last executing test programs: 15m39.038136774s ago: executing program 32 (id=584): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c757466383d302c756e695f786c6174653d312c696f636861727360743d6370383635b1757466383d302c757466383d312c757466383d302c666d61736b3d30303030303030303030303030303030303030303032352c756e695f786c6174653d302c696f636861727365743d6d6163696e5669742c757466383d302c636f6465706167653d3835372c73686f72746e616d653d653d6c6f7765722c636f6465706167653d3836332c696f636861727365743d69736f383835392d362c6e6f6e756d7461696c3d715d16b457262e0798de6259302c000000"], 0x1, 0x36a, &(0x7f0000001840)="$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") r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4007}}) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x0, 0x40fa000, 0x30000}) open(&(0x7f0000000800)='./file1\x00', 0x169142, 0x192) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d312c757466383d302c756e695f786c6174653d312c696f636861727360743d6370383635b1757466383d302c757466383d312c757466383d302c666d61736b3d30303030303030303030303030303030303030303032352c756e695f786c6174653d302c696f636861727365743d6d6163696e5669742c757466383d302c636f6465706167653d3835372c73686f72746e616d653d653d6c6f7765722c636f6465706167653d3836332c696f636861727365743d69736f383835392d362c6e6f6e756d7461696c3d715d16b457262e0798de6259302c000000"], 0x1, 0x36a, &(0x7f0000001840)="$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") (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4007}}) (async) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) (async) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x0, 0x0, 0x40fa000, 0x30000}) (async) open(&(0x7f0000000800)='./file1\x00', 0x169142, 0x192) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) 13m46.562692116s ago: executing program 33 (id=853): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x817]}, 0x8) 11m10.311691857s ago: executing program 34 (id=1204): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0xfffffffb) syz_usb_connect(0x0, 0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001a28d22086d04900928250102030109029d0001fd0040000904b005020101"], 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) io_setup(0x1, &(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 9m57.05828064s ago: executing program 35 (id=1323): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'rootmode'}, 0x0, 0xfffffffffffffee5) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f84843", 0x15}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 9m37.327592039s ago: executing program 36 (id=1379): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) preadv2(r0, &(0x7f0000001140)=[{&(0x7f00000000c0)=""/119, 0x77}], 0x1, 0x23, 0x9, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev, 'rose0\x00'}}, 0x1e) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=bind:0-N:3/7']) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, 0x0) 9m34.609301261s ago: executing program 37 (id=1382): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000640)={[], [{@euid_eq={'euid', 0x3d, r0}}, {@obj_role={'obj_role', 0x3d, ']/(@['}}, {@fsname={'fsname', 0x3d, '\xf8'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}]}, 0x1, 0x236, &(0x7f0000000300)="$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") pidfd_send_signal(0xffffffffffffffff, 0x3a, &(0x7f0000000080)={0x37, 0xfffffffc, 0x6}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(0x0, 0x2) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xa0, 0x2) pread64(r2, &(0x7f00000001c0)=""/163, 0xa3, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000006c0)={'fscrypt:', @desc1}, &(0x7f0000000700)={0x0, "afe3cee0f107c7202345e237b3055d9e3dd6df92ef11039c85c679c8a16a6c1caeb5cb25a4fdad8413d760fc46535ac5501f3168fbc9faf11388ba8533c81296", 0x1a}, 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @desc4}, 0x40, r5, '\x00', @a}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 9m8.937957075s ago: executing program 38 (id=1421): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000140)) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r2, 0x53e6b000) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='errors=continue,namecase=1,iocharset=none,errors=continue,fmask=00000000000000000000011,iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000127435,gid=', @ANYRES64, @ANYBLOB=',\x00'], 0x5, 0x1510, &(0x7f0000000240)="$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") madvise(&(0x7f0000893000/0x2000)=nil, 0x2000, 0x9) 9m0.699289716s ago: executing program 39 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4802) connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0x0, 0x0, 0x100000}) write$vga_arbiter(r5, &(0x7f0000000040)=@unlock_all, 0xb) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYBLOB="11ef"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newchain={0x1978, 0x64, 0x6b430fe94d55edc7, 0x29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xd, 0xfff3}, {0xffff, 0x8}, {0x2, 0xfff1}}, [@f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @private=0xa010100}]}}, @f_rsvp6={{0xa}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffc52}, @TCA_POLICE_RATE={0x404, 0x2, [0xed, 0x3a0b9341, 0x1, 0x2, 0xffffffff, 0x8, 0x13562470, 0x8, 0x92f, 0xc, 0x7ff, 0x6, 0x49b, 0xcf48, 0x0, 0x7fff, 0x1a, 0x2, 0x7ff, 0x17f7, 0x3ff, 0x100, 0x100, 0x8, 0x400, 0x1, 0xffffe6f6, 0x0, 0x80, 0x8, 0x10000, 0x4, 0xa3, 0x4, 0xa, 0x101, 0xfffffc01, 0x4, 0xfff, 0x6, 0x0, 0x2, 0x527, 0xa, 0x6, 0xb, 0xd71, 0x1, 0x7, 0x2, 0x8, 0x586, 0x2, 0xef, 0x5, 0xffff0000, 0x0, 0x24e79bdf, 0x4e6590c0, 0x7825, 0x8, 0xa658, 0x7, 0x3, 0x800, 0x8, 0xe08, 0x4, 0x4, 0xd, 0xed6, 0x3, 0x982, 0x8, 0x100, 0x1, 0x8, 0x2, 0xb, 0x3e2f, 0x8, 0x0, 0xaf, 0x7, 0x4, 0x0, 0x6, 0x16f, 0x2, 0x100, 0x8, 0x5, 0x7, 0xfffffffe, 0xffffffff, 0x5, 0x4, 0xea, 0x10001, 0x2, 0x2f, 0x8001, 0x2, 0x6, 0x3, 0xd, 0x8, 0x200, 0x5, 0x101, 0x4, 0x8, 0x2, 0x79a50d2c, 0xbe, 0xf0, 0x7, 0xc0, 0x0, 0xff, 0x0, 0x7, 0x252, 0x5, 0x200000, 0xd, 0x7f, 0xfffffff7, 0x1, 0x6, 0xa, 0x10001, 0x3, 0xffffff21, 0x4, 0xba3, 0xe, 0xc, 0x2, 0x2, 0x5, 0x7, 0x7958, 0x4, 0x4, 0x7, 0x3, 0x80, 0x9, 0x0, 0x5, 0x81, 0x5, 0x6, 0x8, 0x800, 0x7f, 0x8000, 0x6, 0x1, 0x2, 0x6, 0x9, 0x0, 0x47, 0x80, 0x10000, 0xab7, 0x7, 0xdad7, 0x2, 0x8, 0x6, 0x80000001, 0x307, 0x3, 0x9, 0x4, 0x8, 0x80000000, 0xc5b2, 0x8, 0x3, 0xab29, 0xd47, 0x2, 0x8001, 0x79, 0x7, 0x6, 0x3, 0x3, 0x0, 0x9, 0x9, 0x10001, 0x3, 0x6, 0x77d, 0x7f, 0x2, 0xac, 0xf, 0xea, 0xffffffff, 0x1b, 0x0, 0xffffff80, 0x3f, 0x9d, 0x100, 0x90, 0x2, 0x1, 0x3, 0x400, 0x800, 0x8, 0x8, 0xd2e, 0x7, 0x3, 0x8c, 0x6, 0x4, 0xf, 0xd, 0x6, 0xd, 0xb000, 0x4, 0x205, 0xc, 0xfffffff8, 0x2, 0x1, 0x5, 0x0, 0x24, 0x7, 0x7, 0x5, 0x10000, 0xfffffffd, 0x1ff, 0x9, 0x10000, 0x1, 0x1, 0x6, 0xa, 0x7ff, 0x8, 0x869, 0xff800000, 0x6]}]}, @TCA_RSVP_DST={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}]}}, @f_rsvp6={{0xa}, {0x14dc, 0x2, [@TCA_RSVP_ACT={0x14a0, 0x6, [@m_vlan={0x114, 0x2, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x37b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x30000000, 0x7, 0x4, 0x5, 0x9}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x5, 0x233c65196ef3ee89, 0x41, 0x7fff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x86, 0x6, "64cd633176cc36b24990086a329f9b999f0b488d6c59bbf3dc549e6f33082fa9085dad1ca453ff49ac45e721ec2157c5324e1ba51d8db5aeb2d2aaac0f8b581364c3557b5a93426f5e3910806c2fd8a632492bb8ec5636efa6bc2ed433040f28466e8202194d442287e66395786846f9e4c02367bae36a0fa27363ab927bf4d53899"}, {0xc, 0x7, {0x75ed96c3baa70683, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x10a0, 0xe, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x4e19, 0xffffffffffffffff, 0x5, 0x7fffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x1, 0x2, 0x5}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x150, 0x4, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xac1, 0x7, 0x1, 0x8, 0xffffff80}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0x1}}]}, {0xf2, 0x6, "5746971c9c5e5722a8f1d299bf3d5bc08ea3c7413f8fde747867e5f5d348d81dfd615920fc40d7358c70f541c5d7f5741228f65c27772d8c63b85672b6bf3940c820c6b2737e7594b9d44890a91af0201d5ec149f41afdd7cab0cd1f2c8e2a5df38589b14a41dcab42dbe695206c6647d0e86093e96bdceb24d9c79d057c9f44015b958d2d377cac44c5c6851134d955da9a1399550d964a8003d2a3559db60a4a50da54687d4e9a2ee543dd0a49763277f258e359423e6b86c2beb6515793c13e89fbe13d9ad7ccd6c3a1d5d3ca995c081036064cca1d8a05ed9dd7f0a3b89f3f33452abf8e39b5fad4883a1f73"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x198, 0xb, 0x0, 0x0, {{0x7}, {0x120, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0xf7, 0x6, {0x5, 'filter\x00', 0x5, 0xa, "4e5b707c07aec18ed7c75deb2780ed2cd6dca18bede48ff808c81a6461af12df5a564f6e62a0781be5e6e0c2cecc4dffa2c93d9067aaa075c322d0086b04f8dfd09e198aea8cd9df068344e3d27844e9d40b0813bc02dc6bff16a970b334ba3ecd9b898b84c09289ae094d1150e756c0b30e333e1067394aef1cf685ff84d9580a54223a1c41e3449b9d4becc612831daadb928a5aa0a2839c047c49b5d370701873bb7581cf189303c637ca08864b902152d4b471850fa50bee4ea9292149d9edd26a6fe4acf5d793a47f1fcf"}}]}, {0x51, 0x6, "a8901112ba8a0f7c058fc081b0a9fdec912c1829c09d37fedc42b0a48790ca8339cebbb38b59e099972b17a89999a246ddd5e26015383fc770b0281e28fffb92c502842efc7042dbb690d33160"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xa}}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0x9}}]}}]}, 0x1978}}, 0x8000) 9m0.65464629s ago: executing program 40 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xff}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x59b3b0997551c0ab}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x0) prctl$PR_SET_THP_DISABLE(0x19, 0x10000000000001) r1 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000a200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01f718"], &(0x7f0000000140)=""/51, 0x70, 0x33, 0x1, 0x8}, 0x28) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r2, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xfffffff7}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x6}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048080}, 0x4084) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2004, &(0x7f0000000000)={[{@subsystem='net_prio'}, {@none}]}) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x541b, 0x0) (async) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000280)='xfrm0\x00') (async) chdir(&(0x7f0000000380)='./file0\x00') syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000006a2ddcf6177a81001900886445000028000000570006907800000000ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405000002000000"], 0x0) 7m55.027960593s ago: executing program 41 (id=1589): r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbf2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x43d0}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0xac2b4b262fc29b88}, 0x2000a080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) 6m53.287528685s ago: executing program 42 (id=1780): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f00000000c0)=[{0x8000, 0x2, 0x0, 0x0}, {0x0, 0x2200, 0x0, 0x0}], 0x2}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x900}, 0x4000000) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028008000700000001000a0001008c"], 0x48}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000100), 0x4) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048014}, 0x24046000) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x148, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x120, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}]}}}, {0xc8, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xb8, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_BITWISE_DATA={0xa0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1bc}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) 6m28.598590158s ago: executing program 43 (id=1848): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0xfbffffff, 0x2, 0x0, "dedc4d1ebc3016d15c7b4745ed2e0a9cefdad931ba276a534c959734b152bbf0"}) (async) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x249008, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0xc1, 0x1c0, &(0x7f0000000500)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x1200) 6m1.685327171s ago: executing program 44 (id=1908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000850000005b0000049500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 4m58.616710208s ago: executing program 9 (id=2059): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 4m58.16458285s ago: executing program 9 (id=2061): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRESOCT], 0x1, 0x6e7, &(0x7f0000001a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000640)='./bus\x00', 0x0) 4m57.48261926s ago: executing program 9 (id=2063): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x8900, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc4c03d12, 0x0) 4m56.943941552s ago: executing program 9 (id=2065): mkdir(&(0x7f0000000000)='./file0\x00', 0x82) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4m56.236262329s ago: executing program 9 (id=2067): ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x2000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000d21cc7be1dbd99cce528d30000000000000000ffff00"/39], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f00000001c0), &(0x7f0000000080)=""/45}, 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f00000000c0)=0x4, 0x3e) sendto$inet(r7, &(0x7f0000000040)="04", 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) flistxattr(r0, &(0x7f0000000080)=""/197, 0xc5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000900)=@chain) 4m50.211808721s ago: executing program 9 (id=2069): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1008420, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x8}}, {@mblk_io_submit}, {@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x51) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000540)={0x0, [[0x226, 0x0, 0x0, 0x800], [0xfffffffb], [0x4, 0x69e, 0x0, 0x0, 0x359]], '\x00', [{0x0, 0x6}, {0x3, 0xffffffff, 0x0, 0x1}, {0x5}, {0x32}, {}, {}, {0x10000, 0x3}, {}, {}, {0x402}, {0x0, 0x3}, {0x2}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r3}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[], 0x119) 4m49.835782561s ago: executing program 8 (id=2072): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 4m40.402423847s ago: executing program 45 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404005400ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b70000000000000095000000000000003f0c54cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752688300000000dbc2777df150b7cdd77b85b941092314fd085f1b1b2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c830fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m39.990726356s ago: executing program 8 (id=2078): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) capset(0x0, 0x0) 4m36.464309281s ago: executing program 8 (id=2084): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x125d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) r8 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000000580)={{&(0x7f000062f000/0x2000)=nil, 0x2000}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x40, 0x1}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5d}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0x21, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x500, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) sendmmsg$sock(r1, &(0x7f0000007640)=[{{&(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0}}], 0x1, 0x814) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x5, 0xfffff02c}, {0x6, 0x0, 0x0, 0x5}]}) 4m33.886537016s ago: executing program 46 (id=2069): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1008420, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x8}}, {@mblk_io_submit}, {@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x51) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000540)={0x0, [[0x226, 0x0, 0x0, 0x800], [0xfffffffb], [0x4, 0x69e, 0x0, 0x0, 0x359]], '\x00', [{0x0, 0x6}, {0x3, 0xffffffff, 0x0, 0x1}, {0x5}, {0x32}, {}, {}, {0x10000, 0x3}, {}, {}, {0x402}, {0x0, 0x3}, {0x2}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r3}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[], 0x119) 4m33.86516367s ago: executing program 8 (id=2087): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX=0x0], 0x0, 0x247, &(0x7f00000005c0)="$eJzsWL9rFEEU/mZvb3MrIrFJYaNgwIjmLrdBSXNEBcHKJhG1MotZQ7xNTjYreAeCh42NdhaCjYX/gEWKVBZ2/gOCFioIFl5hYWOz8mZnd2dvk+x5pvN9xfDNzPs9b1+xYDAY/y2+fvn1+emlheWzAA5jGhPq/HsFECLmhib/6cX9M89bl1+++fj63eaRhzvD9kglivIHtX38mwDeXqwgTD2l2r+JTKvNMoyUX4OB04pfh0Bd8RUY1cSuB4Gbit/VeIfk6/U7675Xv93xV4nM0dKkxaElly/FN+gLrKp9FEWR0O63ur226/teoBFT3e1yNRZJnbWnCvWrQmDQB1pafBT/jSeP+7RPajOn1a8JA02VxDwEltT5AiaS2sQl0fI/Zmb2K5p/6hfXz7K11bnvBSRKtCzJWkxaPw+kWDo5Ojue+gylc6F4NYlxwkCmtQgvqCK7okrmhU+UGJRtsI+vyeHWkcTUenEP9cXs4UrySrsxOblayKLt+rX8iUHkmS275YBfebcI/0F9arDzvnj1rUw9EuUuxOj9Uxs15uQ1/ibTSu4FbfTaxngV6xbfXQvsw3Y8P6JXAqe0+WRq86MRbtxrbHV7s+sb7pq35m06zvx5ATw65zTkIIrXwtzL5rMt59MhzX51D1nLsPDADcOgGa+WsGAjDANH7h0Z94r8bJa2Oz9uKbUQVwCcjDc0Nq3UYmXYA4QVyxhSltjMsBCDwWAwGAwGg8FgMBgMBoPBYIyO3A/P4xDyL2gJnFj6TwAAAP//NoVRwA==") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, r0, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 4m26.435211779s ago: executing program 8 (id=2093): r0 = syz_mount_image$fuse(&(0x7f00000000c0), 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0) r1 = openat2(r0, 0x0, &(0x7f0000000480)={0x10d000, 0xcc, 