last executing test programs: 15m4.300674582s ago: executing program 32 (id=11): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="ffcc043b4c2f2ae4248cde238dbc64be70fcdad4129b8ba2cad05e5fda1355e1", 0x20, 0x24044001, &(0x7f00000002c0)={0x11, 0xec, r6, 0x1, 0x20, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000240)="93a749700b71659fbc09a7b50800", 0x36, 0x0, 0x0, 0x0) 14m59.335302899s ago: executing program 33 (id=29): socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 14m55.402595511s ago: executing program 34 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0) 10m24.049246712s ago: executing program 4 (id=677): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x19, 0x1c, 0x0, 0x0, 0x8, 0xc8, &(0x7f0000001680)=""/200, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000017c0)={0x1, 0xb, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x20048005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 10m23.083948115s ago: executing program 4 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x148, 0x0, 0x6, [{{0x6, 0x3, 0x7, 0xf7c, 0xc, 0x400, {0x7, 0x2, 0x10001, 0x369b, 0x3, 0x7, 0x3, 0x1, 0x4, 0x2000, 0x8, r5, r6, 0x40824c39, 0x4}}, {0x2, 0x0, 0x9f, 0x4, 'rkotmo\xb8\xa4ade\x00\xe1\x00\x00\x00\x00\x00\x00\x00\x00\xea;\xff\xc7\xfeXA^\x90\xde\xea|G\xe7\xa0\xca\x1c\xd8dE\xd4\x12\x13\x87\x02\f\xf4p\xfe\x9d\x06\x83f;\x7f\xeb\xc9\xc6\xff\xd2\xb4\x1f\x91V3\xb9\xeb\x13-\xf5\x9e\xd6Zdm\xad\xdd\v\xaf\x1aZZ\x8c\x92\xaa\xd9=t.\x9a0\xac\xae\x92\xc4\x9bx\x83\x1b3\xeeE\x10o\x94\x10\xa2%w>\xe0\x17\x1a\xdc\xe6T\xd3\xbf\xc7\x87J\\A\xa9\x18\x04\xb5\xfa\xf6\x1d\x903\x9e\xb9f\x12\xf7\xca\xea\x82\xeb\xe9v\xc9\xb2\x9c\x9b\xe3\tV\xbeS\xb6\xc62\xd1+\x0f'}}]}, 0x0, 0x0}) 10m11.413195616s ago: executing program 4 (id=711): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m8.327055584s ago: executing program 4 (id=719): syz_open_procfs(0x0, 0x0) socket(0x2b, 0x80801, 0x1) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0xffffffff, 0x0, 0xf}}, 0x0, 0x0}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000ff000009"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200"], 0x5c}}, 0x0) 10m6.16576501s ago: executing program 4 (id=724): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x4, 0x1}, 0x7f, 0xa4, &(0x7f0000002840)={0x5f, 0x5, 0x7, 0x900}, 0x8, 0x3, 0x0, 0x0, 0x97, 0x7fff, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0x10b, 0x70bd28, 0x4, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100000, 0x0, 0x3a773c6217fab0b, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002100, 0x0) 10m4.771636905s ago: executing program 4 (id=727): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x22, 0x2, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) close(r1) ftruncate(0xffffffffffffffff, 0x1) 9m49.397685801s ago: executing program 35 (id=727): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x22, 0x2, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xbcff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) close(r1) ftruncate(0xffffffffffffffff, 0x1) 5m19.374948294s ago: executing program 7 (id=1417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001c00"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m18.255475398s ago: executing program 7 (id=1420): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) 5m17.761284512s ago: executing program 7 (id=1424): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x10000) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r2, r1, 0x0, 0xffefffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00ff070000000001000001040000ed0f000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0400000005000000050000000e00"/28], 0x50) chdir(&(0x7f00000000c0)='./file1\x00') r3 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) dup(r3) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) 5m10.899489736s ago: executing program 7 (id=1433): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private1}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001c00"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m10.340577644s ago: executing program 7 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$kcm(0x2a, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x4000) gettid() openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5m6.96698517s ago: executing program 7 (id=1442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 4m50.418428s ago: executing program 36 (id=1442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 3m41.601286886s ago: executing program 3 (id=1623): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x40000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_gettime(0x2, &(0x7f0000000300)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(0xffffffffffffffff, 0x3) 3m35.225314586s ago: executing program 3 (id=1638): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) 3m28.56518372s ago: executing program 3 (id=1655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2, r1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74, 0x0, &(0x7f0000000580)=""/4096, 0x1000}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) read$FUSE(r8, &(0x7f00000026c0)={0x2020}, 0x2020) fchdir(r5) r9 = add_key(&(0x7f0000000380)='encrypted\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r9, 0x1ff0000000000000, 0x0) 3m26.735938831s ago: executing program 3 (id=1657): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x14fc, &(0x7f0000002a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef35ac213bb938a9000f0000400200000000110ff4117639c2eb4b78c660e677df70190db900", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 3m24.206939925s ago: executing program 3 (id=1667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r2, 0x2}}, 0x18) 3m22.545008193s ago: executing program 3 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000004330000", @ANYRES32, @ANYBLOB="0000004000000000000400010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/14], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7f, 0x1c, &(0x7f00000003c0)=""/28, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f00000004c0)=[{0x1, 0x2, 0xe, 0x5}, {0x2, 0x2, 0xb, 0x3}, {0x1, 0x5, 0xe, 0x7}, {0x4, 0x2, 0x2, 0x6}], 0x10, 0x0, @void, @value}, 0x94) kcmp(r0, r0, 0x6, r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) 3m21.376025305s ago: executing program 37 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000004330000", @ANYRES32, @ANYBLOB="0000004000000000000400010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/14], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7f, 0x1c, &(0x7f00000003c0)=""/28, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f00000004c0)=[{0x1, 0x2, 0xe, 0x5}, {0x2, 0x2, 0xb, 0x3}, {0x1, 0x5, 0xe, 0x7}, {0x4, 0x2, 0x2, 0x6}], 0x10, 0x0, @void, @value}, 0x94) kcmp(r0, r0, 0x6, r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) 2m57.965171012s ago: executing program 9 (id=1730): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) write$sndseq(r0, &(0x7f0000000200), 0x0) read$snapshot(r0, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000980)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'bridge_slave_0\x00', 0x8000}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r5, &(0x7f0000000580), 0x0, 0x4}, 0x20) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 2m54.026200997s ago: executing program 9 (id=1736): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) close(r0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 2m50.528610838s ago: executing program 9 (id=1742): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2m50.217802251s ago: executing program 9 (id=1744): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) 2m49.161077016s ago: executing program 9 (id=1747): syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x14fc, &(0x7f0000002a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "ef35ac213bb938a9000f0000400200000000110ff4117639c2eb4b78c660e677df70190db900", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 2m47.110106881s ago: executing program 9 (id=1752): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000290049"], 0x18}, 0x0) inotify_init1(0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000004e40), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RAUTH(r5, &(0x7f0000000300)={0x14, 0x67, 0x1, {0x8, 0x1, 0x7}}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r6, @ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m30.834097368s ago: executing program 38 (id=1752): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r4, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000290049"], 0x18}, 0x0) inotify_init1(0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$describe(0x6, 0x0, &(0x7f0000000080)=""/72, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000004e40), 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RAUTH(r5, &(0x7f0000000300)={0x14, 0x67, 0x1, {0x8, 0x1, 0x7}}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYRES32=r6, @ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11.634670231s ago: executing program 0 (id=2161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.454143392s ago: executing program 6 (id=2162): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={0x0, 0x0, 0x80000}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24008000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, &(0x7f00000000c0)=@usbdevfs_driver={0x1, 0x4, 0x0}) 10.688527275s ago: executing program 8 (id=2165): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.336483932s ago: executing program 6 (id=2166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205000000a196b2"], 0x0}, 0x0) 10.123930302s ago: executing program 0 (id=2169): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x0, {}, {0xee01}, 0x0, 0xfffffffffffffffb}) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) read$proc_mixer(r0, &(0x7f0000000200)=""/182, 0xb6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_io_uring_setup(0x1000193, &(0x7f0000000300)={0x0, 0x84b9, 0x400, 0x4003, 0x399}, &(0x7f0000000040), 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x8, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000100), 0x12) 8.665221651s ago: executing program 0 (id=2171): mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimes(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) signalfd(r1, &(0x7f0000000240)={[0x2]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8.528981827s ago: executing program 8 (id=2172): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) 8.461890706s ago: executing program 5 (id=2173): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c82010000c0001"], 0x15) 7.467750723s ago: executing program 5 (id=2175): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @empty=0xfe000000}}) 7.333225598s ago: executing program 8 (id=2176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7.145091406s ago: executing program 1 (id=2178): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x180, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0xe4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xc8, 0x6, [@m_nat={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x31, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92"}, {0xc}, {0xc}}}, @m_connmark={0x3c, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x9, 0x6, 'f9ns,'}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x28}}, 0x40080) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.970795817s ago: executing program 0 (id=2179): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40286608, &(0x7f0000019640)=ANY=[@ANYRESHEX]) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES8], 0x1, 0x1be, &(0x7f0000000640)="$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") sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) chdir(&(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102400, 0x19000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) userfaultfd(0x80801) r1 = inotify_init() inotify_rm_watch(r1, 0x0) 5.856739593s ago: executing program 2 (id=2180): mknod$loop(0x0, 0x1000000000006005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x260079e92e484ee) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8a0c3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(r2, &(0x7f0000002580)='wchan\x00') lseek(r4, 0x9, 0x0) close(r1) syz_open_pts(r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 5.055014156s ago: executing program 2 (id=2181): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4.935843168s ago: executing program 8 (id=2182): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x4, 0x1}, 0x7f, 0xa4, &(0x7f0000002840)={0x5f, 0x5, 0x7, 0x900}, 0x8, 0x3, 0x0, 0x0, 0x97, 0x7fff, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x10b, 0x70bd28, 0x4}, 0x14}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000002ac0)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40002100, 0x0) 4.934485191s ago: executing program 1 (id=2183): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.764931268s ago: executing program 5 (id=2184): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x2, {0x0, 0xff, 0x4}, {0x0, 0xff, 0x4}, 0xfd, 0xfd}], 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1}, 0x4) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000004c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) 3.220361567s ago: executing program 2 (id=2185): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) dup3(r0, r0, 0x80000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000340)="e6", 0x1}], 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r3, 0x3, 0x0, @void}, 0x62) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 2.559672983s ago: executing program 6 (id=2186): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000006c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000700)={@local}) pipe2$9p(&(0x7f0000000780), 0x84000) r1 = add_key$user(&(0x7f00000009c0), &(0x7f0000000a00)={'syz', 0x1}, &(0x7f0000000a40)='[', 0x1, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "3124d18cf8618b3a89791f8026cf5e7ed40665f9a738dea15b9e9e79970e2d7890d8a57a931e162f9eec77a8202982548609487aae1bd08d72ed6bf93ecb31e6"}, 0x48, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x6}}, 0x18) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={0x0}) 2.559347943s ago: executing program 0 (id=2187): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c82010000c0001"], 0x15) 2.556778726s ago: executing program 8 (id=2188): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 2.087592913s ago: executing program 1 (id=2189): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000140)=0xd, 0x4) readv(r0, &(0x7f0000000300)=[{0x0}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x400000, 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 2.086721358s ago: executing program 5 (id=2190): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000), 0x4) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.043510856s ago: executing program 2 (id=2191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.540099483s ago: executing program 1 (id=2192): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050002"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000600000000000f0000000c00078008000200f0"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.539234778s ago: executing program 6 (id=2193): mknod$loop(0x0, 0x1000000000006005, 0x1) openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x260079e92e484ee) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8a0c3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(r2, &(0x7f0000002580)='wchan\x00') lseek(r4, 0x9, 0x0) close(r1) syz_open_pts(r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020) 1.309405881s ago: executing program 5 (id=2194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.286050215s ago: executing program 0 (id=2195): syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0c00031000"], 0xf) 610.443197ms ago: executing program 6 (id=2196): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x2000400c}, 