T5853] usb 7-1: Product: syz [ 1770.447060][ T5853] usb 7-1: Manufacturer: syz [ 1770.451752][ T5853] usb 7-1: SerialNumber: syz [ 1772.017586][T20943] loop3: detected capacity change from 0 to 16 [ 1772.124834][T20943] erofs: (device loop3): mounted with root inode @ nid 36. [ 1772.164913][T20943] syz.3.3025: attempt to access beyond end of device [ 1772.164913][T20943] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1772.213443][T20943] syz.3.3025: attempt to access beyond end of device [ 1772.213443][T20943] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1772.248588][T20943] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1772.338279][T20943] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1772.352896][T20943] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1772.473762][ T28] audit: type=1800 audit(2000000289.610:16067): pid=20943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3025" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1772.508995][ T5853] usb 7-1: 0:2 : does not exist [ 1772.593294][ T5853] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1772.622053][T13485] rtl8150 2-1:1.0: couldn't reset the device [ 1772.679273][T13485] rtl8150: probe of 2-1:1.0 failed with error -5 [ 1772.721035][T13485] usb 2-1: USB disconnect, device number 14 [ 1772.854970][ T5853] usb 7-1: USB disconnect, device number 5 [ 1773.005179][T20442] udevd[20442]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1773.252799][T20964] loop1: detected capacity change from 0 to 512 [ 1773.285744][T20964] EXT4-fs: Ignoring removed oldalloc option [ 1773.323716][T20964] EXT4-fs (loop1): 1 truncate cleaned up [ 1773.355955][T20964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1775.895283][T13468] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1776.098173][T13468] usb 7-1: Using ep0 maxpacket: 16 [ 1776.108995][T13468] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.139682][T13468] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1776.179211][T13468] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1776.195113][T13468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.213724][T13468] usb 7-1: Product: syz [ 1776.223597][T13468] usb 7-1: Manufacturer: syz [ 1776.233931][T13468] usb 7-1: SerialNumber: syz [ 1776.483525][T13468] usb 7-1: 0:2 : does not exist [ 1776.499887][T13468] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1776.578530][T13468] usb 7-1: USB disconnect, device number 6 [ 1776.594376][T21017] loop3: detected capacity change from 0 to 512 [ 1776.601764][T21017] EXT4-fs: Ignoring removed nobh option [ 1776.644130][T21017] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1776.663376][T21017] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3041: casefold flag without casefold feature [ 1776.685880][T21017] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3041: error while reading EA inode 11 err=-117 [ 1776.702259][T21017] EXT4-fs (loop3): 1 orphan inode deleted [ 1776.709535][T21017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1776.993605][T20442] udevd[20442]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1777.371881][T15642] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1777.548642][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1777.888245][T21044] loop6: detected capacity change from 0 to 16 [ 1777.916566][T21044] erofs: (device loop6): mounted with root inode @ nid 36. [ 1779.298587][T21058] loop3: detected capacity change from 0 to 4096 [ 1779.316691][T21063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1779.445708][T21058] EXT4-fs: Ignoring removed orlov option [ 1779.580196][T21058] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1779.601332][T21058] EXT4-fs (loop3): inodes count not valid: 40 vs 32 [ 1779.694104][T21068] vcan0: entered allmulticast mode [ 1780.880666][T21082] loop3: detected capacity change from 0 to 512 [ 1780.887999][T21082] EXT4-fs: Ignoring removed nobh option [ 1780.927171][T21082] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1780.934160][T21082] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.3053: casefold flag without casefold feature [ 1780.951868][T21082] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3053: error while reading EA inode 11 err=-117 [ 1780.965630][T21082] EXT4-fs (loop3): 1 orphan inode deleted [ 1780.972790][T21082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1781.816085][T21100] loop4: detected capacity change from 0 to 16 [ 1781.948810][T21100] erofs: (device loop4): mounted with root inode @ nid 36. [ 1782.272096][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1783.011848][T21086] loop6: detected capacity change from 0 to 40427 [ 1783.050840][T21086] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1783.084676][T21086] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1783.153088][T21086] F2FS-fs (loop6): invalid crc value [ 1783.851234][T21086] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1784.040550][T21086] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1786.442790][T21169] loop6: detected capacity change from 0 to 512 [ 1786.450117][T21169] EXT4-fs: Ignoring removed nobh option [ 1786.506513][T21169] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1786.520633][T21169] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3065: casefold flag without casefold feature [ 1786.536368][T21169] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3065: error while reading EA inode 11 err=-117 [ 1786.551861][T21169] EXT4-fs (loop6): 1 orphan inode deleted [ 1786.558949][T21169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1787.070096][ T28] audit: type=1326 audit(2000000304.400:16068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21159 comm="syz.3.3071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc3599c799 code=0x0 [ 1787.390618][T20312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1789.629384][T21194] 9pnet_virtio: no channels available for device syz [ 1789.834996][ T28] audit: type=1326 audit(2000000307.180:16069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21196 comm="syz.6.3077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e7319c799 code=0x0 [ 1790.334718][ T5809] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1790.586748][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1790.670505][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1790.732355][ T5809] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1790.793398][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.821605][ T5809] usb 7-1: Product: syz [ 1790.829647][ T5809] usb 7-1: Manufacturer: syz [ 1790.834398][ T5809] usb 7-1: SerialNumber: syz [ 1790.853560][ T5809] usb 7-1: config 0 descriptor?? [ 1790.879189][ T5809] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1791.432610][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1791.480198][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.758381][T21170] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.773323][T21170] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.790284][T21170] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.823404][T21170] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.020392][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.032122][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.141841][T21198] netlink: 'syz.6.3077': attribute type 15 has an invalid length. [ 1792.170305][T21198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3077'. [ 1796.014913][ T5809] usb 7-1: USB disconnect, device number 7 [ 1796.145265][T19929] udevd[19929]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1797.224789][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'. [ 1800.186501][T21279] No such timeout policy "syz1" [ 1801.934900][T13459] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1802.124681][T13459] usb 7-1: Using ep0 maxpacket: 8 [ 1802.139525][T13459] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1802.158846][T13459] usb 7-1: config 179 has no interface number 0 [ 1802.186570][T13459] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1802.198187][T13459] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1802.209607][T13459] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1802.220918][T13459] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1802.232527][T13459] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1802.246593][T13459] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1802.267764][T13459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.300393][T21281] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1802.736571][T21281] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3092'. [ 1802.812599][T13459] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input12 [ 1803.152875][T13459] usb 7-1: USB disconnect, device number 8 [ 1803.152943][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1803.152993][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1803.233314][T13459] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1803.487889][T21310] loop4: detected capacity change from 0 to 16 [ 1803.579961][T21310] erofs: (device loop4): mounted with root inode @ nid 36. [ 1803.598965][T21310] syz.4.3097: attempt to access beyond end of device [ 1803.598965][T21310] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1803.646918][T21310] syz.4.3097: attempt to access beyond end of device [ 1803.646918][T21310] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1803.660999][T21310] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1803.674938][ T28] audit: type=1800 audit(2000000321.020:16070): pid=21310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3097" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1803.683343][T21310] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1803.706751][T21310] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1805.016033][T21323] No such timeout policy "syz1" [ 1806.226366][T21327] No such timeout policy "syz1" [ 1807.913511][ T28] audit: type=1326 audit(2000000325.120:16071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1807.945387][ T28] audit: type=1326 audit(2000000325.130:16072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1808.058120][ T28] audit: type=1326 audit(2000000325.130:16073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1808.189906][ T28] audit: type=1326 audit(2000000325.130:16074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1808.301385][ T28] audit: type=1326 audit(2000000325.130:16075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1808.384590][ T28] audit: type=1326 audit(2000000325.140:16076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1808.434263][T21348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3106'. [ 1808.468190][ T28] audit: type=1326 audit(2000000325.140:16077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1808.522137][ T28] audit: type=1326 audit(2000000325.140:16078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1808.583901][ T28] audit: type=1326 audit(2000000325.140:16079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21328 comm="syz.4.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1811.068490][T21365] loop3: detected capacity change from 0 to 16 [ 1811.077443][T21365] erofs: (device loop3): mounted with root inode @ nid 36. [ 1811.087977][T21365] syz.3.3108: attempt to access beyond end of device [ 1811.087977][T21365] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1811.106369][T21365] syz.3.3108: attempt to access beyond end of device [ 1811.106369][T21365] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1811.120439][T21365] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1811.133794][T21365] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1811.146307][T21365] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1811.172127][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1811.172146][ T28] audit: type=1800 audit(2000000328.480:16110): pid=21365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3108" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1811.849497][T21371] No such timeout policy "syz1" [ 1814.011626][T21383] syzkaller0: entered promiscuous mode [ 1814.027530][T21383] syzkaller0: entered allmulticast mode [ 1814.091165][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3116'. [ 1814.134584][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3116'. [ 1818.876610][T21408] No such timeout policy "syz1" [ 1822.868963][T21424] pimreg: entered allmulticast mode [ 1823.470029][T21429] loop6: detected capacity change from 0 to 512 [ 1823.477516][T21429] EXT4-fs: Ignoring removed nobh option [ 1823.592695][T21429] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1823.608514][T21429] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3127: casefold flag without casefold feature [ 1823.628277][T21429] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3127: error while reading EA inode 11 err=-117 [ 1823.642403][T21429] EXT4-fs (loop6): 1 orphan inode deleted [ 1823.650182][T21429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1824.033442][T20312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.113825][T21439] No such timeout