last executing test programs: 20m31.308973741s ago: executing program 1 (id=1040): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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") syz_open_dev$admmidi(0x0, 0x20, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x70}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x100000000000000, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 20m28.756051783s ago: executing program 1 (id=1043): iopl(0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r1, 0x0, 0x60) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 20m25.34128571s ago: executing program 1 (id=1047): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCEXCL(r4, 0x540c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_buf(r1, 0x0, 0x10, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 20m23.669604245s ago: executing program 1 (id=1050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 20m22.157017274s ago: executing program 1 (id=1052): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendto$netrom(r5, &(0x7f0000000100)="4ad2", 0x2, 0x0, &(0x7f00000002c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 20m18.765525128s ago: executing program 1 (id=1054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x2523, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x0, 0x1b2}, &(0x7f00000000c0), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) 20m2.665397916s ago: executing program 32 (id=1054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x2523, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x0, 0x1b2}, &(0x7f00000000c0), &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) 13m29.509165702s ago: executing program 3 (id=1674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000000), &(0x7f00000000c0)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) chdir(0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xeeef0000}) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x8010, &(0x7f0000000040), 0x4, 0x989c, &(0x7f0000001140)="$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") 13m20.654416795s ago: executing program 3 (id=1680): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB]) socket$inet6(0xa, 0x4, 0x7f) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40101) r5 = epoll_create1(0x80000) epoll_wait(r5, &(0x7f0000000000), 0x0, 0x7f36be33) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x1f}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x53, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) 13m17.36760544s ago: executing program 3 (id=1683): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r3, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r5, r6, r4}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={'sha1-generic\x00'}}) 13m10.97538012s ago: executing program 3 (id=1692): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0) 13m10.735408954s ago: executing program 3 (id=1693): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x24000801, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x891a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, 0x0) 13m6.839870988s ago: executing program 3 (id=1695): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x20, 0x32, 0x200, 0x70bd2d, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 12m51.559986855s ago: executing program 33 (id=1695): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x20, 0x32, 0x200, 0x70bd2d, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 9m28.601121165s ago: executing program 0 (id=2018): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = msgget$private(0x0, 0x20) msgsnd(r4, &(0x7f00000000c0)=ANY=[], 0x8, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) socket(0x10, 0x4, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x119a, 0x0, 0x0) 9m27.53734531s ago: executing program 0 (id=2019): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x25418, 0x0, 0x1, 0x0, &(0x7f0000006380)) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) sched_setscheduler(0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) close(0x3) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\/:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) 9m25.923991499s ago: executing program 0 (id=2023): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1}) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) 9m24.057080863s ago: executing program 0 (id=2032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 9m19.213603801s ago: executing program 0 (id=2028): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) shmget(0x0, 0x2000, 0x64, &(0x7f0000ffc000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000006140)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@union={0x2, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x4, 0x3, 0x2}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x3}, @datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], "d4"}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "451ad6"}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0x7b, 0x1}]}, {0x0, [0x5f, 0x5f, 0x4f, 0x5f, 0x0]}}, &(0x7f0000000780)=""/171, 0x6f, 0xab, 0x1, 0x4}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x4, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000780), 0x0}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x10, 0x200, &(0x7f0000000180)="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"}) 9m17.80713855s ago: executing program 0 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200), 0x0, 0x0) 9m2.242516195s ago: executing program 34 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0) add_key(&(0x7f0000002100)='keyring\x00', 0x0, &(0x7f0000002180)="8ec5", 0x2, 0xfffffffffffffffb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r5, 0x4b32, 0xf1a) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200), 0x0, 0x0) 18.60019577s ago: executing program 2 (id=2770): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x2200c001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$uid(0x3, 0xee01) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="04000500"], 0x50}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04020f01"], 0x12) 17.726152448s ago: executing program 6 (id=2771): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") creat(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) 17.549272615s ago: executing program 4 (id=2772): r0 = socket(0x2, 0x2, 0x1) listen(0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c13, &(0x7f0000000240)=ANY=[@ANYBLOB='nocompress,showassoc,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-2,showassoc,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b3d7374726963742c636865636b3d7374726963742c73657373696f6e3d3078303030303030303030303030303036122c63727566742c626c6f636b3d3078303030303030303030303030303430302c636865636b3d72656c617865642c00"], 0x1, 0xa00, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7f", 0x76}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) mmap(&(0x7f00005b0000/0x1000)=nil, 0x1000, 0x6, 0x13, 0xffffffffffffffff, 0xffffd000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 16.351200194s ago: executing program 2 (id=2773): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={'sha1-generic\x00'}}) 16.240554855s ago: executing program 6 (id=2774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6}]}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x88, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0xd, 0x6, "9638ff", 0x52, 0x6, 0x1, @private2, @empty, {[], {{0x4e24, 0x4e23, r5, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x6, {[@mss={0x2, 0x4, 0xb}]}}, {"613cb06ba353358e5d1d42c84ff14774ae1dd2ef1ee80f654ee2b77f3796c63d7e6a2d6c71c82a9698aca25cdc37f8cfddb99bfabf957ec35df8"}}}}}}}, 0x0) r6 = signalfd4(r4, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) io_uring_enter(r6, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 14.87806731s ago: executing program 6 (id=2775): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f00000001c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007c1bcb554dcdcd464765613a01a861f4007fbefd8539539f5a5a3c1488b48284ca241df655e5c33cf630925e813ea6442f67a4ba1a92116aface282e9bc753fb4a324877709a4513"], 0xfe, 0x9e15, &(0x7f000000a040)="$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") getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x5, @empty}, 0xfffffffffffffde1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 14.87696662s ago: executing program 4 (id=2776): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = gettid() tkill(r1, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x669, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 13.263331901s ago: executing program 4 (id=2778): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000480)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x20, 0x10, 0xbc, 0xad, 0x0, 0x0, 0x9, 0x10}}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x4800) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(0x0, 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000046}, 0x4000084) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r5, r5, 0x0, 0xb) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 12.06940624s ago: executing program 4 (id=2779): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x2008}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) tkill(0x0, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffed6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.473150359s ago: executing program 5 (id=2780): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141001, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfc}, @hci_rp_read_local_name={{0x7}, {0x3, "c8e02583b339773d08c31c8dc3baf8cd71b99273adc85506676bc88e1d4bd7c6a7c1c52337c53ea6003add9c5971882cf87f5b245b5f6431ea6f7ae44963187416ca6518ab8b290b7f7df55162bb7a233cd3867c96527d9efb182753a4df1ca4d096e0eb1db2a35bc6a341c7173f215c98a88b3b057e5ba890b1a18208f1ed863f037fb71b26682369323a35c82dcc7baf73fb3978d02d1c07d53f7db04e5c91f0b68204177b9533a1564bd76344a3cd7fd20f3ad58d2fde07ba525fbd5113dc00cda8cad3e3d850df398afff2a5b591be26a026a7afb7dfd5aa67e544d38e043d9b42cb896394bac88fe10948b122c2a23709816098282b"}}}}, 0xff) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x4000000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) userfaultfd(0x802) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'adq12b\x00', [0x4f27, 0x8, 0x40000004, 0x2, 0x40005, 0x5, 0xf, 0x7, 0x54c6cff3, 0xfd, 0xf, 0x1, 0x1, 0x1, 0x1000, 0x6a, 0x0, 0x7f, 0x10000007, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e5b, 0x3, 0x2000e26, 0x3, 0x9, 0x4086, 0x0, 0x4]}) 10.468169099s ago: executing program 6 (id=2788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}}) sendmsg$unix(r6, 0x0, 0x84) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @mcast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@rand_addr=' \x01\x00'}}]}, 0xa0}}, 0x0) 10.207506345s ago: executing program 4 (id=2781): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) r7 = dup3(0xffffffffffffffff, r6, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) 8.101493645s ago: executing program 6 (id=2782): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2400c080}, 0xd1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) chdir(0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$sock(r4, &(0x7f00000001c0)={&(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80, 0x0}, 0x24000080) 8.080437786s ago: executing program 5 (id=2783): r0 = socket(0x2, 0x2, 0x1) listen(0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c13, &(0x7f0000000240)=ANY=[@ANYBLOB='nocompress,showassoc,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-2,showassoc,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b3d7374726963742c636865636b3d7374726963742c73657373696f6e3d3078303030303030303030303030303036122c63727566742c626c6f636b3d3078303030303030303030303030303430302c636865636b3d72656c617865642c00"], 0x1, 0xa00, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7f", 0x76}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) mmap(&(0x7f00005b0000/0x1000)=nil, 0x1000, 0x6, 0x13, 0xffffffffffffffff, 0xffffd000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 5.12477052s ago: executing program 2 (id=2784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40}, {0x6}]}, 0x10) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x88, &(0x7f0000000380)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0xd, 0x6, "9638ff", 0x52, 0x6, 0x1, @private2, @empty, {[], {{0x4e24, 0x4e23, r5, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x1, 0x0, 0x6, {[@mss={0x2, 0x4, 0xb}]}}, {"613cb06ba353358e5d1d42c84ff14774ae1dd2ef1ee80f654ee2b77f3796c63d7e6a2d6c71c82a9698aca25cdc37f8cfddb99bfabf957ec35df8"}}}}}}}, 0x0) r6 = signalfd4(r4, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) io_uring_enter(r6, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 5.115951801s ago: executing program 6 (id=2793): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={'sha1-generic\x00'}}) 4.978323735s ago: executing program 4 (id=2785): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r4, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580), 0x0, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={'sha1-generic\x00'}}) 4.017197471s ago: executing program 5 (id=2786): r0 = socket(0x2, 0x2, 0x1) listen(0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c13, &(0x7f0000000240)=ANY=[@ANYBLOB='nocompress,showassoc,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=iso8859-2,showassoc,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c636865636b3d7374726963742c636865636b3d7374726963742c73657373696f6e3d3078303030303030303030303030303036122c63727566742c626c6f636b3d3078303030303030303030303030303430302c636865636b3d72656c617865642c00"], 0x1, 0xa00, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r1, 0x3, &(0x7f0000000000)=0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7f", 0x76}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) mmap(&(0x7f00005b0000/0x1000)=nil, 0x1000, 0x6, 0x13, 0xffffffffffffffff, 0xffffd000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 3.576480605s ago: executing program 5 (id=2787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, &(0x7f00000001c0), &(0x7f0000000200)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)='%pi6 \x00'}, 0x1b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) keyctl$clear(0x7, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) socket$l2tp(0x2, 0x2, 0x73) r7 = socket(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x13, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) 3.575440285s ago: executing program 2 (id=2789): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, 0x0) 2.329087968s ago: executing program 2 (id=2790): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fdaa) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) read$FUSE(r7, &(0x7f00000002c0)={0x2020}, 0x2020) 1.597673881s ago: executing program 5 (id=2791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) prlimit64(r1, 0x6, &(0x7f00000000c0)={0xfb, 0x9}, 0x0) r6 = open(0x0, 0x1a1342, 0x0) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="000088ca02010765fc20235a0577cfe87d9dab0e00000006000008ffff22f006"], 0x22) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x22) 417.255919ms ago: executing program 5 (id=2792): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') memfd_create(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01062bbd7000fcdbdf2501000000080006007f00000108000800e000000206000a004e22000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f020, 0xffff0001}) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 0s ago: executing program 2 (id=2794): socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x180) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): entry 4294967071 out of range (1, 6). [ 743.293133][T10124] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 743.348200][T10124] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 743.440657][T10124] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.999: bg 0: block 40: padding at end of block bitmap is not set [ 743.547020][T10124] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 743.903765][T10124] EXT4-fs (loop2): 1 truncate cleaned up [ 743.923522][T10124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 743.966507][T10126] loop0: detected capacity change from 0 to 1024 [ 744.857214][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.937366][ T58] hfsplus: b-tree write err: -5, ino 4 [ 746.820919][T10151] loop0: detected capacity change from 0 to 2048 [ 747.178523][T10152] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.256245][T10149] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 747.268041][T10149] Remounting filesystem read-only [ 747.566182][ T5788] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 747.582841][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.583748][ T5788] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 747.596183][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.607343][ T5788] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 747.648839][ T5788] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 747.668607][ T5788] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 747.688391][ T5788] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 747.701614][ T5788] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 747.708370][ T5788] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 747.735284][ T5788] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 747.746110][ T5788] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 747.754842][ T5788] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 749.255740][T10171] ip6gretap0 speed is unknown, defaulting to 1000 [ 750.136085][T10183] ip6gretap0 speed is unknown, defaulting to 1000 [ 752.136930][T10197] ip6gretap0 speed is unknown, defaulting to 1000 [ 757.353244][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 758.572580][T10234] ip6gretap0 speed is unknown, defaulting to 1000 [ 764.513062][T10259] netlink: 'syz.1.1031': attribute type 3 has an invalid length. [ 770.525563][T10331] loop1: detected capacity change from 0 to 1024 [ 772.090328][ T1132] hfsplus: b-tree write err: -5, ino 4 [ 772.979858][T10356] loop3: detected capacity change from 0 to 24 [ 772.990756][T10356] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 773.563675][T10356] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 779.368632][T10417] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 784.754587][T10439] loop0: detected capacity change from 0 to 512 [ 785.761290][T10439] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 785.770397][T10439] EXT4-fs (loop0): orphan cleanup on readonly fs [ 785.779886][T10439] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 785.791462][T10439] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 785.807686][T10439] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 785.820037][T10439] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1058: bg 0: block 40: padding at end of block bitmap is not set [ 785.835424][T10439] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 785.848996][T10439] EXT4-fs (loop0): 1 truncate cleaned up [ 785.855667][T10439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 786.686944][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.994275][T10447] syz.3.1059 (10447) used greatest stack depth: 19560 bytes left [ 789.731143][T10458] befs: (nullb0): invalid magic header [ 790.360490][T10464] loop2: detected capacity change from 0 to 128 [ 790.371072][T10464] EXT4-fs: Ignoring removed nobh option [ 791.195939][T10464] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 791.209185][T10464] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 791.449863][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 796.851246][T10509] loop3: detected capacity change from 0 to 128 [ 796.862086][T10509] EXT4-fs: Ignoring removed nobh option [ 797.344402][T10509] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 797.357140][T10509] ext4 filesystem being mounted at /264/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 797.596620][ T5790] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.563880][T10519] ip6gretap0 speed is unknown, defaulting to 1000 [ 800.305599][T10534] loop3: detected capacity change from 0 to 512 [ 800.358764][T10534] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1081: casefold flag without casefold feature [ 800.428904][T10534] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1081: couldn't read orphan inode 15 (err -117) [ 800.489964][T10534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.872400][ T9842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 800.954428][ T9842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 800.974087][ T9842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.345451][ T9842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.356870][ T9842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 801.365074][ T9842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 801.431135][T10539] ip6gretap0 speed is unknown, defaulting to 1000 [ 801.671309][ T1124] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.692318][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.945959][ T1124] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.082340][ T1124] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.194952][ T1124] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.227326][T10539] chnl_net:caif_netlink_parms(): no params data found [ 802.411571][T10539] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.419162][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.426467][T10539] bridge_slave_0: entered allmulticast mode [ 802.434303][T10539] bridge_slave_0: entered promiscuous mode [ 802.443384][T10539] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.451014][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.458801][T10539] bridge_slave_1: entered allmulticast mode [ 802.465844][T10539] bridge_slave_1: entered promiscuous mode [ 802.546575][T10539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.560227][T10539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.645155][T10539] team0: Port device team_slave_0 added [ 802.656081][T10539] team0: Port device team_slave_1 added [ 802.704417][ T1124] infiniband syz2: set down [ 802.743413][ T9876] smc: removing ib device syz2 [ 802.753553][T10539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.761718][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.787789][T10539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.800976][T10539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.807965][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.834622][T10539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.858080][ T8] ip6gretap0 speed is unknown, defaulting to 1000 [ 802.874840][ T2134] infiniband syz2: ib_query_port failed (-19) [ 802.923783][T10539] hsr_slave_0: entered promiscuous mode [ 802.942281][T10539] hsr_slave_1: entered promiscuous mode [ 802.955146][T10539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.965235][T10539] Cannot create hsr debugfs directory [ 803.410457][ T5104] Bluetooth: hci4: command tx timeout [ 803.821978][T10539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 803.858249][T10539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 803.904049][T10539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 803.935684][T10539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 804.168077][T10539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.227434][T10539] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.245396][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.252603][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.268053][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.275273][ T9876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.356633][T10539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.732583][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.488802][ T5104] Bluetooth: hci4: command tx timeout [ 805.495703][T10539] veth0_vlan: entered promiscuous mode [ 805.564026][ T1124] hsr_slave_0: left promiscuous mode [ 805.575492][ T1124] hsr_slave_1: left promiscuous mode [ 805.612834][ T1124] veth1_macvtap: left promiscuous mode [ 805.619446][ T1124] veth0_macvtap: left promiscuous mode [ 807.523621][ T1124] bond0 (unregistering): Released all slaves [ 807.569211][ T5104] Bluetooth: hci4: command tx timeout [ 807.659875][T10539] veth1_vlan: entered promiscuous mode [ 807.776037][T10539] veth0_macvtap: entered promiscuous mode [ 807.804164][T10539] veth1_macvtap: entered promiscuous mode [ 807.866724][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.882637][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.895735][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.913884][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.931677][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 807.944791][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.975720][T10539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.005487][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.016844][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.036004][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.049310][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.070066][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 808.083764][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 808.115088][T10539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.137028][T10539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.150834][T10539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.160701][T10539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.177155][T10539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.329401][ T1124] IPVS: stop unused estimator thread 0... [ 808.348545][ T7580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.358065][ T7580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.418695][ T9876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.427853][ T9876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.127628][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.136736][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.258258][T10635] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.267858][T10635] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.276816][T10635] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.285644][T10635] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.705161][ T5104] Bluetooth: hci4: command tx timeout [ 809.897940][T10635] vxlan0: entered promiscuous mode [ 809.999262][T10635] team0: Port device vxlan0 added [ 813.095675][T10691] netlink: 'syz.0.1088': attribute type 3 has an invalid length. [ 816.105329][T10710] loop0: detected capacity change from 0 to 2048 [ 816.194903][T10710] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 816.235631][T10710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 818.642063][T10736] loop4: detected capacity change from 0 to 512 [ 818.864292][T10736] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1101: casefold flag without casefold feature [ 819.611028][T10736] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1101: couldn't read orphan inode 15 (err -117) [ 819.632502][T10736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.583933][T10539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.137868][T10765] loop0: detected capacity change from 0 to 2048 [ 822.160933][T10765] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 822.284400][T10765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 825.163293][T10780] loop4: detected capacity change from 0 to 4096 [ 825.369468][T10780] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 835.381184][T10859] loop2: detected capacity change from 0 to 32768 [ 836.535289][T10859] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1119 (10859) [ 836.826031][T10859] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 836.836463][T10859] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 836.845617][T10859] BTRFS error (device loop2): superblock checksum mismatch [ 836.859875][T10859] BTRFS error (device loop2): open_ctree failed: -22 [ 837.212208][ T8679] udevd[8679]: incorrect btrfs checksum on /dev/loop2 [ 839.265012][T10886] ptrace attach of "./syz-executor exec"[5792] was attempted by "./syz-executor exec"[10886] [ 841.745537][T10897] loop4: detected capacity change from 0 to 32768 [ 841.809536][T10897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1126 (10897) [ 841.832583][T10897] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 841.842899][T10897] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 841.851831][T10897] BTRFS info (device loop4): using free space tree [ 842.101680][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 842.338324][T10897] BTRFS info (device loop4): enabling ssd optimizations [ 842.346138][T10897] BTRFS info (device loop4): auto enabling async discard [ 843.621165][ T28] audit: type=1800 audit(1760911665.896:56): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1126" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 844.941577][T10928] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 846.100371][T10539] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 846.209099][T10942] loop0: detected capacity change from 0 to 2048 [ 846.278040][T10942] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 846.398679][T10942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 851.353620][T10989] loop0: detected capacity change from 0 to 4096 [ 851.510442][T10995] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 851.653459][T10999] loop3: detected capacity change from 0 to 1024 [ 851.819036][T10999] EXT4-fs: Ignoring removed i_version option [ 851.856404][T10999] EXT4-fs: inline encryption not supported [ 852.271752][T10999] EXT4-fs (loop3): Test dummy encryption mode enabled [ 852.357696][T10999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.197275][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.132934][T11015] loop3: detected capacity change from 0 to 2048 [ 854.183422][T11015] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 854.308134][T11015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.535447][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 856.838977][T11042] loop3: detected capacity change from 0 to 40427 [ 856.864027][T11042] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 856.871996][T11042] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 856.890285][T11042] F2FS-fs (loop3): invalid crc value [ 856.931885][T11042] F2FS-fs (loop3): Found nat_bits in checkpoint [ 857.018412][T11042] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 857.025510][T11042] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 857.268667][T10393] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 858.033419][T10393] usb 5-1: config 6 has an invalid interface number: 14 but max is 0 [ 858.070896][T10393] usb 5-1: config 6 has no interface number 0 [ 858.094508][T10393] usb 5-1: config 6 interface 14 has no altsetting 0 [ 858.550679][T10393] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 858.569088][T10393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.639181][T10393] usb 5-1: Product: syz [ 858.643425][T10393] usb 5-1: Manufacturer: syz [ 858.713887][T10393] usb 5-1: can't set config #6, error -71 [ 858.751220][T10393] usb 5-1: USB disconnect, device number 2 [ 858.850642][T11060] loop4: detected capacity change from 0 to 1024 [ 859.824697][ T27] IPVS: starting estimator thread 0... [ 860.010075][ T1132] hfsplus: b-tree write err: -5, ino 4 [ 860.068547][T11066] IPVS: using max 26 ests per chain, 62400 per kthread [ 861.097456][ T28] audit: type=1326 audit(1760911683.826:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11069 comm="syz.3.1150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00598efc9 code=0x7fc00000 [ 862.073991][T11091] loop4: detected capacity change from 0 to 512 [ 862.098938][T11091] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 862.123055][T11091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 862.132414][T11091] System zones: 1-12 [ 862.154101][T11091] EXT4-fs (loop4): 1 truncate cleaned up [ 862.161387][T11091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.186978][T11090] loop0: detected capacity change from 0 to 2048 [ 862.434920][T11090] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 863.560293][T11090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 863.952411][T10539] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.665968][T11157] loop2: detected capacity change from 0 to 2048 [ 869.732870][T11157] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 869.796128][T11157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 870.452958][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.459570][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.171558][T11190] bond_slave_0: entered promiscuous mode [ 874.177864][T11190] bond_slave_1: entered promiscuous mode [ 874.184066][T11190] macsec1: entered promiscuous mode [ 874.189446][T11190] bond0: entered promiscuous mode [ 874.196159][T11190] macsec1: entered allmulticast mode [ 874.320892][T11190] bond0: entered allmulticast mode [ 874.320993][T11190] bond_slave_0: entered allmulticast mode [ 874.321012][T11190] bond_slave_1: entered allmulticast mode [ 877.330335][T11212] loop0: detected capacity change from 0 to 2048 [ 877.431350][T11212] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 877.495429][T11212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 878.068625][T11219] 9pnet_fd: Insufficient options for proto=fd [ 878.891059][T11237] pimreg: entered allmulticast mode [ 879.838103][T11229] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1181'. [ 879.883736][T11229] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.892792][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.823384][T11299] pimreg: entered allmulticast mode [ 893.398801][T11346] loop4: detected capacity change from 0 to 1024 [ 893.435742][T11346] EXT4-fs: Ignoring removed orlov option [ 893.458593][T11346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 893.510784][T11346] EXT4-fs: Mount option(s) incompatible with ext2 [ 893.996635][T11357] loop4: detected capacity change from 0 to 256 [ 894.936124][T11353] xt_CT: No such helper "snmp" [ 895.533113][T11359] 9pnet_fd: Insufficient options for proto=fd [ 896.399453][T11377] netlink: 'syz.4.1206': attribute type 5 has an invalid length. [ 901.173705][T11414] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 901.182346][T11414] netlink: 'syz.2.1215': attribute type 2 has an invalid length. [ 906.214422][T11440] loop0: detected capacity change from 0 to 32768 [ 909.509533][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 909.520807][T11450] loop3: detected capacity change from 0 to 64 [ 909.593632][ T8930] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 909.759532][ T8679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (8679) [ 910.351232][ T8] usb 1-1: config 0 has no interfaces? [ 910.361158][ T8] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 910.383209][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.397763][ T8] usb 1-1: Product: syz [ 910.431587][ T8] usb 1-1: Manufacturer: syz [ 910.436280][ T8] usb 1-1: SerialNumber: syz [ 910.518270][ T8] usb 1-1: config 0 descriptor?? [ 910.883615][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.910745][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.025808][T11449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.058910][T11449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.961951][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.969621][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.784316][T11463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.816441][T11463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.061966][T11463] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.071244][T11463] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.085960][T11463] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.097764][T11463] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.219462][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 913.243157][T11471] netlink: 'syz.3.1229': attribute type 6 has an invalid length. [ 913.391604][T11476] usb 1-1: USB disconnect, device number 2 [ 915.094773][T11505] loop0: detected capacity change from 0 to 1024 [ 915.129841][T11505] EXT4-fs: Ignoring removed orlov option [ 915.142648][T11505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 915.178862][T11505] EXT4-fs: Mount option(s) incompatible with ext2 [ 915.648217][T11511] loop0: detected capacity change from 0 to 256 [ 916.308514][T11509] xt_CT: No such helper "snmp" [ 917.376400][T11516] loop4: detected capacity change from 0 to 16 [ 917.429235][T11516] erofs: (device loop4): mounted with root inode @ nid 36. [ 917.491845][T11518] 9pnet_fd: Insufficient options for proto=fd [ 917.562220][T11516] syz.4.1237: attempt to access beyond end of device [ 917.562220][T11516] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 922.278160][T11549] loop2: detected capacity change from 0 to 1024 [ 922.307286][T11549] EXT4-fs: Ignoring removed orlov option [ 922.333210][T11549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 922.350620][T11549] EXT4-fs: Mount option(s) incompatible with ext2 [ 924.054928][T11557] xt_CT: No such helper "snmp" [ 924.176685][ T5104] Bluetooth: hci4: command 0x0406 tx timeout [ 925.751527][T11569] loop3: detected capacity change from 0 to 64 [ 926.370209][ T28] audit: type=1800 audit(1760911749.106:58): pid=11573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1247" name="file1" dev="loop3" ino=22 res=0 errno=0 [ 926.541666][T11576] loop0: detected capacity change from 0 to 64 [ 931.966746][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.973383][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.322551][T11612] loop3: detected capacity change from 0 to 512 [ 933.330131][T11612] EXT4-fs: Ignoring removed oldalloc option [ 933.350497][T11612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 934.571774][T11612] EXT4-fs (loop3): 1 truncate cleaned up [ 934.588785][T11612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.452209][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.307957][T11632] loop0: detected capacity change from 0 to 2048 [ 938.319283][T11635] loop2: detected capacity change from 0 to 128 [ 938.327250][T11635] FAT-fs (loop2): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 938.512698][ T8679] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 938.529856][T11632] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 938.573854][T11632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 940.893667][T11657] netlink: 'syz.0.1267': attribute type 5 has an invalid length. [ 944.300009][T11682] loop3: detected capacity change from 0 to 2048 [ 944.330573][T11682] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 944.374421][T11682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 944.479218][T11685] macsec1: entered promiscuous mode [ 944.484995][T11685] bond0: entered promiscuous mode [ 944.490388][T11685] bond_slave_0: entered promiscuous mode [ 944.496767][T11685] bond_slave_1: entered promiscuous mode [ 944.503802][T11685] macsec1: entered allmulticast mode [ 944.509270][T11685] bond0: entered allmulticast mode [ 944.514452][T11685] bond_slave_0: entered allmulticast mode [ 944.520482][T11685] bond_slave_1: entered allmulticast mode [ 947.842357][T11710] netlink: 'syz.3.1281': attribute type 5 has an invalid length. [ 950.495191][T11730] loop2: detected capacity change from 0 to 2048 [ 950.571133][T11730] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 950.601987][T11730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 950.635547][T11732] bond_slave_0: entered promiscuous mode [ 950.641789][T11732] bond_slave_1: entered promiscuous mode [ 950.647571][T11732] macsec1: entered promiscuous mode [ 950.653018][T11732] bond0: entered promiscuous mode [ 950.658629][T11732] macsec1: entered allmulticast mode [ 950.663934][T11732] bond0: entered allmulticast mode [ 950.669128][T11732] bond_slave_0: entered allmulticast mode [ 950.674951][T11732] bond_slave_1: entered allmulticast mode [ 961.934038][T11805] loop2: detected capacity change from 0 to 256 [ 961.974919][T11805] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 966.665655][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 966.696651][T11839] ip6gretap0: entered promiscuous mode [ 966.703886][T11839] macvtap1: entered promiscuous mode [ 966.710689][T11839] macvtap1: entered allmulticast mode [ 966.716275][T11839] ip6gretap0: entered allmulticast mode [ 967.429213][T11839] ip6gretap0: left allmulticast mode [ 967.459732][T11839] ip6gretap0: left promiscuous mode [ 967.468215][T11841] syz.2.1314 (11841): drop_caches: 2 [ 968.629382][T11850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1317'. [ 968.665309][T11850] netlink: 'syz.2.1317': attribute type 6 has an invalid length. [ 970.555281][T11861] loop2: detected capacity change from 0 to 2048 [ 970.623519][T11861] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 972.541433][T11861] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 976.321748][T11902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.330139][T11902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.910220][T11902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.917721][T11902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.297933][T11910] loop3: detected capacity change from 0 to 2048 [ 978.328083][T11910] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 978.393478][T11910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.414291][T11939] syz.0.1342 (11939): drop_caches: 2 [ 987.627054][T11973] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.636379][T11973] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.645208][T11973] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.654268][T11973] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.211221][T11973] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.221180][T11973] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.230212][T11973] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.239215][T11973] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.152364][ T9842] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 993.119442][T12011] loop2: detected capacity change from 0 to 2048 [ 993.282065][T12011] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 993.346255][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.363427][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.874023][T12011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.142398][T12063] loop0: detected capacity change from 0 to 2048 [ 1000.172479][T12063] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1000.283226][T12063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1004.023765][T12090] loop2: detected capacity change from 0 to 2048 [ 1006.156477][T12094] loop0: detected capacity change from 0 to 4096 [ 1006.192775][T12094] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1006.467379][T12094] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1006.602369][T12106] loop3: detected capacity change from 0 to 2048 [ 1006.656536][T12106] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1006.758737][T12106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.104002][T12113] loop2: detected capacity change from 0 to 2048 [ 1007.253761][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1385'. [ 1007.273496][T12116] netlink: 'syz.3.1385': attribute type 6 has an invalid length. [ 1009.493157][T12113] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1009.564332][T12113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1019.112078][T12157] loop0: detected capacity change from 0 to 2048 [ 1019.158791][T12157] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1019.242339][T12157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1019.618019][T12164] Invalid ELF header magic: != ELF [ 1020.728132][T12172] loop3: detected capacity change from 0 to 512 [ 1020.736968][T12172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1020.778100][T12172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 1020.786298][T12172] System zones: 1-12 [ 1020.800804][T12172] EXT4-fs (loop3): 1 truncate cleaned up [ 1020.807962][T12172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.319428][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.425117][T12198] loop3: detected capacity change from 0 to 2048 [ 1025.500663][T12198] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1026.573089][T12198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1027.772180][T12206] loop2: detected capacity change from 0 to 1024 [ 1028.481988][T12206] input: syz1 as /devices/virtual/input/input11 [ 1032.300209][T12240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1032.932167][ T9899] hfsplus: b-tree write err: -5, ino 4 [ 1033.033828][T12251] virtio-fs: tag not found [ 1036.445521][T12261] loop0: detected capacity change from 0 to 2048 [ 1036.572513][T12261] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1036.690834][T12261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1041.615103][T12299] loop3: detected capacity change from 0 to 1024 [ 1042.301227][ T7580] hfsplus: b-tree write err: -5, ino 4 [ 1042.693608][T12303] loop3: detected capacity change from 0 to 2048 [ 1042.799740][T12303] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1042.841984][T12303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1045.172126][T12315] syz.3.1436 (12315) used greatest stack depth: 16744 bytes left [ 1046.230120][T12330] loop3: detected capacity change from 0 to 8 [ 1046.753694][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1046.761579][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1046.777767][ T28] audit: type=1800 audit(1760911869.516:59): pid=12329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1440" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1046.806403][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1046.814412][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1046.821616][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1046.828172][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1046.837819][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1046.844750][T12329] SQUASHFS error: Failed to read block 0x4de: -5 [ 1047.239924][T12336] (null): rxe_set_mtu: Set mtu to 1024 [ 1047.256501][T12336] ip6gretap0 speed is unknown, defaulting to 1000 [ 1047.312664][T12336] ip6gretap0 speed is unknown, defaulting to 1000 [ 1047.346571][T12336] ip6gretap0 speed is unknown, defaulting to 1000 [ 1047.942376][T12336] infiniband syz2: set down [ 1047.949077][T12336] infiniband syz2: added ip6gretap0 [ 1047.959679][T10393] ip6gretap0 speed is unknown, defaulting to 1000 [ 1048.025243][T12336] RDS/IB: syz2: added [ 1048.029439][T12336] smc: adding ib device syz2 with port count 1 [ 1048.035709][T12336] smc: ib device syz2 port 1 has pnetid [ 1048.044499][T12336] ip6gretap0 speed is unknown, defaulting to 1000 [ 1048.185200][T12336] ip6gretap0 speed is unknown, defaulting to 1000 [ 1048.317114][T12336] ip6gretap0 speed is unknown, defaulting to 1000 [ 1048.444526][T12336] ip6gretap0 speed is unknown, defaulting to 1000 [ 1048.571259][T10393] ip6gretap0 speed is unknown, defaulting to 1000 [ 1048.652442][T12342] sctp: [Deprecated]: syz.4.1443 (pid 12342) Use of int in max_burst socket option. [ 1048.652442][T12342] Use struct sctp_assoc_value instead [ 1053.150083][T12375] netlink: 'syz.3.1451': attribute type 6 has an invalid length. [ 1053.733539][T12374] Invalid option length (65058) for dns_resolver key [ 1054.858070][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.864536][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.831487][T12427] virtio-fs: tag not found [ 1061.907397][T12436] loop0: detected capacity change from 0 to 8192 [ 1061.922246][T12436] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ" or missing value [ 1062.143096][T12105] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1063.969182][ T28] audit: type=1326 audit(1760911886.686:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1064.018925][ T28] audit: type=1326 audit(1760911886.686:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1065.175836][ T28] audit: type=1326 audit(1760911886.686:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1065.198481][ T28] audit: type=1326 audit(1760911886.686:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1065.230222][ T28] audit: type=1326 audit(1760911886.686:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1065.253035][ T28] audit: type=1326 audit(1760911886.696:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1065.288435][ T28] audit: type=1326 audit(1760911886.696:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1065.368172][ T28] audit: type=1326 audit(1760911886.696:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1065.586826][ T28] audit: type=1326 audit(1760911886.696:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1066.418628][ T28] audit: type=1326 audit(1760911886.696:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12443 comm="syz.4.