0x4000) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000009ac0)) 518.275878ms ago: executing program 8 (id=2197): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) shutdown(r4, 0x2) 517.371129ms ago: executing program 2 (id=2198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x3, 0x8001}, @timestamp], 0x8) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) sendto$inet(r0, &(0x7f0000000280)="fb", 0x1, 0x20000844, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 437.362285ms ago: executing program 1 (id=2199): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x80000003}, &(0x7f0000000100)=0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 353.097209ms ago: executing program 5 (id=2200): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40286608, &(0x7f0000019640)=ANY=[@ANYRESHEX]) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES8], 0x1, 0x1be, &(0x7f0000000640)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000640)=""/102400, 0x19000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) userfaultfd(0x80801) r1 = inotify_init() inotify_rm_watch(r1, 0x0) 147.245348ms ago: executing program 6 (id=2201): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) 17.314387ms ago: executing program 1 (id=2202): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2203): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x2, {0x0, 0xff, 0x4}, {0x0, 0xff, 0x4}, 0xfd, 0xfd}], 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1}, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 546.156530][T10796] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 546.166201][T10796] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 546.215525][ T5889] usb 4-1: can't set config #168, error -71 [ 546.223018][ T5889] usb 4-1: USB disconnect, device number 5 [ 546.232987][T10803] loop9: detected capacity change from 0 to 1764 [ 546.509956][T10797] EXT4-fs (loop8): 1 orphan inode deleted [ 546.515953][T10797] EXT4-fs (loop8): 1 truncate cleaned up [ 546.607695][T10796] journal_load_superblock: Cannot read journal superblock [ 546.615081][T10796] EXT4-fs (loop7): Could not load journal inode [ 546.914130][T10797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.200719][T10806] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 547.256219][T10806] EXT4-fs (loop8): Remounting filesystem read-only [ 547.506942][T10803] overlay: ./file0 is not a directory [ 550.819090][ T6718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.805812][T10855] loop8: detected capacity change from 0 to 2048 [ 554.814736][T10855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.852542][T10879] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 556.188902][T10855] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 557.539996][ T6718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.550493][T10910] hub 2-0:1.0: USB hub found [ 559.594304][T10910] hub 2-0:1.0: 1 port detected [ 565.577160][T10961] loop9: detected capacity change from 0 to 8 [ 567.544292][T10973] loop2: detected capacity change from 0 to 736 [ 567.580481][T10973] iso9660: Bad value for 'mode' [ 568.203456][T10984] loop2: detected capacity change from 0 to 2048 [ 569.722897][ T5943] loop2: p1 < > p4 [ 570.358376][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1172'. [ 570.395431][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.402819][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.532316][ T5943] loop2: p4 size 8388608 extends beyond EOD, truncated [ 570.547945][T11001] loop6: detected capacity change from 0 to 4096 [ 570.555408][T11001] ntfs3: Unknown parameter 'iocharsEt' [ 572.016849][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 572.027149][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 572.122502][T11015] fuse: Unknown parameter 'user_i00000000000000000000' [ 574.824927][T11034] loop2: detected capacity change from 0 to 2048 [ 574.910959][T11043] loop3: detected capacity change from 0 to 128 [ 575.007367][T11048] loop8: detected capacity change from 0 to 736 [ 575.016986][T11048] iso9660: Bad value for 'mode' [ 575.297542][T11034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.386333][T11034] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.590397][T11057] loop8: detected capacity change from 0 to 2048 [ 578.141798][T11059] loop8: p1 < > p4 [ 578.155249][T11059] loop8: p4 size 8388608 extends beyond EOD, truncated [ 578.362615][ T5890] IPVS: starting estimator thread 0... [ 578.374657][T11057] loop8: p1 < > p4 [ 578.380690][T11057] loop8: p4 size 8388608 extends beyond EOD, truncated [ 578.409361][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.579489][T11064] IPVS: using max 21 ests per chain, 50400 per kthread [ 579.478650][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 579.506732][ T2890] kworker/u8:6: attempt to access beyond end of device [ 579.506732][ T2890] loop3: rw=1, sector=145, nr_sectors = 33 limit=128 [ 579.533279][T11073] fuse: Unknown parameter 'user_i00000000000000000000' [ 579.554282][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 579.867889][T11077] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 581.050603][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 581.081020][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 584.230659][T11116] loop7: detected capacity change from 0 to 2048 [ 584.327327][T11119] loop9: detected capacity change from 0 to 736 [ 584.961033][T11116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.996657][T11119] iso9660: Bad value for 'mode' [ 585.060462][T11116] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.948995][T11131] loop9: detected capacity change from 0 to 2048 [ 587.035574][ T6695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.118709][ T5201] loop9: p1 < > p4 [ 587.137780][ T5201] loop9: p4 size 8388608 extends beyond EOD, truncated [ 587.250070][T11142] No such timeout policy "syz0" [ 587.764885][T11145] fuse: Unknown parameter 'user_id00000000000000000000' [ 588.458944][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 588.477221][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 589.442226][T11170] hub 2-0:1.0: USB hub found [ 589.451887][T11170] hub 2-0:1.0: 1 port detected [ 589.659465][T11171] loop9: detected capacity change from 0 to 512 [ 589.727459][T11171] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.765817][T11171] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.917139][T11171] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 590.854587][T11171] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 590.922926][T11188] loop2: detected capacity change from 0 to 736 [ 590.931432][T11188] iso9660: Bad value for 'mode' [ 591.815554][T11192] loop2: detected capacity change from 0 to 2048 [ 591.885433][ T9342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.127306][ T5201] loop2: p1 < > p4 [ 592.139051][ T5201] loop2: p4 size 8388608 extends beyond EOD, truncated [ 592.201556][ T5201] loop2: p1 < > p4 [ 592.221747][T11199] fuse: Unknown parameter 'user_id00000000000000000000' [ 592.252311][ T5201] loop2: p4 size 8388608 extends beyond EOD, truncated [ 592.996451][T11192] loop2: p1 < > p4 [ 593.002052][T11192] loop2: p4 size 8388608 extends beyond EOD, truncated [ 593.150685][T11206] No such timeout policy "syz0" [ 595.918325][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 596.028914][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 596.563169][T11231] hub 2-0:1.0: USB hub found [ 596.631679][T11231] hub 2-0:1.0: 1 port detected [ 596.678100][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 596.708990][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 596.954322][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 597.019932][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 598.409788][T11251] loop9: detected capacity change from 0 to 512 [ 598.607291][T11256] fuse: Unknown parameter 'user_id00000000000000000000' [ 598.726739][T11264] No such timeout policy "syz0" [ 598.923997][T11251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.954011][T11251] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.738453][T11272] ext4: Unknown parameter 'ÿÿÿb¯›*w…e™ z4á\}lHýصz bæÿ·@¥³¡3)4Ü%{±`z+“Çì›Oܯ [ 599.738453][T11272] Êú5“%.€ fÜIëÎqLÀÍÆÖæŸh‡-¡EBz±ÝªYo)yï-ˆ¼ «UógÇõè ¹˜ËU«aðë«wTBÁe' [ 600.091314][T11251] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 600.509269][ T9342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.947463][T11295] loop6: detected capacity change from 0 to 256 [ 601.020214][T11295] vfat: Unexpected value for 'usefree' [ 602.163555][T11300] hub 2-0:1.0: USB hub found [ 602.179750][T11307] fuse: Bad value for 'fd' [ 602.188867][T11300] hub 2-0:1.0: 1 port detected [ 602.192367][T11306] lo speed is unknown, defaulting to 1000 [ 602.214366][T11306] lo speed is unknown, defaulting to 1000 [ 602.247615][T11306] lo speed is unknown, defaulting to 1000 [ 602.296280][T11306] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 602.362819][T11306] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 602.696642][T11306] lo speed is unknown, defaulting to 1000 [ 602.743260][T11306] lo speed is unknown, defaulting to 1000 [ 602.780162][T11306] lo speed is unknown, defaulting to 1000 [ 602.878845][T11311] loop9: detected capacity change from 0 to 40427 [ 602.918020][T11306] lo speed is unknown, defaulting to 1000 [ 602.932458][T11306] lo speed is unknown, defaulting to 1000 [ 602.944500][T11311] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 602.952406][T11311] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 602.966080][T11311] F2FS-fs (loop9): invalid crc value [ 602.988887][T11306] lo speed is unknown, defaulting to 1000 [ 603.045402][T11306] lo speed is unknown, defaulting to 1000 [ 603.191258][T11311] F2FS-fs (loop9): Found nat_bits in checkpoint [ 604.059282][T11326] loop6: detected capacity change from 0 to 512 [ 604.125698][T11311] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 604.132894][T11311] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 604.405963][T11326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.428154][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1268'. [ 604.622354][T11326] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.760877][T11326] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 605.797292][ T9342] syz-executor: attempt to access beyond end of device [ 605.797292][ T9342] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 605.839921][ T9342] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 606.086096][ T794] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 606.225252][T11326] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 607.614433][T11355] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 608.079898][ T794] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 608.106779][ T6619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.072347][T11364] loop7: detected capacity change from 0 to 1024 [ 609.127549][T11364] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 609.136509][T11364] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 609.151690][T11364] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 609.174970][T11364] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 609.199415][T11364] journal_load_superblock: Cannot read journal superblock [ 609.210380][T11364] EXT4-fs (loop7): Could not load journal inode [ 610.465849][T11385] loop2: detected capacity change from 0 to 164 [ 610.505604][T11385] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 611.647178][T11398] hub 2-0:1.0: USB hub found [ 611.652319][T11398] hub 2-0:1.0: 1 port detected [ 619.219222][T11433] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 619.533203][T11428] loop3: detected capacity change from 0 to 8 [ 620.159232][T11412] Bluetooth: hci5: command 0x0406 tx timeout [ 620.166476][T11428] SQUASHFS error: zlib decompression failed, data probably corrupt [ 620.191007][T11428] SQUASHFS error: Failed to read block 0x9b: -5 [ 620.197409][T11428] SQUASHFS error: Unable to read metadata cache entry [99] [ 620.213193][T11428] SQUASHFS error: Unable to read inode 0x127 [ 624.831990][T11465] autofs: Unknown parameter '0x0000000000000000' [ 628.694165][ T5890] IPVS: starting estimator thread 0... [ 629.062430][T11501] IPVS: using max 21 ests per chain, 50400 per kthread [ 630.749379][T11526] loop8: detected capacity change from 0 to 736 [ 630.760854][T11526] iso9660: Bad value for 'mode' [ 631.073360][T11529] loop6: detected capacity change from 0 to 8 [ 631.148845][T11530] loop8: detected capacity change from 0 to 2048 [ 631.371413][T11529] SQUASHFS error: zlib decompression failed, data probably corrupt [ 631.393479][ T5943] loop8: p1 < > p4 [ 631.411533][ T5943] loop8: p4 size 8388608 extends beyond EOD, truncated [ 631.424914][T11529] SQUASHFS error: Failed to read block 0x9b: -5 [ 631.431231][T11529] SQUASHFS error: Unable to read metadata cache entry [99] [ 631.486375][T11530] loop8: p1 < > p4 [ 631.492227][T11530] loop8: p4 size 8388608 extends beyond EOD, truncated [ 631.509942][ T5201] loop8: p1 < > p4 [ 631.521436][ T5201] loop8: p4 size 8388608 extends beyond EOD, truncated [ 631.531361][T11529] SQUASHFS error: Unable to read inode 0x127 [ 632.717834][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 632.849316][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 633.191850][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 633.277254][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 634.875365][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 634.893154][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 636.058996][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 636.117330][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.338929][T11575] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 637.045960][T11586] hub 2-0:1.0: USB hub found [ 637.051674][T11586] hub 2-0:1.0: 1 port detected [ 637.652436][T11591] macvlan2: entered promiscuous mode [ 637.660016][T11591] team_slave_0: entered promiscuous mode [ 637.665888][T11591] team_slave_1: entered promiscuous mode [ 637.671629][T11591] team0: entered promiscuous mode [ 637.677477][T11591] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 637.686800][T11591] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 638.657416][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1338'. [ 639.051594][T11603] loop6: detected capacity change from 0 to 736 [ 639.132528][T11603] iso9660: Bad value for 'mode' [ 639.620125][T11606] loop6: detected capacity change from 0 to 2048 [ 639.693286][T11607] loop3: detected capacity change from 0 to 8 [ 639.721001][T11606] loop6: p1 < > p4 [ 639.726356][T11606] loop6: p4 size 8388608 extends beyond EOD, truncated [ 639.797847][T11607] SQUASHFS error: zlib decompression failed, data probably corrupt [ 639.847459][ T5943] udevd[5943]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 639.899070][T11607] SQUASHFS error: Failed to read block 0x9b: -5 [ 639.930868][ T5888] udevd[5888]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 639.953324][T11607] SQUASHFS error: Unable to read metadata cache entry [99] [ 640.006624][T11607] SQUASHFS error: Unable to read inode 0x127 [ 641.029198][T11614] loop6: detected capacity change from 0 to 2048 [ 641.273687][T11614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.323059][T11614] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.911878][ T6619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.829185][T11639] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 644.804981][T11487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.839723][T11487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.879784][T11669] loop3: detected capacity change from 0 to 8 [ 645.911493][T11669] SQUASHFS error: zlib decompression failed, data probably corrupt [ 645.934993][T11669] SQUASHFS error: Failed to read block 0x9b: -5 [ 645.972865][T11669] SQUASHFS error: Unable to read metadata cache entry [99] [ 646.038534][T11669] SQUASHFS