policy "syz1" [ 1827.137458][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1827.339780][T21472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.477856][T21472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.623144][T21477] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1827.809866][T21472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1829.147631][T21488] loop6: detected capacity change from 0 to 512 [ 1829.154857][T21488] EXT4-fs: Ignoring removed nobh option [ 1829.239021][T21488] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1829.247768][T21488] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3138: casefold flag without casefold feature [ 1829.273254][T21488] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3138: error while reading EA inode 11 err=-117 [ 1829.292692][T21488] EXT4-fs (loop6): 1 orphan inode deleted [ 1829.300104][T21488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1829.568750][T20312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1831.130623][T21502] loop3: detected capacity change from 0 to 128 [ 1831.233498][T21502] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1831.300182][T21502] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1831.316356][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1831.327931][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1831.337079][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1831.346511][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1831.354045][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1831.361958][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1831.566648][T21513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1832.639855][T15912] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1833.464775][ T51] Bluetooth: hci1: command tx timeout [ 1833.520428][T21507] chnl_net:caif_netlink_parms(): no params data found [ 1833.713277][T21537] No such timeout policy "syz1" [ 1834.911380][T21507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.920315][T21507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.930505][T21507] bridge_slave_0: entered allmulticast mode [ 1834.953429][T21507] bridge_slave_0: entered promiscuous mode [ 1834.999287][T21507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.017409][T21507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.036051][T21507] bridge_slave_1: entered allmulticast mode [ 1835.054879][T21507] bridge_slave_1: entered promiscuous mode [ 1835.307224][T10667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.366815][T21507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1835.458625][T10667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.537039][ T51] Bluetooth: hci1: command tx timeout [ 1835.618000][T21507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1835.841105][T21558] loop4: detected capacity change from 0 to 1024 [ 1835.898073][T21558] EXT4-fs: Ignoring removed i_version option [ 1835.929123][T10667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.957581][T21558] EXT4-fs: inline encryption not supported [ 1835.970640][T21558] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1836.028709][T21507] team0: Port device team_slave_0 added [ 1836.040044][T21507] team0: Port device team_slave_1 added [ 1836.047608][T21558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.175525][T10667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.241180][T21507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1836.268294][T21564] loop6: detected capacity change from 0 to 128 [ 1836.286886][T21507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.407737][T21564] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1836.427005][T21507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.442263][T21507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1836.463417][T21507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.490018][T21564] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1836.526905][T21507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1836.698578][T21507] hsr_slave_0: entered promiscuous mode [ 1836.726076][T21507] hsr_slave_1: entered promiscuous mode [ 1836.757307][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.789661][T21507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1836.842267][T21507] Cannot create hsr debugfs directory [ 1837.059879][T20312] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1837.073323][T21572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1837.615590][ T51] Bluetooth: hci1: command tx timeout [ 1837.900432][T10667] tipc: Left network mode [ 1838.629932][T21596] No such timeout policy "syz1" [ 1839.694863][ T51] Bluetooth: hci1: command tx timeout [ 1840.180117][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1840.961609][T21634] loop4: detected capacity change from 0 to 1024 [ 1840.969436][T21634] EXT4-fs: Ignoring removed i_version option [ 1840.989543][T21634] EXT4-fs: inline encryption not supported [ 1841.007622][T21634] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1841.056444][T21634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1841.907877][T21646] loop3: detected capacity change from 0 to 128 [ 1842.025368][T21646] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1842.089191][T21646] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.207680][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.867133][T15912] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1843.088108][ T28] audit: type=1326 audit(2000000360.430:16111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21663 comm="syz.3.3162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3599c799 code=0x0 [ 1843.616847][T21672] No such timeout policy "syz1" [ 1844.975902][T10667] hsr_slave_0: left promiscuous mode [ 1845.030896][T10667] hsr_slave_1: left promiscuous mode [ 1845.066163][T10667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1845.094377][T10667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1845.123018][T10667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1845.307603][T10667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.352454][T10667] bridge_slave_1: left allmulticast mode [ 1845.394786][T10667] bridge_slave_1: left promiscuous mode [ 1845.413187][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.504250][T10667] bridge_slave_0: left allmulticast mode [ 1845.531480][T10667] bridge_slave_0: left promiscuous mode [ 1845.559946][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.764347][T21695] tmpfs: User quota inode hardlimit too large. [ 1845.835674][T10667] veth1_vlan: left promiscuous mode [ 1845.841118][T10667] veth0_vlan: left promiscuous mode [ 1846.070722][ T28] audit: type=1326 audit(2000000363.420:16112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21702 comm="syz.4.3170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x0 [ 1847.651318][T10667] team0 (unregistering): Port device team_slave_1 removed [ 1847.731677][T10667] team0 (unregistering): Port device team_slave_0 removed [ 1847.806732][T10667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1847.876204][T10667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1848.480326][T10667] bond0 (unregistering): Released all slaves [ 1848.520292][T10667] vcan0 (unregistering): left allmulticast mode [ 1848.750730][T21709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1849.038402][T21507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1850.477521][T21730] xt_CT: No such helper "pptp" [ 1850.629674][T21507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1850.753935][T21507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1850.841973][T21507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1851.656397][T21507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1851.751680][T21507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1851.818655][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1851.825914][T10665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1851.850613][ T28] audit: type=1326 audit(2000000369.180:16113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21756 comm="syz.4.3178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x0 [ 1851.923067][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.930293][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.740035][T21507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.751829][T21771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1853.462055][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.469542][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.515512][T21775] vcan0: entered allmulticast mode [ 1854.378583][T21507] veth0_vlan: entered promiscuous mode [ 1854.476053][T21507] veth1_vlan: entered promiscuous mode [ 1855.014926][T21801] xt_CT: No such helper "pptp" [ 1855.262564][T21507] veth0_macvtap: entered promiscuous mode [ 1855.337541][T21507] veth1_macvtap: entered promiscuous mode [ 1855.438365][T21507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.501588][T21507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.557328][T21507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.598112][T21507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.621413][ T28] audit: type=1326 audit(2000000372.970:16114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21811 comm="syz.3.3186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3599c799 code=0x0 [ 1855.631588][T21507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1855.708675][T21507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.741362][T21507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.782899][T21507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.830614][T21507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.861872][T21507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1855.898910][T21507] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.929130][T21507] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.953740][T21507] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1855.971120][T21507] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.451311][T10673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.520158][T10673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.696561][T10662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.722975][T10662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.790191][ T28] audit: type=1326 audit(2000000374.980:16115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1857.942237][ T28] audit: type=1326 audit(2000000374.990:16116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1858.071755][ T28] audit: type=1326 audit(2000000374.990:16117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1858.189976][ T28] audit: type=1326 audit(2000000374.990:16118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1858.350198][ T28] audit: type=1326 audit(2000000374.990:16119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1858.563102][ T28] audit: type=1326 audit(2000000375.000:16120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1858.711055][ T28] audit: type=1326 audit(2000000375.000:16121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1858.865395][ T28] audit: type=1326 audit(2000000375.000:16122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1859.000790][ T28] audit: type=1326 audit(2000000375.000:16123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1859.225800][ T28] audit: type=1326 audit(2000000375.010:16124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21834 comm="syz.7.3137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3bb9c799 code=0x7ffc0000 [ 1863.821804][T21898] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1863.946697][T21898] random: crng reseeded on system resumption [ 1866.549844][T21945] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3214'. [ 1867.115878][T21966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3220'. [ 1867.640917][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 1867.640955][ T28] audit: type=1326 audit(2000000384.890:16172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.218178][ T28] audit: type=1326 audit(2000000384.890:16173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.251484][ T28] audit: type=1326 audit(2000000384.900:16174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.432341][ T28] audit: type=1326 audit(2000000384.900:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.464580][ T28] audit: type=1326 audit(2000000384.900:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.524614][ T28] audit: type=1326 audit(2000000384.910:16177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.580929][ T28] audit: type=1326 audit(2000000384.910:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.725941][ T28] audit: type=1326 audit(2000000384.910:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.750040][T21980] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.831884][ T28] audit: type=1326 audit(2000000384.920:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1868.888788][ T28] audit: type=1326 audit(2000000384.940:16181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21967 