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeadb8efc9 code=0x7ffc0000 [ 1067.580226][T12463] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1067.591513][T12463] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1070.136752][T12479] loop3: detected capacity change from 0 to 2048 [ 1070.254559][T12479] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1070.340222][T12479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1072.719297][T12492] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1079.217678][T12536] ªªªªªª: renamed from wg2 (while UP) [ 1086.726687][T12578] loop3: detected capacity change from 0 to 32768 [ 1086.954547][T12578] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1086.964953][T12578] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1086.973801][T12578] BTRFS info (device loop3): enabling all of the rescue options [ 1086.981547][T12578] BTRFS info (device loop3): ignoring data csums [ 1086.987964][T12578] BTRFS info (device loop3): ignoring bad roots [ 1086.994305][T12578] BTRFS info (device loop3): disabling log replay at mount time [ 1087.002198][T12578] BTRFS info (device loop3): enabling disk space caching [ 1087.009526][T12578] BTRFS error (device loop3): nologreplay must be used with ro mount option [ 1087.018595][T12578] BTRFS error (device loop3): cannot disable free space tree [ 1087.119621][T12583] loop0: detected capacity change from 0 to 1024 [ 1087.789806][T12578] BTRFS error (device loop3): open_ctree failed: -22 [ 1088.107558][T12105] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (12105) [ 1088.659021][ T9885] hfsplus: b-tree write err: -5, ino 4 [ 1091.794235][T12613] ubi31: attaching mtd0 [ 1091.803085][T12613] ubi31: scanning is finished [ 1091.807846][T12613] ubi31: empty MTD device detected [ 1092.235164][T12613] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1093.176214][T12632] autofs4:pid:12632:autofs_fill_super: called with bogus options [ 1093.405836][T12632] loop3: detected capacity change from 0 to 256 [ 1093.413585][T12632] exfat: Unknown parameter 'zero_size_dir' [ 1096.443506][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 1098.024482][T12663] loop3: detected capacity change from 0 to 256 [ 1098.031937][T12663] exfat: Deprecated parameter 'namecase' [ 1098.113912][T12663] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 1099.384928][T12670] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 1099.388881][T12667] loop0: detected capacity change from 0 to 2048 [ 1099.446004][T12667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1099.647993][T12670] bond1: entered promiscuous mode [ 1099.669910][T12670] bond1: entered allmulticast mode [ 1099.730293][T12672] geneve2: entered allmulticast mode [ 1099.754564][T12667] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24) [ 1099.775690][T12672] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.919479][T12672] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.960764][T12672] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.998505][T12672] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.011945][T12672] bond1: (slave geneve2): making interface the new active one [ 1100.021359][T12672] geneve2: entered promiscuous mode [ 1100.426246][T12672] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1102.032331][T12693] netlink: 'syz.4.1530': attribute type 6 has an invalid length. [ 1102.067930][T12693] Invalid option length (65058) for dns_resolver key [ 1102.169396][T12699] loop3: detected capacity change from 0 to 1024 [ 1102.289239][T12699] EXT4-fs: Ignoring removed bh option [ 1102.295039][T12699] EXT4-fs: Ignoring removed nobh option [ 1102.411143][T12699] EXT4-fs: Ignoring removed bh option [ 1102.433818][T12699] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1102.526592][T12699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.434208][T12712] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.1533: Allocating blocks 497-513 which overlap fs metadata [ 1104.474862][T12712] EXT4-fs (loop3): pa ffff888079e2b0e8: logic 256, phys. 385, len 8 [ 1104.483697][T12712] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 1105.577636][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.221499][T12728] loop3: detected capacity change from 0 to 256 [ 1107.264903][T12728] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1109.527313][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 1109.795136][T12746] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1115.873205][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 1116.420248][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.426615][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.146764][T12845] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1123.154821][T12845] team0: Device ipvlan2 is already an upper device of the team interface [ 1123.604304][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 1123.729016][T12857] loop3: detected capacity change from 0 to 2048 [ 1123.764970][T12857] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1123.863853][T12857] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1126.008949][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1126.009042][ T28] audit: type=1326 audit(1760911948.486:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12856 comm="syz.2.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f058858efc9 code=0x7fc00000 [ 1126.038860][T10393] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1126.251689][T10393] usb 1-1: config 0 has an invalid interface number: 91 but max is 0 [ 1126.488672][T10393] usb 1-1: config 0 has no interface number 0 [ 1126.506961][T10393] usb 1-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16 [ 1126.516527][T10393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.525762][T10393] usb 1-1: Product: syz [ 1126.530720][T10393] usb 1-1: Manufacturer: syz [ 1126.539348][T10393] usb 1-1: SerialNumber: syz [ 1126.570859][T10393] usb 1-1: config 0 descriptor?? [ 1127.979410][T11480] usb 1-1: USB disconnect, device number 3 [ 1128.149775][T12888] loop0: detected capacity change from 0 to 128 [ 1128.167236][T12888] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1128.190094][T12888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.388203][T12888] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1128.529966][T12888] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 1129.371769][T12897] loop0: detected capacity change from 0 to 16 [ 1129.433597][T12897] erofs: (device loop0): mounted with root inode @ nid 36. [ 1134.162915][T12925] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1135.042765][T12931] loop0: detected capacity change from 0 to 4096 [ 1135.191668][T12940] autofs4:pid:12940:autofs_fill_super: called with bogus options [ 1135.913232][T12931] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1144.045220][T12992] netlink: 'syz.0.1604': attribute type 12 has an invalid length. [ 1144.053470][T12992] netlink: 'syz.0.1604': attribute type 29 has an invalid length. [ 1144.137063][T12992] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1604'. [ 1153.369566][T13048] netlink: 'syz.4.1618': attribute type 10 has an invalid length. [ 1167.349005][T13120] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1168.651339][T13132] loop0: detected capacity change from 0 to 64 [ 1168.683204][T13132] hfs: unable to locate alternate MDB [ 1168.701860][T13132] hfs: continuing without an alternate MDB [ 1175.380120][ T28] audit: type=1326 audit(1760911998.136:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.0.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449538efc9 code=0x7fc00000 [ 1175.757561][T13192] loop3: detected capacity change from 0 to 512 [ 1175.791801][T13192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1176.029088][T13192] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1176.733390][T13192] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1651: casefold flag without casefold feature [ 1176.783661][T13192] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1651: couldn't read orphan inode 15 (err -117) [ 1177.068603][T13192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1178.059041][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.303144][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.365428][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.816472][T13263] loop3: detected capacity change from 0 to 128 [ 1188.278653][T13089] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1192.098478][T13286] veth0_to_bridge: entered promiscuous mode [ 1192.877776][T13284] veth0_to_bridge: left promiscuous mode [ 1197.889286][T13295] loop3: detected capacity change from 0 to 32768 [ 1198.033871][T13295] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1200.321427][T13295] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x1141 dinode [ 1200.332526][T13295] XFS (loop3): Unmount and run xfs_repair [ 1200.338474][T13295] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1200.345903][T13295] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1200.354932][T13295] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1200.364402][T13295] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 80 1f e2 68 ..e.....4.Xh...h [ 1200.373473][T13295] 00000030: 34 f7 58 68 80 1f e2 68 00 00 00 00 00 00 00 00 4.Xh...h........ [ 1200.383148][T13295] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1200.392206][T13295] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 1200.401262][T13295] 00000060: ff ff ff ff 22 b5 cb 17 00 00 00 00 00 00 00 02 ...."........... [ 1200.410399][T13295] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 1200.419621][T13295] XFS (loop3): failed to read RT inodes [ 1202.308527][ T9842] Bluetooth: hci4: command 0x0406 tx timeout [ 1207.033594][ T9842] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3 [ 1209.117108][T13316] Bluetooth: hci4: command 0x0406 tx timeout [ 1211.575671][T13316] Bluetooth: hci4: command 0x0406 tx timeout [ 1214.337121][T13382] loop0: detected capacity change from 0 to 32768 [ 1215.370597][T13382] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop0": -EINTR [ 1217.651005][T13399] netlink: 'syz.3.1695': attribute type 12 has an invalid length. [ 1217.687967][T13399] netlink: 'syz.3.1695': attribute type 29 has an invalid length. [ 1218.705746][T13399] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1695'. [ 1219.100864][T13415] loop0: detected capacity change from 0 to 128 [ 1219.619760][T13297] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1223.634186][T13434] loop0: detected capacity change from 0 to 512 [ 1224.988906][T13434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.001645][T13434] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.268916][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.880459][T13316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1231.918564][T13316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1231.956288][T13316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1231.967608][T13316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1231.976002][T13316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1231.983623][T13316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1232.173125][T13489] ip6gretap0 speed is unknown, defaulting to 1000 [ 1234.644898][ T9842] Bluetooth: hci0: command tx timeout [ 1235.456035][T13391] bridge0: port 3(syz_tun) entered disabled state [ 1235.817576][T13391] syz_tun (unregistering): left allmulticast mode [ 1235.843506][T13391] syz_tun (unregistering): left promiscuous mode [ 1235.866661][T13391] bridge0: port 3(syz_tun) entered disabled state [ 1236.688356][ T9842] Bluetooth: hci0: command tx timeout [ 1237.535323][T13489] chnl_net:caif_netlink_parms(): no params data found [ 1237.590815][T13528] loop0: detected capacity change from 0 to 1024 [ 1237.599032][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 1237.612112][T13528] ext4: Unknown parameter 'euid' [ 1238.639821][T13489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.751727][T13489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.768843][T13489] bridge_slave_0: entered allmulticast mode [ 1238.769132][ T9842] Bluetooth: hci0: command tx timeout [ 1238.776587][T13489] bridge_slave_0: entered promiscuous mode [ 1239.228778][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.235142][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.318629][T13489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.328858][T13489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.336158][T13489] bridge_slave_1: entered allmulticast mode [ 1239.520526][T13489] bridge_slave_1: entered promiscuous mode [ 1240.382323][ T9906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1240.536773][ T9906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.848384][ T9842] Bluetooth: hci0: command tx timeout [ 1241.435079][T13553] loop0: detected capacity change from 0 to 764 [ 1241.776663][ T9906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1241.813407][ T9906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.946990][T13489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.035821][T13489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.107264][ T9906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.123464][ T9906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.671852][ T9906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1242.673056][ T9906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.696393][T13489] team0: Port device team_slave_0 added [ 1242.755323][T13489] team0: Port device team_slave_1 added [ 1242.877305][T13489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.915112][T13489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.018340][T13489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.066450][T13489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.124645][T13489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1243.150696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1243.198079][T13489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.031238][T13489] hsr_slave_0: entered promiscuous mode [ 1247.049909][T13489] hsr_slave_1: entered promiscuous mode [ 1247.068382][T13489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.272940][T13489] Cannot create hsr debugfs directory [ 1247.380325][T13583] ubi31: attaching mtd0 [ 1247.419521][T13583] ubi31: scanning is finished [ 1247.931623][T13583] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1249.817664][ T9906] tipc: Left network mode [ 