error: Unable to read inode 0x127 [ 647.970598][T11685] netlink: 'syz.7.1363': attribute type 4 has an invalid length. [ 648.214248][T11689] loop8: detected capacity change from 0 to 2048 [ 650.452695][T11689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.472934][T11689] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.586327][ T6424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.620997][ T6424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.095225][T11718] hub 2-0:1.0: USB hub found [ 651.100316][T11718] hub 2-0:1.0: 1 port detected [ 651.159737][T11716] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 651.533281][ T6718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.220329][T11733] loop2: detected capacity change from 0 to 8 [ 652.559795][T11733] SQUASHFS error: zlib decompression failed, data probably corrupt [ 652.567783][T11733] SQUASHFS error: Failed to read block 0x9b: -5 [ 652.587683][T11733] SQUASHFS error: Unable to read metadata cache entry [99] [ 652.595585][T11733] SQUASHFS error: Unable to read inode 0x127 [ 654.877825][T11728] loop3: detected capacity change from 0 to 32768 [ 654.956199][T11753] syz.7.1378(11753): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 656.987502][T11764] loop7: detected capacity change from 0 to 2048 [ 657.076726][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1385'. [ 657.105588][T11764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.239989][T11764] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.251371][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1385'. [ 657.352451][T11779] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 657.660608][T11769] batadv0: entered promiscuous mode [ 657.705012][T11769] dummy0: entered promiscuous mode [ 657.721180][ T6695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.912134][ T5959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.929169][ T5959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.315532][T11807] loop3: detected capacity change from 0 to 8 [ 659.347216][T11808] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 659.416865][T11807] SQUASHFS error: zlib decompression failed, data probably corrupt [ 659.435079][T11810] loop8: detected capacity change from 0 to 164 [ 659.452837][T11810] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 659.459926][T11807] SQUASHFS error: Failed to read block 0x9b: -5 [ 659.471105][T11807] SQUASHFS error: Unable to read metadata cache entry [99] [ 659.494578][T11807] SQUASHFS error: Unable to read inode 0x127 [ 659.512171][T11808] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 661.573064][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1398'. [ 663.236887][ T29] audit: type=1326 audit(1733222892.144:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.6.1400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b6d7ff19 code=0x0 [ 663.587980][T11835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 664.021302][T11838] loop9: detected capacity change from 0 to 2048 [ 664.138477][T11838] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.218499][T11838] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.295007][ T9342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.111663][T11849] autofs: Unknown parameter '0x0000000000000000' [ 670.658258][T11876] loop9: detected capacity change from 0 to 164 [ 670.673275][T11876] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 670.860229][T11880] loop8: detected capacity change from 0 to 128 [ 672.837137][ T29] audit: type=1800 audit(1733222901.087:82): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1415" name="file0" dev="loop8" ino=1048627 res=0 errno=0 [ 675.555444][T11912] autofs: Unknown parameter '0x0000000000000000' [ 675.886524][T11925] loop9: detected capacity change from 0 to 40427 [ 676.266346][T11929] loop6: detected capacity change from 0 to 1024 [ 676.304118][T11925] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 676.312214][T11925] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 676.671879][T11925] F2FS-fs (loop9): invalid crc value [ 679.182744][T11925] F2FS-fs (loop9): Found nat_bits in checkpoint [ 679.409364][T11929] hfsplus: failed to load attributes file [ 680.721182][T11953] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 683.135043][T11969] loop6: detected capacity change from 0 to 164 [ 684.295664][T11969] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 684.304509][ T29] audit: type=1107 audit(1733222911.004:83): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 685.751486][T11988] autofs: Unknown parameter '0x0000000000000000' [ 688.074077][T11998] No such timeout policy "syz0" [ 693.532722][T12047] No such timeout policy "syz0" [ 694.506347][T12053] autofs: Unknown parameter '0x0000000000000000' [ 695.262924][T12059] loop9: detected capacity change from 0 to 164 [ 695.424988][T12059] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 698.427734][T12078] netlink: 'syz.8.1471': attribute type 21 has an invalid length. [ 698.499960][T12078] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1471'. [ 700.211794][T12087] loop6: detected capacity change from 0 to 40427 [ 700.299044][T12087] F2FS-fs (loop6): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 700.307302][T12087] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 701.326974][T11412] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.345610][T11412] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.362877][T11412] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 701.371443][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.377954][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 701.388658][T11412] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 701.400877][T11412] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 701.409479][T11412] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 701.448370][T12099] lo speed is unknown, defaulting to 1000 [ 702.720031][ T5890] IPVS: starting estimator thread 0... [ 702.987633][T12113] No such timeout policy "syz0" [ 703.166329][T12109] IPVS: using max 20 ests per chain, 48000 per kthread [ 703.697025][T11412] Bluetooth: hci1: command tx timeout [ 703.763165][T12115] autofs: Unknown parameter '0x0000000000000000' [ 705.228288][T12139] loop6: detected capacity change from 0 to 1024 [ 705.238413][T12099] chnl_net:caif_netlink_parms(): no params data found [ 705.272293][T12139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 705.488737][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.509002][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.541558][T12099] bridge_slave_0: entered allmulticast mode [ 705.620436][T12099] bridge_slave_0: entered promiscuous mode [ 705.629164][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.663621][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.686192][T12099] bridge_slave_1: entered allmulticast mode [ 705.723724][T12099] bridge_slave_1: entered promiscuous mode [ 705.843866][T12148] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 705.939400][ T6619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.948721][T11412] Bluetooth: hci1: command tx timeout [ 706.078328][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.205934][T12154] loop2: detected capacity change from 0 to 1024 [ 706.223239][T12154] hfsplus: request for non-existent node 196608 in B*Tree [ 706.231131][T12154] hfsplus: request for non-existent node 196608 in B*Tree [ 706.239192][T12154] hfsplus: failed to load root directory [ 706.298098][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.473772][T12099] team0: Port device team_slave_0 added [ 707.498026][T12099] team0: Port device team_slave_1 added [ 708.523857][T11412] Bluetooth: hci1: command tx timeout [ 709.238015][T12172] loop9: detected capacity change from 0 to 2048 [ 709.827118][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.021862][T12179] No such timeout policy "syz0" [ 710.851497][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.877559][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.925756][T11412] Bluetooth: hci1: command tx timeout [ 710.956527][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.257074][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.274175][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.300141][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.363591][T12183] autofs: Unknown parameter '0x0000000000000000' [ 711.435961][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.761351][T12190] loop6: detected capacity change from 0 to 164 [ 711.768705][T12190] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 711.915764][T12099] hsr_slave_0: entered promiscuous mode [ 712.398379][T12099] hsr_slave_1: entered promiscuous mode [ 712.415709][T12099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.449352][T12099] Cannot create hsr debugfs directory [ 714.885428][ T29] audit: type=1107 audit(1733222940.426:84): pid=12208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 717.671483][T12227] netlink: 'syz.9.1508': attribute type 21 has an invalid length. [ 717.775566][T12227] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1508'. [ 718.717970][T12225] loop2: detected capacity change from 0 to 512 [ 718.821229][T12225] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1510: corrupted in-inode xattr: invalid ea_ino [ 718.828678][T12237] autofs: Unknown parameter '0x0000000000000000' [ 718.839387][T12225] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1510: couldn't read orphan inode 15 (err -117) [ 718.863522][T12225] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.227940][T12246] loop8: detected capacity change from 0 to 512 [ 720.234987][T12246] ext4: Unknown parameter 'fsname' [ 720.933792][ T5824] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 721.885926][T12265] loop8: detected capacity change from 0 to 1024 [ 721.955519][T12265] hfsplus: request for non-existent node 196608 in B*Tree [ 722.048033][T12265] hfsplus: request for non-existent node 196608 in B*Tree [ 722.055529][T12265] hfsplus: failed to load root directory [ 724.362001][T12292] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 725.128885][T12099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 725.210126][T12297] autofs: Unknown parameter '0x0000000000000000' [ 725.241476][T12099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 725.302130][T12099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 725.606243][T12099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.809508][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.832392][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.873777][T12099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 725.884475][T12099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 725.923707][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.931014][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.941944][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.949152][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.686376][T12325] No such timeout policy "syz0" [ 728.359086][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.619187][T12099] veth0_vlan: entered promiscuous mode [ 728.660151][T12099] veth1_vlan: entered promiscuous mode [ 730.023478][T12099] veth0_macvtap: entered promiscuous mode [ 730.096342][T12099] veth1_macvtap: entered promiscuous mode [ 730.114619][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.125377][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.135368][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.145879][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.156116][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.166795][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.176998][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.187476][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.197428][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.208815][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.219407][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.229909][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.239820][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.250366][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.261851][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.271579][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.282112][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.292110][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.302660][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.312569][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.323940][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.335790][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.372782][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.382997][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.393529][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.403403][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.413898][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.424036][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.435603][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.266180][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.293485][T12099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.302862][T12099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.312104][T12099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.320914][T12099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.670742][T12354] loop2: detected capacity change from 0 to 2048 [ 731.742809][T12360] autofs: Unknown parameter '0x0000000000000000' [ 731.848163][T12354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.928505][T12354] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.213848][T11367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.222800][T11367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.756452][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.861416][T11746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.861677][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.902265][T11746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.112368][T12377] No such timeout policy "syz0" [ 733.662032][T12381] loop3: detected capacity change from 0 to 164 [ 733.673993][T12381] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 734.862082][T11367] wlan1: Trigger new scan to find an IBSS to join [ 735.664625][ T5959] wlan1: Trigger new scan to find an IBSS to join [ 738.539628][T12416] loop8: detected capacity change from 0 to 128 [ 738.548831][T12416] EXT4-fs: Ignoring removed nobh option [ 738.878696][T12416] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 739.407569][T12416] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 740.077702][T12426] autofs: Unknown parameter '0x0000000000000000' [ 740.158443][T12430] netlink: 'syz.9.1560': attribute type 4 has an invalid length. [ 740.547717][T12439] random: crng reseeded on system resumption [ 740.965469][T11745] wlan1: Trigger new scan to find an IBSS to join [ 741.032345][T11746] wlan1: Trigger new scan to find an IBSS to join [ 742.747588][ T11] wlan1: Trigger new scan to find an IBSS to join [ 744.422121][T11746] wlan1: Creating new IBSS network, BSSID 42:36:f7:f9:22:cf [ 744.957704][ T11] wlan1: Creating new IBSS network, BSSID 4a:1b:30:27:4c:88 [ 745.443257][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 745.803453][T12479] No such timeout policy "syz0" [ 748.061398][T11746] wlan1: Trigger new scan to find an IBSS to join [ 748.456147][T12481] autofs: Unknown parameter '0x0000000000000000' [ 749.433210][ T5959] wlan1: Creating new IBSS network, BSSID 8a:ac:0c:f5:3b:a0 [ 752.436218][ T6718] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 753.798775][T12517] loop3: detected capacity change from 0 to 1024 [ 753.867538][T12517] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 753.922130][T12517] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 754.002288][T12524] No