last executing test programs: 19m39.749934581s ago: executing program 32 (id=134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 18m17.947330066s ago: executing program 33 (id=324): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="42d79d38ac60ed35a87fafb4c105f0ee95018a20c930a43aa84ad5ca7ac773dfe54855be74335886e6b246a4feff42b115a32e698a60ba396278741f30e8822e9da57f3f0e7a98e47b82ad8885a56217c9d5093bd80ccfee50324d2b371c2e1b5034f4b8ec522ec22a38cc3c851a29c20243a01eef9ea205826196270812975dc7226f528f186146d5b37636f85dfd0b61296f961c5def5226a1cc68f899aadb77f16fd0f7c17d3b0f7501766341daa8fe29c8cbceec54c3f11d6544a9ca45d34971664ea87a938219f7c1ad696ac6bb8f3b80a2d942bf796d38e1c76358226cae74e6d3fe04fbee91e5b0d6a90ee00b2685fbdb12b87a1035c000ec3f031164aaa2f1d5083959c3602dfe42b06bc3a5a1c731899e2e2c638b1bc634ca52962aa3c9ae1cb8a99ebfe031a1f194a45b830bbf133d4905055a88a0ff15b9fe9c3be8dc0786521545159c4a67a855ed672a4c98de18c1eafd72b4dba8f30527bcba54d0dbfd445862c44046b38b94dfd32efb9e9b881da12fb767f700abbee09d8ff9481f446f7c379edb615515e0bc368feb57465218d1110cd2e6e41ada3b43577f629b5170f6971669ac6644b4230dfed17175e954ce0bd3c87c8577666112bfc825f23d2e9b8c31274426c4060f825a35a4580504f03ca4e540d53c061300a3489db061e230ac612df3179f788bdbe8c6249decb686b025d648ae374d55334d71f19e5e25b16732beae71204b035ee870080225a839af6965dd7f3b878e5cbb09fac8306bb94ff7ecbdc89e19049d8f61ce033964b2204d8c4c9817350391132c9124b1eebb2f848d2aa933a64758272d0c9a707ad28a75895ef08141b03ca902ead08a79af20a6f1639069f8f51552bbdef0a42de9930a0e16102e5207bfb976515d0fbb7627156aad9bffab0191b33227b2a9a42ab69a164f8185fe63ebd3356a9655ccb0b58c8e7f6e69bf3d530d2d889d745e3fe5e748b6d89e61e23e5d32c62a623b8290360c95b90b91902315026844e2dbd0a00e93be6b2fd69e6c4a7ca4f6e81d663611575c76ce99031e61cdb833cdbed182d203fa5b0f39236753d936f495ad34c1c09ad8be117828fe32763abc6c4b7975594f23f21aea91d6a759d757aaa03cbcc961278ae9a64d49ebf6899ca1732b33bc30cd852bf73b714b0348a1023d60a0b2333c234126160fb898276d366969cc65458d17e937b7ab02ca1ee1a2a9d395eba287a0a1ed0455de7133746fb8a612acc1b7985abb8e20b91b69faa94dcca8733cb007a4d2ae8bca78898fa715c1d1afb669c255fe473c7a9039ad04bfea3f53e47ef8d672658e386c1383583fca236968367374907bf7a7de0886e2ccc003252efc416c7e35113afcce4f47036a3af72d0c4078ec2f1f1c5e22adb35e136f7c6fe8d34ceb0d2d58a1c2f70eb92e7209f73b76510add5b9ec36809a4c356e7eb7f693e1032462138c54e1f4963b808893c204f24728be7c7576877ea08d8aa9d9e76e8f92a6deb0b4bb2dc5c9bdce0a109376391fda6f19289a6ea7ed21f8d60b0476cfeb7d223376fa1345888ee8577fae1747097596381a9368692e8d19b8b13b7ad62ec959f1b0bcc438adc583dfbc822c2272f49bf5ed83a64df29089dfe698a56b15f581e82881fa35f5b6e1935bfd4c83da863c1b75c9d3b7d6344465eda609c699c566f69862aaa28d64a60c9b1d5003986af0f90223c9efc08607114cdf8a06c6aa6cdb285cfacb4cb5fcb123c3e2a93743eee878b5add0bbe2b80a4a5c90cec797de3524410cb51dd15ae85ccf16dd1b0d7e062c33818c3bf6fbb018866a5358f5deb882661dc68e3a93e2fa15808a0f271a454ffefb15accf3ef141ef62ce0b496a0ea2f9b4a53bba8e63d5b09a5bf9797b768b0429bfac2d2ee38fd8005fd951c08be4abd74a94f55f2905a0c56a6211e25fd6e6436e18d4aae204fb8f2ec98958bdabb66a3d20c5d2bebae05d198f3c23df9f26377e3c798229e22530c69757835b6e875dcd80b5cc4cdccefb54decd0a422ca2a21e1bffc204c72e216ee54b81c59decad3a5e62fa98cecf149d32148583a8768cc53fb6c3503505176ed3edc8e81c397ac57a21a0c32cc65535bfa8b60e91c8079fa8073d208c343e3fc42ff0866111b02f3cc8fdb360d681e0a34b6f7738cf1158b3c1d689204c5c7e0373e0f4d764690578ee2d92438fcdb36b18604c990ad43a928e7cf6c2be3c586d604aba1224e37b5c506eb1c215f6e1810d4b2ff0cdd4ea9672b2556262f5691ccc4ef592ba751552935dbe57473d210daf0bacc27536138ff374072fa991c88ed4357ea4c8dae999a95d3eb419edd6477805ce2423350abaab7fac96197fffc06dfce88accfbf13c0a7392cd585e40910660abe5cd2f3aef798bd751439ed6c20100814c3fe83aacf45741a2ee652ad47b839c590655dbc7782bbbd4399533569c1646407cbf2a8ac3967fe261378a537fe3b66bb2877d55f3f1976bd2216b2b4190ee909bfdfd5699aa992dc8b818c6003b665034d98653812edb596a9d1bb60a3207e9d361aebd59ce6196704fe4e8f47ce328a144398b7fff7a61cd86846dd7f388a993d610e09f4fa0bab557639c5c48b37fb0059f5e045aa90e62d4be896f326f610d82f2cbf15b0f14793010668ad27b291436b10c4e436644c19a9616dc678e12d04bb45e13d66e2ca023a0ff9919756dafde87a8d89a9f2e26d7f92fa186a8c7e8d870c5491f556d307569693bd477ecb47c981e5aee036acdb8279251825557bd17b4303ea2818816adf0f8a460d7679f9e010f47e65c3d320d3eb43d392f52b33376a19a26e69c3143247f7a6bb56c77eafba41ced78952327cee1e6cb423dc98008232240ce56572700383593bd8132aa09fd189e71b74f279d6457c5d9530d7f27f95e29fd9a7e07df204b9dda7e66a8916580ba0376bddf13d2b1dc892c9366be5b3c432c30b6f3463d13d68540b1238e282dcfcbd4f8e52b839cd2b9d52fef32684bb7cb7f905387f9e8e66b2e825636b4a27a8b4b70f73394477fa9df9229bf9f29d086f6028505ae7728f088e70ade42cb0a992c68f891013a533baa411b2ad8179a6ca5251869066ad187769cd37ee377ae81b862998225b831672251c9cf2b7c09454aa7feb5d6ae0e44ca8dc097a7a445c22b19ef3cc53e231590427937aa5c86aa762b0844a6ca0b6d5287cdfe122146bd001c2103826c62e672687916f617afaad0f373c8c54292b11f5cf46f81aef99211f52df90138c6dfed796d570e545a41501c7a0c18e7e42edfa8d946a02509fe273fb15e7b4681ee573d913364fbf0ac64be383293c668483ba400cca25cd3aefe62122e87ce0267114ebe7a17c2b6ed948d01bb3bcf0332feaeb632b3971711361cbc19923be0c04e80311390831410fb9b65e038013a984b13cbb53f9ea432547c86e2dd920fd2946f07fb7d827bb55e73dc84ed49fdd2fbafe0793f32b0a8cf89d391c838ca4284f98faf604e86c30af873000cf8236a8b6902c60d7ed24e16e53e05923e2c111506421ebb8e1272625ecadec5eeb380b56eda220044ebb4c14e1427f63d72c3463b0893372176a3fd75758a4f66d44faafef08771e41b1a78991b062a5797ea7e271134ae243081b8bfe616ad62003e7f8b7a6caef4b097835d4b3e49421746d2031f8ad0c70ba62f7a5420d8d6fbfe5632393540527495cf8c8d1a196f08a601bbbc23eee32b39f625725a641b7b93a9cb48ab92b6447e2ccc2a7603019856307dd6af80dd84b18f3dfbec5530166f36e72196945a869acedaaf3892148a572ba1d226e172cad4f957c2b406a4175083b7ed20293d5e50ae33af6011c003d2f2dae248b4e6fe30391311dd7aaea3e8d4db304451ead9d233f22c17578ca202fca518a1ffee05d8509beadc8cbb3eb5082fe494e9c6273edb5aefcc19291a5dd1d099a2399aa190d9e9b72a82c7c4e96019b9ec0ad5b33f1686f7ab3270de06a164be2bf37b2965c2774ef1b4289c62684ecec8e8f3e66b9b97ecbb54c0779070e8b324c9259f26b28ba1f1f844af79cea00131ac27840bb2408de68d3bcd6e56cf592f5cf00d45893355526cbc102803062b3dd2e8853d2f241e83832afb690d0722570fed07949a96c8336df720680f19b476c48adbabe1308c6722d71e6d9cd82a868294f6eb49071d32ff0a6cc60b3c7e8483c511c9471b865a82091b389f322204f2e01ae2edbffedb2f14f2f271b90d95dfdc08244ce53ca4196b7ef26905fed0c765fbc56d99e264188224ed26c85a484094105a54d77eb86e9c9dc314002b6217658b75b2a7efdd1606fc05fdb249c8e4ea33711aad7b7f535d1a49e2ffb91a3a9198be27999704a365db596fa42acb9ad5c9304af08ce13fd039b178ba6d8a470b7658ca6666b29a08413d0f4b1ab369b4da6074d6b3983f6b07f5a4c733486312db717137dacd5d617b685d5756cb13780a85dea4497faa04968e5f144ad952136a3dfd153abbf593596ae48773c14bb0848af1e5c50185753e027b2e94854dd030fb164561554e1ec574afc61d6ae8f72ab677c621369207a07e81b7506d67beff17eeb965ea660d9cb503e7edb4bb475e47af0835f1dcb77b336058689e73548d975248c181e42fcab5e98a9c832b5e00baa01cc28478a2e9509ef8ff4bcb0b7909a2179b756c85fd118b0130549f65b639b96208019d19d9fed0dffb0ebfd32a7c942c8af62e0735ef2523340af50463ccb053a0ee914578d7fe78562ab9a0ae19cc25dd19ac6e8531e16d4f47407e3a41b3aa227febb456131d98fd445e0b45b44a2bf1466ff454781f5eb34e1e1651e20878e31d4e2b681ccd1b735a464cdddcfd2d95fda836670edd1ded23cd488f05c5e9c09f7c7d23da5397ac3cf6ead73706a3e7cd4634ef0ca27c6030acc1dbe34b943bfe810b7d2c4408f56a6ae63ca3f9dd188de2b22fa384ace53345fcfc1e3c0d3ce9156166a9cc264eeda1b2ebf8de774b93e90d2f8a4d14df3d294f007ed7debff458f29d678e04111f18124959b1cd5fc18ee568e48d0d7d7300ecd4b01538621d8e87ce9c53bd062334ba5893e9a83d3726901c5ba7ee75daeab7f77761c0d09451acf9aee513f40b70f0d9d16692b7c970b6329f9058c0a6bed9faf2e14aee4ba63a31a9420ccf66bccbf3fcf9a3874886d7ca53d55751e23e918c5051c5ab54937a4e4767d878fddfb6d4797b9f7d86732984d7c0f7e71e300f7d18cd7a0ec5cde1f7dfb93aa8242f3391496c3cac6a97cdaa33256e5b15e1d14b4c0dca4c27285e3a93d3e5b4c35378435d2b166189500c63da73aac418e2656c1b48335cc28279407ec7cf863746b02ae92376c9227c6edc5b213ff78a9e263ddddea388d109170faaa8e1aa1d0d5a4a16b43923fe032e773d3d9b7efa0642d8c11fe2f3f1c93f53fa9bed6ae5320ff4b3798b12d81b1b3cc2743171c16a92f1f7ac1faa19fea1c38ca4108cf93f684f59b03342b4c42c52e33971a71f6981ab89ee2917306c5a16d1988f948ba237e3ad1a8cc04ad1934bccaa72516edc62f5ad5f01a5246250d6ab23d06601b5590e108cecbbd95bd969636aabd37e02438384cd1c8e1edbfbf17340271290beee29494eaa83bb345313d94d0881e8a2698554f39eac881eede0b7dc12a2b911378585780f00ac1b8cd649f28723d2e9a56a4bc60e23bfa4c81930f5f7051a55b0425948ee20f508f9781d9ca4f3538fc5c5e0d2f406459fa0392ff2dd7cee65756d4481b660df15f813b22"], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPbxxzsww4Uki8ceD05Ab+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6e3Br8=") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r0) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x4b1}], 0x1, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0) 17m41.165333573s ago: executing program 34 (id=430): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040041}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x20e, 0x95df, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0), 0x5, 0x4f3, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlink(&(0x7f0000000100)='./file1\x00') 17m2.908073396s ago: executing program 35 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040000000c0000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000c12ff292e3c6c4b8004052"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) unshare(0x8040480) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) read(r0, &(0x7f0000000000)=""/43, 0x2b) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001f00)=ANY=[@ANYRES64=0x0, @ANYBLOB='7\x00'], 0x20) r1 = syz_open_dev$loop(&(0x7f0000000340), 0x4, 0x80000) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7fffffff, 0x3a, '\xd3\x8e\x80I\x89\x1f47\xd4\xb7\x16\xb0\xb8\xb8\xdf\xa6\xe3;<3T\xe6\xbb\xdc\v;\x0e\x16\x88z\xae\xc8~\xc0\"T\x8fk.\xa6\xef\xd2\xea\x8f\xd7\x91\xc8\xd3?\xec\xc9\xdaZ\xf9\xdf6\x91.\xbf\x1cM\x02\x13L\xa7\xcf\xc1|)\x19*\xf1\x9d\x98:No\x8c\xee\x0eni4\xebwh\xe7F\xde\x18\x0e\xeba\xe5s=\aE\x06Q\xde\xd3\xe4`\xab\xf9\x1dz%\x190\xc3\xee \x82\x7fH\xae\v\x81\xdd^\x04f\xa4\xeb}\x9d\xe4\xdb\'\xe2\a\xb1\xe4M\xc7\x95\xa4\xa9\xa0\x97\xee!~\xf9K8\xa6is9\xe3\xff\xdf\xa7l\xfcZ\x1c\x90\x01m\xbd', 0x3a, 'D\xb0\a\x00\xb7\x1a\xfem\x9d\xf4^\xde\"P\xa1\\xAK-\x00\x00', 0x3a, './file0'}, 0xe1) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000780)={'\x00', 0xfffd, 0xfe1d, 0x1000, 0xffffffff947d5046, 0x1}) 16m49.430132061s ago: executing program 36 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="682ed500000000a1783569ae0000000000000000", 0xfffffdd2}, {&(0x7f00000001c0)="29235f8b92d8a00700000000000000442aba329c9f1dc1d202c0c12aefdeed8e463a935ef4418b81b79ec3019db723e26db60936b09359c37bbb7c353cf6f339e32000"/76, 0x4c}], 0x2, 0x0, 0x0, 0x40011}, 0x20040000) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 16m44.15859056s ago: executing program 37 (id=541): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x442, 0x9c) read$FUSE(r3, &(0x7f0000003980)={0x2020}, 0x2020) 15m2.966351862s ago: executing program 38 (id=791): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x4, @none, 0x77f, 0x1}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(r2, &(0x7f0000000d40)="729fe1c2e4ac239344b19b840aba55a9062707a6e7ca7f816018ab0f3a28952199284bbc48ea7b7f089c367fad4242053d4320245bc9b55d19d6eff69bb321aff847833d68b132a3ca59d2926414d1acba88e4541c88b391078f12775ace458f7486e2c3e15f059b3d6645975a10013f948e9bde32a3d08ece3a027cdaac44d40aed", 0x82) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='bridge_slave_0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, 0x0, 0x0, 0x0, 0xa, 0x60000000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcb3e) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e8, 0x0, 0x320, 0x320, 0x320, 0x320, 0x618, 0x618, 0x618, 0x618, 0x618, 0x6, &(0x7f0000000440), {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x21}, [0xff000000, 0xff, 0xffffff00, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff], 'macsec0\x00', 'macvlan0\x00', {0xff}, {}, 0x89, 0x4, 0x0, 0x4}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@remote, 0x1, 0x21, 0x8}}}, {{@ipv6={@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xffffffff], 'bond_slave_0\x00', 'macsec0\x00', {}, {}, 0x2, 0x5, 0x2, 0x22}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@mcast1, 0x39, 0x1, 0xc7c5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x39}, @ipv4=@remote, 0x32, 0x3e, 0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, [0xff000000, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff], 'veth0\x00', 'veth0_macvtap\x00', {}, {0x7f}, 0x0, 0x4, 0x2, 0x12}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@mcast1, 0x13, 0x25, 0x4}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x6, [0x8001, 0x7], 0x4, 0x2, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x6}, @empty, @mcast2, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @mcast2, @mcast2], 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x748) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r8, r8, 0x0, 0x4) 14m59.887340735s ago: executing program 39 (id=802): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x39fab) 14m58.554317727s ago: executing program 40 (id=809): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x34000000, @local, 0x5}}}, 0x88) 14m58.377870594s ago: executing program 41 (id=811): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 14m53.079252655s ago: executing program 42 (id=819): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @private1, 0xfffffffe}, 0x1c) madvise(&(0x7f00005ac000/0x3000)=nil, 0x3000, 0x2) ptrace(0x10, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) syz_clone(0x410e180, 0x0, 0x12, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000380)={{&(0x7f00004d9000/0x1000)=nil, 0x1000}, 0x1}) 14m3.832926998s ago: executing program 43 (id=913): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x800000000f, 0x0, 0x0) listen(r3, 0x0) 14m1.151189662s ago: executing program 44 (id=924): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000900000085200000983d0200"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x4}, 0x94) 13m59.563170988s ago: executing program 45 (id=937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x20f0001, r1}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x9, 0x110022, r1}) 13m56.952971105s ago: executing program 46 (id=943): syz_io_uring_setup(0x2b06, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000fdffffff85000000bc000000850000005000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4de7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) 13m54.495513207s ago: executing program 47 (id=951): r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x172831) keyctl$describe(0x6, r0, 0x0, 0x0) 13m40.071774065s ago: executing program 48 (id=958): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r1, 0x402c542b, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r4, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m11.484100938s ago: executing program 49 (id=1049): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/132, 0x84}], 0x1) 13m11.214631694s ago: executing program 2 (id=1055): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) chdir(&(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) 13m11.001710234s ago: executing program 2 (id=1057): r0 = memfd_create(&(0x7f0000000ac0)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000a, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) ftruncate(r0, 0x0) 13m10.697677194s ago: executing program 2 (id=1060): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000000c0)) 13m10.153860188s ago: executing program 50 (id=1059): ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000001c0895"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f0000000280)) 13m10.148087488s ago: executing program 2 (id=1065): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x20c8c1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, 0x0, 0x0) 13m9.73197039s ago: executing program 2 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 13m9.223620079s ago: executing program 2 (id=1073): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000000c0)) 13m8.7092915s ago: executing program 51 (id=1073): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f00000000c0)) 11m32.572012555s ago: executing program 3 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getsockname$packet(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f0000000300)=0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) migrate_pages(r1, 0x2, &(0x7f00000001c0)=0x6, &(0x7f0000000240)=0x7f) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x4}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) close_range(r0, 0xffffffffffffffff, 0x2) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 11m30.639983905s ago: executing program 3 (id=1449): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x15b042, 0x20) truncate(&(0x7f0000002540)='./file2\x00', 0xe) sendfile(r0, r0, 0x0, 0x7a680000) 11m30.294942369s ago: executing program 3 (id=1451): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) 11m30.053493853s ago: executing program 3 (id=1453): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cf56e616d653d7bce262c616e616d653d39"]) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) 11m29.751347643s ago: executing program 3 (id=1455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00"], 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) 11m28.721338424s ago: executing program 3 (id=1459): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x4050}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x9, "60b93c243966e317aa"}, &(0x7f0000000040)=0x11) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 11m10.956009271s ago: executing program 52 (id=1459): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x4050}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pipe2$watch_queue(&(0x7f0000000000), 0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x9, "60b93c243966e317aa"}, &(0x7f0000000040)=0x11) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 10m44.833452901s ago: executing program 7 (id=1567): getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f0000001a00)='\x00z', &(0x7f0000000140)=""/218}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001a40)={0xe0c, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0xd2ee}, 0x7, 0x6, 0x7, 0x5, 0x1c, 'syz0\x00', "45c9b94f6543d887cafb35b3b1356c1eff9047afbf2937d999bbead52cb36c80", "2ce53a4c54300905c4e1c7598d73b14125190b85b884e9e8219830832718ba9f", [{0x5, 0x7, {0x3, 0x1}}, {0x6, 0x200, {0x2, 0xb}}, {0x7f, 0x77, {0x0, 0x9}}, {0x9, 0x5, {0x2, 0x1}}, {0x0, 0x0, {0x1, 0x3932}}, {0x3, 0x2, {0x1, 0xfffff801}}, {0x6, 0x245, {0x0, 0x3}}, {0x3, 0x9, {0x3}}, {0x4, 0x7b00, {0x1, 0x37c}}, {0x9, 0x1, {0x3, 0x1}}, {0x2, 0xc, {0x1, 0x1}}, {0x4, 0x592, {0x3, 0x5}}, {0x9, 0x4, {0x2, 0x8480}}, {0x8b47, 0x3, {0x1, 0x5}}, {0x0, 0x8, {0x2, 0xffffe63d}}, {0x4, 0x800, {0x1, 0x6}}, {0xfff8, 0x100, {0x3, 0x40}}, {0x9, 0x2, {0x0, 0x52f}}, {0x4, 0x6, {0x1, 0x7}}, {0x0, 0x80, {0x1, 0x61}}, {0x8, 0xfa62, {0x2, 0x8}}, {0x2d8, 0x2, {0x0, 0x1}}, {0xfe00, 0x7, {0x3, 0x7}}, {0xb35e, 0x9}, {0x2, 0x7, {0x1, 0x7}}, {0x957b, 0x3, {0x2, 0x8}}, {0x5, 0x5c, {0x3, 0x4}}, {0x2c7, 0xc001, {0x1, 0xeefb}}, {0x4, 0x5, {0xdd44586c224148c8, 0x3ff}}, {0x3ff, 0x7, {0x3, 0x2}}, {0x800, 0x4159, {0x0, 0x1}}, {0x0, 0x0, {0x0, 0x1ff}}, {0xc, 0x66, {0x0, 0x9}}, {0x81, 0x5dae, {0x3, 0x3}}, {0x0, 0x0, {0x3, 0x81}}, {0xfb, 0x8c4, {0x3, 0x7fffffff}}, {0x3, 0x4, {0x0, 0x5}}, {0x8, 0x8, {0x1, 0x1}}, {0xe, 0x2, {0x2, 0x3ff}}, {0x7b2, 0x5, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x80000000}, 0x8, 0x58, 0x4, 0x8, 0x22, 'syz1\x00', "d223fb2dae33ecc6b01be34841c31fd38f60b05b4743c92f8f9cda9bf388c1b6", "8c9232f6f404e2bacb4799048cea435e8ba0187e640d57b8a5c517274ff7981f", [{0x4f0b, 0x1, {0x3, 0x2}}, {0x4, 0x2, {0x0, 0x7}}, {0x64, 0x9, {0x0, 0x9a7}}, {0x9, 0x4, {0x3, 0xe}}, {0x465d, 0xffff, {0x0, 0x1}}, {0x0, 0x4, {0x3, 0x8}}, {0x0, 0x1, {0x3, 0x800}}, {0xce, 0x8, {0x0, 0x4}}, {0x80, 0x6, {0x1, 0x126}}, {0xad0, 0x0, {0x2, 0x1}}, {0x41a, 0x100, {0x0, 0x81}}, {0x200, 0x3, {0x2, 0x3}}, {0xfff8, 0x1, {0x3, 0xffff}}, {0x60, 0x5, {0x0, 0x9}}, {0x1000, 0x7, {0x1, 0x1400}}, {0x1, 0x8, {0x2, 0x100}}, {0x2, 0x8, {0x2, 0x3}}, {0x4, 0x44, {0x0, 0x3fffc0}}, {0x4, 0xe0f2, {0x3, 0x6}}, {0x4, 0x6, {0x3, 0x1}}, {0x9, 0xcb, {0x3, 0x4}}, {0x5, 0x9af, {0x0, 0x1}}, {0x4, 0x200, {0x3, 0x6}}, {0x9, 0x2, {0x3, 0x401}}, {0xb, 0x2a67, {0x0, 0x9}}, {0xe, 