0x8}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="7026a65b028a080000001fccc78e89c793c0248f0eac3e63fb6da9abfc358bb4bf3d5b9951edf19a057191d9fb30d14cc1dc82125d442feac7eb3889be6d2907087aaa9b501bbe04371d0226ef13ef811969f3bb6017b720a769fde6552cb23aa52d71a1e82a951beb000000", @ANYRES64=r0], 0x20) times(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="757064617465206465e9e7a85f5b94ea97f121a6ba4dff8b511c60b61898a2ee9c3509840f45e716f431a726da990688f0aa0e57068eaf"], 0x19, 0xfffffffffffffffc) ioperm(0x0, 0x9, 0x5) ioperm(0x0, 0x1, 0x1) select(0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8000, 0x1}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9f0b020018000000000000002400000020000000040000000200f8ffffff000c02000000000000000100000d000800"/57], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m19.064585619s ago: executing program 8 (id=2095): syz_pidfd_open(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x165142, 0x110) fallocate(r1, 0x10, 0x0, 0x10002000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x233, 0x0, 0xf}) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) 3m58.094845288s ago: executing program 47 (id=2095): syz_pidfd_open(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x165142, 0x110) fallocate(r1, 0x10, 0x0, 0x10002000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x233, 0x0, 0xf}) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) 3m39.117666878s ago: executing program 0 (id=2132): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0200, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 3m38.513579811s ago: executing program 0 (id=2133): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 3m36.805767213s ago: executing program 0 (id=2136): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 3m34.085426018s ago: executing program 0 (id=2138): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x1a, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 3m32.810531326s ago: executing program 0 (id=2141): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) 3m31.180009764s ago: executing program 0 (id=2144): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="10797fcd5528a5000000000000b4abf3629ff075475e4bd6e43be1712bd8b4dc803ec67ddb9b24b30c642345b7f6ada2630000c6184327edd0d8c25fbbc51da112b54ffcee", 0x45) 3m29.463053834s ago: executing program 48 (id=2144): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000780)="10797fcd5528a5000000000000b4abf3629ff075475e4bd6e43be1712bd8b4dc803ec67ddb9b24b30c642345b7f6ada2630000c6184327edd0d8c25fbbc51da112b54ffcee", 0x45) 2m34.399451682s ago: executing program 7 (id=2210): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x2, 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m33.664433824s ago: executing program 7 (id=2214): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x7, 0xe7, "40e9b6aaf5b5bac5"}}}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1bf) 2m32.978850098s ago: executing program 7 (id=2218): mkdir(0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x1a4, &(0x7f0000000540)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) mount$9p_virtio(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x9028, 0x0) 2m29.844245122s ago: executing program 7 (id=2222): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_lock}, {@init_itable}, {@quota}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141a42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x4c07e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040)='j', 0x1, 0x0, 0x0, 0x0, r0}]) 2m29.183213518s ago: executing program 7 (id=2225): mkdirat(0xffffffffffffffff, 0x0, 0x1ab) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) clock_gettime(0x3, &(0x7f0000000980)) 2m23.198775598s ago: executing program 7 (id=2228): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x220c040, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESOCT=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r0, 0x0, 0x32600) 2m7.84590939s ago: executing program 49 (id=2228): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x220c040, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESOCT=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r0, 0x0, 0x32600) 1m55.631847998s ago: executing program 5 (id=2278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="b40000001000030426bd7000ffdbdf2500000000", @ANYRES32=r0, @ANYBLOB="adffa88801200500180012800e0001007769726567756172640000000400028074001a"], 0xb4}}, 0x440088c4) 1m54.929684986s ago: executing program 5 (id=2280): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000013c0)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc0403d11, 0x0) 1m49.875685434s ago: executing program 5 (id=2284): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xd, 0xf, 0x3, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x5, 0x5, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xc23c, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x1c, 0x7, 0x3e, 0x8f, 0x6, 0x6, 0xffffffff, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x402, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x4, 0xd, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x7f, 0x3, 0x80000009, 0x1, 0x3, 0x403, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x200, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xb, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x800007, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x9, 0x0, 0xffffff7f, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x2, 0x0, 0xb9, 0x5, 0x1ff, 0x5, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x6, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x110000, 0x3, 0x7e, 0x2, 0x1, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x9, 0x8, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x8, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) syz_io_uring_setup(0x324e, &(0x7f0000000380)={0x0, 0x5274, 0x13580, 0x2, 0x315}, 0x0, 0x0) socket(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffc) 1m48.852141107s ago: executing program 5 (id=2289): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c3, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m47.924582724s ago: executing program 5 (id=2292): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xfd, 0x609, &(0x7f0000001340)="$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") openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0xfff5, 0x44084, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @empty, 0x5}, 0x1c) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) 1m47.20887855s ago: executing program 5 (id=2295): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) 1m44.386008573s ago: executing program 50 (id=2295): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x22, 0xa01, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) 47.823935217s ago: executing program 1 (id=2386): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r4, 0x5433, 0x0) 44.446163548s ago: executing program 1 (id=2390): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0x4, [{@rand_addr=0x64010102, 0x7ff}]}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 41.752436821s ago: executing program 3 (id=2392): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x40050) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x24}, 0x9, 0x1, 0xff, 0xa, 0x9, 0x80}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@errors_remount}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f0000000940)="$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") r1 = gettid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4012011, r2, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r1) r3 = syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x3000490, &(0x7f00000016c0)={[], [{@permit_directio}, {@uid_lt}]}, 0x45, 0x7d8, &(0x7f0000002680)="$eJzs3c9rG9kdAPDvyLItO27tQqGkJ0OhDYTIdeomLRTqUkopNBBoTz00MbJiUstWsOQQG9MmlEIvhbb01l5y7v66LHvdH4e97P4fS0J21wmbZQ+LltGPWLalrJRYcn58PjDSvHlP895Xb+bpxTORAnhpzaYPmYiTEfHPJGI6YrGVN1p/zNa3pOUe7u4U0iWJWu13nySRRMSD3Z1Cq3ym+XwifUgiarVa7d2/RZzOHK63srW9ulQqFTea6bnq2rW5ytb2matrSyvFleL6ufmFhbPnf3z+3NHF+tmH21N3//XrH7y2+MVfv/P6P95LYjGmmnntcRyV2Zitv0fpO7l4IO+XR13ZsXnzzz0UajsCsoNsDH1KO2ak2SsnYzpGHtc/E3urc1NDaR4AMAB/icY8vaORrjkAwHMtaXz+//y42wEADEvr7wAPdncKraWxZeIY/yoxPPd+ERG5Rvyt65uNnGzzml2ufh108kGy78pIEhEzR1D/bET8760/vpIuMaDrkACd3LwVEZdnZg+P/8mhexb69cPOm1faE7MHMo1/MDxvp/Ofn3Sa/2UezX+iw/xnvMO5+yS+/vzP3DmCarpK538/a7u37WFb/E0zI83UN+pzvtHkytVSMR3bvhkRp2J0PE3P79/tvsnzqftf3u9Wf/v879N//+n/af3p816JzJ3s+P7XLC9Vl5427pZ7tyK+m+0Ufzr+j9f7P+ky/73YYx2/+enf/9stL40/jbe1HI5/sGq3I75/uP9/lWsrkzz2/sS5+uEw1zooOnhjMSa71T+b3ev/dEnrb/1bYBjS/p/sePwnrSIzSfv9mpWed/3oHPjg9vQ73Qq1H/+d4+98/I8lv6+vjzW33ViqVjfmI8aS3x7efnbvta10q3wa/6nvdT7/W+Nfh+P/D+n+L/f4RmTvfvzqk8c/WGn8y331f08rudjbErmHqyPd6u+t/xf2vaaX8a/Xlj7p+wYAAAAAAAAAAAAAAAAAAAAAAAAA/chExFQkmfyj9Uwmn2/8hve3YzJTKleqp6+UN9eXo/5b2TMxmml91eV02/ehzje/D7+VPnsg/aOI+FZE/Gd8op7OF8ql5eMOHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACaTnT5/f/UR+MHCo8cRwsBgIHI+WAHgJdNks0edxMAgGHL9VV6YmDtAACGp7/PfwDgReDzHwBePrkTj80++N8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoF8XL1xIl9rnuzuFNL18fWtztXz9zHKxsppf2yzkC+WNa/mVcnmlVMwXymtdd3Sz8VQql68txPrmjblqsVKdq2xtX1orb65XL11dW1opXiqODi0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhdZWt7dalUKm48lysTz0YznmJl9f1GPwyyruwzEemLuRI3G/331Dsc6ftVyWBP4RjbGyUmhj8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwnvgoAAP//bLkixA==") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) openat(r3, 0x0, 0x101080, 0x106) pwrite64(r3, &(0x7f00000002c0)="cb6c11bfab8e380e4f8d2220ef01f56e1d657658814608c9d3a855608f8da02897d2fdf5dd6844fabbf98ff3a85c5821fd9368458713d11833e777284327321eef7a7bcb4ebc58aa0619a12095509fce3d79928177cc019204e38d4e162a73c52eb73a0d1c108cf64d0b192ad4dabf0d4e71dfcc4e27ce6871ea0039f5ef974f30702aa502c76c4c7af3b1178713cdd205d4da07dcf6c5c5f3f94085ab9d0c5a174e7ecc018c0fc939d18275a07d8243e52fcc886354c4223d7a0f8be22aad11e5432e4946e010602fec63a90fca3a48ab16210d0a669a20a59c8e4cbbbfd798c925258d85ed5bf287a20a8a", 0xec, 0x9) ioctl(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)) 41.508357737s ago: executing program 1 (id=2394): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 40.492576622s ago: executing program 2 (id=2396): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000012002102000000000000000007"], 0x24}}, 0x0) 39.602932307s ago: executing program 1 (id=2397): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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") mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 39.008026522s ago: executing program 3 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 35.675785933s ago: executing program 2 (id=2401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r0, 0x0, 0x417}, 0x18) syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1], 0x1, 0x712, &(0x7f0000001240)="$eJzs3UtsHGcdAPD/rNfr3SClTptHQZVqNVJBRCR2LAfMhYAQ8qFCVTlwthKnsbJxKttFToSIW+DOgROncvCt4oDKPRKcqSqhXn3gUAmpl3KxuBjN7Mw+7NmH42fb3y+amW++13zzn5d3V9EE8LW1cC2qzyKJhWtvbKTr21uzzbGt2Ym8uBkRtYioRFRbi0hWIiu9nU/xzTQzr5/02UwSy/NvffrF9met1Wo+ZfWTAe3K1PZnbeZTTEXEWL7cb7xPjx/t3XxPf3f69jeqzh6mAbtaBC7+dKhe4dB299lsl334r2w+qPlBrlvg7Ekf6umFPFZ2PU9GnIuIekTrqb8Zt9ptvsw2T3sAAAAAcFCNkrzq4CYv7MRObMT54xoSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBV1vf8/yd/vn6WnIine/1/LarTUTnWwfZW9CLHXJxOt5bPjHwwAAAAAAAAAHLtXd2InNuJ8sb6bZL/5v5b/7p/6Rrwba7EUq3E9NmIx1mM9VmMmIia7OqptLK6vr85kLSMuDmh5Mz4uaXmz/xhvH/E+AwAAAAAAAMAZVx9S/mB8f977sdD5/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6CJGKstcimi0V6MirViKgX9TYjPo6I2umO9kCSssxnJz8OAAAAOJR672pSH6HNC09jJzbifLG+m2Sf+S9nn5fr8W6sxHosx3o0Yynu5p+h00/9le2t2eb21uzDdNrf748/P9DQsx6j9d1D+ZZfzmo04l4sZznX404ksZup5L28vL01my4flo/rvXRMyY9yA0Yz1pW+m86ufJSl/9D7LUL1QLv4nCp9Syaz0vF2RKbzsaUtLhQRKI/E0KNTHbilmai0v/m52L2V/RHpifnu0yJ34MbfO7enVuk3N6dibyRuRqV9hC4PjnnEt//24S/vN1ce3L+3du3s7FKpp0Nr7I3EbFckrnyFIjHcdBaJS+31hfhZ/CKuxecTb8ZqLMevYjHWY2mqKF/Mz+d0Pjk4Up+c6157c9QRte5fZWOaip4xxVT8NEstxmvZMT0fy5HEo4hYilvZv5sx074bdI7wpcHjzq76ygh32tj5b+sWHnH1O1lGO0zR6N/qL6NG4mik97oLXXHtvudOZmWtnH+/n54NnSi9WBql4lk3+vOoS/VbeSLt4bcDnw8nrTsSxVOiGN1L/c6XVkj/vJvO15orD1bvL74z4vZez5fpdfT7Azwljj9i6RF+Mer5zl3I5kl2TU1nZS+1n7C98arlv7gU49xbdqndrnWl/jwexd2eK/X7MRdzMZ/VvpzVHt/3xErLrrR76r2Hp2XpX1rV9g873X9vPYpm6+8hAM62c989V2v8p/HPxgeN3zXuN96o/2TiBxOv1GL8H+M/rE6PvV55JflrfBC/6Xz+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt/a4ycPFpvNpdXyRKW8KBncarHZfuPbgDo9iSR/Vc4IlZO1x092h3Y4ODGRD+8ArSqjRezAieJtjV1FYxFRUnnq6Da6L/G/1uu4djs59eF7WoRkhE0k+wKeNn7uMRdb7uSMD221O14a1WNMTB2iebU3pzhhu+oc6OzNEo2y49XnZGsOuXGMHcHNBzhVN9YfvnNj7fGT7y0/XHx76e2llfG5ufnp+blbszfuLTeXplvzrgYn8vJb4CR0/znRVouIV4e3HfCiVgAAAAAAAAAAAOAYncT/hTjtfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+3BauRfVZJDEzfX06Xd/emm2mU5Hu1KxGRCUikl9HJH+PuB2tKSa7ukv6beePy/NvffrF9medvqpF/UrEZt92o9nMp5iKiLF8eVT93RneX62TnCgpTtqRSQN2tQhc/XCDhEP7fwAAAP//fu31Ow==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000007110a3000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) r4 = fanotify_init(0x1a, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r4, 0x641, 0x1028, r5, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) fanotify_init(0x20, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200001, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r9, r10, 0x8, 0x0, @void}, 0x10) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 34.852116271s ago: executing program 1 (id=2402): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0xd, "002546e3aa02e11c073d19e6c41dc85e57c88dcb0beceb261df83228d5e07180252d19ead294cdce6f1e7a3bff3c6c17705e99f7906e044e246f726495c45e94", "131baeb9c2f06041a502a2b226bb94ce7cfb2a2a3fbbddaa414ad649560324442700", "e978332d4728ebf2cab7d407b8f8e318743509536547e06c6548ffbca79e0f83", [0xf, 0x7]}) 34.672218407s ago: executing program 3 (id=2403): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x401fffff, 0x0, 0x2, 0xa2}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 33.579255117s ago: executing program 4 (id=2405): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = eventfd(0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 33.576419637s ago: executing program 1 (id=2406): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file3\x00', 0x80800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x340, 0x0, 0x0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0x4}}}, {{@ipv6={@mcast1, @local, [0xff], [0xff0000ff], 'syzkaller1\x00', 'ip6tnl0\x00', {0xff}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0) shutdown(r3, 0x1) pidfd_getfd(0xffffffffffffffff, r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 33.378037807s ago: executing program 3 (id=2407): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc1000004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x2, 0xd}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f00000002c0)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@nodelalloc}, {@dax_always}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20008800) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.649223277s ago: executing program 4 (id=2409): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_delroute={0x2c, 0x19, 0x24, 0x70bd29, 0x25dfdbfc, {0xa, 0x14, 0x20, 0xfe, 0xff, 0x0, 0xfd, 0x9, 0x800}, [@RTA_PREF={0x5, 0x14, 0x40}, @RTA_IIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44801}, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x8}, {0x1}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x2, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {0x0, 0x0, 0x4}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x2, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r1, &(0x7f0000001cc0)=""/4120, 0x1018) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRES16=r3], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x9, 0x1016, &(0x7f0000001880)=""/4118, 0x41100}, 0x94) getdents(r2, 0x0, 0x0) 29.299192574s ago: executing program 2 (id=2410): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001080)={0x3, 0x80000000, 0x81, 0x2, 0x1, "09fb3909b676ec9ef98f4f5d860ccf2937d384"}) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) 28.951418095s ago: executing program 3 (id=2412): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x1ab) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) clock_gettime(0x0, &(0x7f0000000980)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x80c82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 24.835719826s ago: executing program 4 (id=2414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f000000000000000020"], 0x1c}}, 0x0) 17.080107688s ago: executing program 51 (id=2406): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file3\x00', 0x80800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x340, 0x0, 0x0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff, 0xffffffff, 0x0, 0xff], [0xff000000, 0x0, 0xff, 0xffffffff], 'veth0_macvtap\x00', 'ipvlan0\x00', {}, {0x1fe}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1, 0x4}}}, {{@ipv6={@mcast1, @local, [0xff], [0xff0000ff], 'syzkaller1\x00', 'ip6tnl0\x00', {0xff}, {}, 0x2b, 0x0, 0x4, 0x4a}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, [], [0x0, 0x0, 0xffffffff], 'veth0_to_team\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x7f}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x7f}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000045, 0x0, 0x0) shutdown(r3, 0x1) pidfd_getfd(0xffffffffffffffff, r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.994159728s ago: executing program 3 (id=2416): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 