such timeout policy "syz0" [ 754.740530][T12517] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 754.778875][T12517] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 755.038010][T12528] loop6: detected capacity change from 0 to 8 [ 755.065703][T12528] SQUASHFS error: zlib decompression failed, data probably corrupt [ 755.175286][T12517] journal_load_superblock: Cannot read journal superblock [ 755.226080][T12517] EXT4-fs (loop3): Could not load journal inode [ 755.343430][T12528] SQUASHFS error: Failed to read block 0x9b: -5 [ 755.534930][T12528] SQUASHFS error: Unable to read metadata cache entry [99] [ 755.723340][T12528] SQUASHFS error: Unable to read inode 0x127 [ 756.276519][T12538] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 757.041446][T12553] autofs: Unknown parameter '0x0000000000000000' [ 758.065284][T12556] kernel read not supported for file /eth0 (pid: 12556 comm: syz.8.1594) [ 758.796525][ T29] audit: type=1800 audit(1733222980.878:85): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1594" name="eth0" dev="mqueue" ino=30670 res=0 errno=0 [ 761.326930][T12579] loop9: detected capacity change from 0 to 1024 [ 761.345065][T12579] hfsplus: request for non-existent node 196608 in B*Tree [ 761.352239][T12579] hfsplus: request for non-existent node 196608 in B*Tree [ 761.359822][T12579] hfsplus: failed to load root directory [ 761.405212][T12578] loop3: detected capacity change from 0 to 1764 [ 761.801852][ T29] audit: type=1107 audit(1733222984.292:86): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 762.782342][T12592] loop9: detected capacity change from 0 to 8 [ 762.926859][T12589] overlay: ./file0 is not a directory [ 763.465505][ T29] audit: type=1800 audit(1733222985.892:87): pid=12593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1604" name="file0" dev="loop3" ino=1923 res=0 errno=0 [ 763.593761][T12592] SQUASHFS error: zlib decompression failed, data probably corrupt [ 763.608799][T12592] SQUASHFS error: Failed to read block 0x9b: -5 [ 763.690457][T12592] SQUASHFS error: Unable to read metadata cache entry [99] [ 763.744845][T12592] SQUASHFS error: Unable to read inode 0x127 [ 764.299419][T12600] loop3: detected capacity change from 0 to 1024 [ 764.607470][T12606] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1611'. [ 765.090408][T12600] EXT4-fs: Ignoring removed orlov option [ 765.134206][T12600] EXT4-fs (loop3): Test dummy encryption mode enabled [ 765.186504][T12600] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 765.283990][T12600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.394654][T12623] 9pnet_virtio: no channels available for device [ 767.030916][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 767.038947][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.322984][T12631] autofs: Unknown parameter '0x0000000000000000' [ 768.044773][T12600] fscrypt (loop3): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 768.195964][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.732512][T12649] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 769.746421][T12652] loop9: detected capacity change from 0 to 2048 [ 769.798802][T12652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.873176][T12652] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.094537][T12662] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1625'. [ 770.398787][ T9342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.049774][T12677] 9pnet_virtio: no channels available for device [ 771.227450][T12682] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 771.237150][T12682] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 772.064683][T12684] kernel read not supported for file /eth0 (pid: 12684 comm: syz.9.1632) [ 772.084430][ T29] audit: type=1800 audit(1733222993.956:88): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1632" name="eth0" dev="mqueue" ino=31837 res=0 errno=0 [ 773.042700][T12691] loop8: detected capacity change from 0 to 4096 [ 773.051895][T12691] ntfs3: Unknown parameter '1¡¨ÍCþ¼-×åÀ­I~i?1êŒeQ–õyd«žæÁPÕ(n' [ 773.507126][T12691] loop8: detected capacity change from 0 to 32768 [ 773.566023][T12691] (syz.8.1631,12691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.850670][T12691] (syz.8.1631,12691,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.880071][T12693] loop9: detected capacity change from 0 to 40427 [ 774.896136][T12693] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 774.903942][T12693] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 774.916589][T12693] F2FS-fs (loop9): invalid crc value [ 775.070703][T12693] F2FS-fs (loop9): Found nat_bits in checkpoint [ 775.087342][T12691] JBD2: Ignoring recovery information on journal [ 775.144358][T12691] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 775.191021][T12706] loop2: detected capacity change from 0 to 1764 [ 775.462992][T12693] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 775.470086][T12693] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 775.502756][T12710] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 775.619599][T12691] ocfs2: Unmounting device (7,8) on (node local) [ 776.205180][T12716] overlay: ./file0 is not a directory [ 776.506795][ T6424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 777.053629][T12721] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1640'. [ 777.070931][T11745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 777.151862][ T6424] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 777.194426][ T6424] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 777.527865][T12730] 9pnet_virtio: no channels available for device [ 780.878642][T12763] loop2: detected capacity change from 0 to 1024 [ 780.898989][T12763] hfsplus: request for non-existent node 196608 in B*Tree [ 780.906467][T12763] hfsplus: request for non-existent node 196608 in B*Tree [ 780.913768][T12763] hfsplus: failed to load root directory [ 781.743593][T11487] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 781.834849][ T29] audit: type=1326 audit(1733223003.096:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.6.1650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b6d7ff19 code=0x0 [ 782.434532][T12776] loop2: detected capacity change from 0 to 40427 [ 782.470735][T12776] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 782.479012][T12776] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 782.493034][T12776] F2FS-fs (loop2): invalid crc value [ 782.522928][T12777] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 782.725558][T12776] F2FS-fs (loop2): Found nat_bits in checkpoint [ 782.827771][T12776] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 782.834953][T12776] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 784.654365][T12799] loop3: detected capacity change from 0 to 256 [ 785.112614][ T35] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 785.123480][T12799] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205a4af8, utbl_chksum : 0xe619d30d) [ 785.147421][ T35] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 785.168726][T12804] 9pnet_virtio: no channels available for device [ 785.380690][T12799] loop3: detected capacity change from 256 to 0 [ 785.449828][T12805] syz.3.1657: attempt to access beyond end of device [ 785.449828][T12805] loop3: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 785.486416][T12805] syz.3.1657: attempt to access beyond end of device [ 785.486416][T12805] loop3: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 785.709009][T12805] syz.3.1657: attempt to access beyond end of device [ 785.709009][T12805] loop3: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 786.779017][T12805] syz.3.1657: attempt to access beyond end of device [ 786.779017][T12805] loop3: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 786.847482][T12805] syz.3.1657: attempt to access beyond end of device [ 786.847482][T12805] loop3: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 786.872593][T12805] syz.3.1657: attempt to access beyond end of device [ 786.872593][T12805] loop3: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 786.979188][T12805] syz.3.1657: attempt to access beyond end of device [ 786.979188][T12805] loop3: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 786.997255][T12805] syz.3.1657: attempt to access beyond end of device [ 786.997255][T12805] loop3: rw=0, sector=161, nr_sectors = 1 limit=0 [ 787.075973][ T5825] syz-executor: attempt to access beyond end of device [ 787.075973][ T5825] loop3: rw=0, sector=161, nr_sectors = 1 limit=0 [ 787.131892][ T5825] syz-executor: attempt to access beyond end of device [ 787.131892][ T5825] loop3: rw=0, sector=161, nr_sectors = 1 limit=0 [ 787.156740][ T5890] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 787.351481][ T5890] usb 9-1: Using ep0 maxpacket: 8 [ 788.138224][ T5890] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 788.171527][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.219671][ T5890] usb 9-1: config 0 descriptor?? [ 788.393880][T12832] loop2: detected capacity change from 0 to 736 [ 788.472468][T12832] iso9660: Bad value for 'mode' [ 788.496422][T12834] kernel read not supported for file /eth0 (pid: 12834 comm: syz.1.1670) [ 788.505586][ T29] audit: type=1800 audit(1733223009.336:90): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1670" name="eth0" dev="mqueue" ino=31189 res=0 errno=0 [ 788.649168][ T5825] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 789.761813][ T6424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 789.796791][ T6424] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.553795][ T6424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.833748][ T6424] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.762174][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 791.774370][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 791.794471][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 791.804182][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 791.815133][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 791.823041][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 791.853796][T12855] loop2: detected capacity change from 0 to 2048 [ 791.882715][ T29] audit: type=1326 audit(1733223012.498:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12852 comm="syz.9.1676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7761f7ff19 code=0x0 [ 791.896441][T12859] loop6: detected capacity change from 0 to 1024 [ 791.915342][T12859] EXT4-fs: Ignoring removed orlov option [ 791.917265][ T6424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.928797][T12855] loop2: p1 < > p4 [ 791.936606][ T6424] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.943490][T12859] EXT4-fs (loop6): Test dummy encryption mode enabled [ 791.954279][T12855] loop2: p4 size 8388608 extends beyond EOD, truncated [ 792.028692][T12863] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 792.038347][T12863] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 792.399817][T12859] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 792.841075][ T5890] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 792.856497][ T5890] asix 9-1:0.0: probe with driver asix failed with error -71 [ 792.891410][ T5890] usb 9-1: USB disconnect, device number 3 [ 792.909379][T12859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.122776][T12859] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 793.280362][ T6424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.292934][ T6424] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.347290][T12851] lo speed is unknown, defaulting to 1000 [ 793.357558][ T6619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.483598][T12882] loop6: detected capacity change from 0 to 164 [ 793.506636][T12882] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 793.636730][T12885] loop2: detected capacity change from 0 to 512 [ 793.646278][T12885] EXT4-fs: Ignoring removed oldalloc option [ 794.083223][T12885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 794.110227][T11412] Bluetooth: hci2: command tx timeout [ 794.225680][T12885] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 794.241487][T12885] EXT4-fs (loop2): 1 truncate cleaned up [ 794.251488][T12885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.914698][T12851] chnl_net:caif_netlink_parms(): no params data found [ 794.990255][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.041802][ T6424] bridge_slave_1: left allmulticast mode [ 795.048802][ T6424] bridge_slave_1: left promiscuous mode [ 795.070051][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.170697][ T6424] bridge_slave_0: left allmulticast mode [ 795.176811][ T6424] bridge_slave_0: left promiscuous mode [ 795.187108][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.625323][ T29] audit: type=1107 audit(1733223015.950:92): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 796.338748][T11412] Bluetooth: hci2: command tx timeout [ 799.023201][T11412] Bluetooth: hci2: command tx timeout [ 799.550032][T12917] loop2: detected capacity change from 0 to 8 [ 799.943656][T12923] loop9: detected capacity change from 0 to 2048 [ 799.978051][T12917] SQUASHFS error: zlib decompression failed, data probably corrupt [ 800.003224][T12917] SQUASHFS error: Failed to read block 0x9b: -5 [ 800.014059][T12917] SQUASHFS error: Unable to read metadata cache entry [99] [ 800.024888][T12917] SQUASHFS error: Unable to read inode 0x127 [ 800.183215][T12923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.205516][T12923] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.475849][ T9342] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.895533][ T6424] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 801.234711][T11412] Bluetooth: hci2: command tx timeout [ 801.312420][T12940] loop8: detected capacity change from 0 to 1024 [ 801.335361][T12940] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 801.345492][ T29] audit: type=1326 audit(1733223021.348:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12939 comm="syz.6.1697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b6d7ff19 code=0x0 [ 801.415914][T12940] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 801.437470][T12940] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 801.451288][T12940] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 801.474038][T12940] journal_load_superblock: Cannot read journal superblock [ 801.486654][T12940] EXT4-fs (loop8): Could not load journal inode [ 801.834880][ T6424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.932858][ T6424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.992416][ T6424] bond0 (unregistering): Released all slaves [ 802.390389][T12956] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1698' sets config #1 [ 802.407204][T12851] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.557639][T12851] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.606654][T12851] bridge_slave_0: entered allmulticast mode [ 802.822106][T12851] bridge_slave_0: entered promiscuous mode [ 802.861283][T12851] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.868423][T12851] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.914004][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1699'. [ 802.923858][T12851] bridge_slave_1: entered allmulticast mode [ 802.972245][T12851] bridge_slave_1: entered promiscuous mode [ 803.006705][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 804.424763][T12851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.437359][T12851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.510437][T12982] 9pnet_virtio: no channels available for device [ 805.634318][T12992] kernel read not supported for file /eth0 (pid: 12992 comm: syz.6.1711) [ 805.671409][ T29] audit: type=1800 audit(1733223025.362:94): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1711" name="eth0" dev="mqueue" ino=31875 res=0 errno=0 [ 805.805877][T12851] team0: Port device team_slave_0 added [ 