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f195f59c799 code=0x7ffc0000 [ 1869.265207][T21980] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.823809][T21980] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1869.841311][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 1871.001194][T21980] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.412393][T21980] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.473938][T21980] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.526853][T21980] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.561818][T21980] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.632228][T22023] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1871.666456][T22023] random: crng reseeded on system resumption [ 1874.575163][T13459] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1874.754684][T13459] usb 5-1: device descriptor read/64, error -71 [ 1875.034904][T13459] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1875.195623][T13459] usb 5-1: device descriptor read/64, error -71 [ 1875.334948][T13459] usb usb5-port1: attempt power cycle [ 1876.394780][T13459] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1876.729694][T13459] usb 5-1: device descriptor read/8, error -71 [ 1877.014842][T13459] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1877.079691][T13459] usb 5-1: device descriptor read/8, error -71 [ 1877.763932][T13459] usb usb5-port1: unable to enumerate USB device [ 1879.137881][T22124] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1879.153396][T22124] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1880.264833][T13468] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1881.460403][T13468] usb 4-1: device descriptor read/64, error -71 [ 1881.735001][T13468] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1881.905439][T13468] usb 4-1: device descriptor read/64, error -71 [ 1882.045032][T13468] usb usb4-port1: attempt power cycle [ 1882.495105][T13468] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1882.762092][T13468] usb 4-1: device not accepting address 19, error -71 [ 1884.940552][T22194] loop6: detected capacity change from 0 to 128 [ 1885.096468][T22194] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1885.225316][T22194] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1885.761430][T20312] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1885.964666][T13456] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1886.195926][T13456] usb 5-1: Using ep0 maxpacket: 16 [ 1886.222573][T13456] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.265457][T13456] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1886.294968][T13456] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1886.306615][T22218] binder: 22216:22218 ioctl c0306201 2000000003c0 returned -14 [ 1886.315376][T13456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.323523][T13456] usb 5-1: Product: syz [ 1886.328428][T13456] usb 5-1: Manufacturer: syz [ 1886.333086][T13456] usb 5-1: SerialNumber: syz [ 1886.586753][T13456] usb 5-1: 0:2 : does not exist [ 1886.637701][T13456] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1886.782320][T22225] No such timeout policy "syz1" [ 1886.843128][T13456] usb 5-1: USB disconnect, device number 14 [ 1887.089042][T20442] udevd[20442]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1887.488851][T22232] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3288'. [ 1887.811963][T22244] loop6: detected capacity change from 0 to 1024 [ 1887.837453][T22244] EXT4-fs: Ignoring removed i_version option [ 1887.855419][T22244] EXT4-fs: inline encryption not supported [ 1887.900526][T22244] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1887.944307][T22244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1888.531831][T20312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.266126][T22267] netlink: 'syz.3.3297': attribute type 10 has an invalid length. [ 1889.326227][T22267] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1889.846569][T22267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1890.165154][T21208] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1890.435864][T21208] usb 5-1: Using ep0 maxpacket: 16 [ 1890.465607][T21208] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1890.524860][T21208] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1890.591886][T21208] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1890.639755][T21208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.671493][T21208] usb 5-1: Product: syz [ 1890.678194][T21208] usb 5-1: Manufacturer: syz [ 1890.702118][T21208] usb 5-1: SerialNumber: syz [ 1890.931295][T22282] No such timeout policy "syz1" [ 1891.413915][T21208] usb 5-1: 0:2 : does not exist [ 1891.434714][T21208] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1891.691844][T21208] usb 5-1: USB disconnect, device number 15 [ 1891.806833][T20442] udevd[20442]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1892.175406][T22287] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3301'. [ 1892.580312][T22298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1892.589650][T22298] nbd: must specify at least one socket [ 1893.323214][T22299] loop3: detected capacity change from 0 to 1024 [ 1893.632159][T22299] EXT4-fs: Ignoring removed i_version option [ 1893.780774][T22299] EXT4-fs: inline encryption not supported [ 1893.973206][T22299] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1894.882354][T22299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1895.301114][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1895.787204][T22324] No such timeout policy "syz1" [ 1896.282456][T22323] overlayfs: overlapping lowerdir path [ 1897.048317][T22334] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3309'. [ 1899.101806][ T6974] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.241833][ T6974] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.421188][ T6974] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.552230][ T6974] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.101585][T22376] loop6: detected capacity change from 0 to 16 [ 1900.129612][T22376] erofs: (device loop6): mounted with root inode @ nid 36. [ 1900.150024][T22376] syz.6.3318: attempt to access beyond end of device [ 1900.150024][T22376] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1900.205540][T22376] syz.6.3318: attempt to access beyond end of device [ 1900.205540][T22376] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1900.220640][T22376] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1900.244023][T22376] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1900.258142][T22376] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1900.348584][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 