16.861163997s ago: executing program 2 (id=2418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000363"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x42, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4) 16.588218041s ago: executing program 4 (id=2419): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "04005fe9"}]}}, 0x0}, 0x0) 16.338650737s ago: executing program 6 (id=2420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r0, 0x0, 0x417}, 0x18) syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1], 0x1, 0x712, &(0x7f0000001240)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000007110a3000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) r4 = fanotify_init(0x1a, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r4, 0x641, 0x1028, r5, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) fanotify_init(0x20, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200001, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r9, r10, 0x8, 0x0, @void}, 0x10) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 14.083256517s ago: executing program 6 (id=2421): arch_prctl$ARCH_GET_FS(0x1003, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000980)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./bus\x00', 0x3d949b, 0x0, 0x1, 0x0, &(0x7f0000000100)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r4, 0x9, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af04, &(0x7f0000000300)) inotify_init1(0x80800) 13.460487907s ago: executing program 2 (id=2422): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = syz_open_procfs(0x0, 0x0) openat(r0, 0x0, 0x8000, 0x10b) modify_ldt$write2(0x11, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_io_uring_setup(0xec4, &(0x7f0000000280)={0x0, 0xff7fff79, 0x2, 0x3, 0x44}, &(0x7f0000000500), &(0x7f0000000600)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0xe876, 0x3, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 7.253015689s ago: executing program 6 (id=2423): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1084}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[], 0x0) 3.242535382s ago: executing program 4 (id=2424): syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000000900000000141a0000020000000400018083a40f892c2c51299188148a29d0d48aea1a12f7adc24cf23ca3"], 0x18}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_opts(r5, 0x0, 0x4, 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x8000) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) 2.477755752s ago: executing program 6 (id=2425): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x44, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4e66}, @device_b, @device_a, @random="fc9d11a88da6", {0x5, 0x6}, @value=@ver_80211n={0x0, 0xbe, 0x3, 0x2, 0x0, 0x1}}, 0x8000, 0x29, @default, @val, @val={0x2d, 0x1a, {0x1, 0x3, 0x1, 0x0, {0x1, 0x1, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x8, 0x5, 0x81}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xd0}, 0x48000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 1.46873234s ago: executing program 2 (id=2426): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 1.127465723s ago: executing program 52 (id=2416): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 1.035246494s ago: executing program 6 (id=2428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x2, 0x0, 0xb, 0x7}, 0x20) 44.602384ms ago: executing program 6 (id=2429): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 4 (id=2430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r0, 0x0, 0x417}, 0x18) syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1], 0x1, 0x712, &(0x7f0000001240)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000007110a3000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) r4 = fanotify_init(0x1a, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r4, 0x641, 0x1028, r5, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) fanotify_init(0x20, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x200001, 0x41) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r8, r9, 0x8, 0x0, @void}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000000f40)=ANY=[], 0x1, 0x2b2, &(0x7f00000006c0)="$eJzs3U9rY1UUAPDz0jR9OosUcaMIPtCFqzJ166ZRRhC7UiKoCw3ODEgSBqYQmArGruYTuPR7+BHcuPEbDLgV3E0XlSfvX/7ga402VXR+v9Xh3nfuPXm3TbLJeZ+/Mh3ffZDE2dMnkaZJdI7iKM6T2I9ONL6JbgAA/x/neR6/5mWY5JUNM7udGy0MALgx1ef/X/rgBwD+4z78+JP3B8fHdz7IsjRe6j+eDZOImD6eDav5wf34MiZxL25HPy4i8oUqfve94zvRzQr78fp0PhsWmdPPfqzXH/wSUeYfRj/22/MPs8pK/nw23I3nI4vB/d2m1H682J7/Zkt+DHvxxmsr9R9EP376Ih7EJO5GkbvM//owy97Jv3361afFNkV+0onhXnldKfcFCQAAAAAAAAAAAAAAAAAAAACA7TrIsqRq31P27ymG6v47Oxfl/EHW2F/vz1PlJ81CVX+gvOmWM8/ju6a/zu0sy/L6wmV+N17uerAAAAAAAAAAAAAAAAAAAAAAFE4ePbk1mkzuPTx5dDq+dtB0A2h+1v931zlaGXk1TsejncsX3Nt8r9VuA0WtV14c3W5s6ba0B2eLkeeKera+xV4sRj6KKmgOZqt7vfB2tejpeJTVU81NHo+SP9srbQ7u+9WpXly3sLz8k7jI1880XZS6ntXb0t3o3Wqd+i3P883Weevn6ozqkaRssbHZ7rt10PoCiyAtziJd/OMXUz9cvuClbxk7137TAQAAAAAAAAAAAAAAAAAAWi1/9NsyeXZlaufGigIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9jy+f9NkEbE+sgfgnmdfNU1ddCLhyf/8ksEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGfB7AAAA//8rlFqg") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 519] BTRFS info (device loop9): enabling disk space caching [ 1044.312005][T13519] BTRFS info (device loop9): force clearing of disk cache [ 1044.319430][T13519] BTRFS info (device loop9): doing ref verification [ 1044.326194][T13519] BTRFS info (device loop9): use lzo compression, level 0 [ 1044.996663][T13521] loop7: detected capacity change from 0 to 8192 [ 1045.080641][T13521] block nbd7: NBD_DISCONNECT [ 1045.335296][T11335] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1045.738089][ T5875] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1045.952538][ T5875] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 1045.961570][ T5875] usb 8-1: config 0 has no interface number 0 [ 1046.002517][ T5875] usb 8-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 1046.012236][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.020587][ T5875] usb 8-1: Product: syz [ 1046.024926][ T5875] usb 8-1: Manufacturer: syz [ 1046.029900][ T5875] usb 8-1: SerialNumber: syz [ 1046.111080][ T5875] usb 8-1: config 0 descriptor?? [ 1046.137180][ T5875] ftdi_sio 8-1:0.117: FTDI USB Serial Device converter detected [ 1046.146895][ T5875] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 1046.326478][ T5875] usb 8-1: USB disconnect, device number 8 [ 1046.334689][ T5875] ftdi_sio 8-1:0.117: device disconnected [ 1046.466154][T13552] netlink: 'syz.0.1967': attribute type 6 has an invalid length. [ 1047.847709][T13564] loop9: detected capacity change from 0 to 40427 [ 1047.856677][T13564] F2FS-fs: heap/no_heap options were deprecated [ 1047.864008][T13564] F2FS-fs: heap/no_heap options were deprecated [ 1047.871468][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.879591][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.892061][T13564] F2FS-fs (loop9): invalid crc value [ 1048.220491][T13564] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1048.239576][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.247917][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.301074][T13564] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1049.430282][T13573] loop7: detected capacity change from 0 to 32768 [ 1049.439524][T13573] btrfs: Deprecated parameter 'usebackuproot' [ 1049.445773][T13573] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1049.500605][T13573] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1970 (13573) [ 1049.876242][T13575] loop2: detected capacity change from 0 to 40427 [ 1049.885391][T13575] F2FS-fs: heap/no_heap options were deprecated [ 1049.892868][T13575] F2FS-fs: heap/no_heap options were deprecated [ 1049.912847][T13573] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1049.929601][T13573] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 1050.014266][T13575] F2FS-fs (loop2): invalid crc value [ 1050.181927][T13573] BTRFS info (device loop7): rebuilding free space tree [ 1050.208901][T13573] BTRFS info (device loop7): allowing degraded mounts [ 1050.215874][T13573] BTRFS info (device loop7): enabling ssd optimizations [ 1050.228314][T13573] BTRFS info (device loop7): enabling free space tree [ 1050.235258][T13573] BTRFS info (device loop7): force clearing of disk cache [ 1050.244284][T13573] BTRFS info (device loop7): trying to use backup root at mount time [ 1050.252669][T13573] BTRFS info (device loop7): use zlib compression, level 3 [ 1050.324921][T13575] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1050.363953][T13575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1050.953894][T12881] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1051.148500][T13601] fuse: Bad value for 'group_id' [ 1051.155635][T13601] fuse: Bad value for 'group_id' [ 1051.347367][T13601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1977'. [ 1052.038671][T13607] netlink: 'syz.8.1911': attribute type 1 has an invalid length. [ 1052.046976][T13607] netlink: 'syz.8.1911': attribute type 2 has an invalid length. [ 1052.055071][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1911'. [ 1052.145253][T13601] loop0: detected capacity change from 0 to 32768 [ 1052.205770][T13601] OCFS2: ERROR (device loop0): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 69 has bad extent record (0, 9, 0) [ 1052.226265][T13601] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1052.236342][T13601] OCFS2: File system is now read-only. [ 1052.242046][T13601] (syz.0.1977,13601,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 1052.250198][T13601] (syz.0.1977,13601,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 1052.259263][T13601] (syz.0.1977,13601,1):ocfs2_map_slot_buffers:378 ERROR: status = -30 [ 1052.267959][T13601] (syz.0.1977,13601,1):ocfs2_init_slot_info:426 ERROR: status = -30 [ 1052.276339][T13601] (syz.0.1977,13601,1):ocfs2_initialize_super:2222 ERROR: status = -30 [ 1052.285944][T13601] (syz.0.1977,13601,1):ocfs2_fill_super:1177 ERROR: status = -30 [ 1052.984528][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 1053.170644][T11397] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1053.364545][T11397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1053.376152][T11397] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.386235][T11397] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.404091][T11397] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1053.415001][T11397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.435404][T11397] usb 9-1: config 0 descriptor?? [ 1053.933650][T11397] acrux 0003:1A34:0802.0007: global environment stack underflow [ 1053.941973][T11397] acrux 0003:1A34:0802.0007: item 0 4 1 11 parsing failed [ 1053.989009][T13613] loop7: detected capacity change from 0 to 512 [ 1054.042526][T11397] acrux 0003:1A34:0802.0007: parse failed [ 1054.048997][T11397] acrux 0003:1A34:0802.0007: probe with driver acrux failed with error -22 [ 1054.131215][T13613] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1054.196855][T13613] EXT4-fs (loop7): 1 truncate cleaned up [ 1054.205444][T13613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.223492][T13611] loop0: detected capacity change from 0 to 32768 [ 1054.232648][T13611] XFS: ikeep mount option is deprecated. [ 1054.238660][T13611] XFS: noikeep mount option is deprecated. [ 1054.293807][ T30] audit: type=1800 audit(1053.768:362): pid=13613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1976" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1054.294055][T13611] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1054.407382][ T30] audit: type=1800 audit(1053.878:363): pid=13614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1976" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1054.775726][T13631] loop2: detected capacity change from 0 to 1024 [ 1055.162842][T13611] XFS (loop0): Ending clean mount [ 1055.185546][T13611] XFS (loop0): Quotacheck needed: Please wait. [ 1055.244209][T13631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.281793][T13631] FAULT_INJECTION: forcing a failure. [ 1055.281793][T13631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1055.282503][T13611] XFS (loop0): Quotacheck: Done. [ 1055.295574][T13631] CPU: 0 UID: 0 PID: 13631 Comm: syz.2.1980 Not tainted syzkaller #0 PREEMPT(none) [ 1055.295716][T13631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1055.295798][T13631] Call Trace: [ 1055.295847][T13631] [ 1055.295898][T13631] __dump_stack+0x26/0x30 [ 1055.296074][T13631] dump_stack_lvl+0x1df/0x270 [ 1055.296265][T13631] dump_stack+0x1e/0x25 [ 1055.296430][T13631] should_fail_ex+0x7dc/0x8a0 [ 1055.296613][T13631] should_fail_alloc_page+0x222/0x240 [ 1055.296814][T13631] __alloc_frozen_pages_noprof+0x30f/0xf00 [ 1055.297023][T13631] alloc_pages_mpol+0x328/0x860 [ 1055.297211][T13631] vma_alloc_folio_noprof+0x382/0x870 [ 1055.297418][T13631] handle_mm_fault+0xad60/0xdf70 [ 1055.297607][T13631] ? kmsan_get_metadata+0xfb/0x160 [ 1055.297826][T13631] ? lock_vma_under_rcu+0x340/0x400 [ 1055.298055][T13631] do_user_addr_fault+0x177d/0x2560 [ 1055.298227][T13631] ? kmsan_get_metadata+0xfb/0x160 [ 1055.298433][T13631] exc_page_fault+0x68/0xb0 [ 1055.298631][T13631] asm_exc_page_fault+0x2b/0x30 [ 1055.298780][T13631] RIP: 0033:0x7ff8a9a5a5ab [ 1055.298896][T13631] Code: 00 00 00 48 8d 3d 3d 3a 19 00 48 89 c1 31 c0 e8 4b 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1055.299030][T13631] RSP: 002b:00007ff8aaa5bfb0 EFLAGS: 00010202 [ 1055.299154][T13631] RAX: 0000000000000000 RBX: 00007ff8a9dd6180 RCX: 0000000000000000 [ 1055.299252][T13631] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0 [ 1055.299348][T13631] RBP: 00007ff8aaa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.299443][T13631] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000001 [ 1055.299537][T13631] R13: 00007ff8a9dd6218 R14: 00007ff8a9dd6180 R15: 00007ffe60d32d38 [ 1055.299681][T13631] [ 1055.300048][T13631] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1055.582809][T12881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.695359][T11353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1055.975578][T11397] usb 9-1: USB disconnect, device number 2 [ 1056.216723][T13644] loop8: detected capacity change from 0 to 64 [ 1056.323227][T13644] hfs: found bad thread record in catalog [ 1056.329732][T13644] hfs: get root inode failed [ 1056.377533][T13641] smc: net device bond0 applied user defined pnetid SYZ2 [ 1056.420587][T13641] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1983'. [ 1056.579797][T13641] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1056.695364][T13641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.871813][T13641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.895768][T13639] loop2: detected capacity change from 0 to 40427 [ 1056.904680][T13639] F2FS-fs: heap/no_heap options were deprecated [ 1056.911991][T13639] F2FS-fs: heap/no_heap options were deprecated [ 1056.951951][T13639] F2FS-fs (loop2): invalid crc value [ 1056.968001][T13641] bond0 (unregistering): Released all slaves [ 1057.007160][T13106] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1057.318508][T13639] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1057.330121][T13639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1057.715873][T13657] FAULT_INJECTION: forcing a failure. [ 1057.715873][T13657] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.731482][T13657] CPU: 1 UID: 0 PID: 13657 Comm: syz.7.1989 Not tainted syzkaller #0 PREEMPT(none) [ 1057.731629][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1057.731714][T13657] Call Trace: [ 1057.731767][T13657] [ 1057.731822][T13657] __dump_stack+0x26/0x30 [ 1057.731998][T13657] dump_stack_lvl+0x1df/0x270 [ 1057.732178][T13657] dump_stack+0x1e/0x25 [ 1057.732337][T13657] should_fail_ex+0x7dc/0x8a0 [ 1057.732512][T13657] should_failslab+0x15b/0x200 [ 1057.732686][T13657] __kmalloc_cache_noprof+0xcb/0xed0 [ 1057.732872][T13657] ? __se_sys_memfd_create+0x51d/0x11f0 [ 1057.733031][T13657] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1057.733196][T13657] ? kmsan_get_metadata+0xfb/0x160 [ 1057.733370][T13657] __se_sys_memfd_create+0x51d/0x11f0 [ 1057.733553][T13657] __x64_sys_memfd_create+0x78/0xb0 [ 1057.733710][T13657] x64_sys_call+0x3500/0x3e20 [ 1057.733920][T13657] do_syscall_64+0xd9/0x210 [ 1057.734067][T13657] ? irqentry_exit+0x16/0x60 [ 1057.734256][T13657] ? clear_bhb_loop+0x40/0x90 [ 1057.734406][T13657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.734561][T13657] RIP: 0033:0x7f109618eba9 [ 1057.734664][T13657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.734788][T13657] RSP: 002b:00007f1096f5ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1057.734918][T13657] RAX: ffffffffffffffda RBX: 00000000000125d5 RCX: 00007f109618eba9 [ 1057.735015][T13657] RDX: 00007f1096f5aef0 RSI: 0000000000000000 RDI: 00007f10962127e8 [ 1057.735109][T13657] RBP: 0000200000012540 R08: 00007f1096f5abb7 R09: 00007f1096f5ae40 [ 1057.735209][T13657] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000012500 [ 1057.735301][T13657] R13: 00007f1096f5aef0 R14: 00007f1096f5aeb0 R15: 0000200000000240 [ 1057.735431][T13657] [ 1057.965911][T13656] netlink: 'syz.9.1988': attribute type 1 has an invalid length. [ 1057.974560][T13656] netlink: 'syz.9.1988': attribute type 2 has an invalid length. [ 1057.982590][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1988'. [ 