1250.425978][T13489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1250.469794][T13489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1250.485665][T13489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1250.497060][T13489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1250.877915][ T9906] dvmrp1 (unregistering): left allmulticast mode [ 1250.916848][T13489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.927166][ T9906] IPVS: stopping backup sync thread 10417 ... [ 1251.036133][T13489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.072758][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.087065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.163267][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.170528][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.284332][T13489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1251.469714][ T9906] dummy0: left promiscuous mode [ 1251.480014][ T9906] team0: left promiscuous mode [ 1251.484861][ T9906] team_slave_0: left promiscuous mode [ 1251.504633][ T9906] team_slave_1: left promiscuous mode [ 1251.521857][ T9906] vxlan0: left promiscuous mode [ 1251.586335][ T9906] hsr_slave_0: left promiscuous mode [ 1251.604126][ T9906] hsr_slave_1: left promiscuous mode [ 1251.625113][ T9906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.636393][ T9906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.655340][ T9906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.666613][ T9906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.677320][ T9906] bridge_slave_1: left allmulticast mode [ 1251.686625][ T9906] bridge_slave_1: left promiscuous mode [ 1251.699205][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.711568][ T9906] bridge_slave_0: left allmulticast mode [ 1251.717310][ T9906] bridge_slave_0: left promiscuous mode [ 1251.723572][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.776576][ T9906] veth1_macvtap: left promiscuous mode [ 1251.782331][ T9906] veth0_macvtap: left promiscuous mode [ 1251.790156][ T9906] veth1_vlan: left promiscuous mode [ 1251.795604][ T9906] veth0_vlan: left promiscuous mode [ 1251.937313][ T9906] team0 (unregistering): Port device vxlan0 removed [ 1252.848258][ T9906] team0 (unregistering): Port device team_slave_1 removed [ 1252.920582][ T9906] team0 (unregistering): Port device team_slave_0 removed [ 1252.990622][ T9906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.070931][ T9906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.886808][ T9906] bond0 (unregistering): Released all slaves [ 1254.159938][T13489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.450879][ T9906] IPVS: stop unused estimator thread 0... [ 1254.745105][T13489] veth0_vlan: entered promiscuous mode [ 1254.779939][T13489] veth1_vlan: entered promiscuous mode [ 1254.860677][T13489] veth0_macvtap: entered promiscuous mode [ 1254.881809][T13489] veth1_macvtap: entered promiscuous mode [ 1254.922069][T13489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.938805][T13489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.969898][T13489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.990763][T13489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.005103][T13489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.019812][T13489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.042064][T13489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.054965][T13489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.073546][T13489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.082393][T13489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.276234][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.299129][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.341694][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.352661][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.523683][T13671] loop0: detected capacity change from 0 to 64 [ 1260.911447][T13699] loop5: detected capacity change from 0 to 32768 [ 1261.154060][T13699] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1262.006593][T13699] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x1141 dinode [ 1262.017503][T13699] XFS (loop5): Unmount and run xfs_repair [ 1262.023847][T13699] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 1262.031483][T13699] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1262.040901][T13699] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1262.050295][T13699] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 80 1f e2 68 ..e.....4.Xh...h [ 1262.059350][T13699] 00000030: 34 f7 58 68 80 1f e2 68 00 00 00 00 00 00 00 00 4.Xh...h........ [ 1262.068331][T13699] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1262.077209][T13699] 00000050: 00 00 00 02 00 00 00 00 00 00 00 04 00 00 00 00 ................ [ 1262.086182][T13699] 00000060: ff ff ff ff 22 b5 cb 17 00 00 00 00 00 00 00 02 ...."........... [ 1262.095161][T13699] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 1262.104236][T13699] XFS (loop5): failed to read RT inodes [ 1263.134453][T13737] "syz.0.1755" (13737) uses obsolete ecb(arc4) skcipher [ 1265.292124][T13753] ubi31: attaching mtd0 [ 1265.297399][T13753] ubi31: scanning is finished [ 1265.362757][T13753] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1265.370448][T13753] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1265.377783][T13753] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1265.384984][T13753] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1265.392535][T13753] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1265.399505][T13753] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1265.408329][T13753] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1155568707 [ 1265.418663][T13753] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1265.488316][T13754] ubi31: background thread "ubi_bgt31d" started, PID 13754 [ 1271.751057][T13800] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1272.736921][T13803] overlayfs: failed to verify upper (4/file0, ino=41, err=-116) [ 1272.745613][T13803] overlayfs: failed to verify index dir 'upper' xattr [ 1272.752847][T13803] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1273.533967][T13804] ªªªªªª: renamed from wg2 [ 1274.679300][T13821] overlayfs: missing 'lowerdir' [ 1278.648609][T13841] ubi: mtd0 is already attached to ubi31 [ 1279.047094][T13843] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 1279.099066][T13843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1280.416433][T13852] loop5: detected capacity change from 0 to 256 [ 1280.447568][T13852] exfat: Unknown parameter 'fsmagic' [ 1283.188493][T13845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1283.305598][T13723] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1283.316320][T13845] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1283.332193][T13845] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1283.744773][T13843] ip6erspan0: entered promiscuous mode [ 1284.206136][T13843] bond1: (slave ip6erspan0): making interface the new active one [ 1284.286161][T13843] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1286.200609][T13883] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1286.207328][T13883] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1286.233223][T13883] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1289.346333][T13896] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1291.229695][T11477] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1291.421890][T11477] usb 6-1: Using ep0 maxpacket: 8 [ 1291.490203][T11477] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1291.514922][T11477] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1291.534369][T11477] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.638696][T11477] usb 6-1: config 0 descriptor?? [ 1291.681109][T13930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1796'. [ 1291.688448][T11477] hso 6-1:0.0: Can't find BULK IN endpoint [ 1293.308567][T10393] usb 6-1: USB disconnect, device number 2 [ 1294.382867][T13954] netlink: get zone limit has 8 unknown bytes [ 1295.529761][ T5877] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1295.755843][ T5877] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1297.614939][T13979] loop0: detected capacity change from 0 to 512 [ 1297.678537][T13979] journal_path: Lookup failure for './file0' [ 1297.706901][T13979] EXT4-fs: error: could not find journal device path [ 1300.537961][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.544761][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.119156][T14018] (null): rxe_set_mtu: Set mtu to 256 [ 1301.129500][T14018] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1305.637741][T14048] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1305.654564][T14048] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1305.661281][T14048] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1305.682024][T14048] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1309.728565][T14081] loop5: detected capacity change from 0 to 256 [ 1309.736167][T14081] exfat: Unknown parameter 'fsmagic' [ 1309.813628][T13723] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1310.197288][T14091] overlayfs: failed to clone upperpath [ 1310.266321][T14092] overlayfs: failed to clone upperpath [ 1311.461006][T14094] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1311.537689][T14095] ip6gretap0 speed is unknown, defaulting to 1000 [ 1315.724846][T14133] loop0: detected capacity change from 0 to 1024 [ 1315.868227][T14133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1316.824773][ T28] audit: type=1800 audit(1760912139.487:85): pid=14133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1834" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1317.021477][T14149] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1317.044082][T14149] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 1317.059283][T14149] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1317.059283][T14149] [ 1317.072982][T14149] EXT4-fs (loop0): Total free blocks count 0 [ 1317.085096][T14149] EXT4-fs (loop0): Free/Dirty block details [ 1317.094399][T14149] EXT4-fs (loop0): free_blocks=68451041280 [ 1317.101202][T14149] EXT4-fs (loop0): dirty_blocks=16 [ 1317.109652][T14149] EXT4-fs (loop0): Block reservation details [ 1317.119317][T14149] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1319.141806][T14165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 1320.084092][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.821554][T11476] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1329.371980][T11476] usb 3-1: device descriptor read/all, error -71 [ 1332.039843][T14286] overlayfs: missing 'lowerdir' [ 1335.951587][T14321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'. [ 1337.823976][T14341] loop5: detected capacity change from 0 to 2048 [ 1337.882823][T14341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1340.979319][T14377] siw: device registration error -23 [ 1346.563375][T14425] syz2: rxe_newlink: already configured on ip6gretap0 [ 1348.207284][T14437] Bluetooth: MGMT ver 1.22 [ 1348.237557][T14437] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1348.446637][T14435] loop5: detected capacity change from 0 to 32768 [ 1348.573018][T14435] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1349.200133][T14435] XFS (loop5): Ending clean mount [ 1354.883889][T13489] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1359.071604][ T9842] Bluetooth: hci0: command 0x0406 tx timeout [ 1360.333845][T14540] loop0: detected capacity change from 0 to 2048 [ 1360.370109][T14540] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1360.413266][T14540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1362.001116][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.007523][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.700122][T14568] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1363.334846][T14571] loop5: detected capacity change from 0 to 128 [ 1363.420303][T14571] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1363.807826][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1918'. [ 1364.859594][T14583] loop0: detected capacity change from 0 to 2048 [ 1365.770085][T14583] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1365.882781][T14583] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1373.044359][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'. [ 1376.913312][T14681] loop5: detected capacity change from 0 to 512 [ 1377.839979][T14681] EXT4-fs: Ignoring removed bh option [ 1377.968271][T14681] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1378.337634][T14681] EXT4-fs (loop5): 1 truncate cleaned up [ 1378.647367][T14681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.788753][T14681] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 1073741831 (only 1 groups) [ 1380.133966][T13489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.457835][T14741] ªªªªªª: renamed from wg2 (while UP) [ 1388.762162][T14753] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1396.083634][T14793] Can't find a SQUASHFS superblock on nullb0 [ 1396.902531][T14800] Invalid ELF header magic: != ELF [ 1399.170193][T14813] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1400.941533][T14822] loop0: detected capacity change from 0 to 512 [ 1401.018444][T14822] EXT4-fs: Ignoring removed bh option [ 1401.040121][T14822] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1401.782761][T14822] EXT4-fs (loop0): 1 truncate cleaned up [ 1401.802429][T14822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1401.842828][T14822] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 1073741831 (only 1 groups) [ 1402.796106][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.950027][ T28] audit: type=1800 audit(1760912227.616:86): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1976" name="bus" dev="overlay" ino=2635 res=0 errno=0 [ 1405.241207][T14851] cgroup: Invalid name [ 1405.863830][T14861] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1411.918500][T14897] overlayfs: failed to clone upperpath [ 1412.783136][T14900] tipc: Started in network mode [ 1412.791339][T14900] tipc: Node identity 6, cluster identity 4711 [ 1412.801276][T14900] tipc: Node number set to 6 [ 1412.810164][T14897] cgroup: Invalid name [ 1423.437423][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.567361][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.251436][T14998] loop0: detected capacity change from 0 to 512 [ 1425.264925][T14998] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1425.272666][T14998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1425.293987][T14998] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2011: bad orphan inode 131083 [ 1425.322772][T14998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1426.268604][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1427.204766][T15014] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1433.634003][T15039] Can't find a SQUASHFS superblock on nullb0 [ 1434.898248][T15050] ceph: No source [ 1434.903886][T15050] kAFS: unable to lookup cell '\/' [ 1437.904525][T15072] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1442.144643][T15077] syz.2.2025 (15077): drop_caches: 2 [ 1445.562721][T15112] ip6gretap0 speed is unknown, defaulting to 1000 [ 1447.468686][T15106] netlink: 'syz.0.2030': attribute type 21 has an invalid length. [ 1447.503693][T15106] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2030'. [ 1448.972633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1461.461626][ T1324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.912348][ T1324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.999172][ T9842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1462.044103][ T9842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1462.213543][ T9842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1462.240905][ T9842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1462.248998][ T9842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1462.257984][ T9842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1462.307758][ T1324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.603503][ T1324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.963867][T15174] ip6gretap0 speed is unknown, defaulting to 1000 [ 1464.382121][ T9842] Bluetooth: hci1: command tx timeout [ 1464.537305][T15198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2051'. [ 1464.599306][ T1324] tipc: Disabling bearer [ 1464.612319][ T1324] tipc: Left network mode [ 1466.334648][T15174] chnl_net:caif_netlink_parms(): no params data found [ 1466.513385][ T9842] Bluetooth: hci1: command tx timeout [ 1468.345517][T15224] netlink: 'syz.5.2053': attribute type 39 has an invalid length. [ 1468.569887][ T9842] Bluetooth: hci1: command tx timeout [ 1470.340078][T15248] ipvlan0: entered promiscuous mode [ 1470.346411][T15174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.358717][T15174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.395873][T15174] bridge_slave_0: entered allmulticast mode [ 1470.415099][T15174] bridge_slave_0: entered promiscuous mode [ 1470.660859][ T9842] Bluetooth: hci1: command tx timeout [ 1470.753088][T15174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.772330][T15174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.808009][T15174] bridge_slave_1: entered allmulticast mode [ 1470.836529][T15174] bridge_slave_1: entered promiscuous mode [ 1470.889792][T15174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.903005][T15174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1471.786551][T15174] team0: Port device team_slave_0 added [ 1471.975867][T15174] team0: Port device team_slave_1 added [ 1472.261911][T15174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.294713][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.372638][T15174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.412943][ T1324] hsr_slave_0: left promiscuous mode [ 1472.423112][ T1324] hsr_slave_1: left promiscuous mode [ 1472.432236][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.450915][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.467136][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1472.485175][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.501894][ T1324] bridge_slave_1: left allmulticast mode [ 1472.513755][ T1324] bridge_slave_1: left promiscuous mode [ 1472.521987][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.535654][ T1324] bridge_slave_0: left allmulticast mode [ 1472.548809][ T1324] bridge_slave_0: left promiscuous mode [ 1472.560524][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.662709][ T1324] bond0: left allmulticast mode [ 1472.667653][ T1324] bond_slave_0: left allmulticast mode [ 1472.691896][ T1324] bond_slave_1: left allmulticast mode [ 1472.697572][ T1324] bond0: left promiscuous mode [ 1472.722769][ T1324] bond_slave_0: left promiscuous mode [ 1472.728905][ T1324] bond_slave_1: left promiscuous mode [ 1472.739235][ T1324] veth1_macvtap: left promiscuous mode [ 1472.747896][ T1324] veth0_macvtap: left promiscuous mode [ 1472.753712][ T1324] veth1_vlan: left promiscuous mode [ 1472.759428][ T1324] veth0_vlan: left promiscuous mode [ 1473.225572][ T1324] pimreg (unregistering): left allmulticast mode [ 1473.723005][ T28] audit: type=1800 audit(1760912552.467:87): pid=15278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2062" name="bus" dev="overlay" ino=408 res=0 errno=0 [ 1475.672502][T15295] loop5: detected capacity change from 0 to 128 [ 1475.857116][T15297] sctp: [Deprecated]: syz.5.2065 (pid 15297) Use of int in max_burst socket option. [ 1475.857116][T15297] Use struct sctp_assoc_value instead [ 1475.994684][T15295] syz.5.2065: attempt to access beyond end of device [ 1475.994684][T15295] loop5: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 1476.460114][ T36] kworker/u4:2: attempt to access beyond end of device [ 1476.460114][ T36] loop5: rw=1, sector=513, nr_sectors = 528 limit=128 [ 1476.504792][ T36] kworker/u4:2: attempt to access beyond end of device [ 1476.504792][ T36] loop5: rw=1, sector=145, nr_sectors = 304 limit=128 [ 1476.552760][ T36] kworker/u4:2: attempt to access beyond end of device [ 1476.552760][ T36] loop5: rw=2049, sector=449, nr_sectors = 64 limit=128 [ 1479.763686][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 1479.864319][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 1479.961373][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.063008][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.387900][ T1324] bond0 (unregistering): Released all slaves [ 1481.686612][T15174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.703774][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.758543][T15174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.371674][T15296] IPVS: Error connecting to the multicast addr [ 1482.588073][T15174] hsr_slave_0: entered promiscuous mode [ 1482.902197][T15174] hsr_slave_1: entered promiscuous mode [ 1483.979732][T15342] loop5: detected capacity change from 0 to 256 [ 1483.987227][T15342] exfat: Unknown parameter 'fsmagic' [ 1485.529165][T15321] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1485.574604][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.729537][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.840260][T15346] overlayfs: failed to clone upperpath [ 1488.667012][ T1324] IPVS: stop unused estimator thread 0... [ 1488.969102][T15365] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1489.423944][T15366] loop5: detected capacity change from 0 to 1024 [ 1489.439457][T15366] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1489.449962][T15366] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1489.481724][T15366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1489.598075][T15174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1489.726598][T13489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.850915][T15174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1489.884054][T15174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1489.928385][T15377] loop5: detected capacity change from 0 to 16 [ 1489.955351][T15377] erofs: (device loop5): mounted with root inode @ nid 36. [ 1489.984883][T15174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1490.039987][T15377] syz.5.2081: attempt to access beyond end of device [ 1490.039987][T15377] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1491.369734][T15388] syz.5.2081 (15388): drop_caches: 2 [ 1491.404547][T15388] syz.5.2081: attempt to access beyond end of device [ 1491.404547][T15388] loop5: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1493.178897][T15384] overlayfs: failed to clone upperpath [ 1494.833503][T15174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.864411][T15398] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 1494.874795][T15398] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0/file1 [ 1496.910617][T15174] 8021q: adding VLAN 0 to HW filter on device team0 [ 1496.970357][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.977688][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.134023][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.141298][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.838106][T15427] loop5: detected capacity change from 0 to 40427 [ 1499.513117][T15427] F2FS-fs (loop5): LFS is not compatible with checkpoint=disable [ 1503.813306][T15455] ufs: You didn't specify the type of your ufs filesystem [ 1503.813306][T15455] [ 1503.813306][T15455] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1503.813306][T15455] [ 1503.813306][T15455] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1503.845038][T15455] ufs: ufstype=old is supported read-only [ 1503.859058][T15455] syz.4.2092: attempt to access beyond end of device [ 1503.859058][T15455] loop9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1503.962391][T15453] loop5: detected capacity change from 0 to 32768 [ 1503.972541][T15453] jfs: Unrecognized mount option "" or missing value [ 1504.001392][T15174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.688349][T15174] veth0_vlan: entered promiscuous mode [ 1507.702039][T15174] veth1_vlan: entered promiscuous mode [ 1507.820695][T15484] trusted_key: encrypted_key: insufficient parameters specified [ 1508.134123][T15174] veth0_macvtap: entered promiscuous mode [ 1508.187477][T15174] veth1_macvtap: entered promiscuous mode [ 1508.344711][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1508.355368][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.367231][T15174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.378471][T15174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.389491][T15174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.424252][T15174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.503944][T15174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.580265][T15174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.601933][T15174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.051258][T15492] loop5: detected capacity change from 0 to 1764 [ 1509.436555][T15174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.045002][ T9893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.089604][ T9893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.200333][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.265512][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.508685][T15535] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1516.220964][T15551] loop6: detected capacity change from 0 to 128 [ 1517.924551][ T28] audit: type=1800 audit(1760912596.679:88): pid=15563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2107" name="bus" dev="loop6" ino=1048640 res=0 errno=0 [ 1518.231738][T15560] ªªªªªª: renamed from wg2 (while UP) [ 1527.267758][T15659] loop5: detected capacity change from 0 to 512 [ 1527.300324][T15659] EXT4-fs: Ignoring removed nobh option [ 1527.415765][T15667] loop6: detected capacity change from 0 to 256 [ 1527.423252][T15667] exfat: Unknown parameter 'fsmagic' [ 1528.560059][T15659] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2126: iget: bad i_size value: 38620345925642 [ 1529.521313][T15658] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1531.518543][T15659] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2126: couldn't read orphan inode 15 (err -117) [ 1532.167753][T15659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.285843][T13489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.023730][T11475] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1534.490972][T11475] usb 7-1: device descriptor read/64, error -71 [ 1534.880657][T11475] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1535.206883][T11475] usb 7-1: device descriptor read/64, error -71 [ 1535.462149][T11475] usb usb7-port1: attempt power cycle [ 1535.690897][T15690] loop5: detected capacity change from 0 to 1024 [ 1535.746381][T15687] netlink: 'syz.4.2133': attribute type 10 has an invalid length. [ 1535.850693][T15687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2133'. [ 1535.873823][T15687] team0: entered promiscuous mode [ 1535.886663][T15687] team_slave_0: entered promiscuous mode [ 1535.902445][T15687] team_slave_1: entered promiscuous mode [ 1535.916407][T15687] team0: entered allmulticast mode [ 1535.932658][T15687] team_slave_0: entered allmulticast mode [ 1536.084348][T15687] team_slave_1: entered allmulticast mode [ 1536.097750][T15687] bridge0: port 3(team0) entered blocking state [ 1536.687615][T15701] hfsplus: xattr searching failed [ 1536.787549][T15687] bridge0: port 3(team0) entered disabled state [ 1540.703050][ T28] audit: type=1800 audit(1760912619.480:89): pid=15738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2137" name="bus" dev="overlay" ino=74 res=0 errno=0 [ 1546.282124][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.288456][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.529303][T15799] loop5: detected capacity change from 0 to 1764 [ 1553.386243][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.395545][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.404697][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.413908][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.423252][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.432359][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.441460][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.450568][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.459625][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1553.468677][T15844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1554.193187][T15845] loop5: detected capacity change from 0 to 2048 [ 1555.128370][T15846] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1558.875957][T15873] loop5: detected capacity change from 0 to 256 [ 1558.883436][T15873] exfat: Unknown parameter 'fsmagic' [ 1558.947734][T15751] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1561.633396][ T28] audit: type=1400 audit(1760912640.231:90): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=15893 comm="syz.6.2167" [ 1562.158816][T15899] loop6: detected capacity change from 0 to 1764 [ 1562.278722][T15751] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1563.866908][T15927] netlink: 'syz.6.2171': attribute type 4 has an invalid length. [ 1569.081334][T15973] __nla_validate_parse: 37 callbacks suppressed [ 1569.088092][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'. [ 1569.098115][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2180'. [ 1569.107955][T15973] netlink: 'syz.2.2180': attribute type 18 has an invalid length. [ 1569.444642][T15973] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.453516][T15973] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.462358][T15973] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.471149][T15973] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.481397][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2180'. [ 1569.490348][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2180'. [ 1569.499647][T15973] netlink: 'syz.2.2180': attribute type 18 has an invalid length. [ 1570.370939][T15986] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1572.437075][T16020] loop6: detected capacity change from 0 to 16 [ 1572.488537][T16020] erofs: (device loop6): mounted with root inode @ nid 36. [ 1573.032070][T16028] overlayfs: failed to clone upperpath [ 1573.141730][ T28] audit: type=1800 audit(1760912651.936:91): pid=16030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2189" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1577.493119][T16055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2195'. [ 1581.896707][T16081] loop5: detected capacity change from 0 to 256 [ 1581.904156][T16081] exfat: Unknown parameter 'fsmagic' [ 1584.951114][T16105] ip6gretap0 speed is unknown, defaulting to 1000 [ 1590.799340][T16118] Bluetooth: hci1: command 0x0406 tx timeout [ 1591.207432][T16138] loop6: detected capacity change from 0 to 256 [ 1591.214560][T16138] exfat: Unknown parameter 'fsmagic' [ 1591.684883][T16132] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1593.265093][T16149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1593.276593][T16149] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1599.374177][T16204] loop5: detected capacity change from 0 to 2048 [ 1599.444965][T16204] NILFS (loop5): invalid segment: Inconsistency found [ 1599.451775][T16204] NILFS (loop5): trying rollback from an earlier position [ 1599.759805][T16204] NILFS (loop5): recovery complete [ 1599.801843][T16212] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1608.132821][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.139144][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.649230][T16268] hpfs: Bad magic ... probably not HPFS [ 1613.048436][T16321] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 16321 comm: syz.6.2242) [ 1613.073177][ T28] audit: type=1800 