1900.348625][ T28] audit: type=1800 audit(2000000417.580:16235): pid=22376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3318" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1901.351767][T22382] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3320'. [ 1901.999996][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1902.013899][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1902.023259][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1902.035880][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1902.044045][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1902.055983][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1903.183110][T22393] chnl_net:caif_netlink_parms(): no params data found [ 1903.427717][ T6974] hsr_slave_0: left promiscuous mode [ 1903.459252][ T6974] hsr_slave_1: left promiscuous mode [ 1903.485910][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1903.493402][ T6974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1903.525564][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1903.573941][ T6974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1903.585545][ T6974] bridge_slave_1: left allmulticast mode [ 1903.591271][ T6974] bridge_slave_1: left promiscuous mode [ 1903.617555][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.637032][ T6974] bridge_slave_0: left allmulticast mode [ 1903.653010][ T6974] bridge_slave_0: left promiscuous mode [ 1903.673497][ T6974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1904.064941][ T6974] veth1_macvtap: left promiscuous mode [ 1904.070593][ T6974] veth0_macvtap: left promiscuous mode [ 1904.085049][ T6974] veth1_vlan: left promiscuous mode [ 1904.090640][ T6974] veth0_vlan: left promiscuous mode [ 1904.096859][T22416] No such timeout policy "syz1" [ 1904.174864][T15430] Bluetooth: hci0: command tx timeout [ 1905.215207][T22423] loop4: detected capacity change from 0 to 1024 [ 1905.245896][T22423] EXT4-fs: Ignoring removed i_version option [ 1905.262564][T22423] EXT4-fs: inline encryption not supported [ 1905.272728][T22423] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1905.353752][T22423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1905.568155][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1906.115049][T22445] loop4: detected capacity change from 0 to 16 [ 1906.635302][T15430] Bluetooth: hci0: command tx timeout [ 1907.022518][T22445] erofs: (device loop4): mounted with root inode @ nid 36. [ 1907.040922][T22444] syz.4.3327: attempt to access beyond end of device [ 1907.040922][T22444] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1907.059903][T22444] syz.4.3327: attempt to access beyond end of device [ 1907.059903][T22444] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1907.075397][T22444] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1907.086804][ T28] audit: type=1800 audit(2000000424.440:16236): pid=22444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3327" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1907.107196][T22444] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1907.118486][T22444] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1907.559340][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3328'. [ 1907.957812][T22469] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1908.153886][T22472] random: crng reseeded on system resumption [ 1908.671962][T15430] Bluetooth: hci0: command tx timeout [ 1909.058103][T22478] No such timeout policy "syz1" [ 1910.631324][ T6974] team0 (unregistering): Port device team_slave_1 removed [ 1910.734933][T15430] Bluetooth: hci0: command tx timeout [ 1910.768307][T22482] loop4: detected capacity change from 0 to 1024 [ 1910.782960][T22482] EXT4-fs: Ignoring removed i_version option [ 1910.789369][T22482] EXT4-fs: inline encryption not supported [ 1910.811030][T22482] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1910.840945][ T6974] team0 (unregistering): Port device team_slave_0 removed [ 1910.850081][T22482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1910.972815][ T6974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1910.987987][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1911.100036][T22486] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3333'. [ 1911.143825][ T6974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1911.802218][ T6974] bond0 (unregistering): Released all slaves [ 1912.387795][T22497] loop4: detected capacity change from 0 to 128 [ 1912.467074][T22393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.484373][T22497] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1912.492246][T22393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.509226][T22393] bridge_slave_0: entered allmulticast mode [ 1912.558391][T22393] bridge_slave_0: entered promiscuous mode [ 1912.594031][T22393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1912.611355][T22393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.614070][T22497] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1912.635270][T22393] bridge_slave_1: entered allmulticast mode [ 1912.733529][T22393] bridge_slave_1: entered promiscuous mode [ 1912.852347][T22393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.928741][T22393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1913.101340][T22393] team0: Port device team_slave_0 added [ 1913.120951][T22393] team0: Port device team_slave_1 added [ 1913.174938][T22393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1913.191740][T22393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.277109][T22393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1913.313880][T18262] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1913.378390][T22393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1913.399361][T22506] No such timeout policy "syz1" [ 1913.407130][T22393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1913.441714][T22393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1913.529623][T22393] hsr_slave_0: entered promiscuous mode [ 1913.549645][T22393] hsr_slave_1: entered promiscuous mode [ 1913.583491][T22393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1913.638568][T22393] Cannot create hsr debugfs directory [ 1914.491263][T22512] loop3: detected capacity change from 0 to 1024 [ 1914.556084][T22512] EXT4-fs: Ignoring removed i_version option [ 1914.562221][T22512] EXT4-fs: inline encryption not supported [ 