1058.238093][T11397] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1058.436767][T11397] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.447345][T11397] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1058.456839][T11397] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.526855][T11397] usb 9-1: config 0 descriptor?? [ 1058.562037][T11397] pwc: Askey VC010 type 2 USB webcam detected. [ 1058.954888][T11397] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1058.968663][T11397] pwc: recv_control_msg error -32 req 02 val 2700 [ 1059.001068][T11397] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1059.023653][T11397] pwc: recv_control_msg error -32 req 04 val 1000 [ 1059.066579][T11397] pwc: recv_control_msg error -32 req 04 val 1300 [ 1059.092832][T11397] pwc: recv_control_msg error -32 req 04 val 1400 [ 1059.307519][T11397] pwc: recv_control_msg error -71 req 02 val 2100 [ 1059.345784][T11397] pwc: recv_control_msg error -71 req 04 val 1500 [ 1059.353721][T11397] pwc: recv_control_msg error -71 req 02 val 2500 [ 1059.378520][T11397] pwc: recv_control_msg error -71 req 02 val 2400 [ 1059.405724][T11397] pwc: recv_control_msg error -71 req 02 val 2600 [ 1059.428813][T11397] pwc: recv_control_msg error -71 req 02 val 2900 [ 1059.458796][T11397] pwc: recv_control_msg error -71 req 02 val 2800 [ 1059.485568][T11397] pwc: recv_control_msg error -71 req 04 val 1100 [ 1059.510378][T11397] pwc: recv_control_msg error -71 req 04 val 1200 [ 1059.552779][T11397] pwc: Registered as video103. [ 1059.559897][T11397] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input78 [ 1059.609852][T11397] usb 9-1: USB disconnect, device number 3 [ 1059.611108][T13675] netlink: 'syz.9.1997': attribute type 10 has an invalid length. [ 1059.728797][T13675] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 1059.739870][T13675] team0: Failed to send options change via netlink (err -105) [ 1059.747508][T13675] team0: Port device netdevsim3 added [ 1059.758510][ T7455] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 1059.921368][T13679] loop7: detected capacity change from 0 to 64 [ 1060.028209][ T30] audit: type=1804 audit(1059.498:364): pid=13679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1998" name=2F6E6577726F6F742F33382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop7" ino=3 res=1 errno=0 [ 1060.096515][T13680] FAULT_INJECTION: forcing a failure. [ 1060.096515][T13680] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.109630][T13680] CPU: 1 UID: 0 PID: 13680 Comm: syz.7.1998 Not tainted syzkaller #0 PREEMPT(none) [ 1060.109765][T13680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1060.109846][T13680] Call Trace: [ 1060.109895][T13680] [ 1060.109943][T13680] __dump_stack+0x26/0x30 [ 1060.110119][T13680] dump_stack_lvl+0x1df/0x270 [ 1060.110295][T13680] dump_stack+0x1e/0x25 [ 1060.110442][T13680] should_fail_ex+0x7dc/0x8a0 [ 1060.110604][T13680] should_failslab+0x15b/0x200 [ 1060.110765][T13680] __kmalloc_cache_noprof+0xcb/0xed0 [ 1060.110936][T13680] ? kmsan_get_metadata+0xfb/0x160 [ 1060.111082][T13680] ? alloc_pipe_info+0x14a/0xc50 [ 1060.111249][T13680] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1060.111393][T13680] ? kmsan_get_metadata+0xfb/0x160 [ 1060.111556][T13680] alloc_pipe_info+0x14a/0xc50 [ 1060.111714][T13680] ? aa_file_perm+0x41c/0x2140 [ 1060.111881][T13680] ? kmsan_get_metadata+0xfb/0x160 [ 1060.112028][T13680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1060.112194][T13680] splice_direct_to_actor+0x1174/0x1550 [ 1060.112358][T13680] ? __pfx_direct_splice_actor+0x10/0x10 [ 1060.112509][T13680] ? filter_irq_stacks+0x49/0x190 [ 1060.112650][T13680] ? stack_depot_save_flags+0x35/0x7b0 [ 1060.112792][T13680] ? kmsan_get_metadata+0xfb/0x160 [ 1060.112943][T13680] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1060.113086][T13680] ? kmsan_get_metadata+0xfb/0x160 [ 1060.113236][T13680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1060.113408][T13680] do_splice_direct+0x1e0/0x350 [ 1060.113559][T13680] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1060.113741][T13680] do_sendfile+0x9eb/0x1110 [ 1060.113905][T13680] __se_sys_sendfile64+0x1e3/0x280 [ 1060.114087][T13680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1060.114257][T13680] __x64_sys_sendfile64+0xbd/0x120 [ 1060.114452][T13680] x64_sys_call+0x36b8/0x3e20 [ 1060.114624][T13680] do_syscall_64+0xd9/0x210 [ 1060.114753][T13680] ? irqentry_exit+0x16/0x60 [ 1060.114918][T13680] ? clear_bhb_loop+0x40/0x90 [ 1060.115061][T13680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.115185][T13680] RIP: 0033:0x7f109618eba9 [ 1060.115281][T13680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.115386][T13680] RSP: 002b:00007f1096f3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1060.115497][T13680] RAX: ffffffffffffffda RBX: 00007f10963d6090 RCX: 00007f109618eba9 [ 1060.115584][T13680] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1060.115656][T13680] RBP: 00007f1096f3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.115731][T13680] R10: 0000000000040001 R11: 0000000000000246 R12: 0000000000000001 [ 1060.115806][T13680] R13: 00007f10963d6128 R14: 00007f10963d6090 R15: 00007ffe74b52fa8 [ 1060.115919][T13680] [ 1060.139329][T13682] loop9: detected capacity change from 0 to 64 [ 1060.497184][ T30] audit: type=1804 audit(1059.968:365): pid=13682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1999" name=2F6E6577726F6F742F3131392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop9" ino=3 res=1 errno=0 [ 1060.799371][T13686] netlink: 814 bytes leftover after parsing attributes in process `syz.8.2002'. [ 1061.409985][T13692] netlink: 'syz.7.2003': attribute type 1 has an invalid length. [ 1061.418277][T13692] netlink: 'syz.7.2003': attribute type 2 has an invalid length. [ 1061.426193][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2003'. [ 1061.452334][T13685] loop2: detected capacity change from 0 to 40427 [ 1061.461245][T13685] F2FS-fs: heap/no_heap options were deprecated [ 1061.468553][T13685] F2FS-fs: heap/no_heap options were deprecated [ 1061.522738][T13685] F2FS-fs (loop2): invalid crc value [ 1061.849724][T13685] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1061.868142][T13685] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1062.124105][ T5829] Bluetooth: hci0: adv larger than maximum supported [ 1062.124214][ T5829] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1063.801057][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2011'. [ 1064.574235][T13719] loop7: detected capacity change from 0 to 512 [ 1064.732300][T13719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.842867][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 1065.321580][T13727] virtio-fs: tag not found [ 1066.738412][ T5875] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1066.794131][T12881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.996523][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.007909][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.017962][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1067.031214][ T5875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1067.040862][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.188767][ T5875] usb 3-1: config 0 descriptor?? [ 1074.378175][ T5875] usb 3-1: can't set config #0, error -110 [ 1075.954796][T13748] loop8: detected capacity change from 0 to 256 [ 1076.059869][T13748] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1076.071231][T13748] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1076.120289][T11397] usb 3-1: USB disconnect, device number 50 [ 1076.324090][T13748] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1076.502118][T13752] loop7: detected capacity change from 0 to 512 [ 1076.590277][T13754] loop2: detected capacity change from 0 to 512 [ 1076.665874][T13752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.722274][T13754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.966423][T13752] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1077.515428][T13768] loop0: detected capacity change from 0 to 512 [ 1077.526203][T11353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.786370][T13768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.010726][T12881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1078.097296][ T30] audit: type=1800 audit(1077.538:366): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2026" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1078.181911][T13772] loop2: detected capacity change from 0 to 512 [ 1078.294000][ T30] audit: type=1800 audit(1077.598:367): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2026" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1078.449892][T13772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.609045][T13780] binder: 13779:13780 ioctl c0306201 0 returned -14 [ 1078.619576][T13780] binder: 13779:13780 ioctl 80286722 0 returned -22 [ 1078.656411][T13772] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.2027: invalid fast symlink length 10 [ 1078.693407][T13772] EXT4-fs (loop2): Remounting filesystem read-only [ 1078.825866][T13106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.056965][T11353] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.070735][T13787] loop7: detected capacity change from 0 to 256 [ 1079.079798][T13787] exfat: Unknown parameter '0xffffffffffffffffZO 8s+2DG mCEV@ 1 [ 1105.398123][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1105.407446][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1105.452617][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1105.482572][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1106.416090][T13914] loop0: detected capacity change from 0 to 8 [ 1107.599507][ T5829] Bluetooth: hci5: command tx timeout [ 1107.942827][T13908] chnl_net:caif_netlink_parms(): no params data found [ 1109.677927][ T5829] Bluetooth: hci5: command tx timeout [ 1112.057879][ T5829] Bluetooth: hci5: command tx timeout [ 1112.071205][T13940] loop8: detected capacity change from 0 to 16 [ 1117.271923][ T5829] Bluetooth: hci5: command tx timeout [ 1118.260577][T13908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.268051][T13908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.275573][T13908] bridge_slave_0: entered allmulticast mode [ 1118.284064][T13908] bridge_slave_0: entered promiscuous mode [ 1118.301270][T13908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.309018][T13908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.316661][T13908] bridge_slave_1: entered allmulticast mode [ 1118.326082][T13908] bridge_slave_1: entered promiscuous mode [ 1118.364217][T11605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1118.428168][T11605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1118.438858][T11605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1118.499783][T11605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1118.634790][T11605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1125.318398][T11605] Bluetooth: hci6: command tx timeout [ 1125.362790][T13908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.529707][T13908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.958329][T13908] team0: Port device team_slave_0 added [ 1126.037381][T13908] team0: Port device team_slave_1 added [ 1126.685097][T13908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.692906][T13908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.724604][T13908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.952228][T13908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.959477][T13908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.985706][T13908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.358527][T11605] Bluetooth: hci6: command tx timeout [ 1127.364223][T11605] Bluetooth: hci3: command 0x0406 tx timeout [ 1127.478700][T13951] chnl_net:caif_netlink_parms(): no params data found [ 1127.649669][T13908] hsr_slave_0: entered promiscuous mode [ 1127.658772][T13908] hsr_slave_1: entered promiscuous mode [ 1127.666276][T13908] debugfs: 'hsr0' already exists in 'hsr' [ 1127.672275][T13908] Cannot create hsr debugfs directory [ 1127.832439][T13975] loop7: detected capacity change from 0 to 1024 [ 1127.986389][T13975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.248110][ T30] audit: type=1804 audit(1127.698:368): pid=13975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2099" name="/newroot/65/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 1128.643836][ T30] audit: type=1804 audit(1128.118:369): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2099" name="/newroot/65/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 1128.665511][ T30] audit: type=1804 audit(1128.118:370): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2099" name="/newroot/65/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 1129.577949][ T5829] Bluetooth: hci6: command tx timeout [ 1129.852881][T12881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.122534][ T7455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.133211][ T7455] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.270420][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.278043][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.285919][T13951] bridge_slave_0: entered allmulticast mode [ 1130.295426][T13951] bridge_slave_0: entered promiscuous mode [ 1130.442148][T13993] loop7: detected capacity change from 0 to 1024 [ 1130.454538][ T7455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.465383][ T7455] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.496012][T13993] EXT4-fs: Ignoring removed nobh option [ 1130.505269][T13993] EXT4-fs: Ignoring removed bh option [ 1130.586122][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.594051][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.602240][T13951] bridge_slave_1: entered allmulticast mode [ 1130.617906][T13951] bridge_slave_1: entered promiscuous mode [ 1130.659482][T13993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.751822][ T7455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.763019][ T7455] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.058259][T12881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.099313][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.166187][ T7455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.177444][ T7455] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.307331][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.580361][T13908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1131.608439][ T5829] Bluetooth: hci6: command tx timeout [ 1131.716190][T13951] team0: Port device team_slave_0 added [ 1131.788815][T13908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1131.886170][ T7455] bridge_slave_1: left allmulticast mode [ 1131.892283][ T7455] bridge_slave_1: left promiscuous mode [ 1131.898798][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.933007][ T7455] bridge_slave_0: left allmulticast mode [ 1131.938981][ T7455] bridge_slave_0: left promiscuous mode [ 1131.945533][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.362524][T13999] netlink: 'syz.7.2105': attribute type 3 has an invalid length. [ 1132.372147][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2105'. [ 1132.985391][ T7455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.008492][ T7455] bond_slave_0: left promiscuous mode [ 1133.038817][ T7455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.064211][ T7455] bond_slave_1: left promiscuous mode [ 1133.094997][ T7455] bond0 (unregistering): Released all slaves [ 1133.210219][T13951] team0: Port device team_slave_1 added [ 1133.227394][T13908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1133.493754][T13908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1133.526095][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.533558][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.559787][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.754410][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.762284][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.788526][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.931463][ T7455] hsr_slave_0: left promiscuous mode [ 1133.958083][ T7455] hsr_slave_1: left promiscuous mode [ 1133.965087][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.973036][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.010135][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.017856][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.116864][ T7455] veth1_macvtap: left promiscuous mode [ 1134.124237][ T7455] veth0_macvtap: left promiscuous mode [ 1134.130500][ T7455] veth1_vlan: left promiscuous mode [ 1134.135991][ T7455] veth0_vlan: left promiscuous mode [ 1137.353256][ T7455] team0 (unregistering): Port device team_slave_1 removed [ 1137.430528][ T7455] team0 (unregistering): Port device team_slave_0 removed [ 1138.305153][T13951] hsr_slave_0: entered promiscuous mode [ 1138.315075][T13951] hsr_slave_1: entered promiscuous mode [ 1138.323725][T13951] debugfs: 'hsr0' already exists in 'hsr' [ 1138.329864][T13951] Cannot create hsr debugfs directory [ 1138.780163][ T2988] team0: Port device netdevsim3 removed [ 1138.792040][ T2988] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.951940][ T2988] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.159724][ T2988] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.297893][ T2988] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.921586][ T2988] bridge_slave_1: left allmulticast mode [ 1139.927789][ T2988] bridge_slave_1: left promiscuous mode [ 1139.934289][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.743445][ T2988] bridge_slave_0: left allmulticast mode [ 1140.749627][ T2988] bridge_slave_0: left promiscuous mode [ 1140.756198][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.808407][T11605] Bluetooth: hci0: command 0x0406 tx timeout [ 1150.093693][ T2988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1150.159519][ T2988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.234580][ T2988] bond0 (unregistering): Released all slaves [ 1150.454576][T13908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.609644][T13908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.633342][ T2988] tipc: Left network mode [ 1150.794206][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.801926][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.813009][T11397] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1150.956930][T11605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1150.972614][T11605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1150.975014][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.987199][ T7465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.988611][T11605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1151.013582][T11605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1151.028358][T11397] usb 8-1: Using ep0 maxpacket: 32 [ 1151.060835][T11397] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 1151.077090][T11605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1151.089043][T11397] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59228, setting to 1024 [ 1151.101890][T11397] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1151.111350][T11397] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.275561][ T2988] hsr_slave_0: left promiscuous mode [ 1151.318604][ T2988] hsr_slave_1: left promiscuous mode [ 1151.326188][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1151.328398][T11397] usb 8-1: config 0 descriptor?? [ 1151.334145][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.341666][T14037] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1151.382533][T11397] hub 8-1:0.0: USB hub found [ 1151.421929][ T2988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1151.429958][ T2988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.468609][ T2988] veth1_macvtap: left promiscuous mode [ 1151.474463][ T2988] veth0_macvtap: left promiscuous mode [ 1151.481279][ T2988] veth1_vlan: left promiscuous mode [ 1151.486902][ T2988] veth0_vlan: left promiscuous mode [ 1151.630462][T11397] hub 8-1:0.0: 1 port detected [ 1151.649726][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.656320][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.735907][T14043] loop0: detected capacity change from 0 to 1024 [ 1151.911526][T14043] hfsplus: xattr searching failed [ 1151.945844][ T30] audit: type=1804 audit(1151.408:371): pid=14043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2120" name="/newroot/51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=2 res=1 errno=0 [ 1152.679008][T11397] usb 8-1-port1: cannot reset (err = -71) [ 1152.691018][ T8729] usb 8-1: USB disconnect, device number 10 [ 1152.697248][T11397] usb 8-1-port1: cannot reset (err = -71) [ 1152.703716][T11397] usb 8-1-port1: Cannot enable. Maybe the USB cable is bad? [ 1152.712631][T11397] usb 8-1-port1: attempt power cycle [ 1153.117830][T11605] Bluetooth: hci1: command tx timeout [ 1153.585879][ T2988] team0 (unregistering): Port device team_slave_1 removed [ 1153.619295][ T2988] team0 (unregistering): Port device team_slave_0 removed [ 1155.268105][T11605] Bluetooth: hci1: command tx timeout [ 1155.872827][T14049] loop0: detected capacity change from 0 to 16 [ 1155.920346][T14049] erofs (device loop0): mounted with root inode @ nid 36. [ 1155.946530][T13951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1156.145856][T13951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1156.303679][T13951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1156.451531][T14052] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1156.500987][T13951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1157.100792][T14059] loop0: detected capacity change from 0 to 512 [ 1157.118054][T14059] EXT4-fs: Invalid want_extra_isize 95 [ 1157.278308][T11605] Bluetooth: hci1: command tx timeout [ 1157.444593][ T7465] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.602647][T14064] loop7: detected capacity change from 0 to 1764 [ 1157.675898][ T7465] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.745848][T14040] chnl_net:caif_netlink_parms(): no params data found [ 1157.815316][ T7465] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.419908][ T7465] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.446470][T14068] loop0: detected capacity change from 0 to 512 [ 1159.383300][T13908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.339289][T11605] Bluetooth: hci1: command tx timeout [ 1161.418556][T14068] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 1161.610493][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.933654][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.019735][ T7465] bridge_slave_1: left allmulticast mode [ 1162.025700][ T7465] bridge_slave_1: left promiscuous mode [ 1162.032494][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.618812][ T7465] bridge_slave_0: left allmulticast mode [ 1162.624667][ T7465] bridge_slave_0: left promiscuous mode [ 1162.631342][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.276630][ T7465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.317335][ T7465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.353584][T14086] loop0: detected capacity change from 0 to 1024 [ 1163.371842][ T7465] bond0 (unregistering): Released all slaves [ 1163.716377][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.723795][ T7473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.805010][T14047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.812594][T14047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.712589][T14040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.720458][T14040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.728266][T14040] bridge_slave_0: entered allmulticast mode [ 1164.736812][T14040] bridge_slave_0: entered promiscuous mode [ 1164.876967][ T7465] hsr_slave_0: left promiscuous mode [ 1164.903119][ T7465] hsr_slave_1: left promiscuous mode [ 1164.911100][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.918708][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.010286][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1165.017949][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.155166][ T7465] veth1_macvtap: left promiscuous mode [ 1165.163225][ T7465] veth0_macvtap: left promiscuous mode [ 1165.169224][ T7465] veth1_vlan: left promiscuous mode [ 1165.174752][ T7465] veth0_vlan: left promiscuous mode [ 1165.432731][T14097] loop7: detected capacity change from 0 to 16 [ 1165.517455][T14097] erofs (device loop7): mounted with root inode @ nid 36. [ 1166.296880][T14101] loop0: detected capacity change from 0 to 512 [ 1166.348895][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1166.371261][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1166.382399][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1166.394132][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1166.404688][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1166.570442][T14101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1166.685841][T14101] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2133: corrupted inode contents [ 1166.848017][T14101] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.2133: mark_inode_dirty error [ 1166.942251][T14101] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2133: corrupted inode contents [ 1167.011005][T14101] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2133: mark_inode_dirty error [ 1167.080123][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 1167.109567][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 1167.557315][T14040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.565108][T14040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.572789][T14040] bridge_slave_1: entered allmulticast mode [ 1167.582079][T14040] bridge_slave_1: entered promiscuous mode [ 1167.795020][T13106] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.163157][T14040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.498023][ T5829] Bluetooth: hci0: command tx timeout [ 1168.773089][T14040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.577913][ T5829] Bluetooth: hci0: command tx timeout [ 1170.650694][T14040] team0: Port device team_slave_0 added [ 1170.729225][T14040] team0: Port device team_slave_1 added [ 1170.962499][T14122] loop0: detected capacity change from 0 to 2048 [ 1171.139869][T14122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.160050][T14040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1171.167150][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.193670][T14040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1171.272261][T14040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1171.282331][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1171.309030][T14040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1171.439518][T14122] loop0: detected capacity change from 2048 to 64 [ 1171.711579][T13106] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /61/file0: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 1172.001188][T14040] hsr_slave_0: entered promiscuous mode [ 1172.011116][T14040] hsr_slave_1: entered promiscuous mode [ 1172.348311][ T7465] bridge_slave_1: left allmulticast mode [ 1172.354228][ T7465] bridge_slave_1: left promiscuous mode [ 1172.360868][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.395365][T11605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1172.414203][T11605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1172.419110][ T7465] bridge_slave_0: left allmulticast mode [ 1172.427124][ T7465] bridge_slave_0: left promiscuous mode [ 1172.433832][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.446071][T11605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1172.450396][T13922] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1172.487154][T11605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1172.524302][T11605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1172.545183][T14125] kmmpd-loop0: attempt to access beyond end of device [ 1172.545183][T14125] loop0: rw=14337, sector=256, nr_sectors = 4 limit=64 [ 1172.559843][T14125] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 1172.640217][ T5829] Bluetooth: hci0: command tx timeout [ 1172.895720][ T7465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.912917][ T7465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.934519][ T7465] bond0 (unregistering): Released all slaves [ 1173.128408][T14103] chnl_net:caif_netlink_parms(): no params data found [ 1173.268917][ T7465] hsr_slave_0: left promiscuous mode [ 1173.287349][ T7465] hsr_slave_1: left promiscuous mode [ 1173.295251][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.332013][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.979808][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 1174.061073][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 1174.499254][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2143'. [ 1174.644454][ T5829] Bluetooth: hci2: command tx timeout [ 1174.719087][ T5829] Bluetooth: hci0: command tx timeout [ 1175.648767][T14103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.661881][T14103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.669599][T14103] bridge_slave_0: entered allmulticast mode [ 1175.679133][T14103] bridge_slave_0: entered promiscuous mode [ 1175.807099][T14103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.815084][T14103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.822821][T14103] bridge_slave_1: entered allmulticast mode [ 1175.830949][T14153] loop7: detected capacity change from 0 to 512 [ 1175.832170][T14103] bridge_slave_1: entered promiscuous mode [ 1175.855742][T11605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1175.951258][T11605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1175.962467][T11605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1176.021882][T11605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1176.028274][T14040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1176.041129][T11605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1176.058281][T14136] chnl_net:caif_netlink_parms(): no params data found [ 1176.090377][T14153] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1176.150554][T14103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.163346][T14040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1176.190806][T14040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1176.218051][T14040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1176.277498][T14103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.737392][ T5829] Bluetooth: hci2: command tx timeout [ 1176.796327][ T7465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.828323][T14103] team0: Port device team_slave_0 added [ 1176.855627][T12881] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.968196][ T7465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.015522][T14103] team0: Port device team_slave_1 added [ 1177.074662][T14165] loop7: detected capacity change from 0 to 128 [ 1177.235068][ T7465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.269338][ T30] audit: type=1800 audit(1176.738:372): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2148" name="bus" dev="loop7" ino=1048926 res=0 errno=0 [ 1177.599732][ T7465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.622736][T14136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.630665][T14136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.638733][T14136] bridge_slave_0: entered allmulticast mode [ 1177.653291][T14136] bridge_slave_0: entered promiscuous mode [ 1177.676219][T14103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.683532][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.709761][T14103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.727450][T14136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.735453][T14136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.744997][T14136] bridge_slave_1: entered allmulticast mode [ 1177.759034][T14136] bridge_slave_1: entered promiscuous mode [ 1177.861432][T14103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.869494][T14103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.895712][T14103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1178.158766][ T5829] Bluetooth: hci3: command tx timeout [ 1178.355403][T14136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.458002][T14136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.486870][T14103] hsr_slave_0: entered promiscuous mode [ 1178.496841][T14103] hsr_slave_1: entered promiscuous mode [ 1178.505413][T14103] debugfs: 'hsr0' already exists in 'hsr' [ 1178.511468][T14103] Cannot create hsr debugfs directory [ 1178.612019][ T7465] bridge_slave_1: left allmulticast mode [ 1178.618495][ T7465] bridge_slave_1: left promiscuous mode [ 1178.625018][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.686658][ T7465] bridge_slave_0: left allmulticast mode [ 1178.693259][ T7465] bridge_slave_0: left promiscuous mode [ 1178.702310][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.724876][ T7465] bridge_slave_1: left allmulticast mode [ 1178.735813][ T7465] bridge_slave_1: left promiscuous mode [ 1178.749748][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.766264][ T7465] bridge_slave_0: left allmulticast mode [ 1178.773595][ T7465] bridge_slave_0: left promiscuous mode [ 1178.780341][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.806884][ T5829] Bluetooth: hci2: command tx timeout [ 1179.670023][ T7465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.692717][ T7465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.722365][ T7465] bond0 (unregistering): Released all slaves [ 1180.159013][ T7465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.188889][ T7465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.224970][ T7465] bond0 (unregistering): Released all slaves [ 1180.238229][ T5829] Bluetooth: hci3: command tx timeout [ 1180.515199][T14136] team0: Port device team_slave_0 added [ 1180.548992][T14136] team0: Port device team_slave_1 added [ 1180.560845][T14152] chnl_net:caif_netlink_parms(): no params data found [ 1180.877881][ T5829] Bluetooth: hci2: command tx timeout [ 1181.159230][T14136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.166419][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.196404][T14136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.496311][T14136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.507119][T14136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.534177][T14136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.730291][ T7465] hsr_slave_0: left promiscuous mode [ 1181.744422][ T7465] hsr_slave_1: left promiscuous mode [ 