audit(1760912691.886:92): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2242" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=36764 res=0 errno=0 [ 1613.397516][T11483] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1613.578025][T11483] usb 7-1: device descriptor read/64, error -71 [ 1613.847271][T11483] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1614.157151][T11483] usb 7-1: device descriptor read/64, error -71 [ 1615.174496][T11483] usb usb7-port1: attempt power cycle [ 1615.616640][T11483] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1615.775328][T16348] overlayfs: failed to clone upperpath [ 1617.786602][T16357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2251'. [ 1618.265223][T16362] loop5: detected capacity change from 0 to 1764 [ 1618.290473][T11483] usb 7-1: device descriptor read/8, error -71 [ 1620.795206][T16379] loop6: detected capacity change from 0 to 256 [ 1621.045511][T16379] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1633.007031][T16453] loop6: detected capacity change from 0 to 1764 [ 1637.204145][T16484] loop5: detected capacity change from 0 to 1024 [ 1638.471539][ T9906] hfsplus: b-tree write err: -5, ino 8 [ 1640.012878][T16495] loop6: detected capacity change from 0 to 1764 [ 1640.087867][T16462] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1648.923046][T16566] mkiss: ax0: crc mode is auto. [ 1654.544900][T16591] loop5: detected capacity change from 0 to 256 [ 1655.596900][T16597] loop5: detected capacity change from 0 to 16 [ 1655.612028][T16597] erofs: (device loop5): mounted with root inode @ nid 36. [ 1656.281512][T16602] loop6: detected capacity change from 0 to 8 [ 1657.245545][T16611] loop5: detected capacity change from 0 to 256 [ 1657.523398][T16611] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 1657.776519][T16462] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1663.305895][T16642] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1663.726904][T16653] loop5: detected capacity change from 0 to 1764 [ 1664.063326][T16462] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1667.605560][T16673] ªªªªªª: renamed from wg2 (while UP) [ 1668.764471][T16685] loop5: detected capacity change from 0 to 1764 [ 1668.814903][T16462] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1669.327836][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.334830][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.779569][T16699] loop5: detected capacity change from 0 to 16 [ 1670.795627][T16699] erofs: (device loop5): mounted with root inode @ nid 36. [ 1672.198522][T16707] loop5: detected capacity change from 0 to 1764 [ 1673.539533][T16718] netlink: zone id is out of range [ 1675.656973][T16740] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1676.651098][T11483] libceph: connect (1)[c::]:6789 error -101 [ 1676.681955][T11483] libceph: mon0 (1)[c::]:6789 connect error [ 1676.723052][T16731] ceph: No mds server is up or the cluster is laggy [ 1677.330380][ T9842] Bluetooth: hci1: command 0x0406 tx timeout [ 1677.466822][T16753] openvswitch: netlink: Key type 226 is out of range max 32 [ 1677.481688][T16753] loop5: detected capacity change from 0 to 256 [ 1677.489242][T16753] exfat: Deprecated parameter 'namecase' [ 1679.573237][T16753] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1682.235063][T16770] loop5: detected capacity change from 0 to 40427 [ 1682.259910][T16770] F2FS-fs (loop5): build fault injection attr: rate: 4, type: 0x7ffff [ 1683.214047][T16778] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2342'. [ 1683.223523][T16778] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2342'. [ 1688.732949][T16806] loop5: detected capacity change from 0 to 4096 [ 1688.965163][T14233] libceph: connect (1)[c::]:6789 error -101 [ 1688.980079][T14233] libceph: mon0 (1)[c::]:6789 connect error [ 1689.776404][T14233] libceph: connect (1)[c::]:6789 error -101 [ 1689.809450][T14233] libceph: mon0 (1)[c::]:6789 connect error [ 1690.310042][T16808] ceph: No mds server is up or the cluster is laggy [ 1690.476943][T14233] libceph: connect (1)[c::]:6789 error -101 [ 1690.540273][T14233] libceph: mon0 (1)[c::]:6789 connect error [ 1697.551159][T16877] netlink: zone id is out of range [ 1698.571625][T16887] tmpfs: Bad value for 'mpol' [ 1698.764904][T16888] PKCS8: Unsupported PKCS#8 version [ 1709.439455][T16952] loop6: detected capacity change from 0 to 1764 [ 1718.060523][T16991] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1719.307686][T17002] PKCS8: Unsupported PKCS#8 version [ 1727.424342][T17037] loop5: detected capacity change from 0 to 128 [ 1727.655281][ T28] audit: type=1800 audit(1760912806.514:93): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2397" name="bus" dev="loop5" ino=1048668 res=0 errno=0 [ 1728.687955][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2399'. [ 1730.569476][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.576207][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.602294][T17065] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1733.666625][T17076] loop6: detected capacity change from 0 to 4096 [ 1733.673986][T17076] ntfs3: Unknown parameter 'GPL' [ 1733.814671][T16974] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1733.934799][T17074] overlayfs: failed to resolve './file0': -2 [ 1736.036295][ T9842] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 1742.102407][T17146] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1750.572746][T17217] ip6gretap0 speed is unknown, defaulting to 1000 [ 1753.491632][T17234] Can't find a SQUASHFS superblock on nullb0 [ 1755.215524][T17250] loop5: detected capacity change from 0 to 128 [ 1755.957128][T17260] netlink: 'syz.2.2446': attribute type 10 has an invalid length. [ 1755.968842][T17260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2446'. [ 1758.793101][T17260] team0: entered promiscuous mode [ 1758.798918][T17260] team_slave_0: entered promiscuous mode [ 1758.805679][T17260] team_slave_1: entered promiscuous mode [ 1758.811671][T17260] team0: entered allmulticast mode [ 1758.817427][T17260] team_slave_0: entered allmulticast mode [ 1758.823309][T17260] team_slave_1: entered allmulticast mode [ 1758.832066][T17260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1758.840634][T17260] bridge0: port 3(team0) entered blocking state [ 1758.847588][T17260] bridge0: port 3(team0) entered disabled state [ 1762.909312][T17296] loop5: detected capacity change from 0 to 512 [ 1764.459081][T17304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2453'. [ 1768.207050][T17328] loop6: detected capacity change from 0 to 1764 [ 1774.525779][T17369] loop6: detected capacity change from 0 to 1024 [ 1774.904230][ T28] audit: type=1800 audit(1760912853.747:94): pid=17369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2477" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1775.912709][T17384] loop6: detected capacity change from 0 to 512 [ 1775.932760][T17384] EXT4-fs: Ignoring removed nobh option [ 1775.985471][T17384] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2473: iget: bad i_size value: 38620345925642 [ 1776.099511][T17384] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2473: couldn't read orphan inode 15 (err -117) [ 1776.135129][T17384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1777.257846][T15174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1780.094428][T17415] loop6: detected capacity change from 0 to 2048 [ 1782.711853][T17424] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1783.031078][T17428] hugetlbfs: syz.5.2483 (17428): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1785.349827][T17436] ip6gretap0 speed is unknown, defaulting to 1000 [ 1787.366830][T17445] loop5: detected capacity change from 0 to 512 [ 1787.383802][T17445] EXT4-fs: Ignoring removed nobh option [ 1787.463323][T17445] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2487: iget: bad i_size value: 38620345925642 [ 1787.486481][T17445] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2487: couldn't read orphan inode 15 (err -117) [ 1787.518942][T17445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1788.829291][T17448] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1789.097460][T13489] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1791.914966][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.941527][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.554405][T17477] loop6: detected capacity change from 0 to 128 [ 1799.364626][T17514] loop6: detected capacity change from 0 to 1764 [ 1803.081200][T17542] loop6: detected capacity change from 0 to 128 [ 1805.617718][T17558] netlink: 'syz.6.2513': attribute type 10 has an invalid length. [ 1805.639114][T17558] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2513'. [ 1805.669810][T17558] team0: entered promiscuous mode [ 1805.675648][T17558] team_slave_0: entered promiscuous mode [ 1805.681638][T17558] team_slave_1: entered promiscuous mode [ 1805.694841][T17558] team0: entered allmulticast mode [ 1805.700162][T17558] team_slave_0: entered allmulticast mode [ 1805.706191][T17558] team_slave_1: entered allmulticast mode [ 1805.723885][T17558] bridge0: port 3(team0) entered blocking state [ 1805.731239][T17558] bridge0: port 3(team0) entered disabled state [ 1805.765114][T17558] bridge0: port 3(team0) entered blocking state [ 1805.771614][T17558] bridge0: port 3(team0) entered forwarding state [ 1806.812651][T17567] loop6: detected capacity change from 0 to 1764 [ 1810.798642][T17594] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1818.700703][T17642] syz.6.2528 (17642): drop_caches: 2 [ 1819.442435][T17654] trusted_key: encrypted_key: insufficient parameters specified [ 1819.515573][ T9842] Bluetooth: hci0: unexpected event for opcode 0x100c [ 1820.618805][T17665] loop6: detected capacity change from 0 to 32768 [ 1821.305495][T15495] libceph: connect (1)[c::]:6789 error -101 [ 1821.311591][T15495] libceph: mon0 (1)[c::]:6789 connect error [ 1821.318129][T17665] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1821.327421][T17665] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1821.438156][T17659] ceph: No mds server is up or the cluster is laggy [ 1821.602900][T17665] XFS (loop6): Ending clean mount [ 1821.626079][T17665] XFS (loop6): Quotacheck needed: Please wait. [ 1821.641636][T15496] libceph: connect (1)[c::]:6789 error -101 [ 1821.834962][T15496] libceph: mon0 (1)[c::]:6789 connect error [ 1823.158434][T17665] XFS (loop6): Quotacheck: Done. [ 1823.304120][T15174] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1830.312997][T17740] sctp: [Deprecated]: syz.5.2550 (pid 17740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1830.312997][T17740] Use struct sctp_sack_info instead [ 1835.227947][T17757] bond1: entered promiscuous mode [ 1835.897366][T17757] bond_slave_0: entered promiscuous mode [ 1835.903091][T17757] bond_slave_1: entered promiscuous mode [ 1835.909907][T17757] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1835.919969][T17757] bond1: (slave macvlan2): making interface the new active one [ 1835.929640][T17757] macvlan2: entered promiscuous mode [ 1835.935672][T17757] bond0: entered promiscuous mode [ 1835.944177][T17757] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1835.954581][T17766] bridge0: port 3(syz_tun) entered blocking state [ 1835.963840][T17766] bridge0: port 3(syz_tun) entered disabled state [ 1835.972871][T17766] syz_tun: entered allmulticast mode [ 1835.999805][T17766] syz_tun: entered promiscuous mode [ 1836.007029][T17766] bridge0: port 3(syz_tun) entered blocking state [ 1836.013612][T17766] bridge0: port 3(syz_tun) entered forwarding state [ 1836.126562][T17757] netlink: 'syz.5.2555': attribute type 10 has an invalid length. [ 1836.300033][T17757] bridge0: port 3(syz_tun) entered disabled state [ 1836.306776][T17757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.315952][T17757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.354809][T17757] bridge0: port 3(syz_tun) entered blocking state [ 1836.361643][T17757] bridge0: port 3(syz_tun) entered forwarding state [ 1836.368623][T17757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.375844][T17757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.383393][T17757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.390706][T17757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.534337][T17757] bridge0: entered promiscuous mode [ 1836.565324][T17757] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1838.835758][T17791] ip6gretap0 speed is unknown, defaulting to 1000 [ 1841.180882][T17800] loop6: detected capacity change from 0 to 512 [ 1841.395889][T17800] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1841.490390][T17805] MTD: Couldn't look up './file0': -15 [ 1842.220767][T17800] EXT4-fs (loop6): 1 truncate cleaned up [ 1842.244616][T17800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1842.746392][T15174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.169798][T17856] loop5: detected capacity change from 0 to 32768 [ 1850.434526][T17846] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1851.655451][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1851.664635][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1851.674233][T17869] netlink: 'syz.5.2580': attribute type 18 has an invalid length. [ 1851.723288][T17869] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1851.732215][T17869] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1851.741052][T17869] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1851.749843][T17869] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1851.766011][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1851.775569][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1851.784832][T17869] netlink: 'syz.5.2580': attribute type 18 has an invalid length. [ 1853.367888][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.374294][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.947037][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2588'. [ 1857.988911][T17907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2589'. [ 1858.441254][T17918] loop5: detected capacity change from 0 to 164 [ 1858.868203][T17918] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 1858.887049][T17918] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 1860.609037][T17929] loop6: detected capacity change from 0 to 32768 [ 1860.974083][T17846] I/O error, dev loop6, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1861.348426][T17935] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2593'. [ 1862.195621][T17935] kernel profiling enabled (shift: 9) [ 1865.242296][T17962] loop5: detected capacity change from 0 to 512 [ 1865.542082][T17964] loop6: detected capacity change from 0 to 164 [ 1865.580939][T17964] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 1865.604404][T17964] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 1867.119080][T17971] loop6: detected capacity change from 0 to 8 [ 1867.836718][T17971] SQUASHFS error: xz decompression failed, data probably corrupt [ 1867.844985][T17971] SQUASHFS error: Failed to read block 0x108: -5 [ 1867.851443][T17971] SQUASHFS error: Unable to read metadata cache entry [106] [ 1867.858789][T17971] SQUASHFS error: Unable to read inode 0x11f [ 1876.819615][T18038] ip6gretap0 speed is unknown, defaulting to 1000 [ 1880.797092][T18048] loop6: detected capacity change from 0 to 1764 [ 1880.834527][T17965] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1883.606395][T18068] syz.2.2620 (18068): drop_caches: 2 [ 1884.855474][T18087] netlink: 'syz.5.2625': attribute type 10 has an invalid length. [ 1884.871792][T18087] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2625'. [ 1884.881269][T18087] team0: entered promiscuous mode [ 1884.901521][T18087] team_slave_0: entered promiscuous mode [ 1884.980120][T18087] team_slave_1: entered promiscuous mode [ 1885.156872][T18087] team0: entered allmulticast mode [ 1885.162500][T18087] team_slave_0: entered allmulticast mode [ 1885.168544][T18087] team_slave_1: entered allmulticast