1914.630553][T22512] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1914.660368][T22512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1914.980928][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.013641][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.014146][T15912] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1919.374376][T22536] sctp: [Deprecated]: syz.3.3343 (pid 22536) Use of int in maxseg socket option. [ 1919.374376][T22536] Use struct sctp_assoc_value instead [ 1919.692562][T22393] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1919.753040][T22393] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1919.771355][T22393] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1919.784377][T22393] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1920.506839][T22393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1920.609022][T22552] loop4: detected capacity change from 0 to 16 [ 1921.426899][T22552] erofs: (device loop4): mounted with root inode @ nid 36. [ 1921.440434][T22551] syz.4.3346: attempt to access beyond end of device [ 1921.440434][T22551] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1921.473972][T22393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1921.491043][T22551] syz.4.3346: attempt to access beyond end of device [ 1921.491043][T22551] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1921.505093][T22551] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1921.516517][ T28] audit: type=1800 audit(2000000438.870:16237): pid=22551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3346" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1921.673707][ T6974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1921.681015][ T6974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1921.797171][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1921.804368][T10665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1921.889092][T22559] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1923.068649][T22393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1925.061060][T22594] loop4: detected capacity change from 0 to 1024 [ 1925.106673][T22594] EXT4-fs: Ignoring removed i_version option [ 1925.112789][T22594] EXT4-fs: inline encryption not supported [ 1925.328666][T22594] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1927.985538][T22594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1928.035756][T22393] veth0_vlan: entered promiscuous mode [ 1928.211878][T22393] veth1_vlan: entered promiscuous mode [ 1928.237016][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1928.360684][T22393] veth0_macvtap: entered promiscuous mode [ 1928.440393][T22393] veth1_macvtap: entered promiscuous mode [ 1928.560820][T22393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1928.641700][T22618] loop6: detected capacity change from 0 to 16 [ 1928.664691][T22618] erofs: (device loop6): mounted with root inode @ nid 36. [ 1928.685568][T22618] syz.6.3354: attempt to access beyond end of device [ 1928.685568][T22618] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1928.753248][T22618] syz.6.3354: attempt to access beyond end of device [ 1928.753248][T22618] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1928.768874][T22618] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1928.807732][ T28] audit: type=1800 audit(2000000446.130:16238): pid=22618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3354" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1928.927314][T22393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1929.206984][T22393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1929.477846][T22393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1929.518578][T22393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1929.640438][T22613] team0: Device vlan0 is already an upper device of the team interface [ 1929.823001][T22393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1929.850950][T22393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1929.881444][T22393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1929.907011][T22393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1929.947009][T22393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1930.115882][T22393] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.125941][T22393] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.870345][T22393] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.910956][T22393] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.449229][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.490206][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.142244][T17188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.168196][T17188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.313130][T22653] loop4: detected capacity change from 0 to 1024 [ 1934.461232][T22653] EXT4-fs: Ignoring removed i_version option [ 1934.603855][T22653] EXT4-fs: inline encryption not supported [ 1934.784860][T22653] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1935.226651][T22653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1936.722361][T22669] binder: BINDER_SET_CONTEXT_MGR already set [ 1936.741501][T22669] binder: 22668:22669 ioctl 4018620d 2000000002c0 returned -16 [ 1937.090395][T22677] No such timeout policy "syz1" [ 1938.187774][T22687] No such timeout policy "syz1" [ 1939.498787][T22698] (null): rxe_set_mtu: Set mtu to 1024 [ 1939.601314][T18262] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1940.555850][T22698] infiniband syz1: set active [ 1940.590374][T22698] infiniband syz1: added syz_tun [ 1941.001153][T22698] RDS/IB: syz1: added [ 1941.026745][T22698] smc: adding ib device syz1 with port count 1 [ 1941.033276][T22698] smc: ib device syz1 port 1 has pnetid [ 1941.992117][T22726] binder_alloc: 22725: binder_alloc_buf, no vma [ 1942.403915][T22734] loop4: detected capacity change from 0 to 128 [ 1942.470241][T22734] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1942.534801][T22734] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1943.334864][T18262] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1943.679162][T22756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1946.388076][T22767] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(12) [ 1946.395386][T22767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1946.407186][T22770] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(15) [ 1946.413830][T22770] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1946.443205][T22765] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1946.449787][T22765] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1946.458636][T22770] vhci_hcd