last executing test programs: 2m57.280328305s ago: executing program 3 (id=1760): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r4, 0xffff) close(0x3) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000001c0)={r4, 0x1, 0x0, 0x8000}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x80, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m56.771809115s ago: executing program 3 (id=1764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x30, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) 2m55.545952036s ago: executing program 3 (id=1768): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x9e3fb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0xfffffffffffffdce, r4, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000040)={r5, 0xfffffff2, 0x2, 0x1, 0x2, [], [0x120, 0x80, 0x4, 0x7], [0x8, 0xffff8ae0, 0x0, 0xffffffff], [0x5, 0x3, 0xfffffffffffffffb, 0x400]}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r6, 0x100000000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 2m51.492869016s ago: executing program 3 (id=1782): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0xff7f000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232) unshare(0x480) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card3/oss_mixer\x00', 0x400000, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x4, r5, &(0x7f0000000100)=0x5, 0x2bf2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xddf, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xfffffffb, 0x0, 0x0, 0xffffffff, 0x2, 0x84, 0x7, 0x3, 0x8, 0x4c76, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x0, 0x7, 0x15, 0x1, 0x7, 0x200, 0x8003e, 0x8f, 0x4, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x205, 0x6, 0xc7d3, 0x4, 0x1, 0x40], [0x7, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xa, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x4000003, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x4, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0x800000b, 0x1, 0x80009, 0x8, 0xa, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x7, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x400, 0x7fff, 0xd9a, 0x6, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0x8, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x8, 0x6d06, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x403, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x3, 0x1c, 0x120000, 0x0, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x8000007f, 0x2, 0x5, 0xfffffffe, 0x2, 0x14c, 0x60a7, 0xe0000, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m50.886897436s ago: executing program 3 (id=1784): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, 0x0, 0x0) unshare(0x22020600) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 2m49.63303142s ago: executing program 3 (id=1787): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r0, r1, 0x0) 2m39.990889841s ago: executing program 2 (id=1824): arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) tee(r3, 0xffffffffffffffff, 0x62cd, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000180)=@ethtool_pauseparam={0x13, 0x8, 0x4, 0x1}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) socket$inet6(0xa, 0x3, 0x3) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2m38.815077407s ago: executing program 2 (id=1826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) syz_emit_ethernet(0x36, 0x0, 0x0) 2m37.698163928s ago: executing program 2 (id=1832): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x3c3c3c3c3c3c415, 0x2, 0x7, 0x0, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a100000000000"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, r5, 0x1000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m34.782835145s ago: executing program 2 (id=1839): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0x34, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000001180)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) 2m34.417640642s ago: executing program 32 (id=1787): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r0, r1, 0x0) 2m32.417547199s ago: executing program 2 (id=1846): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]}) io_uring_setup(0x57eb, &(0x7f0000000140)={0x0, 0x0, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f00000001c0), &(0x7f0000000340)=@udp6=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r4, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 2m32.058835954s ago: executing program 2 (id=1848): socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xffff0001, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x8) 2m16.728027197s ago: executing program 33 (id=1848): socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0, 0x1000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_PDEATHSIG(0x25, 0x2000000000034) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x1000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x40, 0x7800, 0xffff0001, 0x9, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x8) 11.975240288s ago: executing program 4 (id=2286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de", 0x7}], 0x1) 11.776499528s ago: executing program 1 (id=2287): syz_open_procfs(0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = userfaultfd(0x80801) tee(r3, r4, 0x62cd, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x0, 'team_slave_0\x00', {}, 0xfff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) socket$inet6(0xa, 0x3, 0x3) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 10.775829417s ago: executing program 4 (id=2290): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18) 10.302424554s ago: executing program 1 (id=2291): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) 9.655730887s ago: executing program 4 (id=2293): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r7, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9.647278818s ago: executing program 1 (id=2294): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717ed76b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309877816048f24"}, 0x418, 0x6}) close(0x3) 9.42772403s ago: executing program 1 (id=2297): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setrlimit(0x2, 0x0) 9.113773881s ago: executing program 1 (id=2300): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x200081) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x3a9e9908}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6}) socket$key(0xf, 0x3, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ac4000/0x4000)=nil) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) socket$inet_sctp(0x2, 0x1, 0x84) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) 7.330293797s ago: executing program 5 (id=2303): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) 7.187116941s ago: executing program 5 (id=2304): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="442810bc996c301c8107070400", 0x28) 7.027990386s ago: executing program 5 (id=2305): socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x6248, 0x0, &(0x7f0000000500), 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0xfcff, &(0x7f0000000a40)='dW'}) socket$kcm(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) 6.969774182s ago: executing program 5 (id=2306): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockname$unix(r4, 0x0, &(0x7f0000000180)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000bc08c507c6c6843ade7e100c260f442301242f44adcd8d4554378660a76d431396cad75f73170857077edd56ce8a04dbf22dbf3f049ce5b40935fc342f84626f9694f84ab6dbf2dea5883f58fb98bea120855d3841551fde1a8da957e4c8b8d61f96a847fbb4"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) 6.436624185s ago: executing program 4 (id=2310): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 6.315981217s ago: executing program 0 (id=2311): socket$kcm(0x2, 0x3, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x312, 0x400, 0x200001, 0x2aa}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.156612593s ago: executing program 4 (id=2312): syz_open_procfs(0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = userfaultfd(0x80801) tee(r3, r4, 0x62cd, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x0, 'team_slave_0\x00', {}, 0xfff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) socket$inet6(0xa, 0x3, 0x3) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 5.059724411s ago: executing program 4 (id=2313): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 4.724152364s ago: executing program 0 (id=2314): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x7da23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) 4.723695234s ago: executing program 1 (id=2315): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f, 0x43]}, 0x76) mlockall(0x3) 4.46648558s ago: executing program 0 (id=2316): r0 = socket(0x2, 0x80805, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x20000840) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 4.227425653s ago: executing program 0 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3.835891551s ago: executing program 5 (id=2318): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000140)={0x0, 0x5325, 0x10000, 0x3, 0x100002cf}, &(0x7f0000000100), &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x808010, &(0x7f0000000dc0)={[{@umask={'umask', 0x3d, 0xffff}}, {@rootdir={'rootdir', 0x3d, 0x3ff}}, {@umask={'umask', 0x3d, 0x7f}}, {@nostrict}, {@volume={'volume', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0xf}}, {@gid_forget}, {@nostrict}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@volume={'volume', 0x3d, 0xfffffffffffffffe}}]}, 0x1, 0xc29, &(0x7f0000001940)="$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") pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.124005739s ago: executing program 0 (id=2319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r0, 0x4, r1}, 0x10) 1.032668388s ago: executing program 5 (id=2320): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2321): syz_open_procfs(0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = userfaultfd(0x80801) tee(r3, r4, 0x62cd, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000280)={0x0, 'team_slave_0\x00', {}, 0xfff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14) socket$inet6(0xa, 0x3, 0x3) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. syzkaller login: [ 72.850101][ T5779] cgroup: Unknown subsys name 'net' [ 