mode [ 1885.204515][T18087] bridge0: port 4(team0) entered blocking state [ 1885.219186][T18087] bridge0: port 4(team0) entered disabled state [ 1885.378159][T18087] bridge0: port 4(team0) entered blocking state [ 1885.384980][T18087] bridge0: port 4(team0) entered forwarding state [ 1894.687153][T18152] loop6: detected capacity change from 0 to 1024 [ 1895.056682][T18152] EXT4-fs warning (device loop6): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 1897.114459][T18171] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1898.069832][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2645'. [ 1902.171154][T18190] loop6: detected capacity change from 0 to 1764 [ 1912.525252][T18258] loop5: detected capacity change from 0 to 4096 [ 1912.537562][T18258] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777' [ 1912.978951][T18111] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1914.033152][T18267] loop5: detected capacity change from 0 to 128 [ 1914.041095][T18267] FAT-fs (loop5): Unrecognized mount option "uni_xl%PB^°cwiet" or missing value [ 1914.841479][T18262] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1914.854138][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.861753][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.036241][T18279] netlink: 'syz.2.2670': attribute type 10 has an invalid length. [ 1917.031281][T18279] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 1917.053239][T18279] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 1917.071709][T18279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1917.101992][ T9893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.190007][ T9893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.222248][T18287] sp0: Synchronizing with TNC [ 1917.284442][T18291] loop6: detected capacity change from 0 to 1764 [ 1917.816950][T18277] Bluetooth: hci0: command 0x0406 tx timeout [ 1917.848250][ T9842] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1919.743891][T18307] loop6: detected capacity change from 0 to 1764 [ 1920.956663][T18317] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1921.221317][T18318] syz_tun: entered allmulticast mode [ 1921.534159][T18315] syz_tun: left allmulticast mode [ 1925.393314][T18344] loop5: detected capacity change from 0 to 4096 [ 1925.412792][T18344] ext4: Unknown parameter 'obj_user' [ 1927.338976][T18358] syz.5.2690 (18358): drop_caches: 2 [ 1927.365149][T18358] syz.5.2690 (18358): drop_caches: 2 [ 1929.617892][T18375] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2694'. [ 1931.080723][T18387] loop6: detected capacity change from 0 to 16 [ 1931.091311][T18387] erofs: Unknown parameter '0177777777777777777777701777777777777777777777000000000000000000000000000000000000000000000000000000000000000000' [ 1934.007306][T18262] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1934.509065][T18394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1940.897429][T18421] loop5: detected capacity change from 0 to 1764 [ 1945.741140][T11483] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1947.314246][T11483] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1947.314280][T11483] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1947.323054][T11483] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1947.323088][T11483] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1947.323110][T11483] usb 7-1: Product: syz [ 1947.323126][T11483] usb 7-1: Manufacturer: syz [ 1947.323142][T11483] usb 7-1: SerialNumber: syz [ 1947.325781][T11483] usb 7-1: config 0 descriptor?? [ 1947.357955][T11483] usb 7-1: selecting invalid altsetting 0 [ 1947.757575][T18471] loop6: detected capacity change from 0 to 8 [ 1948.697508][T18262] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1949.846791][T11477] usb 7-1: USB disconnect, device number 9 [ 1953.805685][T18515] loop5: detected capacity change from 0 to 1764 [ 1955.561237][T18525] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1955.577263][T18525] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1955.814589][T18530] loop6: detected capacity change from 0 to 1764 [ 1956.080190][T18534] loop5: detected capacity change from 0 to 164 [ 1956.143120][T18534] Unable to read rock-ridge attributes [ 1956.181005][T18534] Unable to read rock-ridge attributes [ 1956.830819][T18453] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1958.443733][T18544] ISOFS: Unable to identify CD-ROM format. [ 1962.848041][T18560] loop6: detected capacity change from 0 to 128 [ 1966.482451][T18582] syz.6.2739 (18582): drop_caches: 2 [ 1967.118776][T18582] loop6: detected capacity change from 0 to 40427 [ 1967.285101][T18573] loop5: detected capacity change from 0 to 1764 [ 1967.297805][T18582] F2FS-fs (loop6): Unrecognized mount option "18446744073709551615" or missing value [ 1967.379137][T18480] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1967.456447][T18586] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1969.024628][T18597] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1969.031833][T18597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1969.076554][T18597] vhci_hcd vhci_hcd.0: Device attached [ 1969.469229][T11477] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1969.511379][T18600] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 1969.518043][T18600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1969.676804][T18600] vhci_hcd vhci_hcd.0: Device attached [ 1969.769158][T18597] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 1969.775842][T18597] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1969.785313][T18600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1969.829893][T18600] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 1969.836568][T18600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1969.854637][T18597] vhci_hcd vhci_hcd.0: Device attached [ 1969.899312][T18597] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 1969.905995][T18597] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1969.923142][T18600] vhci_hcd vhci_hcd.0: Device attached [ 1969.931517][T18613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1969.987587][T18615] Set syz0 is full, maxelem 0 reached [ 1970.055119][T18597] vhci_hcd vhci_hcd.0: Device attached [ 1970.113494][T18597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1970.158513][T18600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1970.206709][T18605] vhci_hcd: connection closed [ 1970.208894][T18607] vhci_hcd: connection closed [ 1970.214344][ T7580] vhci_hcd: stop threads [ 1970.225096][ T7580] vhci_hcd: release socket [ 1970.231644][ T7580] vhci_hcd: disconnect device [ 1970.558950][T18610] vhci_hcd: connection closed [ 1970.753579][ T7580] vhci_hcd: stop threads [ 1970.807881][ T7580] vhci_hcd: release socket [ 1970.860266][ T7580] vhci_hcd: disconnect device [ 1970.870724][ T7580] vhci_hcd: stop threads [ 1970.875287][T18601] vhci_hcd: connection closed [ 1970.875479][T18598] vhci_hcd: connection reset by peer [ 1970.886795][ T7580] vhci_hcd: release socket [ 1970.894323][ T7580] vhci_hcd: disconnect device [ 1970.901138][ T7580] vhci_hcd: stop threads [ 1970.906412][ T7580] vhci_hcd: release socket [ 1970.911747][ T7580] vhci_hcd: disconnect device [ 1970.916780][ T7580] vhci_hcd: stop threads [ 1970.924783][ T7580] vhci_hcd: release socket [ 1970.932164][ T7580] vhci_hcd: disconnect device [ 1971.088739][T16628] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1971.215800][T18626] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1972.278465][T16628] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1972.307868][T16628] usb 7-1: config 0 has no interface number 0 [ 1972.320235][T16628] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1972.372946][T16628] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1972.412932][T16628] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1972.434854][T16628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.480878][T16628] usb 7-1: config 0 descriptor?? [ 1972.522267][T18615] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1972.823777][T16628] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1973.066713][T18615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.147500][T18615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.210777][T18627] usb 7-1: USB disconnect, device number 10 [ 1973.216753][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1973.323384][ T28] audit: type=1326 audit(1760913052.316:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18636 comm="syz.2.2753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f058858efc9 code=0x0 [ 1973.663745][T18644] netlink: 'syz.4.2754': attribute type 29 has an invalid length. [ 1973.674212][T18644] netlink: 'syz.4.2754': attribute type 3 has an invalid length. [ 1973.682480][T18644] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2754'. [ 1974.508218][T18643] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1974.514805][T18643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1974.522827][T18643] vhci_hcd vhci_hcd.0: Device attached [ 1975.036630][T18645] vhci_hcd: connection reset by peer [ 1975.061133][T13575] vhci_hcd: stop threads [ 1975.065631][T13575] vhci_hcd: release socket [ 1975.413196][T13575] vhci_hcd: disconnect device [ 1975.626754][T11477] vhci_hcd: vhci_device speed not set [ 1975.720822][T18656] loop6: detected capacity change from 0 to 1764 [ 1976.148556][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.155544][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.576090][T18453] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1977.683920][T18670] loop5: detected capacity change from 0 to 128 [ 1977.730872][T18670] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1977.800155][T11475] usb usb38-port1: attempt power cycle [ 1978.439706][T18670] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1978.760164][T11475] usb usb38-port1: unable to enumerate USB device [ 1979.999209][ T1124] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1981.045829][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2766'. [ 1981.151072][T18697] bridge1: entered promiscuous mode [ 1981.188280][T18697] bridge1: entered allmulticast mode [ 1981.436698][T18697] team0: Port device bridge1 added [ 1984.827244][T18725] program syz.2.2770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1984.846494][T18727] loop6: detected capacity change from 0 to 256 [ 1984.886327][T18727] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1986.736158][T18738] loop6: detected capacity change from 0 to 128 [ 1987.115280][T18738] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1987.154949][T18738] hpfs: filesystem error: improperly stopped [ 1987.550198][T11475] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1988.208893][T18738] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1988.218457][T11475] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1988.232113][T18738] hpfs: You really don't want any checks? You are crazy... [ 1988.238300][T11475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.257539][T18738] hpfs: hpfs_map_sector(): read error [ 1988.259939][T11475] usb 6-1: config 0 descriptor?? [ 1988.269765][T18738] hpfs: code page support is disabled [ 1988.288482][T18738] hpfs: hpfs_map_4sectors(): unaligned read [ 1988.307877][T18738] hpfs: hpfs_map_4sectors(): unaligned read [ 1988.313909][T11475] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 1989.235405][T11475] usb 6-1: USB disconnect, device number 3 [ 1989.367442][T18738] hpfs: filesystem error: unable to find root dir [ 1989.531396][T18752] hpfs: hpfs_map_4sectors(): unaligned read [ 1991.243781][ T9842] Bluetooth: hci0: unexpected event for opcode 0x0c14 [ 1994.968635][T18775] overlayfs: missing 'lowerdir' [ 1995.813709][T18777] loop5: detected capacity change from 0 to 1764 [ 1995.899756][T18453] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1997.626533][T18791] loop5: detected capacity change from 0 to 1764 [ 1998.845914][T18798] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 2001.687846][T18824] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 2001.699631][T18824] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 2001.708076][T18824] CPU: 1 PID: 18824 Comm: syz.5.2792 Not tainted syzkaller #0 [ 2001.715545][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2001.725630][T18824] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 2001.731230][T18824] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 b9 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 b9 df f9 4d 8b 24 24 48 83 c3 [ 2001.750861][T18824] RSP: 0018:ffffc9000e05fa80 EFLAGS: 00010206 [ 2001.757040][T18824] RAX: 0000000000000005 RBX: ffff888078f73b80 RCX: 0000000000080000 [ 2001.765023][T18824] RDX: ffffc9000ed52000 RSI: 00000000000007c8 RDI: 00000000000007c9 [ 2001.773004][T18824] RBP: 0000000000000001 R08: ffff88814cb8212f R09: 1ffff11029970425 [ 2001.780983][T18824] R10: dffffc0000000000 R11: ffffed1029970426 R12: 0000000000000028 [ 2001.788973][T18824] R13: dffffc0000000000 R14: ffff88814cb82000 R15: dffffc0000000000 [ 2001.796965][T18824] FS: 00007ffae90996c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2001.805940][T18824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2001.812550][T18824] CR2: 00007ffae9098f98 CR3: 0000000077690000 CR4: 00000000003506e0 [ 2001.820556][T18824] Call Trace: [ 2001.823851][T18824] [ 2001.826813][T18824] pcl818_detach+0x66/0xd0 [ 2001.831279][T18824] comedi_device_detach_locked+0x172/0x710 [ 2001.837132][T18824] comedi_unlocked_ioctl+0xccc/0xfe0 [ 2001.842457][T18824] ? comedi_poll+0x8c0/0x8c0 [ 2001.847097][T18824] ? __fget_files+0x28/0x4d0 [ 2001.851703][T18824] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2001.856651][T18824] ? security_file_ioctl+0x80/0xa0 [ 2001.861805][T18824] ? comedi_poll+0x8c0/0x8c0 [ 2001.866415][T18824] __se_sys_ioctl+0xfd/0x170 [ 2001.871111][T18824] do_syscall_64+0x55/0xb0 [ 2001.875546][T18824] ? clear_bhb_loop+0x40/0x90 [ 2001.880242][T18824] ? clear_bhb_loop+0x40/0x90 [ 2001.884938][T18824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2001.890850][T18824] RIP: 0033:0x7ffae818efc9 [ 2001.895283][T18824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2001.915104][T18824] RSP: 002b:00007ffae9099038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2001.923550][T18824] RAX: ffffffffffffffda RBX: 00007ffae83e5fa0 RCX: 00007ffae818efc9 [ 2001.931545][T18824] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003 [ 2001.939538][T18824] RBP: 00007ffae8211f91 R08: 0000000000000000 R09: 0000000000000000 [ 2001.947526][T18824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2001.955512][T18824] R13: 00007ffae83e6038 R14: 00007ffae83e5fa0 R15: 00007ffcb34bc238 [ 2001.963501][T18824] [ 2001.966536][T18824] Modules linked in: [ 2002.062953][T18824] ---[ end trace 0000000000000000 ]--- [ 2002.068519][T18824] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 2002.074704][T18824] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 49 b9 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 28 b9 df f9 4d 8b 24 24 48 83 c3 [ 2002.095028][T18824] RSP: 0018:ffffc9000e05fa80 EFLAGS: 00010206 [ 2002.101220][T18824] RAX: 0000000000000005 RBX: ffff888078f73b80 RCX: 0000000000080000 [ 2002.116286][T18824] RDX: ffffc9000ed52000 RSI: 00000000000007c8 RDI: 00000000000007c9 [ 2002.138972][T18824] RBP: 0000000000000001 R08: ffff88814cb8212f R09: 1ffff11029970425 [ 2002.147548][T18824] R10: dffffc0000000000 R11: ffffed1029970426 R12: 0000000000000028 [ 2002.155776][T18824] R13: dffffc0000000000 R14: ffff88814cb82000 R15: dffffc0000000000 [ 2002.163918][T18824] FS: 00007ffae90996c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2002.173081][T18824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2002.179769][T18824] CR2: 0000000000000000 CR3: 0000000077690000 CR4: 00000000003506f0 [ 2002.188023][T18824] Kernel panic - not syncing: Fatal exception [ 2002.194357][T18824] Kernel Offset: disabled [ 2002.198688][T18824] Rebooting in 86400 seconds..