805.869656][T12851] team0: Port device team_slave_1 added [ 806.105594][ T6424] hsr_slave_0: left promiscuous mode [ 806.123355][ T6424] hsr_slave_1: left promiscuous mode [ 806.228851][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.263063][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.308209][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.328480][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.488165][ T29] audit: type=1326 audit(1733223026.129:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.6.1715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b6d7ff19 code=0x0 [ 806.570206][ T6424] veth1_macvtap: left promiscuous mode [ 806.583427][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 806.586807][ T6424] veth0_macvtap: left promiscuous mode [ 808.204240][ T6424] team0 (unregistering): Port device team_slave_1 removed [ 808.285923][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1719'. [ 808.384226][ T6424] team0 (unregistering): Port device team_slave_0 removed [ 808.748289][ T29] audit: type=1107 audit(1733223028.262:96): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 810.802177][T13043] loop2: detected capacity change from 0 to 2048 [ 811.273953][T11367] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 811.360864][T13041] loop2: p1 < > p4 [ 811.374022][T13041] loop2: p4 size 8388608 extends beyond EOD, truncated [ 811.421215][T13043] loop2: p1 < > p4 [ 811.430573][T13043] loop2: p4 size 8388608 extends beyond EOD, truncated [ 811.668894][T11486] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 811.798586][T13048] 9pnet_virtio: no channels available for device [ 811.867452][T13049] loop6: detected capacity change from 0 to 8 [ 811.938783][T13049] SQUASHFS error: zlib decompression failed, data probably corrupt [ 811.958643][T13049] SQUASHFS error: Failed to read block 0x9b: -5 [ 811.965208][T13049] SQUASHFS error: Unable to read metadata cache entry [99] [ 811.974703][T13049] SQUASHFS error: Unable to read inode 0x127 [ 812.109520][T12851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.141510][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.169918][T12851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.979619][T12997] syzkaller0: entered promiscuous mode [ 812.985277][T12997] syzkaller0: entered allmulticast mode [ 813.153506][T13055] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (9) [ 813.239019][T12851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.246016][T12851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.291607][T12851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.187295][T12851] hsr_slave_0: entered promiscuous mode [ 814.668024][ T29] audit: type=1326 audit(1733223033.809:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.8.1732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50dbb7ff19 code=0x0 [ 815.083352][T12851] hsr_slave_1: entered promiscuous mode [ 815.125762][T13063] block device autoloading is deprecated and will be removed. [ 815.148106][T12851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.156650][T12851] Cannot create hsr debugfs directory [ 815.163478][T13070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 815.173225][T13070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 816.790350][T11486] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 818.070240][ T6424] IPVS: stop unused estimator thread 0... [ 820.781230][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1742'. [ 820.847466][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1741'. [ 821.244490][ T29] audit: type=1107 audit(1733223039.890:98): pid=13114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 823.681960][T13135] loop9: detected capacity change from 0 to 256 [ 823.859463][T13135] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205a4af8, utbl_chksum : 0xe619d30d) [ 824.567208][T13145] loop8: detected capacity change from 0 to 8 [ 824.581979][ T29] audit: type=1326 audit(1733223043.080:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13139 comm="syz.2.1751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x0 [ 824.584917][T13145] SQUASHFS error: zlib decompression failed, data probably corrupt [ 824.666887][T13145] SQUASHFS error: Failed to read block 0x9b: -5 [ 824.706697][T13145] SQUASHFS error: Unable to read metadata cache entry [99] [ 824.725396][T13145] SQUASHFS error: Unable to read inode 0x127 [ 824.767018][T13148] autofs: Unknown parameter '0x0000000000000000' [ 825.068742][T12851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 825.128539][T12851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 825.158261][T12851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 825.187774][T12851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 825.427749][T12851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.508325][T12851] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.587177][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.594334][ T6424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.650332][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.657619][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.924083][T13163] loop6: detected capacity change from 0 to 1024 [ 826.966224][T13163] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 827.010219][T13163] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 827.044060][T13163] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 827.087148][T13163] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 827.149526][T13163] journal_load_superblock: Cannot read journal superblock [ 827.164152][T13163] EXT4-fs (loop6): Could not load journal inode [ 827.205525][T12851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.478861][ T29] audit: type=1107 audit(1733223045.728:100): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 828.205106][T12851] veth0_vlan: entered promiscuous mode [ 828.358326][T12851] veth1_vlan: entered promiscuous mode [ 828.413548][T12851] veth0_macvtap: entered promiscuous mode [ 828.431650][T12851] veth1_macvtap: entered promiscuous mode [ 828.457949][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.483998][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.513130][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.534489][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.544364][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.577247][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.587226][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.620036][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.629909][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.662802][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.672758][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.694917][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.704807][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.737660][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.759792][T12851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.128532][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.196129][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'. [ 829.279488][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.513467][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.638917][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.689050][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.730356][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.827912][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.838403][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.855375][T13191] 9pnet_virtio: no channels available for device [ 830.063292][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.078318][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.093073][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.160862][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.215648][T12851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.251691][T12851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.265532][T12851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.148069][T12851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.156945][T12851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.165994][T12851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.174894][T12851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.404297][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 831.576383][T13201] loop6: detected capacity change from 0 to 2048 [ 831.622625][T13201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.647787][T13201] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.706293][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.706300][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.706323][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.730802][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.755245][ T6619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.722840][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.732205][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 834.773387][T13221] loop2: detected capacity change from 0 to 1024 [ 834.991418][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 835.248147][ T29] audit: type=1326 audit(1733223053.044:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.8.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50dbb7ff19 code=0x0 [ 835.890034][T13221] loop2: detected capacity change from 0 to 4096 [ 835.942510][T13221] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 837.989672][T13221] ntfs3(loop2): Failed to read $UpCase (-4). [ 838.487123][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 838.587143][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 842.056750][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 842.227722][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 842.250869][ T5893] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 842.267199][ T5893] usb 1-1: config 179 has no interface number 0 [ 842.295908][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 842.329097][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 842.362973][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 842.416808][ T5893] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 842.464109][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 842.468398][ T5893] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 842.494978][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 842.506004][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 842.523763][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 842.538076][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 842.545704][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.633138][ T5893] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 842.752882][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.762589][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1787'. [ 842.769456][T13281] lo speed is unknown, defaulting to 1000 [ 842.797554][T13277] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.347957][T13277] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 843.355102][T13277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 843.570899][T13277] vhci_hcd vhci_hcd.0: Device attached [ 843.775229][T13288] vhci_hcd: connection closed [ 843.780429][T12748] usb 1-1: USB disconnect, device number 2 [ 843.780543][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 843.797088][T11745] vhci_hcd: stop threads [ 843.801853][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 843.816386][T13294] autofs: Unknown parameter '0x0000000000000000' [ 843.865059][T11745] vhci_hcd: release socket [ 843.944734][T11745] vhci_hcd: disconnect device [ 843.981033][ T25] vhci_hcd: vhci_device speed not set [ 844.223816][T13281] chnl_net:caif_netlink_parms(): no params data found [ 844.729231][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 844.878728][ T5831] Bluetooth: hci3: command tx timeout [ 845.856140][T11745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 845.911566][T11745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 847.216908][ T5831] Bluetooth: hci3: command tx timeout [ 847.306603][T13281] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.313893][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.321550][T13281] bridge_slave_0: entered allmulticast mode [ 847.330824][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 847.341617][T13281] bridge_slave_0: entered promiscuous mode [ 847.351989][T13281] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.359372][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.366774][T13281] bridge_slave_1: entered allmulticast mode [ 847.478918][T13281] bridge_slave_1: entered promiscuous mode [ 847.644494][ T29] audit: type=1326 audit(1733223064.653:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96157ff19 code=0x7ffc0000 [ 847.832936][ T29] audit: type=1326 audit(1733223064.653:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb96157ff19 code=0x7ffc0000 [ 848.027232][ T29] audit: type=1326 audit(1733223064.653:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.0.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96157ff19 code=0x7ffc0000 [ 848.055014][T13325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1797'. [ 848.137880][T13281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.240297][T13281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.284773][T13321] sctp: [Deprecated]: syz.1.1795 (pid 13321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 848.284773][T13321] Use struct sctp_sack_info instead [ 849.489919][T11412] Bluetooth: hci3: command tx timeout [ 849.508417][T13336] loop6: detected capacity change from 0 to 2048 [ 849.559915][T13281] team0: Port device team_slave_0 added [ 849.575430][T13281] team0: Port device team_slave_1 added [ 850.177003][T13281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.249476][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.339713][T13281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.358525][T13281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.366187][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.429238][T13344] loop6: detected capacity change from 0 to 8 [ 850.465023][T13344] SQUASHFS error: zlib decompression failed, data probably corrupt [ 850.479097][T13281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.751731][T13344] SQUASHFS error: Failed to read block 0x9b: -5 [ 850.766512][T13344] SQUASHFS error: Unable to read metadata cache entry [99] [ 851.792557][T11412] Bluetooth: hci3: command tx timeout [ 851.884624][T13344] SQUASHFS error: Unable to read inode 0x127 [ 852.114454][T13281] hsr_slave_0: entered promiscuous mode [ 852.186382][T13364] No such timeout policy "syz0" [ 852.609986][T13281] hsr_slave_1: entered promiscuous mode [ 852.780813][T13281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.960249][ T794] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 853.002300][T13281] Cannot create hsr debugfs directory [ 853.077575][T13368] autofs: Unknown parameter '0x0000000000000000' [ 853.357025][T13374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1811'. [ 853.413287][T13370] loop8: detected capacity change from 0 to 40427 [ 853.424418][T13370] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 853.432262][T13370] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 853.445633][T13370] F2FS-fs (loop8): invalid crc value [ 853.461964][T13370] F2FS-fs (loop8): Found nat_bits in checkpoint [ 853.762272][T13370] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 853.769401][T13370] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 854.019799][T13382] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1812' sets config #1 [ 854.164255][ T6718] bio_check_eod: 11 callbacks suppressed [ 854.164282][ T6718] syz-executor: attempt to access beyond end of device [ 854.164282][ T6718] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 854.221269][ T6718] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 854.244119][T11746] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 854.255841][T11746] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 861.142845][T13281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 861.801175][T13281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 862.135089][T13420] No such timeout policy "syz0" [ 862.901777][T13281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 863.001890][T13281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 863.147154][T13424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1824'. [ 863.296791][T13281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.325633][T13281] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.363039][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.370232][ T6424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.393832][T13427] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1825'. [ 863.456673][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.463868][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.595487][T13430] autofs: Unknown parameter '0x0000000000000000' [ 863.782849][T13281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 863.818902][T13281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 866.937998][T13281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.767671][T13477] No such timeout policy "syz0" [ 868.634518][T13468] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1832' sets config #1 [ 869.947311][T13281] veth0_vlan: entered promiscuous mode [ 870.002433][T13281] veth1_vlan: entered promiscuous mode [ 870.184955][T13281] veth0_macvtap: entered promiscuous mode [ 870.254453][T13281] veth1_macvtap: entered promiscuous mode [ 870.394869][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.455117][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.519278][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.594947][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.664635][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.728568][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.804036][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.886545][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.956119][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.044965][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.129653][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.216150][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.321915][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 871.856661][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1842'. [ 872.322130][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'. [ 872.657213][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.692050][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.786513][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.843700][T13281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.157831][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.963183][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.007137][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.076615][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.142994][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.208832][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.279292][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.290285][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.300233][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.310808][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.503007][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.565211][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.664166][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.888315][ T51] IPVS: starting estimator thread 0... [ 875.013299][T13514] IPVS: using max 19 ests per chain, 45600 per kthread [ 875.186332][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.514945][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.611301][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.659362][T13281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.821673][T13281] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.915696][T13281] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.082240][T13281] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.146367][T13281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.288149][T13532] fuse: Bad value for 'fd' [ 878.950169][T13535] loop6: detected capacity change from 0 to 256 [ 878.972869][T13535] exfat: Unknown parameter 'ßÁ *ÉíØ’‡÷ë0x0000000000000000' [ 879.405991][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.467658][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.645624][T11486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.675429][T11486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.459273][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 880.516288][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 885.048480][T13565] loop8: detected capacity change from 0 to 32768 [ 886.129562][T13573] loop5: detected capacity change from 0 to 256 [ 886.212503][T13576] overlay: ./file1 is not a directory [ 886.269916][T13565] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 886.306286][T13573] FAT-fs (loop5): Directory bread(block 64) failed [ 886.334855][T13573] FAT-fs (loop5): Directory bread(block 65) failed [ 886.369787][T13573] FAT-fs (loop5): Directory bread(block 66) failed [ 886.435051][T13573] FAT-fs (loop5): Directory bread(block 67) failed [ 886.542749][T13573] FAT-fs (loop5): Directory bread(block 68) failed [ 886.608292][T13573] FAT-fs (loop5): Directory bread(block 69) failed [ 886.629573][T11745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 886.657726][T13573] FAT-fs (loop5): Directory bread(block 70) failed [ 886.685095][T13573] FAT-fs (loop5): Directory bread(block 71) failed [ 886.984694][T13573] FAT-fs (loop5): Directory bread(block 72) failed [ 887.005950][T13573] FAT-fs (loop5): Directory bread(block 73) failed [ 887.069009][T13584] fuse: Bad value for 'fd' [ 888.408349][ T6718] ocfs2: Unmounting device (7,8) on (node local) [ 888.844515][T13590] syz.6.1866 uses obsolete (PF_INET,SOCK_PACKET) [ 894.220675][T13632] fuse: Bad value for 'fd' [ 898.492295][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 898.502703][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 898.770382][T13652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1884'. [ 899.140410][T13661] mmap: syz.2.1888 (13661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 899.822216][T13663] tipc: Failed to remove unknown binding: 66,1,1/0:2638558548/2638558550 [ 899.848815][T13663] tipc: Failed to remove unknown binding: 66,1,1/0:2638558548/2638558550 [ 899.869303][T13663] tipc: Failed to remove unknown binding: 66,1,1/0:2638558548/2638558550 [ 900.023654][T13648] loop6: detected capacity change from 0 to 40427 [ 900.196529][T13648] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x1fffff [ 900.243716][T13648] F2FS-fs (loop6): invalid crc value [ 900.271203][T13648] F2FS-fs (loop6): Found nat_bits in checkpoint [ 900.577602][T13648] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 900.585844][T13675] fuse: Invalid rootmode [ 901.734476][ T6619] syz-executor: attempt to access beyond end of device [ 901.734476][ T6619] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 901.814210][ T6619] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 901.995606][T13684] loop8: detected capacity change from 0 to 4096 [ 902.053067][T13684] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 902.240330][T13684] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 902.285782][T13684] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 902.610101][ T51] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 902.879335][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 902.903095][ T51] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 903.126280][ T51] usb 3-1: config 179 has no interface number 0 [ 903.132686][ T51] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 903.273465][ T51] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 903.350682][ T51] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 903.385773][ T51] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 903.424609][ T51] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 903.445739][ T51] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 903.454907][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.591444][T13674] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 904.630404][ T5892] usb 3-1: USB disconnect, device number 7 [ 904.630484][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 904.645586][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 906.071316][T13714] xt_CT: No such helper "snmp_trap" [ 906.438578][T13723] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1906' sets config #1 [ 906.526937][T13729] fuse: Invalid rootmode [ 911.564275][T13763] fuse: Invalid rootmode [ 911.612393][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 911.815454][ T5893] usb 6-1: Using ep0 maxpacket: 8 [ 912.184650][ T5893] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 912.208759][ T5893] usb 6-1: config 179 has no interface number 0 [ 912.563901][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 912.587991][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 912.614405][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 912.636725][ T5893] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 912.667282][ T5893] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 912.681925][ T5893] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 912.691011][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.821101][ T5893] usb 6-1: can't set config #179, error -71 [ 912.865407][ T5893] usb 6-1: USB disconnect, device number 3 [ 912.994327][T13782] tipc: Started in network mode [ 913.000039][T13782] tipc: Node identity 1, cluster identity 4711 [ 913.011738][T13782] tipc: Node number set to 1 [ 913.021596][T13782] tipc: Cannot configure node identity twice [ 914.688856][T11746] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.811980][ T3488] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 915.581808][T13799] loop5: detected capacity change from 0 to 32768 [ 915.596646][T13799] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1936 (13799) [ 915.614764][T13799] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 915.624984][T13799] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 915.762399][T13799] BTRFS info (device loop5): rebuilding free space tree [ 915.794770][T13799] BTRFS info (device loop5): disabling free space tree [ 915.801759][T13799] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 915.811779][T13799] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 915.941540][ T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 916.112995][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 916.142584][ T51] usb 3-1: config 0 has an invalid interface number: 61 but max is 0 [ 916.167818][ T51] usb 3-1: config 0 has no interface number 0 [ 916.231366][ T51] usb 3-1: config 0 interface 61 altsetting 1 bulk endpoint 0xB has invalid maxpacket 8 [ 916.283963][ T51] usb 3-1: config 0 interface 61 altsetting 1 bulk endpoint 0xF has invalid maxpacket 8 [ 916.851057][ T51] usb 3-1: config 0 interface 61 has no altsetting 0 [ 916.860327][ T51] usb 3-1: New USB device found, idVendor=0a5c, idProduct=368b, bcdDevice=68.32 [ 916.869504][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.878534][ T51] usb 3-1: Product: syz [ 916.883219][ T51] usb 3-1: Manufacturer: syz [ 916.887849][ T51] usb 3-1: SerialNumber: syz [ 916.903071][ T51] usb 3-1: config 0 descriptor?? [ 916.909662][T13806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 917.021346][T13806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 917.049599][T13799] syz.5.1936 (13799) used greatest stack depth: 18352 bytes left [ 918.338464][ T51] usb 3-1: USB disconnect, device number 8 [ 918.768976][T13833] loop8: detected capacity change from 0 to 32768 [ 919.063390][T13281] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 919.832383][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 920.003448][ T51] usb 2-1: Using ep0 maxpacket: 16 [ 920.018363][ T51] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 920.034959][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.043148][ T51] usb 2-1: Product: syz [ 920.081241][ T51] usb 2-1: Manufacturer: syz [ 920.086018][ T51] usb 2-1: SerialNumber: syz [ 920.124918][T13833] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 920.150965][ T51] usb 2-1: config 0 descriptor?? [ 920.168311][ T51] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 921.024872][ T51] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 921.366068][ T51] visor 2-1:0.0: probe with driver visor failed with error -71 [ 921.499403][ T51] usb 2-1: USB disconnect, device number 3 [ 921.629430][T13862] loop6: detected capacity change from 0 to 2048 [ 922.034734][T13833] XFS (loop8): Ending clean mount [ 922.074264][T13833] XFS (loop8): Quotacheck needed: Please wait. [ 922.305964][T13862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.510439][T13862] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 922.641342][ T2890] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 922.653590][T13862] EXT4-fs (loop6): Remounting filesystem read-only [ 922.719100][T13862] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 923.009939][T11412] Bluetooth: hci2: command 0x0406 tx timeout [ 923.078282][ T6619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.317039][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 923.479022][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 923.504071][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.550687][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 923.583945][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.661633][ T5892] usb 6-1: config 0 descriptor?? [ 923.674750][ T5892] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 924.172303][T13833] XFS (loop8): Quotacheck: Done. [ 924.216910][ T6718] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 926.087659][ T5892] gspca_vc032x: reg_w err -71 [ 926.092489][ T5892] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 926.102611][ T5892] usb 6-1: USB disconnect, device number 4 [ 926.459927][T13895] loop6: detected capacity change from 0 to 32768 [ 926.595830][T13895] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 927.479870][ T6619] ocfs2: Unmounting device (7,6) on (node local) [ 927.971661][T13909] loop5: detected capacity change from 0 to 32768 [ 928.060368][T13909] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1966 (13909) [ 928.138450][T13909] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 928.170034][T13909] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 928.215993][T13909] BTRFS info (device loop5): using free-space-tree [ 928.954526][T13939] No such timeout policy "syz0" [ 931.399824][T13281] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 931.614935][T13964] loop8: detected capacity change from 0 to 1024 [ 932.231106][T13964] hfsplus: request for non-existent node 196608 in B*Tree [ 932.238897][T13964] hfsplus: request for non-existent node 196608 in B*Tree [ 932.246151][T13964] hfsplus: failed to load root directory [ 934.363646][T13986] No such timeout policy "syz0" [ 935.748810][ T51] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 935.910931][ T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.935604][ T51] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 936.203206][ T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.214579][ T51] usb 6-1: config 0 descriptor?? [ 936.945952][ T51] usbhid 6-1:0.0: can't add hid device: -71 [ 936.952331][ T51] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 937.001262][ T51] usb 6-1: USB disconnect, device number 5 [ 937.095457][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 937.130100][T14011] usb usb8: usbfs: process 14011 (syz.6.1997) did not claim interface 0 before use [ 937.410649][ T29] audit: type=1326 audit(1733223148.639:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 938.324740][ T29] audit: type=1326 audit(1733223148.685:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 938.418824][ T29] audit: type=1326 audit(1733223149.078:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 938.709530][ T29] audit: type=1326 audit(1733223149.116:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 938.762975][ T29] audit: type=1326 audit(1733223149.163:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 938.778157][T14028] loop6: detected capacity change from 0 to 32768 [ 938.785715][ T29] audit: type=1326 audit(1733223149.340:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 938.814349][ T29] audit: type=1326 audit(1733223149.509:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 938.837509][ T29] audit: type=1326 audit(1733223149.509:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14012 comm="syz.2.