0xda00, {0x3, 0x401}}, {0x3, 0x4, {0x0, 0x1}}, {0x7, 0xd, {0x0, 0x6}}, {0x2, 0x18, {0x0, 0x7f}}, {0x0, 0xa, {0x2, 0x1000}}, {0x6, 0x800, {0x2, 0x1}}, {0x9, 0x4, {0x2, 0x10000}}, {0xe, 0x6, {0x2, 0x9}}, {0x1, 0x8}, {0x1ff, 0x7ff, {0x2, 0x2}}, {0x3, 0x1, {0x2, 0x5}}, {0x5, 0xe1, {0x2}}, {0x6, 0xfffb, {0x2, 0x8}}, {0x5, 0x49, {0x2, 0x6}}, {0x3, 0x631f, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0xbf, 0x8, 0x0, 0x8, 0x1c, 'syz0\x00', "daf9e9c7e2255b35d24a3ae4263d0fa0b3bcc29310a639b78b8af35d41b90c64", "49d5b9c6d221cf49c9a58e3056d5e2a9566d7ee110712ce98129288cfa897412", [{0xfffc, 0x2, {0x2, 0x5}}, {0x6, 0x5, {0x1, 0xa134}}, {0x8001, 0x9, {0x3, 0x40e6}}, {0x0, 0xfffc, {0x0, 0x4ad}}, {0x2, 0x8, {0x3, 0x12000000}}, {0x7fff, 0x6, {0x1, 0x7}}, {0x800, 0x1, {0x1, 0x7fff}}, {0x1, 0x1, {0x2, 0x1b}}, {0x2, 0x9645, {0x3, 0x1}}, {0xd, 0x2, {0x2, 0xb0}}, {0x9, 0x5, {0x1, 0xfaa}}, {0x0, 0x3, {0x36d7ff5d06b37f1f, 0x8001}}, {0x8001, 0x2, {0x0, 0x5}}, {0x4, 0xfab, {0x2, 0x7}}, {0x0, 0x50fa, {0x1, 0xfffffc00}}, {0xfef, 0x8, {0x0, 0x10000}}, {0x40, 0x7, {0x0, 0xff}}, {0x4, 0x9, {0x2, 0x2c3e}}, {0x2, 0x1, {0x3, 0x7a3f}}, {0x60, 0xfffc, {0x0, 0xfff}}, {0x3, 0x483, {0x1, 0x6}}, {0x3, 0xb4, {0x2, 0x5}}, {0x420, 0xffff, {0x2, 0xfffffeff}}, {0xa4, 0x64, {0x1, 0xa0000000}}, {0x7f, 0x5, {0x3, 0xe}}, {0x6a, 0xfff7, {0x0, 0x6}}, {0x8, 0x8, {0x0, 0x6}}, {0x7, 0x1, {0x0, 0xe}}, {0x6, 0xffff, {0x1, 0x1}}, {0x0, 0x1, {0x2, 0x1}}, {0x0, 0x6, {0x1, 0xc21}}, {0x0, 0x4, {0x1, 0x8}}, {0x5, 0xfffa, {0x1, 0x8}}, {0x20, 0x23a, {0x0, 0xeab1}}, {0x5, 0x7, {0x1, 0x4}}, {0x3, 0xba69, {0x3, 0x3}}, {0x2, 0x8, {0x3, 0x8}}, {0x7, 0x4, {0x0, 0x80000001}}, {0x9, 0xb7, {0x3, 0x8}}, {0x4, 0x2, {0x3, 0x2}}]}}}, {{0x254, 0x1, {{0x2}, 0xed, 0xfa, 0x0, 0xff, 0x1e, 'syz0\x00', "91702d656cd19e14f58245f4b4be5808322f05f3bbddc6e55849022456b54487", "6ee99bf29d749ef318ce185b15f1fc445aacbbc545886f021292079867bc585f", [{0x8000, 0x8000, {0x0, 0x9}}, {0x6, 0x0, {0x3, 0xede}}, {0x6, 0x9, {0x0, 0x6}}, {0x5, 0x200, {0x2, 0xffffffff}}, {0x10, 0x2, {0x1, 0x7}}, {0x7, 0x7}, {0xe19, 0x3c, {0x3, 0xb376}}, {0x2, 0x1, {0x0, 0x2}}, {0x3, 0x8, {0x3, 0x3}}, {0x10, 0x1, {0x0, 0x8}}, {0x6, 0x8, {0x3, 0xfffffffb}}, {0x3, 0x4, {0x0, 0x8}}, {0x5, 0x9f, {0x0, 0x2}}, {0x3, 0x7fff}, {0x8000, 0x0, {0x1, 0xb88c}}, {0x100, 0x7, {0x2, 0x8}}, {0x0, 0x2, {0x3, 0x6a}}, {0x5, 0x3, {0x3, 0x2}}, {0x7ff, 0x9, {0x5, 0x63b0}}, {0x18, 0x8}, {0x3, 0x5f, {0x3, 0x10a}}, {0x3, 0x8, {0x2, 0x8ff}}, {0x1ff, 0x7ff, {0x0, 0x4}}, {0x7, 0x7, {0x2, 0x3}}, {0x3ff, 0x5, {0x1, 0x80}}, {0x5, 0x7f, {0x1, 0x100}}, {0x401, 0x10, {0x0, 0x1ff}}, {0xe, 0x1, {0x3, 0x6}}, {0x8, 0x6, {0x2, 0x2}}, {0x4, 0x5, {0x2, 0xfff}}, {0x0, 0x1, {0x0, 0xa}}, {0x400, 0x5, {0x3, 0xffff8000}}, {0x2, 0x4, {0x2, 0x364}}, {0x6, 0x8, {0x2, 0xf}}, {0xfffd, 0x2, {0x1, 0x2}}, {0x7, 0x7, {0x0, 0x4}}, {0x2, 0x800, {0x1, 0x2}}, {0x6, 0x401, {0x0, 0x6}}, {0x7, 0x3, {0x2, 0xfffffffb}}, {0x4, 0x40, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0xffff}, 0x6, 0x8a, 0x4, 0x2, 0x15, 'syz0\x00', "30e5df1b6be7df93015102cb7f1c63d5df9dcb42f29a616bd99a741f633e7c47", "b5820ccac8702c6aae006c609a5ba9a202a78bfce1a8977756ffcb5f50f2d05e", [{0x3, 0x6, {0x0, 0x8}}, {0x7, 0x2, {0x1, 0xdc}}, {0x0, 0x8, {0x2, 0x2}}, {0x7, 0x5, {0x2, 0x7f}}, {0x0, 0x10b, {0x1, 0x8}}, {0x6, 0x17c, {0x2, 0xc}}, {0x1, 0x1, {0x0, 0x2}}, {0x5b, 0x0, {0x1, 0x5}}, {0xffff, 0xff, {0x3, 0x1}}, {0x8001, 0x2f, {0x0, 0x10001}}, {0xfff9, 0x4, {0x0, 0x5}}, {0xfff8, 0x1, {0x2, 0xc}}, {0x8, 0x7, {0x3, 0x1000}}, {0x3, 0x3, {0x3, 0x573c}}, {0xf, 0x2, {0x0, 0x5}}, {0x5, 0x4, {0x3, 0xb92}}, {0x1, 0x81, {0x3, 0x66c2}}, {0x2, 0x5, {0x0, 0x1}}, {0x7, 0x48a, {0x1, 0x6}}, {0x9, 0x4, {0x1, 0x9}}, {0x0, 0x9e0b, {0x0, 0x1}}, {0x2, 0x54, {0x1, 0x800}}, {0x10, 0x0, {0x1, 0x7}}, {0x7, 0x42, {0x1, 0x4}}, {0x6, 0xff07, {0x3, 0x9}}, {0x4, 0x3, {0x3, 0x5}}, {0xdd, 0x2, {0x1}}, {0x0, 0x4, {0x0, 0x8}}, {0xf, 0x9, {0x2, 0x6}}, {0x5, 0x5, {0x3, 0xfffffc1d}}, {0x8, 0x5, {0x3, 0x8000}}, {0x6, 0x0, {0x2, 0x1e}}, {0xaa, 0x3, {0x3, 0xfffffff9}}, {0x2, 0x8000, {0x3, 0x3}}, {0xc7b, 0x10, {0x1, 0x7}}, {0xfffb, 0x2dc, {0x3, 0x1ff}}, {0xf33f, 0xc, {0x3, 0x7}}, {0x100, 0xe, {0x2, 0x100}}, {0x7}, {0x2, 0x2, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x871}, 0x3, 0x4c, 0x7, 0x4, 0x23, 'syz1\x00', "3afe708fa0f4511d29ca755ba855e10419570474cededc7e0fba42db7d4eede3", "037959b15003e907254f37063a9d465e8676adda44009016543eafd1175be7a8", [{0x1, 0x3, {0x3, 0x8}}, {0x9b0, 0x7, {0x0, 0x66}}, {0x9, 0x951, {0x0, 0xa}}, {0x7, 0xe206, {0x3, 0x4}}, {0x7, 0x8000, {0x0, 0x7fffffff}}, {0x1, 0x3, {0x0, 0xfffff801}}, {0x1, 0x2, {0x3, 0x40}}, {0x8001, 0xfff, {0x0, 0x2}}, {0x0, 0x3, {0x3, 0x3}}, {0xfff, 0x8, {0x2, 0x8}}, {0x3, 0x61a7, {0x0, 0x2}}, {0x6, 0x9, {0x2, 0x9c8}}, {0x5, 0x4, {0x0, 0xef7}}, {0x5, 0x3, {0x1, 0x5}}, {0xfff4, 0x0, {0x3, 0xbfa}}, {0x0, 0xb, {0x0, 0x80000000}}, {0x1, 0x7, {0x1, 0x8}}, {0xe994, 0x8000, {0x1, 0x800}}, {0x1, 0x2ba, {0x1, 0x3}}, {0x9, 0x8, {0x2, 0x3}}, {0x20, 0x8, {0x0, 0xe8}}, {0x4, 0x4, {0x0, 0x6}}, {0x101, 0x81, {0x3, 0x1}}, {0x6, 0x9, {0x3, 0x235}}, {0x400, 0x200, {0x2, 0x6}}, {0x2, 0xffff, {0x2, 0xf}}, {0x2, 0x9a5, {0x0, 0x8}}, {0xebae, 0x9, {0x3, 0x7}}, {0x8, 0x8, {0x2, 0x382}}, {0x8000, 0x9, {0x2, 0x213}}, {0x1, 0x8, {0x2, 0x8}}, {0x1, 0x1, {0x3, 0x1}}, {0x100, 0x6, {0x0, 0x3}}, {0x364d, 0x68e, {0x0, 0xfffffffb}}, {0x9, 0x1, {0x0, 0xedc4}}, {0x4, 0x5, {0x3, 0x3ff}}, {0x3ff, 0x4}, {0x200, 0x8, {0x1, 0x8}}, {0x5, 0x2, {0x3, 0xdc}}, {0x26b3, 0x3, {0x2, 0x2}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4000081) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x321, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x4000000) 10m43.699745472s ago: executing program 7 (id=1569): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001"], 0x48}}, 0x0) 10m41.035912834s ago: executing program 7 (id=1574): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[]) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000003800)={0x2020}, 0x2020) 10m40.785487589s ago: executing program 7 (id=1577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5b, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec", 0x43, 0x0, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) 10m36.727993488s ago: executing program 7 (id=1585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 10m35.265357561s ago: executing program 7 (id=1591): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) userfaultfd(0x80001) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 10m19.647879178s ago: executing program 53 (id=1591): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) userfaultfd(0x80001) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 7m17.037416657s ago: executing program 4 (id=2517): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c61ff51f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc92", 0xda}], 0x1}}], 0x2, 0x480e0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7m15.851894504s ago: executing program 4 (id=2520): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x4, 0x800005fffffffff9}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m15.334557986s ago: executing program 4 (id=2525): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[@code={0x1, 0x62, {"f242af66b830010f00d0c402cd0a1366ba400066b81d1966efc4e1ff70118d0f783dfd7f00002e26640f01c9b9830b0000b864f70000ba000000000f30b805000000b9820000000f01d9c4e1d1d574cd04"}}, @code={0x1, 0x5c, {"66ba420066b8090066ef450fb1e4410f01c466470f3830ca366564430f350fc7a970110000c7442400a3000000c744240200800000ff2c24f3420f1ad066b8b3008ec8f04728aa00000000"}}], 0xbe}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x400) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f20c035080000000fa2c0470fc75e82b9f60b0000b843d80000ba000000000f302e4263e6c4018859f7654a0fc71f660f38818c4b73745ade66baa100400f00d9ee6665660f50fbc4e35178ab0000000050", 0x52}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m13.244219581s ago: executing program 4 (id=2529): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b9, &(0x7f0000000300)="$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") r1 = creat(&(0x7f0000000300)='./bus\x00', 0x180) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) sendmsg$TIPC_NL_LINK_SET(r1, 0x0, 0x0) pwritev2(r2, 0x0, 0x0, 0x50000, 0x0, 0x0) dup2(0xffffffffffffffff, r0) read$FUSE(r2, &(0x7f0000004a80)={0x2020}, 0x2020) 7m12.091830484s ago: executing program 4 (id=2531): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x48, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x34, 0x1, [@m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7m11.384070834s ago: executing program 4 (id=2536): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_VF_PORTS={0x4, 0x3}]}, 0x24}}, 0x0) 7m10.841011387s ago: executing program 54 (id=2536): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_VF_PORTS={0x4, 0x3}]}, 0x24}}, 0x0) 3m15.398495007s ago: executing program 5 (id=3007): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000000)) 3m13.624835291s ago: executing program 5 (id=3011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x11, 0xd, 0x0, 0x0) 3m11.696606421s ago: executing program 5 (id=3012): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0x1a00400, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESDEC, @ANYRES8], 0x1, 0xc5a, &(0x7f0000002080)="$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") rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x2f, 0x0) 3m8.563923519s ago: executing program 5 (id=3017): syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000480)={[{@map_off}, {}, {@hide}, {@map_acorn}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@mode={'mode', 0x3d, 0x7}}, {}]}, 0x1, 0x55e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000000f00)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r3}, 0x38) unshare(0x4000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r3}, 0x38) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) 3m6.01209763s ago: executing program 5 (id=3021): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 3m5.444364966s ago: executing program 5 (id=3022): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0xc0800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0c000000010001", 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) fadvise64(0xffffffffffffffff, 0x2, 0x0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x800000000000}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x100000001, 0x7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0xfffffdeb, &(0x7f0000000580)}, 0x10) 3m3.300332737s ago: executing program 55 (id=3022): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0xc0800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0c000000010001", 0x7) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) fadvise64(0xffffffffffffffff, 0x2, 0x0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x800000000000}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x100000001, 0x7}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0xfffffdeb, &(0x7f0000000580)}, 0x10) 46.994115467s ago: executing program 9 (id=3235): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) ioctl$KDGKBMODE(r4, 0x4bfa, 0x0) r7 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(r7, &(0x7f00000001c0)=r8, 0x12) 38.876708726s ago: executing program 9 (id=3245): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x20}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/39, 0x27) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x1, 0x1, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000840), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 33.961527419s ago: executing program 9 (id=3250): r0 = socket(0xa, 0x3, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 29.463865292s ago: executing program 9 (id=3259): syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000480)={[{@map_off}, {}, {@hide}, {@map_acorn}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@mode={'mode', 0x3d, 0x7}}, {}]}, 0x1, 0x55e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000000f00)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r3}, 0x38) unshare(0x4000400) 25.253522856s ago: executing program 9 (id=3264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 22.312671865s ago: executing program 0 (id=3267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r1, r1) rt_tgsigqueueinfo(r0, 0x0, 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x8) open(0x0, 0x141c7d, 0x62) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 21.412039664s ago: executing program 9 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x8}) writev(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)="9876831be3f8ecf381512295dfb2622b6fe06971daa7dfb11d45bc01c34aaba9ea1edcec16e0d05daadbfaeee0c0c016c47765d4610f34e20064eca8c1d7861e29f891b66b89dd462bd93a520bab115508031da1d89202c3928c75afa3a4dc8523d704d5af50564c6be25b5fd81ddd9b4e8b17ee589d272c47f98ba9cc68e7156e69f3964533a07041beefd9b3e2e6f1d9bb72dfbd10e6892da5cbac8b9871418ad6a966841b2d9889a840f310df117a092edddb36febbae6c09ab", 0xfdef}], 0x1000000000000040) 20.591356744s ago: executing program 56 (id=3269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xce7c1000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000280)={0x0, 0x8}) writev(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)="9876831be3f8ecf381512295dfb2622b6fe06971daa7dfb11d45bc01c34aaba9ea1edcec16e0d05daadbfaeee0c0c016c47765d4610f34e20064eca8c1d7861e29f891b66b89dd462bd93a520bab115508031da1d89202c3928c75afa3a4dc8523d704d5af50564c6be25b5fd81ddd9b4e8b17ee589d272c47f98ba9cc68e7156e69f3964533a07041beefd9b3e2e6f1d9bb72dfbd10e6892da5cbac8b9871418ad6a966841b2d9889a840f310df117a092edddb36febbae6c09ab", 0xfdef}], 0x1000000000000040) 17.137044165s ago: executing program 0 (id=3275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, '\'\'', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) eventfd2(0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0) 16.755868932s ago: executing program 6 (id=3276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x5) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe800000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x538, &(0x7f0000003480)="$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") mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x22) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="2e000300010000", 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 16.696067738s ago: executing program 1 (id=3277): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001000)=0x1) 15.510881164s ago: executing program 6 (id=3278): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x1, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0000010}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000100)="83", 0x1) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x8001, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x108c2, 0x18) 15.261280049s ago: executing program 1 (id=3279): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) 13.833069309s ago: executing program 1 (id=3280): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0xa0000010}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000100)="83", 0x1) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x8001, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x108c2, 0x18) 13.150890237s ago: executing program 6 (id=3281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x890b, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000500)) 12.216009129s ago: executing program 6 (id=3282): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x2, 0xb2) chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x81) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) 11.523088347s ago: executing program 0 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r2, 0x21, 0x800001b, r4, 0x0) fanotify_mark(r2, 0x22, 0x40000038, r4, 0x0) 10.410987336s ago: executing program 8 (id=3284): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$cdc_ecm(0x0, 0xd5, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x200fffe, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 10.340070003s ago: executing program 0 (id=3285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) 9.503694445s ago: executing program 1 (id=3286): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020) 9.388361667s ago: executing program 6 (id=3287): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x7, 0x6, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 8.713453783s ago: executing program 1 (id=3288): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) 8.44001475s ago: executing program 6 (id=3289): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) 7.479100205s ago: executing program 57 (id=3289): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) 7.449129317s ago: executing program 8 (id=3291): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x8600, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x101, 0x70bd2c, 0x25dfdbff, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4040) 7.12149008s ago: executing program 1 (id=3292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, '\'\'', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) eventfd2(0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 5.757250704s ago: executing program 58 (id=3292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, '\'\'', 0x3a, './file0', 0x3a, [0x4f, 0x4f]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) eventfd2(0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 5.711873079s ago: executing program 8 (id=3294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r2, 0x21, 0x800001b, r4, 0x0) fanotify_mark(r2, 0x22, 0x40000038, r4, 0x0) 3.881914378s ago: executing program 8 (id=3295): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000004b680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0xa0000010}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000100)="83", 0x1) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x8001, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x108c2, 0x18) 3.36224118s ago: executing program 0 (id=3296): syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000480)={[{@map_off}, {}, {@hide}, {@map_acorn}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@mode={'mode', 0x3d, 0x7}}, {}]}, 0x1, 0x55e, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000000f00)="$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") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000000c0), 0x2, r3}, 0x38) 2.453694059s ago: executing program 0 (id=3297): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0xb0000014}) 1.768488006s ago: executing program 8 (id=3298): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x7, 0x6, 0xc}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 0s ago: executing program 8 (id=3299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) msgsnd(0x0, &(0x7f0000000180)={0x3, "f53ffe0f4a80527c479da402d1c6da7f43e68d68391b87cf915b4b0447bb"}, 0x26, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = fcntl$dupfd(r3, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x20000014}) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}], 0x2, 0x8001, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xffffffb9, 0x7, 0x0, 0x55a}) fchdir(0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) kernel console output (not intermixed with test programs): NF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 737.425613][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 737.508703][T11518] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1707'. [ 737.690568][T11504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.837281][T11538] syz.5.1711 uses obsolete (PF_INET,SOCK_PACKET) [ 737.944590][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1712'. [ 738.546351][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 738.557419][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.587099][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.790979][T11563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 738.827509][T11563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.854610][T11563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 739.333375][T11580] 9pnet_fd: Insufficient options for proto=fd [ 739.684494][T11588] fuse: Bad value for 'fd' [ 742.214232][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 742.228153][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 