vhci_hcd.0: Device attached [ 1946.464680][T22772] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 1946.464753][T22772] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1946.464804][T22772] vhci_hcd vhci_hcd.0: Device attached [ 1946.509629][T22767] vhci_hcd vhci_hcd.0: Device attached [ 1946.518786][T22777] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 1946.525448][T22777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1946.541324][T22777] vhci_hcd vhci_hcd.0: Device attached [ 1946.561690][T22767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1946.581948][T22767] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1946.620834][T22772] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(25) [ 1946.627536][T22772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1946.651278][T22765] vhci_hcd vhci_hcd.0: Device attached [ 1946.694836][T22772] vhci_hcd vhci_hcd.0: Device attached [ 1946.726500][T22778] vhci_hcd: connection closed [ 1946.730511][T17188] vhci_hcd: stop threads [ 1946.741849][T22773] vhci_hcd: connection closed [ 1946.745105][T22768] vhci_hcd: connection closed [ 1946.756284][T17188] vhci_hcd: release socket [ 1946.814798][T21215] usb 45-2: new low-speed USB device number 2 using vhci_hcd [ 1946.826252][T22774] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1946.839098][T17188] vhci_hcd: disconnect device [ 1946.864561][T17188] vhci_hcd: stop threads [ 1946.878355][T17188] vhci_hcd: release socket [ 1946.893803][T22779] vhci_hcd: connection closed [ 1946.910731][T17188] vhci_hcd: disconnect device [ 1946.929741][T22769] vhci_hcd: connection closed [ 1946.930218][T17188] vhci_hcd: stop threads [ 1946.946529][T17188] vhci_hcd: release socket [ 1947.662301][T22783] vhci_hcd: connection closed [ 1947.695111][T17188] vhci_hcd: disconnect device [ 1947.774847][T17188] vhci_hcd: stop threads [ 1947.779197][T17188] vhci_hcd: release socket [ 1947.813446][T17188] vhci_hcd: disconnect device [ 1947.845055][T17188] vhci_hcd: stop threads [ 1947.869566][T17188] vhci_hcd: release socket [ 1947.913511][T17188] vhci_hcd: disconnect device [ 1947.929094][T17188] vhci_hcd: stop threads [ 1947.933424][T17188] vhci_hcd: release socket [ 1947.986930][T17188] vhci_hcd: disconnect device [ 1948.337806][T22805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1948.604798][T22812] loop6: detected capacity change from 0 to 1024 [ 1948.613901][T22812] EXT4-fs: Ignoring removed i_version option [ 1948.630313][T22812] EXT4-fs: inline encryption not supported [ 1948.694246][T22814] vcan0: entered allmulticast mode [ 1948.870930][T22812] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1949.294263][T22812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1949.762425][T22825] loop4: detected capacity change from 0 to 16 [ 1949.816299][T22825] erofs: (device loop4): mounted with root inode @ nid 36. [ 1949.837880][T22825] syz.4.3381: attempt to access beyond end of device [ 1949.837880][T22825] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 1950.022870][T22825] syz.4.3381: attempt to access beyond end of device [ 1950.022870][T22825] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1950.039158][T22825] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 1950.141622][ T28] audit: type=1800 audit(2000000467.400:16239): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3381" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1951.247555][T20312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1952.174887][T21215] vhci_hcd: vhci_device speed not set [ 1952.688468][T22839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3393'. [ 1954.037668][T16144] usb usb46-port1: attempt power cycle [ 1954.841245][T16144] usb usb46-port1: unable to enumerate USB device [ 1954.969162][T22876] vlan0: entered promiscuous mode [ 1954.989370][T22876] vlan0: entered allmulticast mode [ 1955.050528][T22876] hsr_slave_1: entered allmulticast mode [ 1955.082541][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1959.798055][T22909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1961.034989][T22921] loop8: detected capacity change from 0 to 128 [ 1961.086827][T20442] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1961.434691][T21209] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1961.665889][T21209] usb 7-1: Using ep0 maxpacket: 16 [ 1961.727811][T21209] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.791583][T21209] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1961.816855][T21209] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1961.836256][T21209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.852344][T21209] usb 7-1: Product: syz [ 1961.860946][T21209] usb 7-1: Manufacturer: syz [ 1961.868856][T21209] usb 7-1: SerialNumber: syz [ 1962.101193][T21209] usb 7-1: 0:2 : does not exist [ 1962.147090][T21209] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1962.162256][T22933] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3411'. [ 1962.236632][T21209] usb 7-1: USB disconnect, device number 9 [ 1962.391770][T20442] udevd[20442]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1964.757568][T22947] binder_alloc: 22946: binder_alloc_buf, no vma [ 1966.472229][T22959] loop8: detected capacity change from 0 to 128 [ 1976.350646][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.358159][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 Stopping sshd: stopped /usr/sbin/sshd (pid 5528) OK Stopping crond: stopped /usr/sbin/crond (pid 5512) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5431) Stopping network: OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5119) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 1989.129454][T15912] bond0: (slave syz_tun): Releasing backup interface [ 1989.150652][T22393] infiniband syz1: set down [ 1989.175730][T21213] syz1: rxe_query_port: returned err = -19 [ 1989.182107][T21213] infiniband syz1: ib_query_port failed (-19) [ 1989.192975][T10665] smc: removing ib device syz1 [ 1989.365485][ T4138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.563460][ T4138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.747435][ T4138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.924969][ T4138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.023659][T23435] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1990.040505][T23435] ACPI: PM: Preparing to enter system sleep state S5 [ 1990.058680][T23435] kvm: exiting hardware virtualization [ 1990.066223][T23435] reboot: Power down serialport: VM disconnected.