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7ffc0000 [ 939.033835][T14037] No such timeout policy "syz0" [ 939.870036][T14028] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 940.042759][T14028] XFS (loop6): Ending clean mount [ 940.055959][T14028] XFS (loop6): Quotacheck needed: Please wait. [ 940.142208][T14028] XFS (loop6): Quotacheck: Done. [ 940.782515][ T6619] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 943.006184][T14076] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2018'. [ 943.231157][ T5827] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 943.406575][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.423540][ T5827] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 943.494305][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.550737][ T5827] usb 6-1: config 0 descriptor?? [ 944.026185][ T5827] usbhid 6-1:0.0: can't add hid device: -71 [ 944.033861][ T5827] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 944.084728][ T5827] usb 6-1: USB disconnect, device number 6 [ 945.018792][T14107] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 945.422352][T14107] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 946.150133][T14117] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2036'. [ 946.208551][T14119] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 946.654979][T14122] loop8: detected capacity change from 0 to 256 [ 946.738001][T14122] FAT-fs (loop8): Directory bread(block 64) failed [ 946.774376][T14122] FAT-fs (loop8): Directory bread(block 65) failed [ 946.805930][T14122] FAT-fs (loop8): Directory bread(block 66) failed [ 946.845555][T14122] FAT-fs (loop8): Directory bread(block 67) failed [ 946.860616][T14122] FAT-fs (loop8): Directory bread(block 68) failed [ 946.889246][T14122] FAT-fs (loop8): Directory bread(block 69) failed [ 946.924350][T14122] FAT-fs (loop8): Directory bread(block 70) failed [ 947.571783][T14122] FAT-fs (loop8): Directory bread(block 71) failed [ 947.579151][T14122] FAT-fs (loop8): Directory bread(block 72) failed [ 947.599918][T14122] FAT-fs (loop8): Directory bread(block 73) failed [ 947.869754][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2043'. [ 948.073466][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 948.258086][ T5892] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 948.273407][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.435820][ T5892] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 948.456260][ T5892] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 948.477199][ T5892] usb 2-1: Manufacturer: syz [ 948.503348][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2045'. [ 949.077197][ T5892] usb 2-1: config 0 descriptor?? [ 949.144034][ T2942] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 949.155157][T11745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 949.255630][T14144] loop5: detected capacity change from 0 to 512 [ 949.272755][T14144] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 949.323959][ T5892] rc_core: IR keymap rc-hauppauge not found [ 949.330118][ T5892] Registered IR keymap rc-empty [ 949.337408][ T5892] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 949.377736][T14144] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 949.421794][ T5892] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 949.537963][T14144] EXT4-fs (loop5): mount failed [ 949.689471][ T5892] usb 2-1: USB disconnect, device number 4 [ 949.995671][T14154] netlink: 'syz.2.2050': attribute type 4 has an invalid length. [ 951.244174][T14144] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2047'. [ 951.291385][T14175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 951.421057][T14175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 951.578941][T14183] loop8: detected capacity change from 0 to 512 [ 951.586078][T14183] EXT4-fs: Ignoring removed oldalloc option [ 951.597181][T14183] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 951.630289][T14183] EXT4-fs (loop8): 1 truncate cleaned up [ 951.637037][T14183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.750469][ T29] audit: type=1326 audit(1733223162.045:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 951.845409][ T29] audit: type=1326 audit(1733223162.045:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 951.920237][ T29] audit: type=1326 audit(1733223162.045:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 951.975841][ T29] audit: type=1326 audit(1733223162.045:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 952.040862][ T29] audit: type=1326 audit(1733223162.045:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 952.079173][ T29] audit: type=1326 audit(1733223162.045:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 952.104173][ T29] audit: type=1326 audit(1733223162.045:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 952.128994][ T29] audit: type=1326 audit(1733223162.045:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 952.151643][ T29] audit: type=1326 audit(1733223162.045:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 952.174445][ T29] audit: type=1326 audit(1733223162.045:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14160 comm="syz.2.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad8057ff19 code=0x7fc00000 [ 952.412268][ T6718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.718114][T14182] Bluetooth: hci3: command 0x0405 tx timeout [ 954.548382][T14213] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 954.602765][T14213] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 954.678786][T14215] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2072'. [ 955.804813][T11746] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 957.711851][ T25] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 957.716106][T14182] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 958.909791][T14234] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 958.918866][T14234] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 958.927856][T14234] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 959.116655][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 959.532356][ T25] usb 9-1: Using ep0 maxpacket: 32 [ 959.544556][T14251] loop6: detected capacity change from 0 to 2048 [ 959.552874][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.580369][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.590323][ T25] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 959.600192][ T25] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 959.610160][ T25] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 959.620069][ T25] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 959.654651][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2087'. [ 959.681719][T14251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.711660][ T25] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.721761][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.731828][ T25] usb 9-1: Product: syz [ 959.772872][ T25] usb 9-1: Manufacturer: syz [ 959.795573][T14251] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 959.812920][ T25] usb 9-1: SerialNumber: syz [ 959.891579][T14251] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 959.968765][T14251] EXT4-fs (loop6): This should not happen!! Data will be lost [ 959.968765][T14251] [ 960.036710][T14251] EXT4-fs (loop6): Total free blocks count 0 [ 960.068331][ T25] cdc_ncm 9-1:1.0: bind() failure [ 960.128711][T14251] EXT4-fs (loop6): Free/Dirty block details [ 960.134837][T14251] EXT4-fs (loop6): free_blocks=2415919104 [ 960.140653][T14251] EXT4-fs (loop6): dirty_blocks=16 [ 960.145920][T14251] EXT4-fs (loop6): Block reservation details [ 960.151950][T14251] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 960.214929][ T25] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 960.222147][ T25] cdc_ncm 9-1:1.1: bind() failure [ 960.262832][ T25] usb 9-1: USB disconnect, device number 5 [ 960.558865][ T5827] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 960.813773][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.023069][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.253280][ T5827] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 961.270694][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.282420][ T5827] usb 1-1: config 0 descriptor?? [ 961.428156][T14277] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 961.437768][T14277] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 961.507057][ T6619] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.794266][ T5827] hid-thrustmaster 0003:044F:B65D.0002: unbalanced collection at end of report description [ 961.835486][ T5827] hid-thrustmaster 0003:044F:B65D.0002: parse failed with error -22 [ 961.868775][ T5827] hid-thrustmaster 0003:044F:B65D.0002: probe with driver hid-thrustmaster failed with error -22 [ 962.006000][T14182] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 962.017084][T14182] Bluetooth: hci4: Injecting HCI hardware error event [ 962.028627][ T5831] Bluetooth: hci4: hardware error 0x00 [ 962.151789][ T5827] usb 1-1: USB disconnect, device number 4 [ 962.316542][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 962.547881][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 962.556837][ T25] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 962.572120][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.826852][ T25] usb 3-1: config 0 descriptor?? [ 962.875142][T14292] loop5: detected capacity change from 0 to 4096 [ 963.187843][ C1] hrtimer: interrupt took 42594 ns [ 964.240654][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.247257][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 964.405807][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 965.302059][T14316] loop5: detected capacity change from 0 to 1024 [ 966.942888][T14316] hfsplus: request for non-existent node 196608 in B*Tree [ 966.950293][T14316] hfsplus: request for non-existent node 196608 in B*Tree [ 966.957688][T14316] hfsplus: failed to load root directory [ 968.735231][T14333] loop8: detected capacity change from 0 to 128 [ 968.759810][T14333] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 968.776277][T14333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 969.014033][ T5892] psmouse serio2: Failed to reset mouse on : -5 [ 969.430715][ T25] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 969.440803][ T25] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 969.451332][ T25] asix 3-1:0.0: probe with driver asix failed with error -71 [ 969.462506][ T25] usb 3-1: USB disconnect, device number 9 [ 969.772164][T14352] loop5: detected capacity change from 0 to 1024 [ 969.891438][T14352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.975601][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 970.436487][ T25] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 970.612196][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.663212][ T25] usb 3-1: Product: syz [ 970.684887][ T25] usb 3-1: Manufacturer: syz [ 970.717434][ T25] usb 3-1: SerialNumber: syz [ 970.756996][ T25] usb 3-1: config 0 descriptor?? [ 970.792931][T13281] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.650358][ T5831] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 971.662644][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 971.673562][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 971.683673][ T5831] Workqueue: hci3 hci_rx_work [ 971.688457][ T5831] Call Trace: [ 971.691779][ T5831] [ 971.694748][ T5831] dump_stack_lvl+0x241/0x360 [ 971.699506][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.704772][ T5831] ? __pfx__printk+0x10/0x10 [ 971.709449][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.715144][ T5831] ? __kmalloc_cache_noprof+0x243/0x390 [ 971.720757][ T5831] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 971.726109][ T5831] sysfs_create_dir_ns+0x2ce/0x3a0 [ 971.731291][ T5831] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 971.736988][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.742712][ T5831] kobject_add_internal+0x435/0x8d0 [ 971.751115][ T5831] kobject_add+0x152/0x220 [ 971.751193][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.751222][ T5831] ? do_raw_spin_unlock+0x13c/0x8b0 [ 971.751250][ T5831] ? device_add+0x3e7/0xbf0 [ 971.751280][ T5831] ? __pfx_kobject_add+0x10/0x10 [ 971.751317][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.751346][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 971.751377][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.751415][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.751443][ T5831] ? get_device_parent+0x165/0x410 [ 971.751485][ T5831] device_add+0x4e5/0xbf0 [ 971.751532][ T5831] hci_conn_add_sysfs+0xe8/0x200 [ 971.751577][ T5831] le_conn_complete_evt+0xc9f/0x12e0 [ 971.751622][ T5831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 971.751653][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.751679][ T5831] ? __mutex_unlock_slowpath+0x21e/0x790 [ 971.751722][ T5831] ? __pfx___mutex_lock+0x10/0x10 [ 971.751758][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.751784][ T5831] ? skb_pull_data+0x112/0x230 [ 971.751829][ T5831] hci_le_enh_conn_complete_evt+0x185/0x420 [ 971.751869][ T5831] hci_event_packet+0xa57/0x1540 [ 971.751914][ T5831] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 971.751948][ T5831] ? __pfx_hci_event_packet+0x10/0x10 [ 971.751987][ T5831] ? do_raw_spin_unlock+0x13c/0x8b0 [ 971.752024][ T5831] ? hci_send_to_monitor+0xd8/0x7f0 [ 971.752053][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 971.752082][ T5831] ? kcov_remote_start+0x97/0x7d0 [ 971.752119][ T5831] hci_rx_work+0x3f3/0xdb0 [ 971.752168][ T5831] ? process_scheduled_works+0x976/0x1840 [ 971.752198][ T5831] process_scheduled_works+0xa68/0x1840 [ 971.752255][ T5831] ? __pfx_process_scheduled_works+0x10/0x10 [ 971.752296][ T5831] ? assign_work+0x364/0x3d0 [ 971.752329][ T5831] worker_thread+0x870/0xd30 [ 971.752376][ T5831] ? __kthread_parkme+0x169/0x1d0 [ 971.752417][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 971.752448][ T5831] kthread+0x2f2/0x390 [ 971.752482][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 971.752510][ T5831] ? __pfx_kthread+0x10/0x10 [ 971.752545][ T5831] ret_from_fork+0x4d/0x80 [ 971.752573][ T5831] ? __pfx_kthread+0x10/0x10 [ 971.752607][ T5831] ret_from_fork_asm+0x1a/0x30 [ 971.752651][ T5831] [ 971.754631][ T5831] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 971.994770][ T5831] Bluetooth: hci3: failed to register connection device [ 972.127409][T14369] loop6: detected capacity change from 0 to 256 [ 972.190673][T14369] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 973.030908][ T25] usb 3-1: f81604_read: reg: 200e failed: -EPROTO [ 973.043887][ T25] usb 3-1: USB disconnect, device number 10 [ 973.220102][ T25] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 