742.422351][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 742.449317][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 742.487562][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 742.496495][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 742.514260][T11218] device veth0_vlan entered promiscuous mode [ 742.590724][T11218] device veth1_vlan entered promiscuous mode [ 742.776147][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 742.798719][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 742.830994][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 742.841121][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 742.853775][T11218] device veth0_macvtap entered promiscuous mode [ 742.905552][T11218] device veth1_macvtap entered promiscuous mode [ 742.959088][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.970584][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.980900][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.992538][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.003387][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.014444][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.026771][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.035005][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 743.056129][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 743.069469][T11595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 743.083498][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 743.092971][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 743.104977][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.116504][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.135919][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.151059][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.165950][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.182783][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.198151][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.214351][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 743.224645][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 743.240121][T11218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.251165][T11218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.274158][T11218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.284480][T11218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.550400][ T6346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.691590][ T6346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.787955][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 743.811776][ T6615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.834120][ T6615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.869801][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 743.897280][T11643] fuse: Bad value for 'fd' [ 745.688692][T11694] fuse: Bad value for 'fd' [ 746.287185][T11715] 9pnet_fd: Insufficient options for proto=fd [ 746.394583][T11719] loop1: detected capacity change from 0 to 512 [ 746.440207][T11719] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 747.106235][T11741] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1758'. [ 747.116507][T11742] fuse: Bad value for 'fd' [ 747.369210][ T6346] kworker/u4:20: attempt to access beyond end of device [ 747.369210][ T6346] loop1: rw=1, sector=3216, nr_sectors = 4360 limit=512 [ 747.462255][ T6346] kworker/u4:20: attempt to access beyond end of device [ 747.462255][ T6346] loop1: rw=1, sector=7576, nr_sectors = 3640 limit=512 [ 748.014457][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.021666][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.216333][T11778] fuse: Bad value for 'fd' [ 748.442364][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 748.480292][T11783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1773'. [ 748.553119][T11789] loop0: detected capacity change from 0 to 512 [ 748.598774][T11789] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 749.515172][ T4358] kworker/u4:6: attempt to access beyond end of device [ 749.515172][ T4358] loop0: rw=1, sector=6152, nr_sectors = 3424 limit=512 [ 749.612352][T11813] 9pnet_fd: Insufficient options for proto=fd [ 749.989386][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1788'. [ 750.029914][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1788'. [ 750.463558][T11842] loop0: detected capacity change from 0 to 512 [ 750.539406][T11842] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 750.616415][T11853] fuse: Invalid rootmode [ 751.037499][T11867] 9pnet_fd: Insufficient options for proto=fd [ 752.929758][T11917] 9pnet_fd: Insufficient options for proto=fd [ 754.473736][T11969] 9pnet_fd: Insufficient options for proto=fd [ 756.184444][T11978] netlink: 'syz.1.1831': attribute type 12 has an invalid length. [ 757.081442][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 757.090677][T11986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1832'. [ 757.792062][T11971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 758.825432][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 758.865564][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 758.904079][T12044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 759.633997][T12073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1860'. [ 760.066231][T12090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1865'. [ 760.159148][T12095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1865'. [ 760.553429][T12100] kvm [12098]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x20000000 [ 760.596441][T12100] kvm [12098]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20000800 [ 760.618927][T12100] kvm [12098]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x20000000 [ 762.120191][T12152] fuse: Unknown parameter 'use00000000000000000000' [ 762.417905][T12157] 9pnet: Could not find request transport: fd0x0000000000000007 [ 762.608113][T12170] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1886'. [ 763.279270][T12191] 9pnet_fd: Insufficient options for proto=fd [ 763.485047][T12198] fuse: Unknown parameter 'user_i00000000000000000000' [ 763.897326][T12207] loop5: detected capacity change from 0 to 512 [ 763.951123][T12207] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 764.879971][T12240] fuse: Unknown parameter 'user_i00000000000000000000' [ 764.950736][ T6615] kworker/u4:21: attempt to access beyond end of device [ 764.950736][ T6615] loop5: rw=1, sector=2544, nr_sectors = 2048 limit=512 [ 765.060844][ T6615] kworker/u4:21: attempt to access beyond end of device [ 765.060844][ T6615] loop5: rw=1, sector=4592, nr_sectors = 2064 limit=512 [ 765.161884][ T6615] kworker/u4:21: attempt to access beyond end of device [ 765.161884][ T6615] loop5: rw=1, sector=6656, nr_sectors = 2144 limit=512 [ 765.679930][T12272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 765.955835][T12281] fuse: Unknown parameter 'user_i00000000000000000000' [ 766.822811][T12315] 9pnet_fd: Insufficient options for proto=fd [ 767.049656][T12326] syz.4.1935 (12326): /proc/12323/oom_adj is deprecated, please use /proc/12323/oom_score_adj instead. [ 768.383581][T12364] loop4: detected capacity change from 0 to 512 [ 768.436995][T12364] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 768.610944][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1949'. [ 769.407432][ T6615] kworker/u4:21: attempt to access beyond end of device [ 769.407432][ T6615] loop4: rw=1, sector=2552, nr_sectors = 2048 limit=512 [ 769.498228][ T6615] kworker/u4:21: attempt to access beyond end of device [ 769.498228][ T6615] loop4: rw=1, sector=4600, nr_sectors = 2048 limit=512 [ 769.565278][ T6615] kworker/u4:21: attempt to access beyond end of device [ 769.565278][ T6615] loop4: rw=1, sector=6648, nr_sectors = 1440 limit=512 [ 771.539262][T12429] 9pnet_fd: Insufficient options for proto=fd [ 772.714465][T12465] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1976'. [ 774.071722][T12506] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1989'. [ 774.705134][T12530] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 774.774306][T12530] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 774.829097][T12530] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 774.881468][T12530] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 774.901609][T12530] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 774.952836][T12530] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 775.002251][T12530] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 775.042992][T12530] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 775.061544][T12530] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 775.087174][T12530] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 777.550941][T12632] 9pnet_fd: Insufficient options for proto=fd [ 778.470614][T12669] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2039'. [ 779.025795][T12672] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2039'. [ 780.006015][T12687] fuse: Unknown parameter 'user_id00000000000000000000' [ 780.052763][T12689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2043'. [ 780.140306][T12686] create_pit_timer: 3 callbacks suppressed [ 780.140322][T12686] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 780.512304][T12686] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 781.473460][T12735] 9pnet_fd: Insufficient options for proto=fd [ 781.734844][T12745] sctp: [Deprecated]: syz.1.2059 (pid 12745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 781.734844][T12745] Use struct sctp_sack_info instead [ 781.831667][T12748] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2060'. [ 782.273894][T12752] 9pnet: Could not find request transport: fd0x0000000000000003 [ 782.371094][T12764] netlink: 'syz.0.2065': attribute type 12 has an invalid length. [ 783.573025][T12785] 9pnet_fd: Insufficient options for proto=fd [ 784.118384][T12810] kvm: pic: non byte read [ 784.134195][T12810] kvm: pic: non byte read [ 784.162769][T12814] fuse: Bad value for 'fd' [ 784.271512][T12804] 9pnet: Could not find request transport: fd0x0000000000000003 [ 784.568542][T12827] netlink: 'syz.0.2082': attribute type 12 has an invalid length. [ 785.732471][T12848] fuse: Bad value for 'fd' [ 786.131151][T12857] 9pnet: Could not find request transport: fd0x0000000000000003 [ 787.773209][T12890] netlink: 'syz.6.2103': attribute type 12 has an invalid length. [ 787.840098][T12899] 9pnet_fd: Insufficient options for proto=fd [ 787.882106][T12894] fuse: Unknown parameter '0x0000000000000003' [ 788.343598][T12911] loop5: detected capacity change from 0 to 512 [ 788.495959][T12911] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 788.516051][T12911] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 788.546172][T12911] EXT4-fs warning (device loop5): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 788.774274][ T9047] EXT4-fs (loop5): unmounting filesystem. [ 789.237766][T12942] 9pnet_fd: Insufficient options for proto=fd [ 789.480244][T12947] fuse: Unknown parameter '0x0000000000000003' [ 791.095342][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 791.584258][T12923] loop0: detected capacity change from 0 to 128 [ 792.281289][T12989] 9pnet_fd: Insufficient options for proto=fd [ 792.406453][T12995] fuse: Unknown parameter '0x0000000000000003' [ 792.541716][T12998] netlink: 'syz.0.2135': attribute type 12 has an invalid length. [ 796.727108][T13043] 9pnet_fd: Insufficient options for proto=fd [ 797.767603][T13073] netlink: 'syz.4.2155': attribute type 12 has an invalid length. [ 799.582652][T13082] loop6: detected capacity change from 0 to 512 [ 799.636172][T13082] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 800.181507][T13100] 9pnet_fd: Insufficient options for proto=fd [ 800.404942][T13109] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2165'. [ 800.687888][T13121] loop6: detected capacity change from 0 to 16 [ 800.740245][T13121] erofs: (device loop6): mounted with root inode @ nid 36. [ 800.983776][T13127] fuse: Unknown parameter 'fd0x0000000000000003' [ 801.520023][T13141] netlink: 'syz.6.2174': attribute type 12 has an invalid length. [ 801.796451][T13147] loop0: detected capacity change from 0 to 1024 [ 801.846973][T13149] 9pnet_fd: Insufficient options for proto=fd [ 801.909948][T13147] EXT4-fs error (device loop0): __ext4_fill_super:5404: comm syz.0.2176: inode #2: comm syz.0.2176: iget: illegal inode # [ 802.026583][T13147] EXT4-fs (loop0): get root inode failed [ 802.033694][T13147] EXT4-fs (loop0): mount failed [ 802.442037][T13169] fuse: Unknown parameter 'fd0x0000000000000003' [ 802.530883][T13172] loop1: detected capacity change from 0 to 2048 [ 802.644779][T13172] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 802.759585][T13185] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 802.778453][T13185] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 802.791633][T13185] EXT4-fs (loop1): This should not happen!! Data will be lost [ 802.791633][T13185] [ 802.802177][T13185] EXT4-fs (loop1): Total free blocks count 0 [ 802.808298][T13185] EXT4-fs (loop1): Free/Dirty block details [ 802.814567][T13185] EXT4-fs (loop1): free_blocks=2415919504 [ 802.820504][T13185] EXT4-fs (loop1): dirty_blocks=32 [ 802.825899][T13185] EXT4-fs (loop1): Block reservation details [ 802.832121][T13185] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 803.228322][T13193] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 803.255564][T13193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 803.320141][T13193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 803.489362][ T4849] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 804.662270][T13207] netlink: 'syz.4.2192': attribute type 12 has an invalid length. [ 805.069917][T13221] fuse: Unknown parameter 'fd0x0000000000000003' [ 806.020134][T13243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 806.045637][T13243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 806.067614][T13243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 806.249238][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 806.272689][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 808.718552][ T4279] Bluetooth: hci5: unexpected subevent 0x06 length: 30 > 10 [ 808.745753][T13287] loop0: detected capacity change from 0 to 16 [ 808.788059][T13287] erofs: (device loop0): mounted with root inode @ nid 36. [ 808.900921][T13287] syz.0.2216: attempt to access beyond end of device [ 808.900921][T13287] loop0: rw=0, sector=8, nr_sectors = 16 limit=16 [ 809.458850][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.467361][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.811399][ T4279] Bluetooth: hci5: command 0x2021 tx timeout [ 810.925689][T13313] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2223'. [ 811.323487][T13322] loop4: detected capacity change from 0 to 1024 [ 811.383423][T13322] EXT4-fs: Ignoring removed bh option [ 811.447581][T13322] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 811.663880][T13322] EXT4-fs error (device loop4): mb_free_blocks:1810: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 811.666895][ T4348] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 811.703516][T13322] EXT4-fs (loop4): Remounting filesystem read-only [ 811.772720][T13335] loop1: detected capacity change from 0 to 256 [ 811.870250][T11218] EXT4-fs (loop4): unmounting filesystem. [ 811.969497][ T4348] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 812.023033][ T4348] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 812.093856][ T4348] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 812.160114][ T4348] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.219713][ T4348] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.545462][T13347] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2231'. [ 813.041446][T13348] loop4: detected capacity change from 0 to 8192 [ 813.970335][ T4348] snd-usb-audio: probe of 7-1:27.0 failed with error -12 [ 814.073249][T10662] udevd[10662]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.125322][ T4348] usb 7-1: USB disconnect, device number 2 [ 815.876888][T13375] device syzkaller0 entered promiscuous mode [ 817.628557][T13384] loop0: detected capacity change from 0 to 1024 [ 817.750135][T13384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 818.563860][T13384] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 818.674557][T13384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 818.815081][T13384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 818.817947][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 819.013116][ T14] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 819.015526][ T8674] EXT4-fs (loop0): unmounting filesystem. [ 819.031234][ T14] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 819.071256][ T14] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 819.117848][ T14] usb 7-1: config 220 has no interface number 2 [ 819.163111][ T14] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 819.218033][ T14] usb 7-1: config 220 interface 0 has no altsetting 0 [ 819.254436][ T14] usb 7-1: config 220 interface 76 has no altsetting 0 [ 819.283412][ T14] usb 7-1: config 220 interface 1 has no altsetting 0 [ 819.497584][ T14] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 819.514156][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.522704][ T14] usb 7-1: Product: syz [ 819.527111][ T14] usb 7-1: Manufacturer: syz [ 819.536095][ T14] usb 7-1: SerialNumber: syz [ 819.594360][T13411] Bluetooth: MGMT ver 1.22 [ 820.513609][ T14] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 820.571594][ T14] usb 7-1: No valid video chain found. [ 820.586161][ T14] usb 7-1: selecting invalid altsetting 0 [ 820.960956][ T14] usb 7-1: selecting invalid altsetting 0 [ 821.109218][ T14] usbtest: probe of 7-1:220.1 failed with error -22 [ 821.332337][ T14] usb 7-1: USB disconnect, device number 3 [ 822.960042][T13475] loop6: detected capacity change from 0 to 512 [ 823.100673][T13475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 823.165671][T13483] loop5: detected capacity change from 0 to 512 [ 823.269125][T13483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 823.292294][T10681] EXT4-fs (loop6): unmounting filesystem. [ 823.331482][T13483] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 823.594557][T13483] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 823.632166][T13483] EXT4-fs (loop5): 1 truncate cleaned up [ 823.637982][T13483] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 823.803243][T13499] loop0: detected capacity change from 0 to 256 [ 823.844043][ T9047] EXT4-fs (loop5): unmounting filesystem. [ 823.878128][T13499] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 823.924079][T13499] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 823.998751][T13499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 825.796673][ T4279] Bluetooth: hci2: link tx timeout [ 825.802925][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 826.359393][T13525] loop6: detected capacity change from 0 to 512 [ 826.445160][T13525] EXT4-fs: Ignoring removed bh option [ 826.538662][T13531] loop5: detected capacity change from 0 to 16 [ 826.586093][T13531] erofs: (device loop5): mounted with root inode @ nid 36. [ 827.147398][T13525] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 828.580788][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 828.842237][T13525] EXT4-fs (loop6): 1 truncate cleaned up [ 828.867296][T13525] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 829.966701][T10681] EXT4-fs (loop6): unmounting filesystem. [ 830.281318][ T7] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 830.479189][T13547] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2286'. [ 830.512545][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 830.533580][ T7] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 830.552548][ T7] usb 6-1: can't read configurations, error -71 [ 831.231286][ T2185] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 831.424720][ T2185] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.454360][ T2185] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.481435][ T2185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.510253][ T2185] usb 5-1: Product: syz [ 831.520408][ T2185] usb 5-1: Manufacturer: syz [ 831.540725][ T2185] usb 5-1: SerialNumber: syz [ 831.655297][T13569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 831.733707][ T8559] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 831.931572][ T8559] usb 2-1: Using ep0 maxpacket: 32 [ 831.940448][ T8559] usb 2-1: unable to get BOS descriptor or descriptor too short [ 831.961119][ T8559] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 831.981109][ T8559] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 832.002649][ T8559] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 832.030346][ T8559] usb 2-1: config 128 has no interface number 0 [ 832.042726][ T8559] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 832.068721][ T8559] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 832.101312][ T8559] usb 2-1: config 128 interface 127 has no altsetting 0 [ 832.125492][ T8559] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 832.165589][ T8559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.193904][ T8559] usb 2-1: Product: syz [ 832.206597][ T8559] usb 2-1: Manufacturer: syz [ 832.231405][ T8559] usb 2-1: SerialNumber: syz [ 832.577210][ T8559] usb 2-1: USB disconnect, device number 2 [ 832.600573][ T2185] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 832.614636][ T2185] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 832.802087][ T2185] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 832.823621][T10658] udevd[10658]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 832.852842][ T2185] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 832.941212][ T2185] usb 5-1: USB disconnect, device number 2 [ 832.962055][ T2185] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 833.804147][T13642] loop4: detected capacity change from 0 to 8 [ 836.561448][ T26] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 837.564500][ T4285] Bluetooth: hci2: link tx timeout [ 837.571511][ T4285] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 837.811408][ T26] usb 7-1: Using ep0 maxpacket: 8 [ 838.138817][ T26] usb 7-1: device descriptor read/all, error -71 [ 838.195123][T13703] loop1: detected capacity change from 0 to 512 [ 839.506020][T13721] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 842.479863][T13770] loop5: detected capacity change from 0 to 164 [ 843.637202][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 843.881319][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 843.888229][ T26] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 843.946521][ T26] usb 5-1: config 0 has no interface number 0 [ 843.972794][ T26] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 844.014327][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.051292][ T26] usb 5-1: Product: syz [ 844.055632][ T26] usb 5-1: Manufacturer: syz [ 844.080650][ T26] usb 5-1: SerialNumber: syz [ 844.106084][ T26] usb 5-1: config 0 descriptor?? [ 844.138589][ T26] smsc95xx v2.0.0 [ 845.335607][ T26] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 845.366276][T13811] loop5: detected capacity change from 0 to 128 [ 845.368456][ T26] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 845.422158][ T26] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 845.489663][T10658] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 845.496225][ T26] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 845.560350][ T26] usb 5-1: USB disconnect, device number 3 [ 845.795936][T13818] loop1: detected capacity change from 0 to 1024 [ 847.590683][T13831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 847.614765][T13831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 847.656968][T13831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 847.786722][T13835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2362'. [ 847.817868][T13836] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2362'. [ 848.355295][T13847] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2365'. [ 848.397076][T13847] device gretap0 entered promiscuous mode [ 848.459583][T13854] fuse: Unknown parameter 'fd0xffffffffffffffff0000000000000000000500000000000000000000' [ 849.170883][T13847] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 849.297213][T13847] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2365'. [ 851.822883][T13879] loop4: detected capacity change from 0 to 1024 [ 852.159844][T13879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 852.530115][T11218] EXT4-fs (loop4): unmounting filesystem. [ 852.761541][T13903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 852.784357][T13903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.872532][T13903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 853.561818][T13929] loop1: detected capacity change from 0 to 164 [ 854.140581][T13929] Unable to read rock-ridge attributes [ 854.430132][T13928] Unable to read rock-ridge attributes [ 855.166856][T13950] loop6: detected capacity change from 0 to 2048 [ 855.220152][T13950] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 858.595224][T13995] loop4: detected capacity change from 0 to 1024 [ 858.680944][T13998] loop0: detected capacity change from 0 to 1024 [ 858.832569][T13998] EXT4-fs error (device loop0): __ext4_fill_super:5404: inode #2: comm syz.0.2400: iget: bogus i_mode (110000) [ 858.846479][T13998] EXT4-fs (loop0): get root inode failed [ 858.847326][T13995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 858.852345][T13998] EXT4-fs (loop0): mount failed [ 858.971420][T13995] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.252902][ T27] audit: type=1800 audit(1760846113.618:138): pid=13995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2401" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 859.255130][T13995] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.2401: lblock 0 mapped to illegal pblock 0 (length 6) [ 859.440271][T14015] loop0: detected capacity change from 0 to 256 [ 859.469339][T13995] EXT4-fs (loop4): Remounting filesystem read-only [ 859.482216][T13995] EXT4-fs error (device loop4): ext4_ext_remove_space:2930: inode #15: comm syz.4.2401: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 861.014410][T14021] loop1: detected capacity change from 0 to 128 [ 861.036679][T14015] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 861.101803][T13995] EXT4-fs (loop4): Remounting filesystem read-only [ 861.122850][T14021] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 861.347358][T11218] EXT4-fs (loop4): unmounting filesystem. [ 861.916511][T14045] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 861.974161][T14045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 862.022026][T14045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 868.599049][T14110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 868.629595][T14110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 868.659203][T14110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 869.333974][ T4296] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 869.436887][T14123] loop6: detected capacity change from 0 to 256 [ 869.563744][T14132] mmap: syz.1.2433 (14132): VmData 29085696 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 869.615788][T14123] exFAT-fs (loop6): invalid fs_name [ 871.083308][T14123] exFAT-fs (loop6): failed to read boot sector [ 871.089573][T14123] exFAT-fs (loop6): failed to recognize exfat type [ 871.104773][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.171563][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.291299][ T8559] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 872.567179][ T8559] usb 6-1: Using ep0 maxpacket: 32 [ 872.647740][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 872.670691][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 872.691537][ T8559] usb 6-1: device descriptor read/all, error -71 [ 874.467119][T14165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 874.531508][T14165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 874.551661][T14165] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 875.365849][T14190] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2448'. [ 875.383547][T14190] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2448'. [ 876.595404][T14209] loop6: detected capacity change from 0 to 2048 [ 876.926836][T14209] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 879.062408][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 879.105031][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 879.121535][T14217] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 883.050385][T14255] loop1: detected capacity change from 0 to 512 [ 885.006664][T14255] EXT4-fs: Ignoring removed nobh option [ 885.077610][T14255] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 885.144863][T14255] EXT4-fs (loop1): Test dummy encryption mode enabled [ 885.168383][T14278] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2459'. [ 885.245362][T14255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 885.254216][T14281] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2459'. [ 885.438935][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 885.519844][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 885.634009][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 885.670104][T14287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 888.041533][T14310] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 888.105968][T14318] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 888.143308][T14318] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 888.183966][T14318] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 889.246390][T14343] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 889.289435][T14343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 889.313126][T14343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 891.494503][T14384] loop1: detected capacity change from 0 to 512 [ 891.542287][T14384] EXT4-fs: Ignoring removed bh option [ 893.076803][T14384] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 893.087366][T14387] loop0: detected capacity change from 0 to 1024 [ 893.127384][T14384] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 893.364641][T14384] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 893.417309][T14384] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 893.663194][T14384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 894.045822][T14399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.191699][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 894.695673][T14417] loop4: detected capacity change from 0 to 1024 [ 895.896973][T14419] hfsplus: xattr searching failed [ 896.433884][T14438] loop1: detected capacity change from 0 to 256 [ 896.509861][T14438] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 896.638964][T14438] syz.1.2513: attempt to access beyond end of device [ 896.638964][T14438] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 896.715044][T14436] loop4: detected capacity change from 0 to 8192 [ 896.731986][T14438] syz.1.2513: attempt to access beyond end of device [ 896.731986][T14438] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 896.845269][ T27] audit: type=1800 audit(1760846151.208:139): pid=14436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2511" name="file1" dev="loop4" ino=1048757 res=0 errno=0 [ 896.919775][T14438] syz.1.2513: attempt to access beyond end of device [ 896.919775][T14438] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 897.064862][ T27] audit: type=1800 audit(1760846151.298:140): pid=14438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2513" name="file1" dev="loop1" ino=1048756 res=0 errno=0 [ 897.177366][T14439] device batadv_slave_1 entered promiscuous mode [ 897.290333][T14437] device batadv_slave_1 left promiscuous mode [ 898.890588][T14462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 898.976601][T14462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 899.033676][T14462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 900.019300][T14488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2521'. [ 901.879149][T14502] loop0: detected capacity change from 0 to 128 [ 901.985075][T14492] loop5: detected capacity change from 0 to 1024 [ 902.115718][T14502] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 902.162392][T14492] hfsplus: xattr searching failed [ 902.215037][T14502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 902.557802][T14509] loop4: detected capacity change from 0 to 256 [ 902.603293][T14509] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 902.760439][T14513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 902.794860][T14513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.534455][T14513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.560719][T11218] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 903.639237][T11218] FAT-fs (loop4): Filesystem has been set read-only [ 903.646528][T11218] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 904.147741][T14529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2534'. [ 905.034895][T14561] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2542'. [ 905.055096][T14561] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2542'. [ 905.086677][T14555] loop0: detected capacity change from 0 to 1024 [ 905.155271][T14555] hfsplus: xattr searching failed [ 905.198313][T14555] hfsplus: xattr searching failed [ 905.209974][T14565] loop6: detected capacity change from 0 to 1024 [ 905.235666][T14555] hfsplus: xattr searching failed [ 907.135039][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2547'. [ 908.069430][T14589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.092865][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 908.104581][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 908.113647][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 908.122110][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 908.193303][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 908.202337][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 908.662961][T14605] loop6: detected capacity change from 0 to 256 [ 908.914166][T14609] hub 1-0:1.0: USB hub found [ 908.922807][T14609] hub 1-0:1.0: 1 port detected [ 909.219749][T14605] FAT-fs (loop6): Directory bread(block 64) failed [ 909.378461][T14605] FAT-fs (loop6): Directory bread(block 65) failed [ 909.411565][T14605] FAT-fs (loop6): Directory bread(block 66) failed [ 909.418314][T14605] FAT-fs (loop6): Directory bread(block 67) failed [ 909.561385][T14605] FAT-fs (loop6): Directory bread(block 68) failed [ 909.568308][T14605] FAT-fs (loop6): Directory bread(block 69) failed [ 909.591415][T14605] FAT-fs (loop6): Directory bread(block 70) failed [ 909.598140][T14605] FAT-fs (loop6): Directory bread(block 71) failed [ 909.730482][T14605] FAT-fs (loop6): Directory bread(block 72) failed [ 909.768214][T14605] FAT-fs (loop6): Directory bread(block 73) failed [ 909.806666][T14587] chnl_net:caif_netlink_parms(): no params data found [ 911.447826][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 911.628624][T14587] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.636720][T14587] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.654331][T14624] syz.6.2554: attempt to access beyond end of device [ 911.654331][T14624] loop6: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 911.670187][T14624] loop2: detected capacity change from 0 to 7 [ 911.689743][T14624] Dev loop2: unable to read RDB block 7 [ 911.695564][T14624] loop2: AHDI p1 p2 p3 [ 911.699996][T14624] loop2: partition table partially beyond EOD, truncated [ 911.707444][T14624] loop2: p1 start 1601398130 is beyond EOD, truncated [ 911.714547][T14624] loop2: p2 start 1702059890 is beyond EOD, truncated [ 911.791685][T14587] device bridge_slave_0 entered promiscuous mode [ 911.835785][T14587] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.881853][T14587] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.890311][T14587] device bridge_slave_1 entered promiscuous mode [ 911.909866][T14634] loop1: detected capacity change from 0 to 1024 [ 911.971423][T14634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 912.035159][T14634] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.083782][T14587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.212724][T14634] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 912.228789][T14587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.329854][T14634] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 912.462786][T14634] EXT4-fs (loop1): This should not happen!! Data will be lost [ 912.462786][T14634] [ 912.477474][T14587] team0: Port device team_slave_0 added [ 912.498136][T14634] EXT4-fs (loop1): Total free blocks count 0 [ 912.513160][T14587] team0: Port device team_slave_1 added [ 912.525896][T14634] EXT4-fs (loop1): Free/Dirty block details [ 912.551573][T14634] EXT4-fs (loop1): free_blocks=4293918720 [ 912.557863][T14634] EXT4-fs (loop1): dirty_blocks=16 [ 912.589007][T14587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.606580][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.640736][T14634] EXT4-fs (loop1): Block reservation details [ 912.684850][T14634] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 912.720936][T14587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.734370][T14587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.750392][T14587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.531555][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 913.627069][T14587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.086817][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 914.478367][T14587] device hsr_slave_0 entered promiscuous mode [ 914.517259][T14587] device hsr_slave_1 entered promiscuous mode [ 914.557273][T14587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.581546][T14587] Cannot create hsr debugfs directory [ 915.611332][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 915.806450][T14677] loop6: detected capacity change from 0 to 2048 [ 915.858246][T14677] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 917.246973][T14695] loop5: detected capacity change from 0 to 1024 [ 917.692716][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 918.542324][T14704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.893451][T14709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.038124][T14714] loop1: detected capacity change from 0 to 1024 [ 919.048504][T14712] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 919.076170][T14712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 919.097853][T14695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.111958][T14714] EXT4-fs error (device loop1): __ext4_fill_super:5404: comm syz.1.2576: inode #2: comm syz.1.2576: iget: illegal inode # [ 919.140191][T14712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 919.167745][T14693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.204361][T14714] EXT4-fs (loop1): get root inode failed [ 919.210111][T14714] EXT4-fs (loop1): mount failed [ 919.390973][T14587] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 919.404516][T14587] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 919.418808][T14587] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 919.438868][T14587] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 919.537421][T14587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.555494][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 919.566017][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 919.580604][T14587] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.592677][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 919.602708][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 919.612720][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.620009][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.645159][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 919.663886][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 919.673605][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 919.683985][ T4411] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.691206][ T4411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.700457][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 919.722364][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 919.748709][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 919.807605][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 