1181.752435][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.770609][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.794849][ T7465] hsr_slave_0: left promiscuous mode [ 1181.819862][ T7465] hsr_slave_1: left promiscuous mode [ 1181.829952][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.837507][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.849280][ T7465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.857398][ T7465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.909992][ T7465] veth1_macvtap: left promiscuous mode [ 1181.915682][ T7465] veth0_macvtap: left promiscuous mode [ 1181.922990][ T7465] veth1_vlan: left promiscuous mode [ 1181.928653][ T7465] veth0_vlan: left promiscuous mode [ 1182.320244][ T5829] Bluetooth: hci3: command tx timeout [ 1182.750194][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 1182.851619][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 1183.510728][ T7465] team0 (unregistering): Port device team_slave_1 removed [ 1183.550129][ T7465] team0 (unregistering): Port device team_slave_0 removed [ 1184.251647][T14136] hsr_slave_0: entered promiscuous mode [ 1184.261288][T14136] hsr_slave_1: entered promiscuous mode [ 1184.272158][T14136] debugfs: 'hsr0' already exists in 'hsr' [ 1184.278184][T14136] Cannot create hsr debugfs directory [ 1184.301625][T14040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.398416][ T5829] Bluetooth: hci3: command tx timeout [ 1184.730753][T14152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.739438][T14152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.746981][T14152] bridge_slave_0: entered allmulticast mode [ 1184.756233][T14152] bridge_slave_0: entered promiscuous mode [ 1184.773686][T14040] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.845217][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.852733][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.872327][T14152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.883182][T14152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.890878][T14152] bridge_slave_1: entered allmulticast mode [ 1184.899969][T14152] bridge_slave_1: entered promiscuous mode [ 1184.945252][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.952786][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.198589][T14152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1185.322517][T14152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.762946][T14103] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1185.916897][T14152] team0: Port device team_slave_0 added [ 1185.924796][T14103] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1185.993720][T14152] team0: Port device team_slave_1 added [ 1186.047352][T14103] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1186.200156][T14103] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1186.414465][T14152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.421701][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.448829][T14152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.613613][T14152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.629430][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.656830][T14152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.821044][T14136] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1188.007238][T14136] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1188.074259][T14152] hsr_slave_0: entered promiscuous mode [ 1188.087922][T14152] hsr_slave_1: entered promiscuous mode [ 1188.099625][T14152] debugfs: 'hsr0' already exists in 'hsr' [ 1188.107170][T14152] Cannot create hsr debugfs directory [ 1188.122287][T14136] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1188.389467][T14136] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1188.712432][T14040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1189.132322][T14103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1189.504885][T14103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.587236][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.594837][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.658041][ T3938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.665513][ T3938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.313519][T14152] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1190.457292][T14152] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1190.559299][T14136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.631880][T14152] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1190.843066][T14136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.909664][T14152] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1191.032433][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.040356][ T7465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.147613][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.155389][ T7465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.613876][T14136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1191.625247][T14136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1192.015400][T14103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1192.627395][T14040] veth0_vlan: entered promiscuous mode [ 1192.757903][T14040] veth1_vlan: entered promiscuous mode [ 1193.127266][T14040] veth0_macvtap: entered promiscuous mode [ 1193.284956][T14040] veth1_macvtap: entered promiscuous mode [ 1193.707159][T14040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1193.811306][T14152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.846487][T14040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1193.955888][ T3938] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.100829][ T2988] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.193277][ T2988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.243894][T14152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.252765][T14047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.395624][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.403366][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.520895][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.528642][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.792720][T14136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.029042][T14103] veth0_vlan: entered promiscuous mode [ 1195.165486][T14103] veth1_vlan: entered promiscuous mode [ 1195.481637][T14103] veth0_macvtap: entered promiscuous mode [ 1195.557023][T14103] veth1_macvtap: entered promiscuous mode [ 1195.872383][T14103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.924807][T14103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1195.996875][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.037071][T14241] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 1196.057042][ T7455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.114973][ T7455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.176654][ T7455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.223253][ T7449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.764808][T14252] kvm: user requested TSC rate below hardware speed [ 1197.245708][T14152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.327515][T14136] veth0_vlan: entered promiscuous mode [ 1197.423917][T14136] veth1_vlan: entered promiscuous mode [ 1197.720697][T14152] veth0_vlan: entered promiscuous mode [ 1197.785580][T14136] veth0_macvtap: entered promiscuous mode [ 1197.839020][T14136] veth1_macvtap: entered promiscuous mode [ 1197.876367][T14152] veth1_vlan: entered promiscuous mode [ 1198.046086][T14136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.128660][T14136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.198646][T14152] veth0_macvtap: entered promiscuous mode [ 1198.242816][ T3938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.259190][T14152] veth1_macvtap: entered promiscuous mode [ 1198.295687][ T7449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.375517][ T7449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.409711][ T7449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.511700][T14152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.604315][T14152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.677032][ T7451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.748909][ T7451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.797241][ T7451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.839979][ T3938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.752208][ T7449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.760910][ T7449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.904579][ T7465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.913406][ T7465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.480645][ T7473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.488763][ T7473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.594996][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.605775][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.214698][ T7457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.223017][ T7457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.301222][ T7457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.309373][ T7457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.424765][ T7465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.433439][ T7465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.442702][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1205.451025][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1205.986801][T14351] loop5: detected capacity change from 0 to 256 [ 1206.100827][ T30] audit: type=1800 audit(1205.578:373): pid=14351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2076" name="file1" dev="loop5" ino=1048943 res=0 errno=0 [ 1206.133379][T14351] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 1206.141728][T14351] FAT-fs (loop5): Filesystem has been set read-only [ 1213.151259][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.157842][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.479535][T14363] loop5: detected capacity change from 0 to 256 [ 1213.488906][T14363] exfat: Unknown parameter '0xffffffffffffffffZO 8s+2DG mCEV@ 1 [ 1258.748043][T14613] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1258.772124][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1258.802632][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1258.841345][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1258.852597][T14611] loop6: detected capacity change from 0 to 1024 [ 1258.861521][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1258.948843][T14599] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1258.962401][T14599] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1258.962401][T14599] [ 1258.972393][T14599] EXT4-fs (loop4): Total free blocks count 0 [ 1258.978695][T14599] EXT4-fs (loop4): Free/Dirty block details [ 1258.984736][T14599] EXT4-fs (loop4): free_blocks=2415919104 [ 1258.990777][T14599] EXT4-fs (loop4): dirty_blocks=16 [ 1258.996041][T14599] EXT4-fs (loop4): Block reservation details [ 1259.002407][T14599] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1259.009722][T14611] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 1259.335883][T14611] loop6: detected capacity change from 0 to 512 [ 1259.397128][T14611] EXT4-fs: Mount option(s) incompatible with ext2 [ 1259.899008][T14612] chnl_net:caif_netlink_parms(): no params data found [ 1259.990358][T14136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.958641][ T5829] Bluetooth: hci5: command tx timeout [ 1261.537025][ T7473] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.892308][ T7473] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.225369][ T7473] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.330082][T14612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.337685][T14612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.345288][T14612] bridge_slave_0: entered allmulticast mode [ 1262.353824][T14612] bridge_slave_0: entered promiscuous mode [ 1262.491391][ T7473] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.628641][T14612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.636034][T14612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.643651][T14612] bridge_slave_1: entered allmulticast mode [ 1262.651879][T14612] bridge_slave_1: entered promiscuous mode [ 1262.735940][T14630] loop4: detected capacity change from 0 to 8192 [ 1262.911453][T14630] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1263.038334][ T5829] Bluetooth: hci5: command tx timeout [ 1263.108117][T14612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.124248][T14634] loop3: detected capacity change from 0 to 512 [ 1263.161552][T14630] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 1263.169774][T14630] FAT-fs (loop4): Filesystem has been set read-only [ 1263.170420][T14612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.247967][T14634] EXT4-fs: Ignoring removed mblk_io_submit option [ 1263.254627][T14634] EXT4-fs: inline encryption not supported [ 1263.261146][T14634] EXT4-fs: Ignoring removed mblk_io_submit option [ 1263.278165][T14634] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1263.285285][T14634] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1263.302832][ T7473] bridge_slave_1: left allmulticast mode [ 1263.302931][ T7473] bridge_slave_1: left promiscuous mode [ 1263.303795][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.310770][ T7473] bridge_slave_0: left allmulticast mode [ 1263.310872][ T7473] bridge_slave_0: left promiscuous mode [ 1263.311744][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.399420][T14634] EXT4-fs (loop3): 1 truncate cleaned up [ 1263.401482][T14634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1263.882883][T14612] team0: Port device team_slave_0 added [ 1263.910426][T14612] team0: Port device team_slave_1 added [ 1264.177247][T14152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.425457][T14612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1264.433569][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1264.461698][T14612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1264.700397][ T7473] hsr_slave_0: left promiscuous mode [ 1264.712102][ T7473] hsr_slave_1: left promiscuous mode [ 1264.719199][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.726666][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.819970][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.906983][ T7473] veth1_macvtap: left promiscuous mode [ 1264.915338][ T7473] veth0_macvtap: left promiscuous mode [ 1264.922348][ T7473] veth1_vlan: left promiscuous mode [ 1264.928051][ T7473] veth0_vlan: left promiscuous mode [ 1265.124171][ T5829] Bluetooth: hci5: command tx timeout [ 1265.545114][T14654] loop6: detected capacity change from 0 to 512 [ 1265.581547][T14654] EXT4-fs: Invalid want_extra_isize 95 [ 1265.795079][ T5829] Bluetooth: hci3: Unable to find connection for big 0x00 [ 1266.510478][T14663] loop3: detected capacity change from 0 to 1024 [ 1266.649129][T14663] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1266.660293][T14663] EXT4-fs (loop3): group descriptors corrupted! [ 1266.760317][ T7473] team0 (unregistering): Port device team_slave_1 removed [ 1266.889577][ T7473] team0 (unregistering): Port device team_slave_0 removed [ 1267.212191][ T5829] Bluetooth: hci5: command tx timeout [ 1267.282052][T14612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.290062][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.318560][T14612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.809394][ T5877] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1268.028363][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 1268.057369][T14612] hsr_slave_0: entered promiscuous mode [ 1268.067172][T14612] hsr_slave_1: entered promiscuous mode [ 1268.070739][ T5877] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1268.076086][T14612] debugfs: 'hsr0' already exists in 'hsr' [ 1268.081569][ T5877] usb 4-1: config 0 has no interface number 0 [ 1268.087011][T14612] Cannot create hsr debugfs directory [ 1268.209257][ T5877] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1268.218788][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.226975][ T5877] usb 4-1: Product: syz [ 1268.233188][ T5877] usb 4-1: Manufacturer: syz [ 1268.238394][ T5877] usb 4-1: SerialNumber: syz [ 1268.317932][ T5877] usb 4-1: config 0 descriptor?? [ 1268.370625][ T5877] smsc95xx v2.0.0 [ 1268.994352][ T5877] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1269.005582][ T5877] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1269.030895][ T5877] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1269.044081][ T5877] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1269.114830][ T5877] usb 4-1: USB disconnect, device number 70 [ 1269.119957][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2278'. [ 1269.524749][T14679] loop4: detected capacity change from 0 to 128 [ 1270.339705][T14612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1270.433359][T14612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1270.509538][T14612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1271.421544][T14612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1271.592951][T14691] syz.4.2277: attempt to access beyond end of device [ 1271.592951][T14691] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1271.803159][T14691] syz.4.2277: attempt to access beyond end of device [ 1271.803159][T14691] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1272.381510][T14691] syz.4.2277: attempt to access beyond end of device [ 1272.381510][T14691] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1272.395562][T14691] syz.4.2277: attempt to access beyond end of device [ 1272.395562][T14691] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1272.409499][T14691] syz.4.2277: attempt to access beyond end of device [ 1272.409499][T14691] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1272.424120][T14691] syz.4.2277: attempt to access beyond end of device [ 1272.424120][T14691] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1272.442717][T14691] syz.4.2277: attempt to access beyond end of device [ 1272.442717][T14691] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1272.458435][T14691] syz.4.2277: attempt to access beyond end of device [ 1272.458435][T14691] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1272.815882][T14691] syz.4.2277: attempt to access beyond end of device [ 1272.815882][T14691] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1274.618249][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.625037][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.335093][T14612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.510589][T14612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.608429][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.616145][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.735348][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.742911][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.788471][T14699] loop3: detected capacity change from 0 to 8192 [ 1275.884198][T14710] loop5: detected capacity change from 0 to 256 [ 1276.002904][T14710] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1276.191430][T14710] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1276.558414][T14103] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1276.566282][T14103] FAT-fs (loop5): Filesystem has been set read-only [ 1276.638792][T11605] Bluetooth: hci1: command 0x0406 tx timeout [ 1276.750604][T14103] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 1277.113427][T14718] loop6: detected capacity change from 0 to 512 [ 1277.163310][T14718] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1277.284357][T14718] EXT4-fs (loop6): 1 truncate cleaned up [ 1277.292718][T14718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1277.351976][ T7455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.398087][ T5875] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1277.567999][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 1277.624066][ T7455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.628149][ T5875] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1277.643469][ T5875] usb 5-1: config 179 has no interface number 0 [ 1277.650106][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1277.664761][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1277.677720][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1277.689389][ T5875] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1277.701027][ T5875] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1277.714605][ T5875] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1277.721856][ T5875] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1277.731242][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.758601][T14718] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 1277.947224][ T7455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.074323][T14040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.098028][ T5875] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input80 [ 1278.098068][ T7455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.162570][ T5156] input input80: unable to receive magic message: -110 [ 1278.230838][ T5156] input input80: unable to receive magic message: -32 [ 1278.311557][ T5156] input input80: unable to receive magic message: -32 [ 1278.417274][T14612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.556923][ T7455] bridge_slave_1: left allmulticast mode [ 1278.563314][ T7455] bridge_slave_1: left promiscuous mode [ 1278.569858][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.666437][T14228] usb 5-1: USB disconnect, device number 50 [ 1278.666429][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1278.713414][ T7455] bridge_slave_0: left allmulticast mode [ 1278.721482][ T7455] bridge_slave_0: left promiscuous mode [ 1278.730845][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.190633][ T7455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.225154][ T7455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1279.241221][ T7455] bond0 (unregistering): Released all slaves [ 1279.722577][T14612] veth0_vlan: entered promiscuous mode [ 1279.964730][ T7455] hsr_slave_0: left promiscuous mode [ 1279.978998][ T7455] hsr_slave_1: left promiscuous mode [ 1279.987086][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.994890][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.061492][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.069228][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.162345][ T7455] veth1_macvtap: left promiscuous mode [ 1280.169873][ T7455] veth0_macvtap: left promiscuous mode [ 1280.175800][ T7455] veth1_vlan: left promiscuous mode [ 1280.181532][ T7455] veth0_vlan: left promiscuous mode [ 1280.515636][T14730] loop6: detected capacity change from 0 to 512 [ 1280.530787][T14730] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1280.716652][T14730] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.425839][ T7455] team0 (unregistering): Port device team_slave_1 removed [ 1282.474276][ T7455] team0 (unregistering): Port device team_slave_0 removed [ 1285.575626][T14612] veth1_vlan: entered promiscuous mode [ 1288.551734][T14612] veth0_macvtap: entered promiscuous mode [ 1288.642582][T14612] veth1_macvtap: entered promiscuous mode [ 1288.741013][T14040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.804827][T14612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.874681][T14612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1288.914095][ T7455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.970793][T11605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1288.998477][T11605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1289.028876][T11605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1289.056915][ T7455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.070102][T11605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1289.086509][T11605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1289.178404][ T7455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.187441][ T7455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.668577][ T5875] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1291.248713][T11605] Bluetooth: hci0: command tx timeout [ 1291.298985][ T5875] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1291.308486][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.891964][ T5875] usb 7-1: config 0 descriptor?? [ 1292.216126][T14744] chnl_net:caif_netlink_parms(): no params data found [ 1292.751729][T14767] loop4: detected capacity change from 0 to 8 [ 1293.031479][ T5875] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1293.091427][ T30] audit: type=1326 audit(1292.558:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63658eba9 code=0x7ffc0000 [ 1293.138582][ T5875] usb 7-1: USB disconnect, device number 42 [ 1293.198492][ T30] audit: type=1326 audit(1292.608:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1293.224309][ T30] audit: type=1326 audit(1292.608:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1293.247829][ T30] audit: type=1326 audit(1292.608:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc63658eba9 code=0x7ffc0000 [ 1293.270199][ T30] audit: type=1326 audit(1292.608:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1293.292510][ T30] audit: type=1326 audit(1292.608:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1293.314614][ T30] audit: type=1326 audit(1292.638:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1293.340195][ T30] audit: type=1326 audit(1292.638:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1293.340865][T11605] Bluetooth: hci0: command tx timeout [ 1293.363905][ T30] audit: type=1326 audit(1292.638:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1293.391767][ T30] audit: type=1326 audit(1292.638:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14769 comm="syz.3.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc63652ada9 code=0x7ffc0000 [ 1294.578807][T14744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.586304][T14744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.593948][T14744] bridge_slave_0: entered allmulticast mode [ 1294.602315][T14744] bridge_slave_0: entered promiscuous mode [ 1294.794752][T14782] loop6: detected capacity change from 0 to 1024 [ 1294.804764][T14782] hfsplus: Bad value for 'session' [ 1294.892661][T14776] loop3: detected capacity change from 0 to 1024 [ 1295.437810][ T5829] Bluetooth: hci0: command tx timeout [ 1295.620699][T14744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.628305][T14744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.635832][T14744] bridge_slave_1: entered allmulticast mode [ 1295.644300][T14744] bridge_slave_1: entered promiscuous mode [ 1296.418459][T14776] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1296.617007][T14785] loop4: detected capacity change from 0 to 1024 [ 1296.720515][T14775] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1296.732658][T14788] loop6: detected capacity change from 0 to 512 [ 1296.756458][T14744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.780399][T14775] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1296.798846][T14788] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1296.828634][T14785] hfsplus: xattr searching failed [ 1296.834173][T14787] hfsplus: xattr searching failed [ 1296.878187][T14744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.968698][T14788] EXT4-fs (loop6): 1 truncate cleaned up [ 1296.976540][T14788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1297.053177][T14744] team0: Port device team_slave_0 added [ 1297.117435][T14744] team0: Port device team_slave_1 added [ 1297.128134][T11605] Bluetooth: hci2: command 0x0406 tx timeout [ 1297.341551][ T7473] hfsplus: b-tree write err: -5, ino 4 [ 1297.483931][T14040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.504408][T14744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.513042][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.544711][T14744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.600326][T11605] Bluetooth: hci0: command tx timeout [ 1297.703279][T14744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.710618][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1297.741574][T14744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.117936][ T7473] hfsplus: b-tree write err: -5, ino 3 [ 1298.194856][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1298.194943][ T30] audit: type=1326 audit(1297.668:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812138eba9 code=0x7ffc0000 [ 1298.219266][T14744] hsr_slave_0: entered promiscuous mode [ 1298.224294][ T30] audit: type=1326 audit(1297.668:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14797 comm="syz.6.2313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f812138eba9 code=0x7ffc0000 [ 1298.242409][T14744] hsr_slave_1: entered promiscuous mode [ 1298.260723][T14744] debugfs: 'hsr0' already exists in 'hsr' [ 1298.266633][T14744] Cannot create hsr debugfs directory [ 1298.436164][T14803] loop3: detected capacity change from 0 to 1024 [ 1298.580294][T14803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1298.667907][T14803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c02c, mo2=0003] [ 1298.676622][T14803] System zones: 0-1, 3-36 [ 1298.698383][T14803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.929677][T14809] netlink: 'syz.4.2314': attribute type 2 has an invalid length. [ 1298.937774][T14809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2314'. [ 1299.060681][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 1299.116917][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 1299.337256][T14813] loop6: detected capacity change from 0 to 1024 [ 1299.460696][ T7455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.473891][ T7455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.609039][T14803] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2315: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1299.711931][ T7451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.720124][ T7451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.742320][T14803] EXT4-fs (loop3): Remounting filesystem read-only [ 1299.833295][T14744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1299.932022][T14744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1300.030020][T14744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1300.112032][T14744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1300.173666][T14152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.508165][T14821] loop3: detected capacity change from 0 to 1024 [ 1300.750370][T14821] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1300.949252][T14820] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1300.984838][T14820] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1301.229509][T14744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.342996][ T7451] hfsplus: b-tree write err: -5, ino 4 [ 1301.419540][T14744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.526982][ T7449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.534650][ T7449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.686115][ T7449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.693773][ T7449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.911992][T14744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1301.996804][T14837] loop1: detected capacity change from 0 to 16 [ 1302.063207][T14837] erofs (device loop1): mounted with root inode @ nid 36. [ 1302.234012][T14840] loop6: detected capacity change from 0 to 1024 [ 1302.478411][T14844] loop4: detected capacity change from 0 to 512 [ 1302.547330][T14844] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1302.556220][T14844] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1302.600307][T14844] EXT4-fs (loop4): 1 truncate cleaned up [ 1302.613589][T14844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.730165][T14847] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1302.914407][T14136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.915257][T14850] loop1: detected capacity change from 0 to 2048 [ 1303.524703][T14850] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1303.651145][T14853] kvm: pic: level sensitive irq not supported [ 1303.659003][T14853] kvm: pic: non byte read [ 1303.855651][T14850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1304.006341][T14744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1305.898942][T14744] veth0_vlan: entered promiscuous mode [ 1305.988602][T14744] veth1_vlan: entered promiscuous mode [ 1306.247031][T14864] loop3: detected capacity change from 0 to 1024 [ 1306.267262][T14744] veth0_macvtap: entered promiscuous mode [ 1306.305259][T14744] veth1_macvtap: entered promiscuous mode [ 1306.984935][T14871] Bluetooth: MGMT ver 1.23 [ 1307.874420][T14744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.898729][T14744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.202729][ T7457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.311677][ T7457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.405517][ T7457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.483002][ T7457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.978655][ T35] hfsplus: b-tree write err: -5, ino 4 [ 1310.552587][T14874] loop1: detected capacity change from 0 to 2048 [ 1310.640933][T14874] EXT4-fs: Ignoring removed mblk_io_submit option [ 1310.823016][T14874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1311.018681][T14882] loop3: detected capacity change from 0 to 512 [ 1311.064313][T14882] EXT4-fs: Invalid want_extra_isize 95 [ 1315.209410][T14887] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2338: bg 0: block 234: padding at end of block bitmap is not set [ 1315.224793][T14887] EXT4-fs (loop1): Remounting filesystem read-only [ 1315.590395][ T30] audit: type=1800 audit(1314.608:424): pid=14885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2338" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1315.662086][T14612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.885099][T14890] loop4: detected capacity change from 0 to 1024 [ 1316.589276][T14897] loop3: detected capacity change from 0 to 512 [ 1316.945919][T14897] EXT4-fs: Ignoring removed bh option [ 1317.900613][T14897] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1317.971765][T14897] EXT4-fs (loop3): 1 truncate cleaned up [ 1317.979336][T14897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1318.718054][T14152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.245098][T14917] loop4: detected capacity change from 0 to 1024 [ 1319.857908][ T5877] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1319.883828][T14926] loop6: detected capacity change from 0 to 1024 [ 1320.070147][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.081022][ T5877] usb 4-1: config 0 has no interfaces? [ 1320.098756][ T5877] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1320.108405][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.116602][ T5877] usb 4-1: Product: syz [ 1320.121130][ T5877] usb 4-1: Manufacturer: syz [ 1320.125901][ T5877] usb 4-1: SerialNumber: syz [ 1320.184970][ T5877] usb 4-1: config 0 descriptor?? [ 1320.446019][T11605] Bluetooth: hci3: Unable to find connection for big 0x2a [ 1320.467060][ T5877] usb 4-1: USB disconnect, device number 71 [ 1320.528865][T14917] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1320.648025][T14916] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1320.715342][T14916] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1321.214631][ T2988] hfsplus: b-tree write err: -5, ino 4 [ 1321.761030][T14938] loop3: detected capacity change from 0 to 256 [ 1321.799190][T14940] loop6: detected capacity change from 0 to 256 [ 1321.899847][T14942] loop4: detected capacity change from 0 to 1024 [ 1321.930777][T14942] EXT4-fs: inline encryption not supported [ 1321.936856][T14942] EXT4-fs: Ignoring removed i_version option [ 1321.969468][T14941] loop1: detected capacity change from 0 to 1024 [ 1322.012823][T14942] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1322.261462][T14942] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2353: lblock 2 mapped to illegal pblock 2 (length 1) [ 1322.318057][T14942] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1322.326509][T14942] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2353: lblock 0 mapped to illegal pblock 48 (length 1) [ 1322.403782][T14942] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1322.414728][T14942] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2353: Failed to acquire dquot type 0 [ 1322.482927][T14942] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1322.494225][T14942] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2353: mark_inode_dirty error [ 1322.524790][T14942] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1322.535604][T14942] EXT4-fs (loop4): 1 orphan inode deleted [ 1322.543847][T14942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1322.558861][ T7451] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1322.611965][ T7451] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1322.621437][ T7451] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 1322.976706][ T7451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.985033][ T7451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.019953][T14136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.036030][T14136] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1323.067861][T14136] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 1323.089594][ T7451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.097986][ T7451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1323.132128][T14136] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 1323.183601][T14952] loop3: detected capacity change from 0 to 8192 [ 1323.580575][T14962] loop6: detected capacity change from 0 to 128 [ 1323.660363][T14962] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1324.646663][T14973] loop3: detected capacity change from 0 to 1024 [ 1325.025876][T14973] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1325.259767][T14040] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1325.274288][T14972] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1325.340668][T14972] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1325.806926][ T7451] hfsplus: b-tree write err: -5, ino 4 [ 1326.538427][T14982] loop3: detected capacity change from 0 to 1024 [ 1328.866546][T14997] loop3: detected capacity change from 0 to 512 [ 1329.054181][T14997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1329.308741][ T5875] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1329.397951][T14997] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.2371: Unimplemented hash flags: 0x0001 [ 1329.410486][T14997] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2371: Corrupt directory, running e2fsck is recommended [ 1329.609002][ T5875] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1329.618836][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.654858][T15006] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.2371: Unimplemented hash flags: 0x0001 [ 1329.667025][T15006] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2371: Corrupt directory, running e2fsck is recommended [ 1329.814516][T14997] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.2371: Unimplemented hash flags: 0x0001 [ 1329.819467][ T5875] usb 2-1: config 0 descriptor?? [ 1329.826649][T14997] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2371: Corrupt directory, running e2fsck is recommended [ 1329.847125][T14997] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.2371: Unimplemented hash flags: 0x0001 [ 1329.859215][T14997] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2371: Corrupt directory, running e2fsck is recommended [ 1329.876743][T14997] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.2371: Unimplemented hash flags: 0x0001 [ 1329.889701][T14997] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2371: Corrupt directory, running e2fsck is recommended [ 1329.923162][ T5875] cp210x 2-1:0.0: cp210x converter detected [ 1330.274244][ T5875] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1330.540681][ T5875] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 1330.548758][ T5875] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1330.573683][T14152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.733462][ T5875] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1330.835546][ T5875] usb 2-1: USB disconnect, device number 73 [ 1330.920532][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1330.929872][ T5875] cp210x 2-1:0.0: device disconnected [ 1334.364543][T15021] loop3: detected capacity change from 0 to 1024 [ 1335.021915][T15025] loop6: detected capacity change from 0 to 1024 [ 1335.182988][T15021] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1335.429243][T15020] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1335.494145][T15020] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1335.571387][T15029] loop4: detected capacity change from 0 to 1024 [ 1335.959594][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.966553][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.985233][ T5875] kernel write not supported for file /input/event2 (pid: 5875 comm: kworker/1:4) [ 1340.095106][ T7451] hfsplus: b-tree write err: -5, ino 4 [ 1343.683485][T15061] loop3: detected capacity change from 0 to 1024 [ 1343.922573][T15061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1344.901126][T15061] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2392: Freeing blocks not in datazone - block = 0, count = 16 [ 1344.922947][T15071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2396'. [ 1344.945285][T15061] EXT4-fs (loop3): Remounting filesystem read-only [ 1345.513472][T14152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1345.688804][T15073] loop1: detected capacity change from 0 to 1024 [ 1348.878068][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 1350.864644][T15092] loop6: detected capacity change from 0 to 1024 [ 1350.875083][T15086] loop2: detected capacity change from 0 to 1024 [ 1351.030704][T15092] syz.6.2404: attempt to access beyond end of device [ 1351.030704][T15092] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1351.044643][T15092] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1351.053100][T15092] syz.6.2404: attempt to access beyond end of device [ 1351.053100][T15092] loop6: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 1351.066971][T15092] Buffer I/O error on dev loop6, logical block 2889, async page read [ 1351.092575][ T30] audit: type=1800 audit(1350.538:425): pid=15092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2404" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 1351.190547][ T5877] kernel write not supported for file [eventfd] (pid: 5877 comm: kworker/0:3) [ 1351.237085][T15086] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1351.824956][T15085] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1351.828916][T15101] loop3: detected capacity change from 0 to 512 [ 1351.920900][T15085] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1351.959408][T15101] EXT4-fs: Mount option(s) incompatible with ext3 [ 1352.901445][T15106] loop4: detected capacity change from 0 to 512 [ 1353.001355][T15106] EXT4-fs: Ignoring removed bh option [ 1353.059117][T15106] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1353.118124][T15107] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2408'. [ 1353.214799][T15106] EXT4-fs (loop4): 1 truncate cleaned up [ 1353.231526][T15106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1353.329658][T15105] Bluetooth: hci0: Opcode 0x080f failed: -112 [ 1353.553405][T15101] loop3: detected capacity change from 0 to 4096 [ 1353.590930][T15101] EXT4-fs: Ignoring removed mblk_io_submit option [ 1353.684347][T15101] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1353.709817][ T5875] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1353.833160][T15101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.014028][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.024562][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1354.162561][ T5875] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1354.172130][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1354.180655][ T5875] usb 5-1: SerialNumber: syz [ 1354.957906][ T5829] Bluetooth: hci0: command 0x080f tx timeout [ 1354.966874][T11605] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1355.116985][ T5875] usb 5-1: 0:2 : does not exist [ 1355.122523][ T5875] usb 5-1: unit 5: unexpected type 0x09 [ 1355.151411][ T5875] usb 5-1: USB disconnect, device number 51 [ 1355.200096][ T7457] hfsplus: b-tree write err: -5, ino 4 [ 1355.542325][T14152] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1357.578031][T11605] Bluetooth: hci0: command 0x080f tx timeout [ 1359.700602][T14136] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.550805][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2414'. [ 1368.772142][T15136] loop6: detected capacity change from 0 to 1024 [ 1368.844232][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1369.568690][T15135] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1369.809797][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1369.821778][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1369.847198][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1369.970545][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1370.548510][ T4352] hfsplus: b-tree write err: -5, ino 4 [ 1370.803636][ T5875] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1372.354366][ T5829] Bluetooth: hci4: command tx timeout [ 1375.306662][ T5829] Bluetooth: hci4: command tx timeout [ 1377.256341][ T5875] usb 5-1: device descriptor read/all, error -110 [ 1379.305254][T11605] Bluetooth: hci4: command tx timeout [ 1381.398163][T11605] Bluetooth: hci4: command tx timeout [ 1381.521949][T15138] chnl_net:caif_netlink_parms(): no params data found [ 1384.065988][T15168] loop2: detected capacity change from 0 to 1024 [ 1384.090994][ T5829] Bluetooth: hci5: command 0x0406 tx timeout [ 1384.692211][T15173] loop6: detected capacity change from 0 to 1024 [ 1384.851234][T15138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.859005][T15138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.870145][T15138] bridge_slave_0: entered allmulticast mode [ 1384.880141][T15138] bridge_slave_0: entered promiscuous mode [ 1385.056385][T15175] loop4: detected capacity change from 0 to 1024 [ 1385.515164][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1385.524655][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1385.549465][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1385.559728][T15138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.567303][T15138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.575174][T15138] bridge_slave_1: entered allmulticast mode [ 1385.588691][T15138] bridge_slave_1: entered promiscuous mode [ 1385.712744][T15180] ===================================================== [ 1385.720048][T15180] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x9a6/0x27a0 [ 1385.727503][T15180] hfsplus_uni2asc+0x9a6/0x27a0 [ 1385.732506][T15180] hfsplus_readdir+0xd60/0x1a70 [ 1385.737650][T15180] iterate_dir+0x452/0x620 [ 1385.742235][T15180] __se_sys_getdents64+0x17e/0x550 [ 1385.747726][T15180] __x64_sys_getdents64+0x97/0xe0 [ 1385.752931][T15180] x64_sys_call+0x3a14/0x3e20 [ 1385.757943][T15180] do_syscall_64+0xd9/0x210 [ 1385.762701][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.768952][T15180] [ 1385.771367][T15180] Uninit was created at: [ 1385.775804][T15180] __kmalloc_noprof+0x95f/0x1310 [ 1385.781468][T15180] hfsplus_find_init+0x90/0x1d0 [ 1385.793408][T15180] hfsplus_readdir+0x1dc/0x1a70 [ 1385.800589][T15180] iterate_dir+0x452/0x620 [ 1385.805173][T15180] __se_sys_getdents64+0x17e/0x550 [ 1385.811307][T15180] __x64_sys_getdents64+0x97/0xe0 [ 1385.816513][T15180] x64_sys_call+0x3a14/0x3e20 [ 1385.821478][T15180] do_syscall_64+0xd9/0x210 [ 1385.826119][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.832752][T15180] [ 1385.835189][T15180] CPU: 1 UID: 0 PID: 15180 Comm: syz.6.2429 Not tainted syzkaller #0 PREEMPT(none) [ 1385.845305][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1385.855632][T15180] ===================================================== [ 1385.862735][T15180] Disabling lock debugging due to kernel taint [ 1385.869167][T15180] Kernel panic - not syncing: kmsan.panic set ... [ 1385.875709][T15180] CPU: 1 UID: 0 PID: 15180 Comm: syz.6.2429 Tainted: G B syzkaller #0 PREEMPT(none) [ 1385.886828][T15180] Tainted: [B]=BAD_PAGE [ 1385.891072][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1385.901245][T15180] Call Trace: [ 1385.904624][T15180] [ 1385.907646][T15180] __dump_stack+0x26/0x30 [ 1385.912160][T15180] dump_stack_lvl+0x53/0x270 [ 1385.916936][T15180] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1385.922974][T15180] dump_stack+0x1e/0x25 [ 1385.927313][T15180] vpanic+0x361/0xc50 [ 1385.931487][T15180] panic+0x15d/0x160 [ 1385.935644][T15180] kmsan_report+0x31c/0x320 [ 1385.940350][T15180] ? kmsan_get_metadata+0xfb/0x160 [ 1385.945684][T15180] ? __msan_warning+0x1b/0x30 [ 1385.950536][T15180] ? hfsplus_uni2asc+0x9a6/0x27a0 [ 1385.955735][T15180] ? hfsplus_readdir+0xd60/0x1a70 [ 1385.960972][T15180] ? iterate_dir+0x452/0x620 [ 1385.965790][T15180] ? __se_sys_getdents64+0x17e/0x550 [ 1385.971291][T15180] ? __x64_sys_getdents64+0x97/0xe0 [ 1385.976709][T15180] ? x64_sys_call+0x3a14/0x3e20 [ 1385.981788][T15180] ? do_syscall_64+0xd9/0x210 [ 1385.986630][T15180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.992898][T15180] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1385.999354][T15180] ? kmsan_get_metadata+0xfb/0x160 [ 1386.004662][T15180] ? kmsan_get_metadata+0xfb/0x160 [ 1386.009947][T15180] ? kmsan_get_metadata+0xfb/0x160 [ 1386.015239][T15180] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1386.021648][T15180] ? kmsan_get_metadata+0xfb/0x160 [ 1386.026928][T15180] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1386.032956][T15180] ? utf32_to_utf8+0x3e4/0x410 [ 1386.037917][T15180] ? kmsan_get_metadata+0xfb/0x160 [ 1386.043206][T15180] __msan_warning+0x1b/0x30 [ 1386.047876][T15180] hfsplus_uni2asc+0x9a6/0x27a0 [ 1386.052890][T15180] ? __msan_memcpy+0x108/0x1c0 [ 1386.057840][T15180] hfsplus_readdir+0xd60/0x1a70 [ 1386.062920][T15180] ? aa_file_perm+0x549/0x2140 [ 1386.067883][T15180] ? kmsan_get_metadata+0xfb/0x160 [ 1386.073171][T15180] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1386.079194][T15180] ? finish_task_switch+0x1a7/0x920 [ 1386.084639][T15180] ? __pfx_hfsplus_readdir+0x10/0x10 [ 1386.090137][T15180] iterate_dir+0x452/0x620 [ 1386.094772][T15180] __se_sys_getdents64+0x17e/0x550 [ 1386.100067][T15180] ? __pfx_filldir64+0x10/0x10 [ 1386.105044][T15180] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1386.111045][T15180] __x64_sys_getdents64+0x97/0xe0 [ 1386.116295][T15180] x64_sys_call+0x3a14/0x3e20 [ 1386.121194][T15180] do_syscall_64+0xd9/0x210 [ 1386.125869][T15180] ? irqentry_exit+0x16/0x60 [ 1386.130675][T15180] ? clear_bhb_loop+0x40/0x90 [ 1386.135530][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.141604][T15180] RIP: 0033:0x7f812138eba9 [ 1386.146147][T15180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.165945][T15180] RSP: 002b:00007f8122146038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1386.174549][T15180] RAX: ffffffffffffffda RBX: 00007f81215d6180 RCX: 00007f812138eba9 [ 1386.182645][T15180] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000006 [ 1386.190747][T15180] RBP: 00007f8121411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1386.198861][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.206972][T15180] R13: 00007f81215d6218 R14: 00007f81215d6180 R15: 00007ffd3a578998 [ 1386.215116][T15180] [ 1386.218607][T15180] Kernel Offset: disabled [ 1386.222998][T15180] Rebooting in 86400 seconds..