973.410172][ T5892] misc userio: Buffer overflowed, userio client isn't keeping up [ 973.583437][ T25] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 974.203259][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 975.825322][T14429] loop5: detected capacity change from 0 to 1024 [ 977.733453][T14429] hfsplus: request for non-existent node 196608 in B*Tree [ 977.741111][T14429] hfsplus: request for non-existent node 196608 in B*Tree [ 977.748625][T14429] hfsplus: failed to load root directory [ 979.489127][T11063] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 979.572057][ T5892] input: PS/2 Generic Mouse as /devices/serio2/input/input14 [ 979.660206][T11063] usb 6-1: Using ep0 maxpacket: 16 [ 979.716116][T11063] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 979.736343][T11063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.744392][T11063] usb 6-1: Product: syz [ 979.780741][T11063] usb 6-1: Manufacturer: syz [ 979.799155][T11063] usb 6-1: SerialNumber: syz [ 979.816716][T11063] usb 6-1: config 0 descriptor?? [ 979.852730][ T5892] psmouse serio2: Failed to enable mouse on [ 979.876392][T11063] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 980.092171][T11063] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 980.245208][T11063] visor 6-1:0.0: probe with driver visor failed with error -71 [ 980.349787][T11063] usb 6-1: USB disconnect, device number 7 [ 980.624656][T14466] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2162' sets config #1 [ 980.634227][ T5827] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 981.249956][T14480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2168'. [ 982.365127][ T6424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 982.386056][ T6424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 983.138274][T14495] loop8: detected capacity change from 0 to 128 [ 983.174531][ T5831] Bluetooth: hci3: link tx timeout [ 983.180229][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 983.888758][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 983.888788][ T29] audit: type=1800 audit(1733223192.086:126): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2172" name="file0" dev="loop8" ino=1048651 res=0 errno=0 [ 985.260223][ T5827] usb 2-1: device descriptor read/all, error -71 [ 985.520113][T14182] Bluetooth: hci3: command 0x0405 tx timeout [ 985.594299][T14507] fuse: Unknown parameter '0x0000000000000005' [ 986.609472][T14522] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 986.619104][T14522] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 989.381029][T14535] loop8: detected capacity change from 0 to 1024 [ 989.539604][ T5831] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 989.559764][T14535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.699600][T14535] EXT4-fs (loop8): shut down requested (0) [ 990.004595][T14553] fuse: Unknown parameter '0x0000000000000005' [ 990.777931][ T6718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 990.967555][ T2890] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 991.074935][T14569] loop5: detected capacity change from 0 to 8 [ 991.118550][T14569] SQUASHFS error: zlib decompression failed, data probably corrupt [ 991.189677][ T5831] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 991.578736][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 991.586528][ T30] Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 991.606130][T14569] SQUASHFS error: Failed to read block 0x9b: -5 [ 991.614188][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 991.632940][ T30] task:kworker/u8:1 state:D stack:20344 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 991.643718][T14569] SQUASHFS error: Unable to read metadata cache entry [99] [ 991.651112][ T30] Workqueue: writeback wb_workfn (flush-7:9) [ 991.657936][ T30] Call Trace: [ 991.661335][T14569] SQUASHFS error: Unable to read inode 0x127 [ 991.675224][ T51] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 991.698695][ T30] [ 991.708380][ T30] __schedule+0x1850/0x4c30 [ 991.719668][ T30] ? __pfx___schedule+0x10/0x10 [ 991.733812][ T30] ? __blk_flush_plug+0x449/0x500 [ 991.758034][ T30] ? __pfx_lock_release+0x10/0x10 [ 991.791485][ T30] ? kthread_data+0x52/0xd0 [ 991.816637][ T30] ? schedule+0x90/0x320 [ 991.841572][ T51] usb 2-1: device descriptor read/64, error -71 [ 991.866442][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.898079][ T30] ? wq_worker_sleeping+0x66/0x240 [ 991.936591][ T30] ? schedule+0x90/0x320 [ 991.959756][ T30] schedule+0x14b/0x320 [ 991.983722][ T30] schedule_preempt_disabled+0x13/0x30 [ 992.011607][ T30] __mutex_lock+0x7e7/0xee0 [ 992.034685][ T30] ? __mutex_lock+0x5ef/0xee0 [ 992.081008][ T30] ? exfat_write_inode+0xe5/0x1a0 [ 992.100975][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 992.123997][ T51] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 992.136118][ T30] ? __writeback_single_inode+0x48f/0x10d0 [ 992.164009][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.197423][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 992.218848][ T30] exfat_write_inode+0xe5/0x1a0 [ 992.240682][ T30] __writeback_single_inode+0x70a/0x10d0 [ 992.277286][ T30] writeback_sb_inodes+0x820/0x1360 [ 992.284329][ T51] usb 2-1: device descriptor read/64, error -71 [ 992.402369][ T51] usb usb2-port1: attempt power cycle [ 992.764999][ T30] ? mark_lock+0x2ae/0x360 [ 992.769788][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 992.782181][ T30] ? __pfx___up_read+0x10/0x10 [ 992.796199][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 992.803071][ T51] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 992.825376][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.843913][ T51] usb 2-1: device descriptor read/8, error -71 [ 992.853944][ T30] __writeback_inodes_wb+0x11b/0x260 [ 992.900257][ T30] wb_writeback+0x427/0xb80 [ 992.921207][ T30] ? queue_io+0x381/0x5a0 [ 992.941912][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 992.965682][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.130790][ T51] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 993.172114][ T51] usb 2-1: device descriptor read/8, error -71 [ 993.284073][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 993.298320][ T30] wb_workfn+0xc4b/0x1080 [ 993.310787][ T51] usb usb2-port1: unable to enumerate USB device [ 993.320136][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 993.334427][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.359664][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 993.382669][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 993.403035][ T30] ? process_scheduled_works+0x976/0x1840 [ 993.432033][ T30] process_scheduled_works+0xa68/0x1840 [ 993.459494][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 993.500001][ T30] ? assign_work+0x364/0x3d0 [ 993.519867][ T30] worker_thread+0x870/0xd30 [ 993.540911][ T30] ? __kthread_parkme+0x169/0x1d0 [ 993.562077][ T30] ? __pfx_worker_thread+0x10/0x10 [ 993.592136][ T30] kthread+0x2f2/0x390 [ 993.612139][ T30] ? __pfx_worker_thread+0x10/0x10 [ 993.651053][ T30] ? __pfx_kthread+0x10/0x10 [ 993.658596][ T30] ret_from_fork+0x4d/0x80 [ 993.683425][ T30] ? __pfx_kthread+0x10/0x10 [ 993.702742][ T30] ret_from_fork_asm+0x1a/0x30 [ 993.723551][ T30] [ 993.747257][ T30] [ 993.747257][ T30] Showing all locks held in the system: [ 993.825426][ T30] 4 locks held by kworker/u8:1/12: [ 993.846284][ T30] #0: ffff8881432db948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 993.886890][ T30] #1: ffffc90000117d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 993.942537][ T30] #2: ffff8880501140e0 (&type->s_umount_key#90){++++}-{4:4}, at: super_trylock_shared+0x22/0xf0 [ 993.976528][ T30] #3: ffff8880501120e8 (&sbi->s_lock#2){+.+.}-{4:4}, at: exfat_write_inode+0xe5/0x1a0 [ 994.024334][ T30] 1 lock held by khungtaskd/30: [ 994.046677][ T30] #0: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 994.101752][ T30] 2 locks held by getty/5578: [ 994.121248][ T30] #0: ffff8880350aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 994.166760][ T30] #1: ffffc900032fb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 994.215476][ T30] 3 locks held by syz-executor/9342: [ 994.246181][ T30] 2 locks held by syz.0.2179/14517: [ 994.264705][ T30] 1 lock held by syz.2.2203/14574: [ 994.288588][ T30] 2 locks held by syz.8.2197/14578: [ 994.313445][ T30] 2 locks held by syz.5.2200/14584: [ 994.346580][ T30] [ 994.357883][ T30] ============================================= [ 994.357883][ T30] [ 994.396689][ T30] NMI backtrace for cpu 1 [ 994.401071][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 994.411682][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 994.421760][ T30] Call Trace: [ 994.425054][ T30] [ 994.428003][ T30] dump_stack_lvl+0x241/0x360 [ 994.432720][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.437950][ T30] ? __pfx__printk+0x10/0x10 [ 994.442675][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 994.447649][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 994.453132][ T30] ? _printk+0xd5/0x120 [ 994.457493][ T30] ? __pfx__printk+0x10/0x10 [ 994.462105][ T30] ? __wake_up_klogd+0xcc/0x110 [ 994.466977][ T30] ? __pfx__printk+0x10/0x10 [ 994.471683][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.477335][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 994.482383][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 994.488385][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 994.494389][ T30] watchdog+0xff6/0x1040 [ 994.498654][ T30] ? watchdog+0x1ea/0x1040 [ 994.503097][ T30] ? __pfx_watchdog+0x10/0x10 [ 994.507791][ T30] kthread+0x2f2/0x390 [ 994.511918][ T30] ? __pfx_watchdog+0x10/0x10 [ 994.516615][ T30] ? __pfx_kthread+0x10/0x10 [ 994.521233][ T30] ret_from_fork+0x4d/0x80 [ 994.525673][ T30] ? __pfx_kthread+0x10/0x10 [ 994.530286][ T30] ret_from_fork_asm+0x1a/0x30 [ 994.535079][ T30] [ 994.539666][ T30] Sending NMI from CPU 1 to CPUs 0: [ 994.544902][ C0] NMI backtrace for cpu 0 [ 994.544918][ C0] CPU: 0 UID: 0 PID: 9342 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 994.544945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 994.544959][ C0] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 994.545002][ C0] Code: 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f e9 a7 d5 1f 00 48 c7 04 24 00 00 00 00 <9c> 8f 04 24 f7 04 24 00 02 00 00 74 c5 49 89 f6 49 89 ff 65 4c 8b [ 994.545022][ C0] RSP: 0018:ffffc9000c5b7568 EFLAGS: 00000046 [ 994.545043][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: ffffc9000c5b7603 [ 994.545060][ C0] RDX: 0000000000000003 RSI: ffffffff8c0aa880 RDI: ffffffff8c5f63e0 [ 994.545077][ C0] RBP: ffffc9000c5b76d8 R08: ffffffff901945f7 R09: 1ffffffff20328be [ 994.545095][ C0] R10: dffffc0000000000 R11: fffffbfff20328bf R12: 1ffff920018b6ec0 [ 994.545113][ C0] R13: 0000000000000246 R14: ffffc9000c5b7630 R15: dffffc0000000000 [ 994.545133][ C0] FS: 0000555568f4c500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 994.545154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 994.545171][ C0] CR2: 000000110c364766 CR3: 0000000048a3a000 CR4: 0000000000350ef0 [ 994.545190][ C0] Call Trace: [ 994.545198][ C0] [ 994.545208][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 994.545235][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 994.545265][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 994.545300][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 994.545323][ C0] ? nmi_handle+0x151/0x5a0 [ 994.545352][ C0] ? nmi_handle+0x2a/0x5a0 [ 994.545380][ C0] ? check_preemption_disabled+0x5c/0x120 [ 994.545420][ C0] ? default_do_nmi+0x63/0x160 [ 994.545446][ C0] ? exc_nmi+0x123/0x1f0 [ 994.545469][ C0] ? end_repeat_nmi+0xf/0x53 [ 994.545509][ C0] ? check_preemption_disabled+0x5c/0x120 [ 994.545545][ C0] ? check_preemption_disabled+0x5c/0x120 [ 994.545581][ C0] ? check_preemption_disabled+0x5c/0x120 [ 994.545616][ C0] [ 994.545624][ C0] [ 994.545634][ C0] lock_release+0x5ec/0xa30 [ 994.545664][ C0] ? fs_reclaim_acquire+0x93/0x130 [ 994.545692][ C0] ? __pfx_lock_release+0x10/0x10 [ 994.545717][ C0] ? bdev_getblk+0x6e/0x550 [ 994.545756][ C0] ? fs_reclaim_acquire+0x93/0x130 [ 994.545784][ C0] bdev_getblk+0x3d/0x550 [ 994.545818][ C0] ? irqentry_exit+0x63/0x90 [ 994.545848][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.545874][ C0] __bread_gfp+0x86/0x400 [ 994.545910][ C0] exfat_ent_get+0x14d/0x400 [ 994.545938][ C0] exfat_iterate+0xd3e/0x2ce0 [ 994.545977][ C0] ? __pfx_exfat_iterate+0x10/0x10 [ 994.546004][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.546058][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.546080][ C0] ? down_write+0x18c/0x220 [ 994.546117][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.546143][ C0] ? __pfx_exfat_iterate+0x10/0x10 [ 994.546166][ C0] wrap_directory_iterator+0x93/0xd0 [ 994.546198][ C0] iterate_dir+0x573/0x800 [ 994.546229][ C0] __se_sys_getdents64+0x1e2/0x4b0 [ 994.546264][ C0] ? __pfx___se_sys_getdents64+0x10/0x10 [ 994.546294][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 994.546321][ C0] ? __pfx_filldir64+0x10/0x10 [ 994.546351][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 994.546380][ C0] ? exc_page_fault+0x590/0x8b0 [ 994.546408][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 994.546438][ C0] ? do_syscall_64+0xb6/0x230 [ 994.546473][ C0] do_syscall_64+0xf3/0x230 [ 994.546508][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.546542][ C0] RIP: 0033:0x7f7761fb2873 [ 994.546562][ C0] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 a2 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 994.546581][ C0] RSP: 002b:00007ffef3332d18 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 994.546604][ C0] RAX: ffffffffffffffda RBX: 0000555568f67600 RCX: 00007f7761fb2873 [ 994.546623][ C0] RDX: 0000000000008000 RSI: 0000555568f67600 RDI: 0000000000000005 [ 994.546639][ C0] RBP: 0000555568f675d4 R08: 0000000000000000 R09: 0000000000000000 [ 994.546654][ C0] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 994.546671][ C0] R13: 0000000000000010 R14: 0000555568f675d0 R15: 00007ffef3334fc0 [ 994.546696][ C0] [ 995.469546][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 995.476505][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 995.487074][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 995.497151][ T30] Call Trace: [ 995.500441][ T30] [ 995.503389][ T30] dump_stack_lvl+0x241/0x360 [ 995.508128][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 995.513371][ T30] ? __pfx__printk+0x10/0x10 [ 995.517991][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 995.524030][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.529682][ T30] ? vscnprintf+0x5d/0x90 [ 995.534038][ T30] panic+0x349/0x880 [ 995.537964][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.543618][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 995.549818][ T30] ? __pfx_panic+0x10/0x10 [ 995.554274][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 995.559680][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.565335][ T30] ? __irq_work_queue_local+0x137/0x410 [ 995.570916][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.576567][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 995.581968][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 995.588151][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 995.594333][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 995.599986][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 995.606168][ T30] watchdog+0x1035/0x1040 [ 995.610526][ T30] ? watchdog+0x1ea/0x1040 [ 995.614966][ T30] ? __pfx_watchdog+0x10/0x10 [ 995.619663][ T30] kthread+0x2f2/0x390 [ 995.623757][ T30] ? __pfx_watchdog+0x10/0x10 [ 995.628479][ T30] ? __pfx_kthread+0x10/0x10 [ 995.633095][ T30] ret_from_fork+0x4d/0x80 [ 995.637530][ T30] ? __pfx_kthread+0x10/0x10 [ 995.642142][ T30] ret_from_fork_asm+0x1a/0x30 [ 995.646939][ T30] [ 995.650200][ T30] Kernel Offset: disabled [ 995.654520][ T30] Rebooting in 86400 seconds..