73.046070][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.710432][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.404475][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.413142][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.420962][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.431001][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.438537][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.445898][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.450773][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.454092][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.460751][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.468339][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.476074][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.482873][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.496922][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.497086][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.504596][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.513838][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.519504][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.525628][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.533359][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.547714][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.555829][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.564569][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.573434][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.580919][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.178676][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 77.206327][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 77.280451][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 77.343347][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 77.366226][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.374222][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.381694][ T5790] bridge_slave_0: entered allmulticast mode [ 77.389307][ T5790] bridge_slave_0: entered promiscuous mode [ 77.426120][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.433445][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.440845][ T5790] bridge_slave_1: entered allmulticast mode [ 77.448386][ T5790] bridge_slave_1: entered promiscuous mode [ 77.549061][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.556253][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.564063][ T5791] bridge_slave_0: entered allmulticast mode [ 77.571995][ T5791] bridge_slave_0: entered promiscuous mode [ 77.582933][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.596060][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.636269][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.643619][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.650932][ T5791] bridge_slave_1: entered allmulticast mode [ 77.659213][ T5791] bridge_slave_1: entered promiscuous mode [ 77.706323][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.713566][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.721473][ T5788] bridge_slave_0: entered allmulticast mode [ 77.730053][ T5788] bridge_slave_0: entered promiscuous mode [ 77.738362][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.745527][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.752805][ T5788] bridge_slave_1: entered allmulticast mode [ 77.760593][ T5788] bridge_slave_1: entered promiscuous mode [ 77.782221][ T5790] team0: Port device team_slave_0 added [ 77.791313][ T5790] team0: Port device team_slave_1 added [ 77.845465][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.852891][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.860866][ T5789] bridge_slave_0: entered allmulticast mode [ 77.868523][ T5789] bridge_slave_0: entered promiscuous mode [ 77.889880][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.902425][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.924035][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.931345][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.939513][ T5789] bridge_slave_1: entered allmulticast mode [ 77.946793][ T5789] bridge_slave_1: entered promiscuous mode [ 77.955763][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.990793][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.998024][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.024445][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.055255][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.079950][ T5791] team0: Port device team_slave_0 added [ 78.100185][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.107551][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.133662][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.161908][ T5791] team0: Port device team_slave_1 added [ 78.184685][ T5788] team0: Port device team_slave_0 added [ 78.199278][ T5788] team0: Port device team_slave_1 added [ 78.208770][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.221471][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.244432][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.251574][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.277804][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.330778][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.338115][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.364216][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.401775][ T5789] team0: Port device team_slave_0 added [ 78.415354][ T5789] team0: Port device team_slave_1 added [ 78.422486][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.429700][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.455793][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.468848][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.475824][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.502301][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.533933][ T5790] hsr_slave_0: entered promiscuous mode [ 78.540696][ T5790] hsr_slave_1: entered promiscuous mode [ 78.590713][ T5792] Bluetooth: hci1: command tx timeout [ 78.590731][ T5801] Bluetooth: hci3: command tx timeout [ 78.620491][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.627868][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.653871][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.660191][ T5792] Bluetooth: hci2: command tx timeout [ 78.665090][ T5801] Bluetooth: hci0: command tx timeout [ 78.675732][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.683060][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.709133][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.773547][ T5788] hsr_slave_0: entered promiscuous mode [ 78.780155][ T5788] hsr_slave_1: entered promiscuous mode [ 78.786332][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.795086][ T5788] Cannot create hsr debugfs directory [ 78.805223][ T5791] hsr_slave_0: entered promiscuous mode [ 78.811802][ T5791] hsr_slave_1: entered promiscuous mode [ 78.818294][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.825898][ T5791] Cannot create hsr debugfs directory [ 78.961423][ T5789] hsr_slave_0: entered promiscuous mode [ 78.968730][ T5789] hsr_slave_1: entered promiscuous mode [ 78.975007][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.982834][ T5789] Cannot create hsr debugfs directory [ 79.329885][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.344269][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.355573][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.366484][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.444033][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.457401][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.477528][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.488331][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.603668][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.645806][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.670147][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.684877][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.721911][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.743877][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.754178][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.781421][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.789342][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.830371][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.852839][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.860215][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.881942][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.898161][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.905299][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.993829][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.058182][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.065791][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.090186][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.097396][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.198159][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.262351][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.291215][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.348985][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.356210][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.383382][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.405034][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.412263][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.443371][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.450620][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.508595][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.515736][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.536662][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.662193][ T5801] Bluetooth: hci1: command tx timeout [ 80.668052][ T5792] Bluetooth: hci3: command tx timeout [ 80.737624][ T5801] Bluetooth: hci0: command tx timeout [ 80.739103][ T5792] Bluetooth: hci2: command tx timeout [ 80.796186][ T5790] veth0_vlan: entered promiscuous mode [ 80.868968][ T5790] veth1_vlan: entered promiscuous mode [ 80.891357][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.028790][ T5790] veth0_macvtap: entered promiscuous mode [ 81.060587][ T5790] veth1_macvtap: entered promiscuous mode [ 81.115648][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.129772][ T5788] veth0_vlan: entered promiscuous mode [ 81.154030][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.179500][ T5788] veth1_vlan: entered promiscuous mode [ 81.191634][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.201387][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211316][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.220372][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.260767][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.271672][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.318520][ T5788] veth0_macvtap: entered promiscuous mode [ 81.358720][ T5788] veth1_macvtap: entered promiscuous mode [ 81.428400][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.445093][ T5789] veth0_vlan: entered promiscuous mode [ 81.451164][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.493230][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.504758][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.516398][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.528876][ T5789] veth1_vlan: entered promiscuous mode [ 81.535761][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.547934][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.559599][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.583894][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.601866][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.603378][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.620942][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.629806][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.639560][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.704766][ T5791] veth0_vlan: entered promiscuous mode [ 81.756515][ T5789] veth0_macvtap: entered promiscuous mode [ 81.786664][ T5791] veth1_vlan: entered promiscuous mode [ 81.869022][ T5789] veth1_macvtap: entered promiscuous mode [ 81.955803][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.981995][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.015895][ T5791] veth0_macvtap: entered promiscuous mode [ 82.036659][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.048353][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.059038][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.067850][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.078778][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.089859][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.105144][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.116725][ T5791] veth1_macvtap: entered promiscuous mode [ 82.142150][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.174051][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.195152][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.206213][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.219393][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.304060][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.328058][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.341982][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.353154][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.363559][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.375577][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.388757][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.398637][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.407985][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.433238][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.443986][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.473563][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.502058][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.537285][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.557036][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.586123][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.597518][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.609746][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.658393][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.677545][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.686362][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.706017][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.738328][ T5792] Bluetooth: hci3: command tx timeout [ 82.748941][ T5792] Bluetooth: hci1: command tx timeout [ 82.821282][ T5792] Bluetooth: hci0: command tx timeout [ 82.821292][ T5801] Bluetooth: hci2: command tx timeout [ 83.028102][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.035992][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.089234][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.107689][ T5891] syz.0.6[5891]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.119847][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.133828][ T5891] loop0: detected capacity change from 0 to 1024 [ 83.205832][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.224913][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.305759][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.330349][ T5889] loop2: detected capacity change from 0 to 4096 [ 83.341926][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.433064][ T3448] hfsplus: b-tree write err: -5, ino 4 [ 83.665516][ T5897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.715096][ T5889] ntfs3: loop2: ino=9, attr_set_size [ 84.817430][ T5792] Bluetooth: hci1: command tx timeout [ 84.817458][ T5801] Bluetooth: hci3: command tx timeout [ 84.897622][ T5801] Bluetooth: hci0: command tx timeout [ 84.898489][ T5792] Bluetooth: hci2: command tx timeout [ 85.046657][ T28] audit: type=1800 audit(1760600628.840:2): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="memory.events.local" dev="fuse" ino=0 res=0 errno=0 [ 85.221614][ T1194] IPVS: starting estimator thread 0... [ 85.388428][ T5923] IPVS: using max 16 ests per chain, 38400 per kthread [ 87.796773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 89.268669][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 89.296000][ T5949] caif0: entered promiscuous mode [ 89.315092][ T5949] caif0: entered allmulticast mode [ 89.404109][ T5946] loop3: detected capacity change from 0 to 4096 [ 89.617084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.625988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.636006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.645413][ T5946] ntfs3: loop3: ino=9, attr_set_size [ 90.427357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.451747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.454779][ T5959] fuse: Bad value for 'fd' [ 90.607442][ T5951] loop0: detected capacity change from 0 to 32768 [ 90.690862][ T5951] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.727773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 90.992514][ T5951] XFS (loop0): Ending clean mount [ 91.191247][ T5951] XFS (loop0): Quotacheck needed: Please wait. [ 91.205662][ T5975] loop2: detected capacity change from 0 to 128 [ 91.278284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.483170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.687955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.421704][ T786] cfg80211: failed to load regulatory.db [ 92.470286][ T5975] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.569587][ T5975] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.612287][ T5951] XFS (loop0): Quotacheck: Done. [ 92.765951][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 92.876416][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.957306][ T5991] fuse: Bad value for 'fd' [ 93.439158][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 93.474688][ T6002] batadv0: entered promiscuous mode [ 93.501456][ T6002] batadv0: entered allmulticast mode [ 94.637778][ T6006] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 94.887874][ T6009] loop0: detected capacity change from 0 to 4096 [ 94.895329][ T6009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.254538][ T6009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.672650][ T6017] ubi31: attaching mtd0 [ 95.678971][ T6017] ubi31: scanning is finished [ 95.683965][ T6017] ubi31: empty MTD device detected [ 95.738565][ T6017] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 95.746192][ T6017] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 95.753618][ T6017] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 95.760781][ T6017] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 95.768301][ T6017] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 95.775160][ T6017] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 95.783379][ T6017] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 597352499 [ 95.793734][ T6017] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 95.804899][ T6028] ubi31: background thread "ubi_bgt31d" started, PID 6028 [ 95.867782][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.355389][ T6036] netlink: 148 bytes leftover after parsing attributes in process `syz.1.45'. [ 96.364629][ T6036] netlink: 56 bytes leftover after parsing attributes in process `syz.1.45'. [ 96.373816][ T6036] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 96.383598][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.417587][ T6036] loop1: detected capacity change from 0 to 2048 [ 96.446452][ T6036] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.456418][ T6036] NILFS (loop1): mounting unchecked fs [ 96.479661][ T6034] fuse: Invalid rootmode [ 96.649404][ T6036] NILFS (loop1): recovery complete [ 96.676051][ T6039] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.854296][ T6033] nvme_fabrics: missing parameter 'transport=%s' [ 96.861660][ T6033] nvme_fabrics: missing parameter 'nqn=%s' [ 97.030744][ T6044] loop3: detected capacity change from 0 to 64 [ 98.979804][ T6058] fuse: Invalid rootmode [ 99.221965][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 99.587320][ T6071] netlink: 148 bytes leftover after parsing attributes in process `syz.2.58'. [ 99.597516][ T6071] netlink: 56 bytes leftover after parsing attributes in process `syz.2.58'. [ 99.607370][ T6071] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 100.392249][ T6071] loop2: detected capacity change from 0 to 2048 [ 100.547716][ T6071] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 100.557589][ T6071] NILFS (loop2): mounting unchecked fs [ 100.601840][ T6071] NILFS (loop2): recovery complete [ 100.659932][ T6076] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.090546][ T6078] loop3: detected capacity change from 0 to 32768 [ 101.098117][ T6078] ======================================================= [ 101.098117][ T6078] WARNING: The mand mount option has been deprecated and [ 101.098117][ T6078] and is ignored by this kernel. Remove the mand [ 101.098117][ T6078] option from the mount to silence this warning. [ 101.098117][ T6078] ======================================================= [ 101.160652][ T6078] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 101.191821][ T6078] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.438838][ T6082] fuse: Invalid rootmode [ 102.075757][ T6086] loop2: detected capacity change from 0 to 4096 [ 102.125975][ T6086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.203528][ T6086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.243804][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 102.466778][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.165393][ T6113] overlay: Unknown parameter 'subj_type' [ 103.896637][ T6118] Zero length message leads to an empty skb [ 