919.832303][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 919.926554][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 919.963566][T14587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.989509][T14587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 920.269256][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 920.344966][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 920.530434][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 920.660316][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 920.701074][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 920.786618][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 921.888131][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 923.198269][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 923.686731][T14587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.451561][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 927.488112][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 927.601355][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 927.632146][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 927.662546][T14587] device veth0_vlan entered promiscuous mode [ 927.699498][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 927.708934][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 927.785394][T14820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 927.805545][T14820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 927.881609][T14820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 927.959349][T14587] device veth1_vlan entered promiscuous mode [ 928.250500][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 928.277458][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 928.549938][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 928.654675][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 928.687443][T14587] device veth0_macvtap entered promiscuous mode [ 928.711466][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 928.753171][T14587] device veth1_macvtap entered promiscuous mode [ 928.827209][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.845578][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.859693][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.885945][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.899975][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.920673][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.941841][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.960602][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.989379][T14587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.006847][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 929.033043][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 929.080390][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.156995][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.194691][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.246216][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.274800][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.295480][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.411598][T14587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 929.478524][T14587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 929.550304][T14587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.044484][T14587] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.195016][T14587] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.251198][T14587] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.332271][T14587] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.409285][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 930.436939][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 931.244019][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.269854][T14868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 931.278757][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.669391][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.676280][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.698790][T14868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 932.766445][T14868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 933.702852][T14873] device syzkaller0 entered promiscuous mode [ 933.710282][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 936.401563][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.533781][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.586157][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 936.865867][ T4279] Bluetooth: hci2: Malformed LE Event: 0x02 [ 938.792734][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 938.882595][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.390262][T14919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 941.881989][T14940] loop0: detected capacity change from 0 to 8 [ 942.386317][T14940] SQUASHFS error: Failed to read block 0x4de: -5 [ 942.449011][T14940] SQUASHFS error: Failed to read block 0x4de: -5 [ 942.471512][ T27] audit: type=1800 audit(1760846196.838:141): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2630" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 945.332744][T14958] loop1: detected capacity change from 0 to 1024 [ 945.747719][T14958] EXT4-fs error (device loop1): __ext4_fill_super:5404: comm syz.1.2623: inode #2: comm syz.1.2623: iget: illegal inode # [ 945.791804][T14958] EXT4-fs (loop1): get root inode failed [ 945.797755][T14958] EXT4-fs (loop1): mount failed [ 945.857276][T14970] loop6: detected capacity change from 0 to 512 [ 945.969219][T14970] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2636: casefold flag without casefold feature [ 946.091592][T14970] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2636: couldn't read orphan inode 15 (err -117) [ 946.154481][T14970] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 946.176075][T14976] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 946.216118][T14976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 946.259840][T14976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 946.290432][T14979] loop0: detected capacity change from 0 to 2048 [ 946.303352][T10681] EXT4-fs (loop6): unmounting filesystem. [ 946.363967][T14979] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 950.128548][T15006] capability: warning: `syz.5.2635' uses 32-bit capabilities (legacy support in use) [ 951.527460][T15009] loop9: detected capacity change from 0 to 512 [ 951.668314][T15009] EXT4-fs (loop9): orphan cleanup on readonly fs [ 951.769795][T15009] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2644: invalid indirect mapped block 28777 (level 2) [ 951.875802][T15009] EXT4-fs (loop9): 1 truncate cleaned up [ 951.911261][T15009] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 951.991974][T15009] EXT4-fs: Ignoring removed bh option [ 951.998407][T15009] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 952.085703][T15019] loop6: detected capacity change from 0 to 256 [ 952.094627][T15009] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 953.872880][T15019] FAT-fs (loop6): bogus sectors per cluster 223 [ 953.879301][T15019] FAT-fs (loop6): Can't find a valid FAT filesystem [ 954.024607][T14587] EXT4-fs (loop9): unmounting filesystem. [ 954.113835][T15028] loop1: detected capacity change from 0 to 2048 [ 954.166251][T15028] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 954.307230][T10643] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 955.794272][T15034] loop6: detected capacity change from 0 to 16 [ 955.833274][T15034] erofs: (device loop6): mounted with root inode @ nid 36. [ 959.238214][T15082] loop0: detected capacity change from 0 to 512 [ 963.415137][T15100] loop1: detected capacity change from 0 to 2048 [ 963.449634][T15100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 964.902592][T15116] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2657'. [ 964.952705][T15116] netlink: 'syz.6.2657': attribute type 1 has an invalid length. [ 965.425339][T15130] loop0: detected capacity change from 0 to 2048 [ 965.494608][T15130] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 965.575249][T15130] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 965.653516][T15130] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 965.699223][T15130] UDF-fs: Scanning with blocksize 512 failed [ 965.777894][T15130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 966.618914][T15157] loop6: detected capacity change from 0 to 8 [ 966.756697][T15159] loop1: detected capacity change from 0 to 256 [ 966.803389][T15163] hub 1-0:1.0: USB hub found [ 966.809154][T15163] hub 1-0:1.0: 1 port detected [ 966.927232][T15159] exfat: Bad value for 'uid' [ 967.464323][T10662] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 967.881155][T15174] blktrace: Concurrent blktraces are not allowed on loop0 [ 968.607636][T15181] loop0: detected capacity change from 0 to 1024 [ 968.621259][ T8042] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 968.674584][T15184] loop1: detected capacity change from 0 to 128 [ 968.708343][T15184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 968.762214][T15184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 968.781277][ T8042] usb 7-1: device descriptor read/64, error -71 [ 968.806657][T15184] EXT4-fs (loop1): Test dummy encryption mode enabled [ 968.878385][ T4971] hfsplus: b-tree write err: -5, ino 4 [ 968.885817][T15184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 969.001631][T15184] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 969.149778][ T8042] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 971.233376][T15207] loop5: detected capacity change from 0 to 4096 [ 971.341326][T15207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 971.429570][T15207] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c09c, mo2=0002] [ 971.446065][T15213] loop6: detected capacity change from 0 to 1024 [ 971.466567][T15207] System zones: 0-5 [ 971.515689][T15207] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 971.774662][T15225] loop9: detected capacity change from 0 to 16 [ 971.831978][T15225] erofs: (device loop9): mounted with root inode @ nid 36. [ 972.426172][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 972.462151][T15213] hfsplus: xattr searching failed [ 972.749137][ T9047] EXT4-fs (loop5): unmounting filesystem. [ 972.962220][ T4849] hfsplus: bad catalog file entry [ 972.971694][ T4849] hfsplus: b-tree write err: -5, ino 3 [ 973.193211][T15234] hub 1-0:1.0: USB hub found [ 973.200403][T15234] hub 1-0:1.0: 1 port detected [ 976.670681][T15260] input: syz1 as /devices/virtual/input/input6 [ 977.469403][T15261] loop6: detected capacity change from 0 to 512 [ 978.403352][T15272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 978.463550][T15272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 978.501645][T15272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 979.301231][ T4925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 979.511289][ T4925] usb 1-1: Using ep0 maxpacket: 8 [ 979.518475][ T4925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 980.973648][ T4279] Bluetooth: hci2: link tx timeout [ 980.979870][ T4279] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 980.991872][ T4279] Bluetooth: hci2: link tx timeout [ 980.997067][ T4279] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 981.052972][ T4925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.104514][ T4925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.202024][ T4925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 981.242789][ T4925] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 981.283736][ T4925] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 981.321722][ T4925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.387292][ T4925] usb 1-1: config 0 descriptor?? [ 981.493977][ T4279] Bluetooth: hci4: urb ffff888028586300 submission failed (90) [ 981.610477][ T4925] usb 1-1: USB disconnect, device number 2 [ 982.201666][T15297] loop5: detected capacity change from 0 to 16 [ 982.272706][T15297] erofs: (device loop5): mounted with root inode @ nid 36. [ 983.111392][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 983.365944][T15308] loop6: detected capacity change from 0 to 164 [ 983.543620][T15308] Bluetooth: MGMT ver 1.22 [ 984.770197][T15321] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 985.131524][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 986.304020][T15335] hub 1-0:1.0: USB hub found [ 986.309678][T15335] hub 1-0:1.0: 1 port detected [ 986.923564][T15334] loop0: detected capacity change from 0 to 512 [ 987.411157][T15341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2721'. [ 989.887901][T15357] loop5: detected capacity change from 0 to 512 [ 991.324005][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 992.171430][ T14] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 992.381374][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 992.389139][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 992.419406][ T14] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 992.461283][ T14] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 992.487901][ T14] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 992.507257][ T14] usb 1-1: config 128 has no interface number 0 [ 992.528648][ T14] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 992.593704][ T14] usb 1-1: config 128 interface 127 has no altsetting 0 [ 992.821332][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 992.842375][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.851550][ T14] usb 1-1: Product: syz [ 992.856098][ T14] usb 1-1: Manufacturer: syz [ 992.865735][ T14] usb 1-1: SerialNumber: syz [ 993.524870][T15366] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 993.644205][T15388] loop9: detected capacity change from 0 to 2048 [ 993.725218][T15388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 993.774409][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.783945][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.843664][ T14] usb 1-1: USB disconnect, device number 3 [ 994.609997][T10662] udevd[10662]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.626746][T15402] loop1: detected capacity change from 0 to 512 [ 994.637656][T15402] ext3: Bad value for 'debug_want_extra_isize' [ 994.716873][T15406] fuse: Bad value for 'fd' [ 994.737873][T15408] loop6: detected capacity change from 0 to 512 [ 997.991503][T15427] loop6: detected capacity change from 0 to 1024 [ 998.605927][T15436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 998.702093][T15436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 998.721339][T15419] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 998.752815][T15436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 998.774343][T15419] SQUASHFS error: Failed to read block 0x0: -5 [ 1000.265476][T15454] loop0: detected capacity change from 0 to 2048 [ 1000.482399][T15459] input: syz1 as /devices/virtual/input/input8 [ 1001.427647][T15454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1001.961251][T15468] blktrace: Concurrent blktraces are not allowed on loop0 [ 1002.907410][T15472] loop6: detected capacity change from 0 to 512 [ 1002.911761][T15474] loop9: detected capacity change from 0 to 1024 [ 1006.183433][T15520] blktrace: Concurrent blktraces are not allowed on loop0 [ 1007.159217][T15526] loop6: detected capacity change from 0 to 2048 [ 1007.238803][T15526] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1007.321415][T15526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1007.360534][T15534] loop1: detected capacity change from 0 to 512 [ 1007.874446][T15540] binder: 15536:15540 ioctl c00c620f 200000000140 returned -22 [ 1008.094119][T15542] loop9: detected capacity change from 0 to 1024 [ 1008.328285][T15542] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1008.391441][T15542] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.167640][ T4467] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 1009.268336][ T4467] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1009.331278][ T4467] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1009.331278][ T4467] [ 1009.393886][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1009.429207][T15561] loop0: detected capacity change from 0 to 4096 [ 1009.566553][T15565] loop1: detected capacity change from 0 to 512 [ 1009.580608][T15561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1010.270839][T15584] blktrace: Concurrent blktraces are not allowed on loop0 [ 1010.959975][T15561] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.2775: corrupted inode contents [ 1011.151154][T15561] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #15: comm syz.0.2775: mark_inode_dirty error [ 1012.682384][T15561] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.2775: corrupted inode contents [ 1012.721641][T15561] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.2775: mark_inode_dirty error [ 1012.792771][T15561] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.2775: corrupted inode contents [ 1013.057537][T15561] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #15: comm syz.0.2775: mark_inode_dirty error [ 1013.131729][T15561] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #15: comm syz.0.2775: corrupted inode contents [ 1013.139036][T15602] loop5: detected capacity change from 0 to 512 [ 1013.183377][T15604] loop1: detected capacity change from 0 to 8 [ 1013.381240][T15561] EXT4-fs error (device loop0): ext4_truncate:4312: inode #15: comm syz.0.2775: mark_inode_dirty error [ 1013.579168][T15561] EXT4-fs error (device loop0) in ext4_setattr:5658: Corrupt filesystem [ 1014.309887][ T8674] EXT4-fs (loop0): unmounting filesystem. [ 1015.762293][T15633] loop0: detected capacity change from 0 to 2048 [ 1015.770119][T15633] UDF-fs: bad mount option "…*bs" or missing value [ 1018.098686][T15644] loop5: detected capacity change from 0 to 512 [ 1018.147230][T15644] EXT4-fs: Ignoring removed bh option [ 1018.225549][T15648] loop9: detected capacity change from 0 to 1024 [ 1018.362537][T15644] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1018.379056][T15656] loop6: detected capacity change from 0 to 8 [ 1018.911583][T15644] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.943342][T15648] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1018.971671][T15648] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.319734][T15648] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1019.481318][T15648] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 1019.526296][T15664] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2800'. [ 1019.794355][T15648] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1019.794355][T15648] [ 1019.855487][T15648] EXT4-fs (loop9): Total free blocks count 0 [ 1019.882181][T15648] EXT4-fs (loop9): Free/Dirty block details [ 1019.906877][T15648] EXT4-fs (loop9): free_blocks=4293918720 [ 1019.985048][T15648] EXT4-fs (loop9): dirty_blocks=16 [ 1019.990820][T15648] EXT4-fs (loop9): Block reservation details [ 1020.058714][T15648] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 1020.225234][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1020.597828][ T7874] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1021.491261][ T7874] usb 2-1: device descriptor read/64, error -71 [ 1021.493427][ T9047] EXT4-fs (loop5): unmounting filesystem. [ 1021.761258][ T7874] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1021.911260][ T7874] usb 2-1: device descriptor read/64, error -71 [ 1022.035205][ T7874] usb usb2-port1: attempt power cycle [ 1022.454130][ T7874] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1022.492063][ T7874] usb 2-1: device descriptor read/8, error -71 [ 1022.623789][T15711] input: syz1 as /devices/virtual/input/input9 [ 1022.771373][ T7874] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1022.905526][T15714] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2813'. [ 1023.021214][ T7874] usb 2-1: device not accepting address 6, error -71 [ 1023.031740][ T7874] usb usb2-port1: unable to enumerate USB device [ 1024.271330][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2818'. [ 1024.366346][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2818'. [ 1024.428126][T15729] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2818'. [ 1025.003011][T15750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1025.068438][T15750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1025.101595][T15750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1025.126881][T15754] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2827'. [ 1025.175069][T15759] loop1: detected capacity change from 0 to 512 [ 1025.219910][T15759] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1025.271983][T15759] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1025.320970][T15759] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1025.398240][T15759] EXT4-fs warning (device loop1): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1025.513886][T15759] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1025.604333][T15759] EXT4-fs (loop1): 1 truncate cleaned up [ 1025.630742][T15759] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1029.699798][T15781] loop0: detected capacity change from 0 to 1764 [ 1030.473409][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1030.658134][T15784] device syzkaller0 entered promiscuous mode [ 1031.108073][T15796] loop5: detected capacity change from 0 to 1024 [ 1031.146616][T15796] hfsplus: xattr searching failed [ 1031.711001][ T4743] hfsplus: b-tree write err: -5, ino 4 [ 1034.510409][ T27] audit: type=1326 audit(1760846288.868:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1034.601395][ T27] audit: type=1326 audit(1760846288.868:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1035.388956][T15827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2850'. [ 1036.430720][ T27] audit: type=1326 audit(1760846288.868:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1036.471214][ T27] audit: type=1326 audit(1760846288.868:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1036.963061][ T27] audit: type=1326 audit(1760846288.868:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1037.941293][ T27] audit: type=1326 audit(1760846288.868:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1038.095186][ T27] audit: type=1326 audit(1760846288.868:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1039.091235][ T27] audit: type=1326 audit(1760846288.868:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1039.204077][ T27] audit: type=1326 audit(1760846288.868:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15824 comm="syz.6.