103.920452][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.928169][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.954723][ T6121] fuse: Bad value for 'rootmode' [ 103.963708][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.974600][ T6118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.257693][ T6127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.75'. [ 105.191300][ T6154] netlink: 36 bytes leftover after parsing attributes in process `syz.3.86'. [ 105.579647][ T6161] loop1: detected capacity change from 0 to 256 [ 105.633155][ T6161] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 106.206487][ T6177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.97'. [ 106.688687][ T6189] fuse: Bad value for 'rootmode' [ 106.804429][ T6192] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.948959][ T6197] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 106.955907][ T6197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.970408][ T6197] vhci_hcd vhci_hcd.0: Device attached [ 107.972180][ T6205] tty tty3: ldisc open failed (-12), clearing slot 2 [ 108.187759][ T6199] vhci_hcd: connection closed [ 108.191847][ T58] vhci_hcd: stop threads [ 108.388336][ T58] vhci_hcd: release socket [ 108.514416][ T58] vhci_hcd: disconnect device [ 108.707577][ T5796] vhci_hcd: vhci_device speed not set [ 109.489426][ T6233] netlink: 148 bytes leftover after parsing attributes in process `syz.2.117'. [ 109.499873][ T6233] netlink: 56 bytes leftover after parsing attributes in process `syz.2.117'. [ 109.510093][ T6233] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 109.668946][ T6233] loop2: detected capacity change from 0 to 2048 [ 109.780997][ T6233] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 109.791739][ T6233] NILFS (loop2): mounting unchecked fs [ 109.981361][ T6233] NILFS (loop2): recovery complete [ 110.013192][ T6234] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.612333][ T6246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 110.618901][ T6246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.628727][ T6246] vhci_hcd vhci_hcd.0: Device attached [ 111.053294][ T8] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 111.389704][ T6247] vhci_hcd: connection reset by peer [ 111.457076][ T42] vhci_hcd: stop threads [ 111.503864][ T42] vhci_hcd: release socket [ 111.561040][ T42] vhci_hcd: disconnect device [ 112.439634][ T6266] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 112.766228][ T6268] netlink: 148 bytes leftover after parsing attributes in process `syz.0.129'. [ 112.775475][ T6268] netlink: 56 bytes leftover after parsing attributes in process `syz.0.129'. [ 112.790513][ T6268] netlink: 'syz.0.129': attribute type 1 has an invalid length. [ 112.853485][ T6268] loop0: detected capacity change from 0 to 2048 [ 113.418551][ T6268] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 113.428506][ T6268] NILFS (loop0): mounting unchecked fs [ 113.585233][ T6268] NILFS (loop0): recovery complete [ 113.597751][ T6271] fuse: Unknown parameter 'use00000000000000000000' [ 113.612380][ T6272] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.177665][ T6276] loop3: detected capacity change from 0 to 40427 [ 114.190024][ T6276] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 114.198138][ T6276] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.221000][ T6276] F2FS-fs (loop3): invalid crc value [ 114.246191][ T6276] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.324196][ T6276] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.331642][ T6276] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.574997][ T6288] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 114.581591][ T6288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.590965][ T6288] vhci_hcd vhci_hcd.0: Device attached [ 114.785837][ T28] audit: type=1800 audit(1760600658.480:3): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.135" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 115.495689][ T5796] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 115.575237][ T6289] vhci_hcd: connection closed [ 115.663846][ T42] vhci_hcd: stop threads [ 115.837382][ T42] vhci_hcd: release socket [ 115.933693][ T42] vhci_hcd: disconnect device [ 116.359243][ T8] vhci_hcd: vhci_device speed not set [ 118.271173][ T6327] fuse: Unknown parameter 'user_i00000000000000000000' [ 118.558999][ T6332] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 118.565597][ T6332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.573754][ T6332] vhci_hcd vhci_hcd.0: Device attached [ 118.957139][ T5856] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 119.323298][ T6333] vhci_hcd: connection reset by peer [ 119.447204][ T6269] vhci_hcd: stop threads [ 119.524757][ T6269] vhci_hcd: release socket [ 119.595705][ T6269] vhci_hcd: disconnect device [ 119.931921][ T6343] netlink: 48 bytes leftover after parsing attributes in process `syz.1.153'. [ 120.736865][ T5796] vhci_hcd: vhci_device speed not set [ 121.428109][ T6364] fuse: Unknown parameter 'user_i00000000000000000000' [ 121.628030][ T6371] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 121.634704][ T6371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.643627][ T6371] vhci_hcd vhci_hcd.0: Device attached [ 122.200172][ T5796] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 122.404761][ T6372] vhci_hcd: connection closed [ 122.414189][ T11] vhci_hcd: stop threads [ 122.534963][ T11] vhci_hcd: release socket [ 122.590850][ T11] vhci_hcd: disconnect device [ 122.925917][ T5796] usb 33-1: enqueue for inactive port 0 [ 123.008925][ T5796] vhci_hcd: vhci_device speed not set [ 123.546432][ T6394] fuse: Bad value for 'fd' [ 124.316824][ T5856] vhci_hcd: vhci_device speed not set [ 124.833339][ T6407] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 124.839921][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.847877][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 125.169230][ T786] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 125.598422][ T6408] vhci_hcd: connection reset by peer [ 125.741549][ T11] vhci_hcd: stop threads [ 125.819273][ T11] vhci_hcd: release socket [ 125.895756][ T11] vhci_hcd: disconnect device [ 126.482578][ T6424] binder: 6420:6424 ioctl 4018620d 0 returned -22 [ 126.500175][ T6426] fuse: Bad value for 'fd' [ 127.092161][ T6432] block device autoloading is deprecated and will be removed. [ 128.237217][ T6447] fuse: Bad value for 'fd' [ 128.539113][ T6454] netlink: 48 bytes leftover after parsing attributes in process `syz.2.190'. [ 128.674462][ T6457] binder: 6456:6457 ioctl 4018620d 0 returned -22 [ 128.775170][ T6460] fuse: Invalid rootmode [ 128.919748][ T6465] fuse: Bad value for 'fd' [ 130.416796][ T786] vhci_hcd: vhci_device speed not set [ 130.562519][ T6467] loop2: detected capacity change from 0 to 4096 [ 132.041313][ T6467] ntfs3: loop2: Failed to read $AttrDef (-4). [ 132.110121][ T6480] fuse: Unknown parameter 'user_id00000000000000000000' [ 132.399059][ T6483] netlink: 148 bytes leftover after parsing attributes in process `syz.1.199'. [ 132.408270][ T6483] netlink: 56 bytes leftover after parsing attributes in process `syz.1.199'. [ 132.417387][ T6483] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 132.457688][ T6483] loop1: detected capacity change from 0 to 2048 [ 132.486585][ T6483] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.496346][ T6483] NILFS (loop1): mounting unchecked fs [ 132.694912][ T6483] NILFS (loop1): recovery complete [ 133.216340][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.228226][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.235042][ T6484] netlink: 48 bytes leftover after parsing attributes in process `syz.0.201'. [ 133.244102][ T6485] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 133.439921][ T6489] binder: BINDER_SET_CONTEXT_MGR already set [ 133.446332][ T6489] binder: 6487:6489 ioctl 4018620d 2000000002c0 returned -16 [ 133.481919][ T6493] fuse: Invalid rootmode [ 133.615483][ T6495] fuse: Bad value for 'fd' [ 134.073644][ T6503] program syz.0.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.107872][ T6510] fuse: Unknown parameter 'user_id00000000000000000000' [ 134.891728][ T6513] loop1: detected capacity change from 0 to 4096 [ 136.123072][ T6507] loop2: detected capacity change from 0 to 32768 [ 136.358331][ T6503] syz.0.207 (6503): drop_caches: 2 [ 136.424881][ T6507] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.552763][ T6513] ntfs3: loop1: ino=9, attr_set_size [ 136.600195][ T6507] XFS (loop2): Ending clean mount [ 136.635531][ T6507] XFS (loop2): Quotacheck needed: Please wait. [ 136.667553][ T6532] binder: BINDER_SET_CONTEXT_MGR already set [ 136.706003][ T6532] binder: 6529:6532 ioctl 4018620d 2000000002c0 returned -16 [ 136.799163][ T6507] XFS (loop2): Quotacheck: Done. [ 136.907613][ T6536] netlink: 148 bytes leftover after parsing attributes in process `syz.3.214'. [ 136.917022][ T6536] netlink: 56 bytes leftover after parsing attributes in process `syz.3.214'. [ 136.925950][ T6536] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 137.069391][ T6536] loop3: detected capacity change from 0 to 2048 [ 137.130318][ T6536] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.140341][ T6536] NILFS (loop3): mounting unchecked fs [ 137.300401][ T6536] NILFS (loop3): recovery complete [ 137.325872][ T6539] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.535789][ T6540] fuse: Invalid rootmode [ 137.886121][ T5790] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.899896][ T6546] fuse: Unknown parameter '0x0000000000000004' [ 137.932916][ T6548] fuse: Unknown parameter 'user_id00000000000000000000' [ 139.138748][ T6564] binder: BINDER_SET_CONTEXT_MGR already set [ 139.155048][ T6564] binder: 6561:6564 ioctl 4018620d 2000000002c0 returned -16 [ 139.450698][ T6572] fuse: Unknown parameter '0x0000000000000004' [ 139.752528][ T6576] netlink: 148 bytes leftover after parsing attributes in process `syz.3.228'. [ 139.762805][ T6576] netlink: 56 bytes leftover after parsing attributes in process `syz.3.228'. [ 139.771809][ T6576] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 139.963350][ T6576] loop3: detected capacity change from 0 to 2048 [ 140.612010][ T6573] ceph: No mds server is up or the cluster is laggy [ 140.641960][ T1194] libceph: connect (1)[c::]:6789 error -101 [ 140.651482][ T6576] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.661566][ T6576] NILFS (loop3): mounting unchecked fs [ 140.712273][ T6576] NILFS (loop3): recovery complete [ 140.730059][ T6581] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.777763][ T6580] fuse: Bad value for 'rootmode' [ 140.785741][ T1194] libceph: mon0 (1)[c::]:6789 connect error [ 141.139103][ T6586] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 141.348208][ T6593] binder: 6592:6593 ioctl c0306201 0 returned -14 [ 141.358705][ T6589] loop2: detected capacity change from 0 to 4096 [ 141.495690][ T6589] ntfs3: loop2: ino=9, attr_set_size [ 141.745202][ T6600] fuse: Unknown parameter '0x0000000000000004' [ 141.994788][ T6587] loop0: detected capacity change from 0 to 32768 [ 142.026168][ T6587] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.232 (6587) [ 142.087027][ T6587] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.127829][ T6587] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 142.147033][ T6587] BTRFS info (device loop0): setting nodatacow, compression disabled [ 142.158682][ T6587] BTRFS info (device loop0): turning on flush-on-commit [ 142.173094][ T6587] BTRFS info (device loop0): enabling auto defrag [ 142.185728][ T6587] BTRFS info (device loop0): trying to use backup root at mount time [ 142.203064][ T6587] BTRFS info (device loop0): turning on async discard [ 142.224498][ T6587] BTRFS info (device loop0): using free space tree [ 142.305577][ T2972] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 142.332819][ T6587] BTRFS error (device loop0): failed to load root extent [ 142.342718][ T6587] BTRFS warning (device loop0): try to load backup roots slot 1 [ 142.379523][ T6269] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 142.434434][ T6587] BTRFS warning (device loop0): couldn't read tree root [ 142.445304][ T6587] BTRFS warning (device loop0): try to load backup roots slot 2 [ 142.477192][ T1140] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 142.500210][ T6587] BTRFS warning (device loop0): couldn't read tree root [ 142.520368][ T6587] BTRFS warning (device loop0): try to load backup roots slot 3 [ 142.582831][ T6587] BTRFS info (device loop0): enabling ssd optimizations [ 142.604851][ T6587] BTRFS info (device loop0): rebuilding free space tree [ 142.748357][ T6587] BTRFS info (device loop0): checking UUID tree [ 142.798826][ T6624] fuse: Bad value for 'rootmode' [ 142.876341][ T6587] BTRFS info (device loop0: state M): trying to use backup root at mount time [ 143.074389][ T5788] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.999453][ T6637] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 144.318512][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.249'. [ 144.396340][ T6647] binder: 6645:6647 ioctl c0306201 0 returned -14 [ 144.579186][ T6642] loop3: detected capacity change from 0 to 4096 [ 145.296602][ T6642] ntfs3: loop3: ino=9, attr_set_size [ 145.498920][ T6657] fuse: Bad value for 'rootmode' [ 145.590456][ T6659] loop1: detected capacity change from 0 to 128 [ 145.690378][ T28] audit: type=1800 audit(1760600689.490:4): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.255" name="file2" dev="loop1" ino=1048592 res=0 errno=0 [ 145.699985][ T6659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 145.763186][ T6659] FAT-fs (loop1): Filesystem has been set read-only [ 145.770211][ T6659] syz.1.255: attempt to access beyond end of device [ 145.770211][ T6659] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 145.823125][ T6659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 145.836828][ T6659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 145.898707][ T6659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 145.918446][ T6659] syz.1.255: attempt to access beyond end of device [ 145.918446][ T6659] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 145.957156][ T6659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.016855][ T6659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 146.026035][ T6659] syz.1.255: attempt to access beyond end of device [ 146.026035][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.061806][ T6659] syz.1.255: attempt to access beyond end of device [ 146.061806][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.108923][ T6668] fuse: Unknown parameter '0x0000000000000004' [ 146.115466][ T6659] syz.1.255: attempt to access beyond end of device [ 146.115466][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.146967][ T6659] syz.1.255: attempt to access beyond end of device [ 146.146967][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.196294][ T6659] syz.1.255: attempt to access beyond end of device [ 146.196294][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.230567][ T6659] syz.1.255: attempt to access beyond end of device [ 146.230567][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.236034][ T6669] loop3: detected capacity change from 0 to 4096 [ 146.277023][ T6659] syz.1.255: attempt to access beyond end of device [ 146.277023][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.301404][ T6659] syz.1.255: attempt to access beyond end of device [ 146.301404][ T6659] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 146.308933][ T6674] binder: 6673:6674 ioctl c0306201 0 returned -14 [ 146.419026][ T6669] ntfs3: loop3: ino=9, attr_set_size [ 146.576608][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'. [ 146.790036][ T6680] loop1: detected capacity change from 0 to 4096 [ 147.071207][ T6689] netlink: 148 bytes leftover after parsing attributes in process `syz.3.264'. [ 147.080531][ T6689] netlink: 56 bytes leftover after parsing attributes in process `syz.3.264'. [ 147.090862][ T6689] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 147.130479][ T6689] loop3: detected capacity change from 0 to 2048 [ 148.701734][ T6689] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 148.711570][ T6689] NILFS (loop3): mounting unchecked fs [ 148.744215][ T6689] NILFS (loop3): recovery complete [ 148.752712][ T6692] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.789114][ T6680] ntfs3: loop1: ino=9, attr_set_size [ 149.180992][ T6697] fuse: Unknown parameter '0x0000000000000004' [ 149.623444][ T6708] random: crng reseeded on system resumption [ 150.429587][ T6724] netlink: 148 bytes leftover after parsing attributes in process `syz.0.277'. [ 150.439027][ T6724] netlink: 56 bytes leftover after parsing attributes in process `syz.0.277'. [ 150.448057][ T6724] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 150.601536][ T6724] loop0: detected capacity change from 0 to 2048 [ 150.851274][ T6724] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.861342][ T6724] NILFS (loop0): mounting unchecked fs [ 151.079282][ T6724] NILFS (loop0): recovery complete [ 151.121136][ T6727] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.156704][ T6730] fuse: Unknown parameter 'fd0x0000000000000004' [ 151.192809][ T6728] loop3: detected capacity change from 0 to 4096 [ 151.329671][ T6728] ntfs3: loop3: ino=9, attr_set_size [ 152.574553][ T6743] netlink: 48 bytes leftover after parsing attributes in process `syz.0.286'. [ 152.782069][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 153.688569][ T6756] fuse: Unknown parameter 'fd0x0000000000000004' [ 153.839217][ T6740] loop3: detected capacity change from 0 to 32768 [ 153.869146][ T6740] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.285 (6740) [ 153.933519][ T6740] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.965532][ T6740] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 153.979121][ T6740] BTRFS info (device loop3): turning off barriers [ 153.985910][ T6740] BTRFS info (device loop3): setting nodatasum [ 153.993960][ T6740] BTRFS info (device loop3): use zlib compression, level 3 [ 154.005725][ T6740] BTRFS info (device loop3): using free space tree [ 154.041014][ T6760] fuse: Unknown parameter '0x0000000000000003' [ 154.216624][ T28] audit: type=1800 audit(1760600698.010:5): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.285" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 154.314748][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.351203][ T6784] netlink: 48 bytes leftover after parsing attributes in process `syz.1.296'. [ 155.532780][ T6795] fuse: Unknown parameter 'fd0x0000000000000004' [ 155.857788][ T6804] fuse: Unknown parameter '0x0000000000000003' [ 155.948974][ T6806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.306'. [ 158.118900][ T6845] netlink: 200 bytes leftover after parsing attributes in process `syz.3.323'. [ 158.310149][ T6851] fuse: Unknown parameter 'fd0x0000000000000003' [ 159.851643][ T6868] fuse: Unknown parameter 'user_id00000000000000000000' [ 160.024503][ T6874] fuse: Unknown parameter 'fd0x0000000000000003' [ 160.864655][ T6886] loop2: detected capacity change from 0 to 1024 [ 160.873635][ T6886] EXT4-fs: Ignoring removed orlov option [ 160.920408][ T6886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.063467][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.777321][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.803026][ T6899] fuse: Unknown parameter 'user_id00000000000000000000' [ 163.171439][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 163.661364][ T6919] loop0: detected capacity change from 0 to 4096 [ 163.705381][ T6922] loop2: detected capacity change from 0 to 4096 [ 163.714663][ T6924] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.715708][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 163.751704][ T28] audit: type=1800 audit(1760600707.550:6): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 163.816566][ T28] audit: type=1800 audit(1760600707.580:7): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 163.988676][ T6922] syz.2.356 (6922) used greatest stack depth: 20848 bytes left [ 164.136818][ T5796] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 164.312622][ T6915] loop3: detected capacity change from 0 to 32768 [ 164.340141][ T6915] (syz.3.353,6915,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.342525][ T5796] usb 1-1: Using ep0 maxpacket: 32 [ 164.386914][ T5796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.400718][ T6915] (syz.3.353,6915,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 164.423390][ T5796] usb 1-1: config 0 has no interfaces? [ 164.423472][ T5796] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 164.423498][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.445204][ T5796] usb 1-1: config 0 descriptor?? [ 164.488517][ T6915] (syz.3.353,6915,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x295f958d. Applying ECC. [ 164.612907][ T6915] JBD2: Ignoring recovery information on journal [ 164.730912][ T6915] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 164.772935][ T6915] (syz.3.353,6915,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x729e4f9c, computed 0x295f958d. Applying ECC. [ 164.936082][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 164.943740][ T6948] process 'syz.2.364' launched '/dev/fd/3' with NULL argv: empty string added [ 165.156016][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 166.793106][ T5796] usb 1-1: USB disconnect, device number 2 [ 167.663233][ T6995] gfs2: not a GFS2 filesystem [ 168.672802][ T6997] binder: 6996:6997 ioctl 4018620d 0 returned -22 [ 170.341512][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 170.421780][ T7011] loop1: detected capacity change from 0 to 256 [ 170.928064][ T7011] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 172.334882][ T7033] fuse: Unknown parameter '0x0000000000000006' [ 172.454956][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 172.643311][ T7043] binder: 7042:7043 ioctl 4018620d 0 returned -22 [ 172.979218][ T7048] loop0: detected capacity change from 0 to 256 [ 174.435301][ T7048] exFAT-fs (loop0): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 174.750496][ T7056] fuse: Unknown parameter '0x0000000000000006' [ 176.093636][ T7067] loop0: detected capacity change from 0 to 4096 [ 176.589386][ T7071] loop3: detected capacity change from 0 to 2048 [ 176.636740][ T7071] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 176.646534][ T7071] NILFS (loop3): mounting unchecked fs [ 176.903088][ T7071] NILFS (loop3): recovery complete [ 176.975168][ T7072] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.130771][ T7065] loop2: detected capacity change from 0 to 32768 [ 177.390356][ T7065] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 178.549377][ T7082] OCFS2: ERROR (device loop2): int ocfs2_xattr_get_clusters(struct inode *, u32, u32 *, u32 *, struct ocfs2_extent_list *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) in xattr [ 178.582439][ T7082] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 178.657716][ T7082] OCFS2: File system is now read-only. [ 178.895896][ T7082] (syz.2.406,7082,0):__ocfs2_xattr_set_value_outside:1373 ERROR: status = -30 [ 179.016892][ T7082] (syz.2.406,7082,1):ocfs2_xa_set:2260 ERROR: status = -30 [ 179.120212][ T7088] fuse: Unknown parameter '0x0000000000000006' [ 179.195760][ T7084] netlink: 36 bytes leftover after parsing attributes in process `syz.0.412'. [ 179.382171][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 180.106025][ T7092] ubi: mtd0 is already attached to ubi31 [ 180.323912][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 180.383464][ T7097] vlan2: entered promiscuous mode [ 180.395806][ T7097] bridge0: entered promiscuous mode [ 181.471938][ T7105] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 181.798641][ T7118] loop0: detected capacity change from 0 to 64 [ 182.108945][ T7120] loop3: detected capacity change from 0 to 2048 [ 182.677087][ T7120] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.686934][ T7120] NILFS (loop3): mounting unchecked fs [ 182.748116][ T7120] NILFS (loop3): recovery complete [ 182.758287][ T7123] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.353152][ T7129] fuse: Unknown parameter '0x0000000000000006' [ 183.444263][ T7130] loop1: detected capacity change from 0 to 4096 [ 183.545976][ T7135] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.586408][ T28] audit: type=1800 audit(1760600727.380:8): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.423" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 183.659879][ T28] audit: type=1800 audit(1760600727.420:9): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.423" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 183.683845][ T7140] program syz.3.427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.968911][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 184.138905][ T7151] fuse: Bad value for 'fd' [ 184.177039][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 184.184493][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.196922][ T8] usb 2-1: config 0 has no interfaces? [ 184.202462][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.245276][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.268810][ T8] usb 2-1: config 0 descriptor?? [ 184.788737][ T7155] loop2: detected capacity change from 0 to 2048 [ 184.864307][ T7155] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.875255][ T7155] NILFS (loop2): mounting unchecked fs [ 185.058028][ T7155] NILFS (loop2): recovery complete [ 185.084733][ T7156] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.943853][ T7163] loop3: detected capacity change from 0 to 1024 [ 186.021553][ T7163] ext4: Unknown parameter 'su' [ 186.544042][ T7171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.437'. [ 186.773769][ T7176] fuse: Bad value for 'fd' [ 187.066395][ T7179] loop0: detected capacity change from 0 to 32768 [ 187.091926][ T7179] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 187.111700][ T7179] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 187.768328][ T9] usb 2-1: USB disconnect, device number 2 [ 187.984270][ T7191] loop2: detected capacity change from 0 to 1024 [ 188.052166][ T7191] ext4: Unknown parameter 'su' [ 188.140728][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 188.776427][ T7193] loop3: detected capacity change from 0 to 32768 [ 188.882705][ T7193] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 188.976336][ T7193] OCFS2: ERROR (device loop3): int ocfs2_xattr_get_clusters(struct inode *, u32, u32 *, u32 *, struct ocfs2_extent_list *, unsigned int *): Inode 17058 has bad extent record (0, 1, 0) in xattr [ 188.995674][ T7193] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 189.006066][ T7193] OCFS2: File system is now read-only. [ 189.012573][ T7193] (syz.3.444,7193,1):__ocfs2_xattr_set_value_outside:1373 ERROR: status = -30 [ 189.022005][ T7193] (syz.3.444,7193,1):ocfs2_xa_set:2260 ERROR: status = -30 [ 189.143928][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 189.473693][ T7214] loop2: detected capacity change from 0 to 4096 [ 189.705154][ T7224] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.091391][ T7227] mmap: syz.3.451 (7227) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 190.646828][ T28] audit: type=1800 audit(1760600734.390:10): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.452" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 190.716678][ C1] sched: RT throttling activated [ 190.727604][ T28] audit: type=1800 audit(1760600734.390:11): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.452" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 191.117396][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 191.335194][ T7235] loop0: detected capacity change from 0 to 4096 [ 191.341760][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 191.351469][ T7240] serio: Serial port ptm0 [ 191.365915][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.398043][ T8] usb 3-1: config 0 has no interfaces? [ 191.409456][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 191.453774][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.504465][ T7235] ntfs3: loop0: ino=9, attr_set_size [ 191.512801][ T8] usb 3-1: config 0 descriptor?? [ 193.577024][ T5883] usb 3-1: USB disconnect, device number 2 [ 193.669745][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 193.694772][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 193.805568][ T28] audit: type=1326 audit(1760600737.600:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 193.856797][ T28] audit: type=1326 audit(1760600737.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 193.915761][ T28] audit: type=1326 audit(1760600737.630:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 193.960123][ T28] audit: type=1326 audit(1760600737.630:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 194.093914][ T28] audit: type=1326 audit(1760600737.630:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 194.174493][ T28] audit: type=1326 audit(1760600737.630:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 194.261351][ T28] audit: type=1326 audit(1760600737.630:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 194.583752][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.590544][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.109728][ T7262] loop1: detected capacity change from 0 to 32768 [ 195.184626][ T7262] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.210342][ T7262] XFS (loop1): Ending clean mount [ 196.227221][ T7262] XFS (loop1): Quotacheck needed: Please wait. [ 196.312726][ T7262] XFS (loop1): Quotacheck: Done. [ 196.749243][ T5791] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.883687][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 197.603902][ T7284] loop0: detected capacity change from 0 to 32768 [ 197.702733][ T7284] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 197.865262][ T5788] ocfs2: Unmounting device (7,0) on (node local) [ 198.017759][ T28] audit: type=1326 audit(1760600741.820:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.1.479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cff78eec9 code=0x0 [ 199.622185][ T7340] loop3: detected capacity change from 0 to 32768 [ 199.769913][ T7340] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 199.882528][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 203.546212][ T7373] loop3: detected capacity change from 0 to 2048 [ 205.211863][ T7373] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.221856][ T7373] NILFS (loop3): mounting unchecked fs [ 205.280641][ T7373] NILFS (loop3): recovery complete [ 205.307041][ T7374] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.501328][ T7386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.505'. [ 206.636067][ T7383] loop1: detected capacity change from 0 to 4096 [ 206.769274][ T7383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.809325][ T7383] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.392009][ T7392] loop2: detected capacity change from 0 to 32768 [ 209.679618][ T7392] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 210.782739][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 211.462645][ T28] audit: type=1326 audit(1760600755.260:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.0.524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc27338eec9 code=0x0 [ 211.728094][ T7437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.517'. [ 216.291618][ T7467] netlink: 48 bytes leftover after parsing attributes in process `syz.0.530'. [ 216.469615][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 218.585954][ T7488] loop2: detected capacity change from 0 to 2048 [ 218.669897][ T7488] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 218.679946][ T7488] NILFS (loop2): mounting unchecked fs [ 218.843356][ T7488] NILFS (loop2): recovery complete [ 218.901734][ T7490] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.446783][ T7503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.539'. [ 221.601934][ T7509] loop2: detected capacity change from 0 to 128 [ 221.638246][ T7509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.642889][ T7510] loop1: detected capacity change from 0 to 2048 [ 221.676483][ T7509] EXT4-fs (loop2): Test dummy encryption mode enabled [ 221.713824][ T7510] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 221.758380][ T7509] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 221.863673][ T7516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 221.908306][ T7509] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.181167][ T28] audit: type=1800 audit(1760600765.800:21): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.541" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 223.241294][ T5790] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.708630][ T7525] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 223.797162][ T7525] Remounting filesystem read-only [ 224.705691][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 224.935372][ T7543] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.805530][ T7549] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 225.949769][ T7549] bond1 (unregistering): Released all slaves [ 228.007451][ T7579] loop3: detected capacity change from 0 to 2048 [ 228.119262][ T7579] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 228.185546][ T7589] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.237105][ T5807] udevd[5807]: incorrect nilfs2 checksum on /dev/loop3 [ 228.304717][ T28] audit: type=1800 audit(1760600772.100:22): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.554" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 229.008750][ T7591] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 229.086358][ T7591] Remounting filesystem read-only [ 229.396503][ T7576] loop2: detected capacity change from 0 to 32768 [ 229.523700][ T7576] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 229.745406][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 230.091516][ T7613] loop3: detected capacity change from 0 to 4096 [ 230.432224][ T7613] ntfs3: loop3: ino=9, attr_set_size [ 231.744753][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 231.824404][ T7625] loop0: detected capacity change from 0 to 32768 [ 231.884569][ T7625] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 231.979792][ T7655] loop2: detected capacity change from 0 to 2048 [ 231.989987][ T7655] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 232.035263][ T7625] XFS (loop0): Ending clean mount [ 232.077048][ T7625] XFS (loop0): Quotacheck needed: Please wait. [ 232.107071][ T7658] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.228548][ T7625] XFS (loop0): Quotacheck: Done. [ 232.272653][ T28] audit: type=1800 audit(1760600776.070:23): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.568" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 233.094987][ T7655] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 233.144581][ T7655] Remounting filesystem read-only [ 233.185623][ T5788] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 233.581584][ T7671] loop1: detected capacity change from 0 to 4096 [ 233.802915][ T7671] ntfs3: loop1: ino=9, attr_set_size [ 234.709645][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 235.909019][ T7705] loop3: detected capacity change from 0 to 32768 [ 236.051394][ T7705] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.312929][ T7705] XFS (loop3): Ending clean mount [ 236.333324][ T7705] XFS (loop3): Quotacheck needed: Please wait. [ 236.463319][ T7734] fuse: Bad value for 'group_id' [ 236.480180][ T7705] XFS (loop3): Quotacheck: Done. [ 236.989760][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.568825][ T7746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.587'. [ 237.873218][ T7758] program syz.2.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.055462][ T7774] fuse: Bad value for 'group_id' [ 241.111358][ T7756] syz.2.588 (7756): drop_caches: 2 [ 245.057408][ T7809] fuse: Bad value for 'group_id' [ 245.281306][ T7816] loop2: detected capacity change from 0 to 256 [ 245.318171][ T7816] exfat: Deprecated parameter 'utf8' [ 245.339207][ T7816] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 248.555787][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 248.570762][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 248.583275][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 248.593834][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 252.483984][ T7908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.631'. [ 255.514071][ T7922] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 256.022024][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.038665][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.316835][ T1194] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 259.541261][ T1194] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 259.554925][ T1194] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.568377][ T1194] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.577650][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.625247][ T1194] usb 4-1: config 0 descriptor?? [ 259.659357][ T1194] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 259.812827][ T7992] loop2: detected capacity change from 0 to 2048 [ 262.242019][ T786] usb 4-1: USB disconnect, device number 2 [ 263.393301][ T8005] loop0: detected capacity change from 0 to 2048 [ 263.541697][ T8005] Alternate GPT is invalid, using primary GPT. [ 263.591531][ T8005] loop0: p2 p3 p7 [ 264.142221][ T5809] udevd[5809]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 264.153853][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 264.193743][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 264.365939][ T8011] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 265.390339][ T8040] loop2: detected capacity change from 0 to 2048 [ 265.705031][ T8040] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 265.714763][ T8040] NILFS (loop2): mounting unchecked fs [ 266.315791][ T8040] NILFS (loop2): recovery complete [ 266.340254][ T8043] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.496528][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'. [ 269.480370][ T8073] loop1: detected capacity change from 0 to 2048 [ 270.326000][ T8073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.120021][ T8081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.675'. [ 273.274717][ T8104] loop1: detected capacity change from 0 to 2048 [ 273.344275][ T8104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.829652][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.198587][ T8117] loop1: detected capacity change from 0 to 64 [ 275.214509][ T8117] hfs: unable to change iocharset [ 275.220184][ T8117] hfs: unable to parse mount options [ 276.134562][ T8121] loop2: detected capacity change from 0 to 1024 [ 277.664224][ T8133] netlink: 48 bytes leftover after parsing attributes in process `syz.2.691'. [ 278.137261][ T8136] loop1: detected capacity change from 0 to 2048 [ 278.746177][ T8136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.830402][ T8136] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.298866][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.198074][ T28] audit: type=1326 audit(2000000000.870:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 284.287506][ T28] audit: type=1326 audit(2000000000.900:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 284.370712][ T28] audit: type=1326 audit(2000000000.900:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 284.446941][ T28] audit: type=1326 audit(2000000000.900:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8187 comm="syz.0.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27338eec9 code=0x7ffc0000 [ 285.513942][ T28] audit: type=1804 audit(2000000002.190:28): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.713" name="/newroot/173/file1" dev="fuse" ino=1 res=1 errno=0 [ 286.813027][ T8213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.865168][ T8225] netlink: 96 bytes leftover after parsing attributes in process `syz.3.716'. [ 289.297461][ T8221] loop2: detected capacity change from 0 to 32768 [ 289.407415][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 289.437463][ T8221] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 289.701642][ T5790] ocfs2: Unmounting device (7,2) on (node local) [ 290.636742][ T786] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 290.824176][ T786] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 290.833545][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.842316][ T786] usb 3-1: Product: syz [ 290.851189][ T786] usb 3-1: Manufacturer: syz [ 290.856146][ T786] usb 3-1: SerialNumber: syz [ 290.864642][ T786] usb 3-1: config 0 descriptor?? [ 291.083952][ T786] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 291.553517][ T8252] loop3: detected capacity change from 0 to 4096 [ 291.633848][ T8252] ntfs3: loop3: ino=9, attr_set_size [ 292.147130][ T8256] loop3: detected capacity change from 0 to 32768 [ 292.180561][ T8256] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 292.412533][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 292.473954][ T8262] tipc: Started in network mode [ 292.483046][ T8262] tipc: Node identity e6c316e651f, cluster identity 4711 [ 292.555920][ T8262] tipc: Enabled bearer , priority 0 [ 292.639171][ T786] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 292.674142][ T8266] syzkaller0: entered promiscuous mode [ 292.685437][ T8266] syzkaller0: entered allmulticast mode [ 292.986919][ T786] usb 3-1: USB disconnect, device number 3 [ 293.085721][ T8261] tipc: Resetting bearer [ 293.897110][ T23] tipc: Node number set to 3073578726 [ 294.048653][ T8261] tipc: Disabling bearer [ 294.207984][ T8280] loop2: detected capacity change from 0 to 4096 [ 294.479767][ T8280] ntfs3: loop2: ino=9, attr_set_size [ 299.262211][ T8316] loop3: detected capacity change from 0 to 4096 [ 299.403689][ T8316] ntfs3: loop3: ino=9, attr_set_size [ 299.502611][ T8307] loop1: detected capacity change from 0 to 40427 [ 299.556163][ T8307] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 299.580701][ T8307] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 299.644558][ T8307] F2FS-fs (loop1): Found nat_bits in checkpoint [ 299.788512][ T8307] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 299.819466][ T8307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 299.964985][ T5791] bio_check_eod: 914 callbacks suppressed [ 299.964998][ T5791] syz-executor: attempt to access beyond end of device [ 299.964998][ T5791] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 300.065763][ T5791] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 306.049412][ T8381] loop0: detected capacity change from 0 to 512 [ 306.893363][ T8381] EXT4-fs: Ignoring removed nobh option [ 306.930388][ T8381] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 307.109383][ T8381] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #3: comm syz.0.764: corrupted inode contents [ 307.131198][ T8381] EXT4-fs (loop0): Remounting filesystem read-only [ 307.148963][ T8381] Quota error (device loop0): write_blk: dquota write failed [ 307.167836][ T8381] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 307.197346][ T8381] EXT4-fs (loop0): 1 truncate cleaned up [ 307.211271][ T8381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.276871][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 307.429582][ T8381] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.452936][ T8381] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.468772][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 307.477848][ T786] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 307.491543][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.512343][ T786] usb 3-1: config 0 descriptor?? [ 308.204772][ T8398] loop3: detected capacity change from 0 to 2048 [ 308.240771][ T8398] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.343367][ T786] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 310.621448][ T8409] loop0: detected capacity change from 0 to 8192 [ 311.867045][ T8417] loop1: detected capacity change from 0 to 32768 [ 312.057762][ T8417] (syz.1.774,8417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.081529][ T8417] (syz.1.774,8417,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 313.121151][ T786] gspca_vc032x: reg_r err -110 [ 313.125960][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.136935][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.142297][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.189772][ T8428] syz.0.776 (8428) used greatest stack depth: 17960 bytes left [ 313.318201][ T8417] JBD2: Ignoring recovery information on journal [ 313.326809][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.348941][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.354351][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.396887][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.411687][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.419762][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.565684][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.571573][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.576982][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.582359][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.596702][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.602059][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.609620][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.614970][ T786] gspca_vc032x: I2c Bus Busy Wait 00 [ 314.168043][ T786] gspca_vc032x: Unknown sensor... [ 314.175692][ T786] vc032x: probe of 3-1:0.0 failed with error -22 [ 316.188527][ T786] usb 3-1: USB disconnect, device number 4 [ 316.308900][ T8417] JBD2: journal reset failed [ 316.320613][ T8417] (syz.1.774,8417,1):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 316.350158][ T8417] (syz.1.774,8417,1):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4 [ 316.495877][ T8444] nvme_fabrics: missing parameter 'transport=%s' [ 316.503723][ T8444] nvme_fabrics: missing parameter 'nqn=%s' [ 316.766924][ T5856] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 316.774944][ T8451] loop3: detected capacity change from 0 to 2048 [ 316.818710][ T8451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.855229][ T8456] loop1: detected capacity change from 0 to 256 [ 316.895903][ T8456] exfat: Deprecated parameter 'namecase' [ 316.906447][ T8456] exfat: Deprecated parameter 'namecase' [ 316.923944][ T8456] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 316.998728][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 317.413946][ T5856] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 317.423404][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.740911][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.757156][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.775451][ T5856] usb 3-1: Product: syz [ 317.789991][ T5856] usb 3-1: Manufacturer: syz [ 317.948304][ T5856] usb 3-1: SerialNumber: syz [ 317.958004][ T5856] usb 3-1: config 0 descriptor?? [ 317.970350][ T5856] hub 3-1:0.0: bad descriptor, ignoring hub [ 317.976546][ T5856] hub: probe of 3-1:0.0 failed with error -5 [ 318.005418][ T5856] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 319.810059][ T5856] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 320.121875][ T5856] usb 3-1: USB disconnect, device number 5 [ 320.397484][ T8470] capability: warning: `syz.1.789' uses deprecated v2 capabilities in a way that may be insecure [ 320.480099][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.577446][ T8474] fuse: Bad value for 'fd' [ 323.484630][ T8506] fuse: Bad value for 'fd' [ 324.861949][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 324.893125][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 324.929027][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 324.984260][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 325.040162][ T8531] fuse: Bad value for 'fd' [ 325.086945][ T8504] loop2: detected capacity change from 0 to 32768 [ 325.105435][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 325.159087][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 325.173614][ T8504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 325.197520][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 325.205436][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 325.213795][ T786] hid-generic 0000:0040:30383231.0001: unknown main item tag 0x0 [ 325.228725][ T8504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 325.309541][ T786] hid-generic 0000:0040:30383231.0001: hidraw0: HID v303038.78 Device [syz1] on syz0 [ 325.425817][ T8504] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 325.584526][ T5856] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 326.387690][ T5856] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 326.562489][ T5856] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 174ms [ 326.577378][ T5856] gfs2: fsid=syz:syz.0: jid=0: Done [ 326.584671][ T8539] loop6: detected capacity change from 0 to 7 [ 326.585788][ T8504] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 326.621353][ T5807] Dev loop6: unable to read RDB block 7 [ 326.672568][ T5807] loop6: AHDI p3 p4 [ 326.680129][ T8537] fido_id[8537]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 326.693938][ T5807] loop6: partition table partially beyond EOD, truncated [ 326.694393][ T5807] loop6: p3 start 1886353253 is beyond EOD, [ 326.716902][ T8504] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 326.766794][ T5807] truncated [ 326.848930][ T8539] Dev loop6: unable to read RDB block 7 [ 326.854716][ T8539] loop6: AHDI p3 p4 [ 326.859931][ T8539] loop6: partition table partially beyond EOD, truncated [ 326.909862][ T8539] loop6: p3 start 1886353253 is beyond EOD, truncated [ 327.832589][ T8552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 327.848444][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 328.221515][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 328.638663][ T8557] fuse: Bad value for 'fd' [ 329.454053][ T8563] loop3: detected capacity change from 0 to 32768 [ 330.226041][ T8563] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 330.373458][ T8563] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 330.426928][ T8563] XFS (loop3): Starting recovery (logdev: internal) [ 330.490801][ T8563] XFS (loop3): Ending recovery (logdev: internal) [ 330.508159][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.830'. [ 330.519978][ T8563] XFS (loop3): Quotacheck needed: Please wait. [ 330.539732][ T8586] macvtap1: entered promiscuous mode [ 330.545366][ T8586] macvtap1: entered allmulticast mode [ 330.568069][ T8586] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 330.582103][ T8563] XFS (loop3): Quotacheck: Done. [ 330.824579][ T5856] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 330.899526][ T8590] fuse: Bad value for 'fd' [ 331.095605][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.480917][ T5856] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 331.490497][ T5856] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 331.526767][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.561125][ T5856] usb 2-1: config 0 descriptor?? [ 331.614084][ T5856] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 331.667131][ T5856] dvb-usb: bulk message failed: -22 (3/0) [ 331.728249][ T8593] loop2: detected capacity change from 0 to 4096 [ 331.735662][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 331.767892][ T5856] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 331.798501][ T5856] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 331.811669][ T8581] loop1: detected capacity change from 0 to 2048 [ 331.818832][ T5856] usb 2-1: media controller created [ 331.827073][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.853630][ T5856] dvb-usb: bulk message failed: -22 (6/0) [ 331.880393][ T5856] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 331.889241][ T8596] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.916288][ T8597] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.925786][ T5856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 332.268878][ T5856] dvb-usb: schedule remote query interval to 150 msecs. [ 332.275906][ T5856] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 332.302841][ T5856] usb 2-1: USB disconnect, device number 3 [ 332.638531][ T28] audit: type=1326 audit(2000000049.220:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.3.834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effecf8eec9 code=0x0 [ 333.303529][ T5856] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 334.909388][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'. [ 334.988127][ T8624] macvtap2: entered promiscuous mode [ 334.994182][ T8627] fuse: Bad value for 'fd' [ 335.013671][ T8624] macvtap2: entered allmulticast mode [ 335.029739][ T8624] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 336.172088][ T8649] syz.3.844: attempt to access beyond end of device [ 336.172088][ T8649] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 336.185437][ T8649] efs: cannot read volume header [ 336.234588][ T8650] loop3: detected capacity change from 0 to 512 [ 336.241924][ T8650] EXT4-fs: Ignoring removed bh option [ 338.012995][ T8650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.063254][ T8650] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.459308][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.544225][ T8662] fuse: Invalid rootmode [ 338.605051][ T8668] netlink: 'syz.1.854': attribute type 16 has an invalid length. [ 338.612993][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.854'.