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0f78efc9 code=0x7ffc0000 [ 1041.459176][T15874] loop1: detected capacity change from 0 to 1024 [ 1041.566638][ T27] audit: type=1800 audit(1760846295.928:151): pid=15874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2861" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1043.674083][T15892] loop5: detected capacity change from 0 to 128 [ 1044.084378][ T27] audit: type=1800 audit(1760846298.448:152): pid=15892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2866" name="file1" dev="loop5" ino=1048776 res=0 errno=0 [ 1046.887651][T15923] loop9: detected capacity change from 0 to 1024 [ 1047.054603][T15923] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1047.389789][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1049.812342][T15945] input: syz1 as /devices/virtual/input/input10 [ 1050.128840][T15951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1050.208346][T15951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1050.556489][T15951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1050.921369][T15961] syz.5.2880 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1054.082631][T15972] netlink: 544 bytes leftover after parsing attributes in process `syz.0.2883'. [ 1054.161399][T15972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2883'. [ 1055.754145][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.760617][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.585068][T16010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1060.678667][T16010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1060.726243][T16010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1062.678713][T16022] loop0: detected capacity change from 0 to 256 [ 1062.748440][T16022] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 1062.818259][T16022] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1062.931716][ T27] audit: type=1800 audit(1760846317.298:153): pid=16022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2890" name="file2" dev="loop0" ino=1048779 res=0 errno=0 [ 1063.399866][T16030] loop1: detected capacity change from 0 to 16 [ 1064.081996][T16030] erofs: (device loop1): mounted with root inode @ nid 36. [ 1067.677645][ T27] audit: type=1326 audit(1760846322.038:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16046 comm="syz.5.2900" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f728f58efc9 code=0x0 [ 1067.871011][T16063] loop9: detected capacity change from 0 to 512 [ 1068.777740][T16074] loop1: detected capacity change from 0 to 512 [ 1068.881453][T16074] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1068.972767][T16074] EXT4-fs (loop1): 1 truncate cleaned up [ 1068.979041][T16074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1069.302372][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1069.340198][T16082] loop5: detected capacity change from 0 to 2048 [ 1069.430183][T16084] loop9: detected capacity change from 0 to 512 [ 1069.505520][T16082] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.793700][T16084] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1070.831334][T16084] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.267874][T16084] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1071.479213][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1073.214790][T16116] loop1: detected capacity change from 0 to 128 [ 1073.302528][T16116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1073.327125][T16116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1073.349994][T16120] loop6: detected capacity change from 0 to 136 [ 1073.371514][T16116] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1073.469000][T16116] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1073.490595][T16116] ext4 filesystem being mounted at /345/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.775793][ T4339] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1074.322173][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1074.436515][ T4339] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.465682][ T4339] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1074.536710][ T4339] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1074.574344][T16134] loop6: detected capacity change from 0 to 512 [ 1074.629412][ T4339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1074.679041][ T4339] usb 6-1: SerialNumber: syz [ 1075.768598][ T4339] usb 6-1: 0:2 : does not exist [ 1075.875134][ T4339] usb 6-1: USB disconnect, device number 6 [ 1077.944655][T16157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2923'. [ 1079.427027][T16160] loop5: detected capacity change from 0 to 16 [ 1080.224501][T16160] erofs: (device loop5): mounted with root inode @ nid 36. [ 1080.272018][T16162] loop1: detected capacity change from 0 to 512 [ 1080.343638][T16162] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1080.451166][T16162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1080.547262][T16162] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2925: bad orphan inode 131083 [ 1080.690540][T16162] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1082.341874][T16162] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1082.551964][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1082.809736][T16179] loop1: detected capacity change from 0 to 2048 [ 1082.924755][T16179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1088.250775][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2934'. [ 1090.746024][T16227] loop5: detected capacity change from 0 to 128 [ 1091.075812][T16227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1091.181345][T16227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1091.196199][T16227] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1091.307420][T16227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1091.404244][T16227] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.636203][ T9047] EXT4-fs (loop5): unmounting filesystem. [ 1095.872143][T16271] device syzkaller0 entered promiscuous mode [ 1096.560453][T16278] loop5: detected capacity change from 0 to 1024 [ 1096.758411][T16278] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1096.797299][T16278] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.458243][T15055] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: comm kworker/u4:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 1097.544514][T15055] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1098.237673][T15055] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1098.237673][T15055] [ 1098.352735][ T9047] EXT4-fs (loop5): unmounting filesystem. [ 1101.417214][T16317] loop6: detected capacity change from 0 to 128 [ 1101.443962][T16317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1101.465799][T16317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1101.690111][T16317] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1101.775772][T16317] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1101.820165][T16317] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1102.452458][T10681] EXT4-fs (loop6): unmounting filesystem. [ 1103.066617][T16349] loop9: detected capacity change from 0 to 1024 [ 1103.179079][T16349] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1103.198228][T16349] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.569539][ T4971] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: comm kworker/u4:19: lblock 0 mapped to illegal pblock 0 (length 1) [ 1103.597230][ T4971] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1103.624871][ T4971] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1103.624871][ T4971] [ 1103.708271][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1103.856915][T16361] loop5: detected capacity change from 0 to 2048 [ 1104.060592][T16361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1105.729928][T16377] loop6: detected capacity change from 0 to 16 [ 1105.867858][T16377] erofs: (device loop6): mounted with root inode @ nid 36. [ 1108.854642][T16389] hub 1-0:1.0: USB hub found [ 1108.860218][T16389] hub 1-0:1.0: 1 port detected [ 1110.941682][T16396] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2962'. [ 1112.407698][T16403] input: syz1 as /devices/virtual/input/input11 [ 1114.291236][ T4384] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1114.486874][ T4384] usb 6-1: Using ep0 maxpacket: 32 [ 1114.496129][ T4384] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.657723][T16426] input: syz1 as /devices/virtual/input/input12 [ 1115.458530][ T4384] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1115.622575][ T4384] usb 6-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 1115.662215][ T4384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.709354][ T4384] usb 6-1: config 0 descriptor?? [ 1116.144392][ T4384] apple 0003:05AC:0224.0001: unbalanced delimiter at end of report description [ 1116.167384][ T4384] apple 0003:05AC:0224.0001: parse failed [ 1116.847140][ T4384] apple: probe of 0003:05AC:0224.0001 failed with error -22 [ 1116.849905][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.947240][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.987427][ T4384] usb 6-1: USB disconnect, device number 7 [ 1117.728219][T16456] loop1: detected capacity change from 0 to 128 [ 1117.752272][T16456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1117.759041][T16456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1117.811368][T16456] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1117.890826][T16456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1119.380140][T16456] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.810481][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1123.358114][T16491] loop6: detected capacity change from 0 to 512 [ 1123.563904][T16491] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1123.756764][T16491] EXT4-fs (loop6): group descriptors corrupted! [ 1124.895656][T16511] input: syz1 as /devices/virtual/input/input13 [ 1129.234443][T16535] loop1: detected capacity change from 0 to 16 [ 1129.244522][T16535] erofs: (device loop1): mounted with root inode @ nid 36. [ 1129.257476][T16535] x_tables: duplicate underflow at hook 3 [ 1130.059865][T16537] loop6: detected capacity change from 0 to 128 [ 1130.134787][T16537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1130.241530][T16537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1130.283589][T16537] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1130.294654][T16543] loop9: detected capacity change from 0 to 512 [ 1130.312357][T16543] EXT4-fs: Ignoring removed oldalloc option [ 1130.366367][T16537] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1130.380370][T16537] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.459789][T16543] EXT4-fs (loop9): 1 truncate cleaned up [ 1130.486811][T16543] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1131.299503][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1131.353657][T10681] EXT4-fs (loop6): unmounting filesystem. [ 1134.185107][ T27] audit: type=1326 audit(1760846388.548:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1134.232560][T16568] loop9: detected capacity change from 0 to 2048 [ 1134.330976][ T27] audit: type=1326 audit(1760846388.548:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1134.470802][T16568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1135.601178][ T4384] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1135.639532][ T27] audit: type=1326 audit(1760846388.578:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1135.771183][ T27] audit: type=1326 audit(1760846388.578:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1135.823178][ T4384] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 1135.865128][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.907424][ T4384] usb 1-1: config 0 descriptor?? [ 1135.915851][ T27] audit: type=1326 audit(1760846388.578:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1135.971211][ T27] audit: type=1326 audit(1760846388.578:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1135.985336][ T4384] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1137.483363][ T4384] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 1137.501123][ T4925] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1137.540685][ T27] audit: type=1326 audit(1760846388.588:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1137.565052][ T27] audit: type=1326 audit(1760846388.588:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1137.629869][ T4384] usb 1-1: USB disconnect, device number 4 [ 1139.138400][ T4925] usb 7-1: device descriptor read/all, error -71 [ 1139.159880][ T27] audit: type=1326 audit(1760846388.588:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1139.261195][ T27] audit: type=1326 audit(1760846388.588:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f728f585e67 code=0x7ffc0000 [ 1139.333692][ T27] audit: type=1326 audit(1760846388.588:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f728f52b099 code=0x7ffc0000 [ 1139.406083][ T27] audit: type=1326 audit(1760846388.588:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1139.479151][ T27] audit: type=1326 audit(1760846388.588:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1139.581749][ T27] audit: type=1326 audit(1760846388.588:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1139.661250][ T27] audit: type=1326 audit(1760846388.588:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1139.704625][T16600] loop1: detected capacity change from 0 to 16 [ 1139.721177][ T27] audit: type=1326 audit(1760846388.588:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1139.770330][T16600] erofs: (device loop1): mounted with root inode @ nid 36. [ 1139.791562][ T27] audit: type=1326 audit(1760846388.608:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f728f585e67 code=0x7ffc0000 [ 1139.822476][T16600] syz.1.2998: attempt to access beyond end of device [ 1139.822476][T16600] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1139.874144][T16600] syz.1.2998: attempt to access beyond end of device [ 1139.874144][T16600] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1139.890084][ T27] audit: type=1326 audit(1760846388.608:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f728f52b099 code=0x7ffc0000 [ 1139.932663][T16600] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1139.981360][ T27] audit: type=1326 audit(1760846388.608:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.5.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f728f58efc9 code=0x7ffc0000 [ 1143.051795][T16624] input: syz1 as /devices/virtual/input/input14 [ 1143.900989][T16616] loop1: detected capacity change from 0 to 2048 [ 1143.920314][T16616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1144.616488][T16631] loop5: detected capacity change from 0 to 2048 [ 1144.702227][T16631] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 1146.223345][T16634] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.183232][T16645] loop5: detected capacity change from 0 to 164 [ 1147.228371][T16634] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.417126][T16651] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1149.542853][ T9047] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1149.553623][ T9047] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1149.630747][ T9047] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1149.708347][ T9047] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1149.743995][ T9047] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1149.778880][ T9047] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1150.498206][T16669] loop9: detected capacity change from 0 to 16 [ 1151.065814][T16669] erofs: (device loop9): mounted with root inode @ nid 36. [ 1151.089677][T16669] syz.9.3013: attempt to access beyond end of device [ 1151.089677][T16669] loop9: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1151.114886][T16669] syz.9.3013: attempt to access beyond end of device [ 1151.114886][T16669] loop9: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1151.157774][T16667] syz.9.3013: attempt to access beyond end of device [ 1151.157774][T16667] loop9: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1151.173021][T16667] syz.9.3013: attempt to access beyond end of device [ 1151.173021][T16667] loop9: rw=0, sector=8, nr_sectors = 32 limit=16 [ 1152.390595][T16681] loop6: detected capacity change from 0 to 512 [ 1155.931206][T16696] loop6: detected capacity change from 0 to 128 [ 1155.966533][T16696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1156.711689][T16696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1156.821322][T16696] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1156.926981][T16696] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1157.116411][T16696] ext4 filesystem being mounted at /284/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1158.239210][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1158.250572][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1158.261258][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1158.273346][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1158.286328][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1158.293919][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1158.302195][T10681] EXT4-fs (loop6): unmounting filesystem. [ 1159.025201][T16715] loop0: detected capacity change from 0 to 2048 [ 1159.112121][T16715] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 1160.159964][T16736] loop1: detected capacity change from 0 to 1024 [ 1160.285939][T16736] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1160.331200][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1160.352532][T16736] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.663953][ T4466] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 1160.708916][T16705] chnl_net:caif_netlink_parms(): no params data found [ 1162.266422][ T4466] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1162.341303][ T4466] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1162.341303][ T4466] [ 1162.380128][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1162.411158][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 1162.446461][T16753] loop9: detected capacity change from 0 to 512 [ 1164.070817][ T4358] device hsr_slave_0 left promiscuous mode [ 1164.161351][ T4358] device hsr_slave_1 left promiscuous mode [ 1164.502831][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 1165.191976][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1165.212239][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1165.238600][ T4358] device bridge_slave_1 left promiscuous mode [ 1165.255370][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.337684][ T4358] device bridge_slave_0 left promiscuous mode [ 1165.365611][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.626715][T16784] loop6: detected capacity change from 0 to 1024 [ 1167.636179][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 1167.684147][T16784] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1167.811996][T10681] EXT4-fs (loop6): unmounting filesystem. [ 1169.633760][T16799] loop9: detected capacity change from 0 to 2048 [ 1169.683813][T16799] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 1171.658727][T16811] loop0: detected capacity change from 0 to 512 [ 1171.865171][ T4358] team0 (unregistering): Port device team_slave_1 removed [ 1171.902071][T16817] loop0: detected capacity change from 0 to 8 [ 1171.997196][ T4358] team0 (unregistering): Port device team_slave_0 removed [ 1172.094923][ T4358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.190592][ T4358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.140282][ T4358] bond0 (unregistering): Released all slaves [ 1173.285033][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.341542][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.393689][T16705] device bridge_slave_0 entered promiscuous mode [ 1173.473292][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.485530][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.530809][T16705] device bridge_slave_1 entered promiscuous mode [ 1173.560755][ T14] kernel write not supported for file bpf-prog (pid: 14 comm: kworker/0:1) [ 1174.879449][T16705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1174.928601][T16705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1175.679782][T16865] loop1: detected capacity change from 0 to 16 [ 1175.865402][T16865] erofs: (device loop1): mounted with root inode @ nid 36. [ 1175.897802][T16705] team0: Port device team_slave_0 added [ 1175.963566][T16705] team0: Port device team_slave_1 added [ 1176.082647][T16870] loop6: detected capacity change from 0 to 512 [ 1176.156741][T16705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.226459][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.392750][T16705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.423423][T16705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.446968][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1176.521163][T16705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.330549][T16883] loop6: detected capacity change from 0 to 8 [ 1177.519902][T16705] device hsr_slave_0 entered promiscuous mode [ 1177.532114][T16705] device hsr_slave_1 entered promiscuous mode [ 1179.253744][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.260373][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.203736][T16528] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1187.832133][T16945] loop9: detected capacity change from 0 to 2048 [ 1187.927061][T16945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1188.966814][T16705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1189.059702][T16705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1189.160522][T16705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1189.163479][T16972] loop9: detected capacity change from 0 to 8 [ 1189.217306][T16705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1192.111139][ T4925] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 1192.111407][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.147813][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1192.160904][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1192.220377][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.320054][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1192.350195][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1192.392353][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.400770][ T8324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.484574][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1192.589560][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1193.312097][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1193.377620][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.384896][ T8324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.440761][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1193.482227][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1193.538910][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1193.615395][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1193.672156][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1193.719145][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1194.461451][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1194.570349][T16705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1195.056066][T17011] loop0: detected capacity change from 0 to 2048 [ 1195.132223][T16705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.152345][T17011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1195.772244][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1195.821665][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1195.916297][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1195.981898][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1195.990590][T14882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1199.454961][T17035] loop9: detected capacity change from 0 to 1024 [ 1199.725262][T17035] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1199.740162][T17035] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1199.799748][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1199.828537][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1199.887716][T15055] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: comm kworker/u4:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 1199.914699][T16705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.978436][T15055] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1200.087462][T15055] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1200.087462][T15055] [ 1200.161147][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1200.754002][T17061] loop0: detected capacity change from 0 to 512 [ 1200.913174][T17061] EXT4-fs: Ignoring removed oldalloc option [ 1201.250119][T17061] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1201.569563][T17061] EXT4-fs (loop0): 1 truncate cleaned up [ 1201.581129][T17061] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1202.022726][T17075] loop9: detected capacity change from 0 to 2048 [ 1202.048511][T17075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1202.132232][T17061] loop0: detected capacity change from 512 to 64 [ 1202.989569][ T8674] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -12) [ 1203.071963][T17090] loop6: detected capacity change from 0 to 512 [ 1203.167089][ T8674] EXT4-fs (loop0): unmounting filesystem. [ 1203.189644][T17090] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1203.255783][T17090] EXT4-fs (loop6): 1 truncate cleaned up [ 1203.287726][T17090] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1204.528371][ T27] kauditd_printk_skb: 49 callbacks suppressed [ 1204.528389][ T27] audit: type=1804 audit(1760846459.880:223): pid=17090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3101" name="/newroot/299/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 1204.574581][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1205.168208][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1205.275917][T16845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1205.292111][T16845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1205.315382][T16705] device veth0_vlan entered promiscuous mode [ 1205.347124][T16845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1205.377870][T16845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1205.428327][T16705] device veth1_vlan entered promiscuous mode [ 1205.438375][T10681] EXT4-fs (loop6): unmounting filesystem. [ 1205.695966][T17113] loop9: detected capacity change from 0 to 1024 [ 1205.875069][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1205.901540][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1206.366977][T17113] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1206.391774][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1206.426814][T17113] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.449748][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1206.520381][T16705] device veth0_macvtap entered promiscuous mode [ 1206.582139][T16705] device veth1_macvtap entered promiscuous mode [ 1206.682191][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.699850][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.709896][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.770163][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.796550][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.808356][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.828909][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.846426][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.857226][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.870458][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.885932][ T4296] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 4) [ 1206.937998][T16705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.911588][ T4296] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 1208.049563][T17131] loop0: detected capacity change from 0 to 16 [ 1208.057059][T17131] erofs: (device loop0): mounted with root inode @ nid 36. [ 1208.096851][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1208.185315][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1208.257942][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1208.262732][T17134] loop6: detected capacity change from 0 to 2048 [ 1208.279292][ T4296] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1208.279292][ T4296] [ 1208.294775][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1208.326300][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1208.354419][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1208.365058][T17134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1208.392503][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.772821][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.784264][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.795678][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.825902][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.878117][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.911134][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.941134][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.981067][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.011548][T17153] loop0: detected capacity change from 0 to 2048 [ 1210.034001][T17153] UDF-fs: bad mount option "ÿÿ0xffffffffffffffff" or missing value [ 1210.053131][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.080013][T17120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1210.264507][T17120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1210.385602][T16705] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.471196][T16705] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.133183][T16705] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.142816][T16705] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.723189][T17166] loop6: detected capacity change from 0 to 256 [ 1211.764614][ T4539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.802677][ T4539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.943472][T17166] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1212.072417][ T6615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1212.142677][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.176722][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.243710][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1216.165907][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1216.177604][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1216.188127][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1216.202032][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1216.210417][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1216.218474][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1216.354813][T17193] loop0: detected capacity change from 0 to 16 [ 1216.424852][T17193] erofs: (device loop0): mounted with root inode @ nid 36. [ 1216.868315][ T4296] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.505035][T17196] loop0: detected capacity change from 0 to 2048 [ 1217.541553][ T4296] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.597788][T17198] loop6: detected capacity change from 0 to 2048 [ 1217.634821][T17196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1217.685525][T17198] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1218.251348][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 1218.259228][T17198] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 1984: 0x7f != 0x00 [ 1218.381145][T17198] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 1218.593230][ T4296] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.613298][T17198] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1218.729951][T17198] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1218.796966][T17198] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1218.862078][T17198] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 1219.085367][ T4296] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.493196][T17188] chnl_net:caif_netlink_parms(): no params data found [ 1220.223484][T17232] loop6: detected capacity change from 0 to 8 [ 1220.251712][T17188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.258966][T17188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.320454][T17188] device bridge_slave_0 entered promiscuous mode [ 1220.332039][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 1220.393190][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1220.461246][T17188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.470177][T17188] device bridge_slave_1 entered promiscuous mode [ 1220.541131][T17236] loop0: detected capacity change from 0 to 2048 [ 1220.644667][T17236] UDF-fs: bad mount option "umask=00$00000000000000000000" or missing value [ 1221.461337][T15237] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1221.641332][T15237] usb 7-1: device descriptor read/64, error -71 [ 1221.645165][T17188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.830217][T17188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1221.856718][T17254] loop9: detected capacity change from 0 to 2048 [ 1221.894680][T17254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1221.941368][T15237] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1222.341260][T15237] usb 7-1: device descriptor read/64, error -71 [ 1222.411208][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 1222.462884][T15237] usb usb7-port1: attempt power cycle [ 1222.708804][T17188] team0: Port device team_slave_0 added [ 1222.742890][T17188] team0: Port device team_slave_1 added [ 1223.066589][T15237] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 1223.122067][T15237] usb 7-1: device descriptor read/8, error -71 [ 1224.291936][T17188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1224.306630][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1224.335959][T15237] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1224.397983][T15237] usb 7-1: device descriptor read/8, error -71 [ 1224.496509][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 1224.532067][T15237] usb usb7-port1: unable to enumerate USB device [ 1224.621894][T17188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1224.911967][T17188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1224.931107][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.025157][T17188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.410436][T17283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1226.611149][T17283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1226.725539][T17188] device hsr_slave_0 entered promiscuous mode [ 1226.772721][T17188] device hsr_slave_1 entered promiscuous mode [ 1226.791880][T17296] loop0: detected capacity change from 0 to 2048 [ 1226.911218][T17188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1226.919394][T17188] Cannot create hsr debugfs directory [ 1227.046949][T17296] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1227.884701][T17310] loop9: detected capacity change from 0 to 8 [ 1228.011475][T16528] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1228.143313][T17312] loop6: detected capacity change from 0 to 1024 [ 1228.211589][T16528] usb 2-1: Using ep0 maxpacket: 8 [ 1228.230809][T16528] usb 2-1: config 0 has no interfaces? [ 1228.271583][T16528] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1228.291359][T16528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.361923][T16528] usb 2-1: config 0 descriptor?? [ 1228.486447][T17312] hfsplus: xattr searching failed [ 1228.533562][ T27] audit: type=1800 audit(1760846483.881:224): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3146" name="file2" dev="loop6" ino=2 res=0 errno=0 [ 1228.581705][T17312] hfsplus: xattr searching failed [ 1228.584800][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.618451][T17320] hfsplus: xattr searching failed [ 1228.671901][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.765039][ T4296] device hsr_slave_0 left promiscuous mode [ 1228.773957][ T8292] hfsplus: b-tree write err: -5, ino 3 [ 1228.791338][T16848] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 1228.860295][ T4296] device hsr_slave_1 left promiscuous mode [ 1228.945009][T17324] loop6: detected capacity change from 0 to 2048 [ 1228.971287][T16848] usb 10-1: device descriptor read/64, error -71 [ 1228.982232][T17324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1229.058038][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.652007][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.691330][T16848] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 1229.705397][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1229.758239][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1229.825489][ T4296] device bridge_slave_1 left promiscuous mode [ 1229.838535][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.851367][T16848] usb 10-1: device descriptor read/64, error -71 [ 1229.877894][ T4339] usb 2-1: USB disconnect, device number 7 [ 1229.911555][ T4296] device bridge_slave_0 left promiscuous mode [ 1229.926746][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.004288][T16848] usb usb10-port1: attempt power cycle [ 1230.085704][ T4296] device veth1_macvtap left promiscuous mode [ 1230.096328][ T4296] device veth0_macvtap left promiscuous mode [ 1230.112070][ T4296] device veth1_vlan left promiscuous mode [ 1230.140155][ T4296] device veth0_vlan left promiscuous mode [ 1230.441344][T16848] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1230.511863][T16848] usb 10-1: device descriptor read/8, error -71 [ 1230.801320][T16848] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1230.866831][T16848] usb 10-1: device descriptor read/8, error -71 [ 1230.981088][ T8559] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1231.001529][T16848] usb usb10-port1: unable to enumerate USB device [ 1231.203479][ T8559] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1231.223087][ T8559] usb 2-1: not running at top speed; connect to a high speed hub [ 1231.291172][ T8559] usb 2-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.318040][T17345] loop9: detected capacity change from 0 to 2048 [ 1231.330368][ T8559] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 1231.346077][ T8559] usb 2-1: config 219 interface 0 has no altsetting 0 [ 1231.360520][T17345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1231.375444][ T8559] usb 2-1: config 219 interface 0 has no altsetting 1 [ 1231.432599][ T8559] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 1231.962098][ T8559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.999780][ T8559] usb 2-1: Product: syz [ 1232.014055][ T8559] usb 2-1: Manufacturer: syz [ 1232.020314][ T8559] usb 2-1: SerialNumber: syz [ 1232.391100][ T8559] snd-usb-audio: probe of 2-1:219.0 failed with error -22 [ 1232.449624][T16634] udevd[16634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1232.477429][ T8559] usb 2-1: USB disconnect, device number 8 [ 1233.019813][T17358] loop9: detected capacity change from 0 to 512 [ 1233.128669][T17358] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1233.157931][T17362] loop1: detected capacity change from 0 to 2048 [ 1233.160195][T17358] EXT4-fs (loop9): 1 truncate cleaned up [ 1233.236127][T17362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1233.253004][T17358] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1234.021983][T14587] EXT4-fs (loop9): unmounting filesystem. [ 1234.317087][T17377] loop6: detected capacity change from 0 to 8 [ 1234.537450][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 1234.652958][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 1234.780612][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.876028][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.092809][ T26] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 1235.288229][ T26] usb 7-1: device descriptor read/64, error -71 [ 1235.547038][T17401] loop9: detected capacity change from 0 to 2048 [ 1235.596091][ T26] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 1235.635374][T17401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1236.445817][ T26] usb 7-1: device descriptor read/64, error -71 [ 1236.578131][ T26] usb usb7-port1: attempt power cycle [ 1237.001101][ T26] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 1237.063860][ T26] usb 7-1: device descriptor read/8, error -71 [ 1237.341608][ T26] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 1238.802957][ T4296] bond0 (unregistering): Released all slaves [ 1239.300599][ T26] usb 7-1: device descriptor read/8, error -71 [ 1239.421317][ T26] usb usb7-port1: unable to enumerate USB device [ 1239.533661][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.540296][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.674297][T17419] loop1: detected capacity change from 0 to 16 [ 1239.750560][T17419] erofs: (device loop1): mounted with root inode @ nid 36. [ 1240.634001][T17428] loop6: detected capacity change from 0 to 16 [ 1240.662412][T17428] erofs: (device loop6): mounted with root inode @ nid 36. [ 1242.388004][T17188] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1242.443950][T17188] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1242.481560][T17188] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1242.583562][T17188] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1242.989514][T17188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1243.088346][T17188] 8021q: adding VLAN 0 to HW filter on device team0 [ 1243.122201][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1243.173615][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1243.235112][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1243.244390][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1243.254040][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1243.261319][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1243.269596][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1243.279698][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1243.668132][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.675491][ T6346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.897516][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1244.025068][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1244.053069][ T6346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1244.072173][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1244.232474][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1244.301744][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1244.342149][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1244.363588][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1244.909512][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1244.930057][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1245.020502][T17188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1245.079677][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1245.112434][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1245.136325][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1245.603584][T17475] loop1: detected capacity change from 0 to 8 [ 1247.762993][ T4384] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 1247.942460][T17486] loop0: detected capacity change from 0 to 256 [ 1247.996345][ T4384] usb 2-1: device descriptor read/64, error -71 [ 1248.042163][T17486] exfat: Deprecated parameter 'namecase' [ 1248.214057][T17486] exfat: Deprecated parameter 'namecase' [ 1248.220046][T17486] exfat: Deprecated parameter 'namecase' [ 1249.775909][ T4384] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 1249.806824][T17486] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1250.206487][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1250.245713][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1251.014470][T17188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.171566][T17486] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1251.571385][ T4384] usb usb2-port1: attempt power cycle [ 1252.001159][ T4384] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1252.109724][ T4384] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1252.141877][ T4384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.223089][ T4384] usb 2-1: config 0 descriptor?? [ 1252.272866][ T4384] cp210x 2-1:0.0: cp210x converter detected [ 1252.355452][T17520] loop0: detected capacity change from 0 to 16 [ 1252.388155][T17520] erofs: (device loop0): mounted with root inode @ nid 36. [ 1253.999997][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1254.012211][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1254.121541][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1254.170901][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1254.282522][T17188] device veth0_vlan entered promiscuous mode [ 1254.317106][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1255.594403][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1255.951873][T17188] device veth1_vlan entered promiscuous mode [ 1256.275971][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1256.302032][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1256.367836][T17188] device veth0_macvtap entered promiscuous mode [ 1256.507969][T17188] device veth1_macvtap entered promiscuous mode [ 1256.634650][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.740653][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.801279][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.864862][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.921591][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.976484][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.027737][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.143185][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.165133][T17550] loop1: detected capacity change from 0 to 2048 [ 1257.182371][T17550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1257.254934][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.100882][ T4384] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -110 [ 1258.127216][ T4384] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 1258.135354][ T4384] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 1258.174595][ T4384] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1258.181540][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.268637][T17188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.325881][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1258.352162][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1258.413317][ T26] usb 2-1: USB disconnect, device number 11 [ 1258.421707][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1258.442394][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1258.471832][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1258.496830][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.565979][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.577234][ T26] cp210x 2-1:0.0: device disconnected [ 1258.623083][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.695989][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.761227][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.869165][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.927494][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.037805][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.098423][T17188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.148361][T17188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.235110][T17188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.268932][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1259.287639][T15471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1259.349893][T17188] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.384916][T17188] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.425604][T17188] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.481104][T17188] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.588024][T17564] loop1: detected capacity change from 0 to 1024 [ 1260.474239][T17564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1260.596414][T17572] loop9: detected capacity change from 0 to 8 [ 1260.681579][T16845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.690255][T16845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.529543][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1261.629095][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.663967][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1261.693414][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.784876][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1261.964271][ T4384] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1262.141085][ T4384] usb 10-1: device descriptor read/64, error -71 [ 1262.142860][T17586] loop8: detected capacity change from 0 to 512 [ 1262.411642][ T4384] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 1264.111938][ T4384] usb 10-1: device descriptor read/64, error -71 [ 1264.231862][ T4384] usb usb10-port1: attempt power cycle [ 1268.652377][T17621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 1268.773467][T17622] loop1: detected capacity change from 0 to 512 [ 1268.957978][T17622] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 1269.814314][T17622] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.3206: iget: bad i_size value: 12154757448730 [ 1269.881827][T17622] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3206: couldn't read orphan inode 13 (err -117) [ 1269.986423][T17622] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1270.173300][ T9101] EXT4-fs (loop1): unmounting filesystem. [ 1272.217895][T17641] loop8: detected capacity change from 0 to 16 [ 1272.225757][T17641] erofs: (device loop8): mounted with root inode @ nid 36. [ 1274.360875][T17651] input: syz1 as /devices/virtual/input/input15 [ 1289.102723][T17742] loop1: detected capacity change from 0 to 164 [ 1295.709308][T17797] loop8: detected capacity change from 0 to 16 [ 1295.824750][T17797] erofs: (device loop8): mounted with root inode @ nid 36. [ 1297.161147][T16528] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1297.594762][T17807] loop0: detected capacity change from 0 to 164 [ 1298.369199][T16528] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.421180][T16528] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.466272][T16528] usb 10-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1298.484180][T17809] input: syz0 as /devices/virtual/input/input16 [ 1298.524660][T16528] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.578106][T16528] usb 10-1: config 0 descriptor?? [ 1300.792683][T16528] usbhid 10-1:0.0: can't add hid device: -71 [ 1300.820451][T16528] usbhid: probe of 10-1:0.0 failed with error -71 [ 1300.857652][T16528] usb 10-1: USB disconnect, device number 10 [ 1300.974184][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.980739][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.400040][T17865] loop9: detected capacity change from 0 to 164 [ 1309.164169][T17871] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1310.322525][T14587] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1310.384528][T14587] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1310.472769][T14587] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1310.550725][T14587] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1310.675237][T14587] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1310.752038][T14587] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1313.631283][ T4925] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1313.835098][ T4925] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1313.853064][ T4925] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1313.981526][ T4925] usb 2-1: can't read configurations, error -71 [ 1314.237750][T17909] loop8: detected capacity change from 0 to 128 [ 1314.290694][T17909] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1314.426076][ T8292] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.710033][ T8292] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.974912][ T8292] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.563403][ T8292] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.639481][T17923] loop1: detected capacity change from 0 to 512 [ 1318.652727][T17923] ext4: Unknown parameter 'fowner' [ 1318.757200][T16634] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 Stopping sshd: [ 1319.162235][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1319.251984][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1319.261625][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1319.269584][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1319.277446][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1319.285200][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1319.454326][T17939] loop6: detected capacity change from 0 to 164 [ 1320.418845][T17947] loop6: detected capacity change from 0 to 2048 stopped /usr/sbin/sshd (pid 4026) OK [ 1321.740519][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 1321.772437][T17947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) Stopping crond: stopped /usr/sbin/crond (pid 4012) [ 1323.782772][ T4285] Bluetooth: hci2: command 0x041b tx timeout OK [ 1324.147113][T17978] loop6: detected capacity change from 0 to 256 [ 1324.231539][T17978] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1324.979006][T17978] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1325.126984][T17935] chnl_net:caif_netlink_parms(): no params data found [ 1325.154318][T17978] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1325.285076][T17985] loop1: detected capacity change from 0 to 2048 [ 1325.361321][T17985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1325.691537][ T4348] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1325.861083][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 1325.901226][ T4348] usb 9-1: Using ep0 maxpacket: 8 [ 1325.921806][ T4348] usb 9-1: config 0 has no interfaces? [ 1325.976822][ T4348] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1326.120852][ T4348] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.187526][ T4348] usb 9-1: Product: syz [ 1326.207809][ T4348] usb 9-1: Manufacturer: syz [ 1326.221452][ T4348] usb 9-1: SerialNumber: syz [ 1326.268745][ T4348] usb 9-1: config 0 descriptor?? Stopping dhcpcd... [ 1326.449443][T18000] loop1: detected capacity change from 0 to 256 [ 1326.561079][T18000] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) stopped /sbin/dhcpcd (pid 3932) [ 1326.913834][T17935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.923400][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.956175][T17935] device bridge_slave_0 entered promiscuous mode [ 1327.355181][T17935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.394462][T17935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.472329][T17935] device bridge_slave_1 entered promiscuous mode Stopping network: [ 1327.931246][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 1328.354847][T17935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.384158][T17935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.552003][T17935] team0: Port device team_slave_0 added [ 1329.582052][T17935] team0: Port device team_slave_1 added [ 1329.977512][ T7723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1329.990058][ T7723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1330.001663][ T7723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1330.011700][ T7723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1330.040559][ T7723] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1330.048210][ T7723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1330.111681][T17935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.119211][T17935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.899054][T17935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.353315][ T8292] device hsr_slave_0 left promiscuous mode [ 1331.399777][ T8292] device hsr_slave_1 left promiscuous mode [ 1331.511363][ T8292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.519438][ T8292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.591942][ T8292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.599654][ T8292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.651307][ T8292] device bridge_slave_1 left promiscuous mode [ 1331.657719][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.693737][ T8292] device bridge_slave_0 left promiscuous mode [ 1331.721233][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.860468][ T8292] device veth1_macvtap left promiscuous mode [ 1331.871499][ T8292] device veth0_macvtap left promiscuous mode [ 1331.877775][ T8292] device veth1_vlan left promiscuous mode [ 1331.906651][ T8292] device veth0_vlan left promiscuous mode [ 1331.940057][ T7723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1331.952445][ T7723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1331.962200][ T7723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1331.970383][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1331.980610][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1331.988515][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1332.091400][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 1332.324774][T18042] loop0: detected capacity change from 0 to 164 [ 1332.429863][T18043] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1333.057366][T18046] loop8: detected capacity change from 0 to 2048 [ 1333.129535][ T8674] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1333.138918][ T8674] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1333.140809][T18046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1333.185392][ T8674] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1333.212803][ T8674] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1333.364139][ T8674] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1333.375448][ T8674] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1335.502907][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 1335.505096][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 1335.550128][ T26] usb 9-1: USB disconnect, device number 2 [ 1336.019044][ T8292] team0 (unregistering): Port device team_slave_1 removed [ 1336.128993][ T8292] team0 (unregistering): Port device team_slave_0 removed serialport: VM disconnected.