last executing test programs: 7m2.900778394s ago: executing program 32 (id=121): creat(&(0x7f0000000180)='./file0\x00', 0x23) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1b98f2106765"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open$dir(0x0, 0x400000, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r4, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) 6m56.766214873s ago: executing program 1 (id=157): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}, 0x0) 6m55.887120706s ago: executing program 1 (id=159): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) unshare(0x24020400) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x201080a, &(0x7f0000000300)={[{@minixdf}, {@test_dummy_encryption}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r5 = openat(0xffffffffffffff9c, 0x0, 0x183802, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000740)={0xc, 0xffffffffffffffff, 0x26, 0x0, 0xa697, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) fstatfs(r6, &(0x7f0000000140)=""/175) 6m53.878745878s ago: executing program 1 (id=161): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{0x0}], 0x1}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m52.033749012s ago: executing program 1 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaa0008004503005cffff0000002f907800000000e0000001248022eb000000000005000110000800000086dd88a888be86ddffff10fe00000100000000000000080022eb00000000200000000200000000000009c37d00000800655800000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000040)=0x1) close_range(r3, r3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 6m42.596173825s ago: executing program 1 (id=175): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 6m40.948802695s ago: executing program 1 (id=179): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x571, &(0x7f0000000640)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) creat(0x0, 0x182) unshare(0x60000600) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 6m25.231865276s ago: executing program 33 (id=179): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x571, &(0x7f0000000640)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) creat(0x0, 0x182) unshare(0x60000600) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 6m14.072548523s ago: executing program 5 (id=223): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='\x00!', 0x2}, {0x0}], 0x2, 0xfffffffd, 0x7) 6m12.456325073s ago: executing program 5 (id=226): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m9.237883906s ago: executing program 5 (id=232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6m5.410263551s ago: executing program 5 (id=239): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x0, 0x7fffffffffffffff, 0x2}) ftruncate(r0, 0x10) 6m3.760552592s ago: executing program 5 (id=242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0xe5c, 0x80000) pipe2(&(0x7f0000000040), 0x80000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 6m3.045819121s ago: executing program 5 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 6m0.196879089s ago: executing program 34 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, 0x0) 5m17.509911782s ago: executing program 3 (id=318): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r1, r0, 0x0, 0x3ffff) 5m16.339634698s ago: executing program 2 (id=319): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5m15.51662114s ago: executing program 2 (id=321): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000007a40)=ANY=[@ANYBLOB="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"], 0xfd, 0x551b, &(0x7f0000000500)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000440)='./file0\x00', 0x40) 5m15.162980718s ago: executing program 3 (id=323): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000001c0)={{{0x8}}, 0x0, 0x8, 0x0}) 5m14.347780647s ago: executing program 3 (id=324): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x80140) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x0, 0xfffffefc, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996eee7d479db86fe609ea2029b", 0x7f, 0x3}) read$watch_queue(r2, &(0x7f00000000c0)=""/28, 0x1c) 5m13.037192389s ago: executing program 3 (id=326): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) socket(0xa, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) llistxattr(&(0x7f0000000040)='./file0/file2\x00', 0x0, 0x0) 5m11.827712971s ago: executing program 3 (id=327): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x20, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r1, 0xa) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x490003, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m11.131385473s ago: executing program 2 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d000000400f01c4", 0x3b}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m10.72489959s ago: executing program 3 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001002bbd7000fbdbdf250a808000d5"], 0x24}}, 0x0) 5m10.532660075s ago: executing program 2 (id=331): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000800, &(0x7f0000000340)=ANY=[], 0x7, 0x23c, &(0x7f0000000100)="$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") lgetxattr(&(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 5m8.629392916s ago: executing program 35 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001002bbd7000fbdbdf250a808000d5"], 0x24}}, 0x0) 5m8.570925461s ago: executing program 2 (id=333): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0xc0126080, 0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) 5m8.447223557s ago: executing program 2 (id=335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc884"], 0xffe) 5m6.166911657s ago: executing program 36 (id=335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc884"], 0xffe) 3m29.458285143s ago: executing program 4 (id=497): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/46, 0x2e}], 0x1, 0x0) 3m27.760096996s ago: executing program 4 (id=500): socket(0x200000000000011, 0x2, 0xd) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 3m21.982261368s ago: executing program 4 (id=520): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m20.104119532s ago: executing program 4 (id=526): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nodiscard}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@data_err_ignore}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x481, &(0x7f0000003380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x91145a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003ac0)={0x2020}, 0x2020) 3m18.450316795s ago: executing program 4 (id=530): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x8000, &(0x7f0000000100), 0x1, 0x464, &(0x7f0000000140)="$eJzs3E1sFFUcAPD/zLZFBO1q8IMPlYhG4kehBZGDF40mHjQx0QPX2haCFGpoTYQQBWPwaEi8G48mHDx70otRTyZe1bMhIYYL6GnN7MzQ7bC7tkvbLezvlwx9b+ftvPefmTd9M49pAANrd/ZPErE1In6PiNE8u7TA7vzHjWvnpv65dm4qiUbjnb+TZrnr185NlUXL720pM0MR6WdJ7GxT7/yZsycmZ2dnThf5fQsnP9g3f+bsC8dPTh6bOTZzauLw4YMHxl86NPHiqsSZxXV9x8dzu7a/8e2lt6aOXHrv58tJGX8ljts3FC2bbuvpRmP1qtsA7mtJJ0N9bAgrUivO1uFm/x+NWiwevNF4/dO+Ng5YU41Go/Fw59XnG8BdLIl+twDoj/IXfXb/Wy7rNPTYEK6+kt8AZXHfKJZ8zVCkRZnhyv3tatodEUfO//tVtkT1OcTmNaoUABho32fjn+fbjf/SaH0udH8xh1KPiAci4sGIOBQR2yLioYhm2Uci4tEV1l+dJLl1/Jle6SmwZcrGfy8Xc1vlki4tUq8190Y+BqzHcHL0+OzM/mKf7I3hTVl+vEsdP7z22xed1rWO/7Ilq78cC+bSK0Obln5nenJhsueAK65eiNgxtDT+fE1ycyYgiYjtEbGjxzqOP/vNrk7rOsQ/sqwNr8I8U+PriGfy438+KvGXku7zk/vuidmZ/ZuiOCtu9cuvF9/uVP//H/+1lR3/8nyvHv/cn/Wkdb52fiVbz7dx8Y/PO95T9nr+jyTvLvnso8mFhdPjESPJm818vfXziUq5icXyWfx797Q7/9PmNa6MYmdEZCfxYxHxeEQ80XLtejIi9nTZCz+9+tT7vce/trL4p6N9/y9Ujv9iYiSqn7RP1E78+N2SSusriT87/gebqb3FJ8u5/rVrThlR66rb2XcAAABwp0gjYmsk6djNdJqOjeX/h39b3JvOzs0vPHd07sNT0/k7AvUYTsvnn6Mtz0PHi9v6Mj9RyR8onht/WdvczI9Nzc1O9zt4GHBbKv2/aSz/8Vetjw0D1of3tWBw6f8wuPR/GFz6PwyuNv3fq2cwINr9/v+kD+0A1l+l/3ed9jMwgLuL+38YXPo/DK52/X+4+2rgznchovvL+2uauFy0Yl0qTSOi569H9GP/bOREpBuiGRLLTdTa/lGMjok+X5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABWyX8BAAD//7Re2jA=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x0) 3m17.179682167s ago: executing program 4 (id=531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x8000000000007, 0x0) r6 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r6, 0x7, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r3}) 3m14.298688912s ago: executing program 37 (id=531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x8000000000007, 0x0) r6 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r6, 0x7, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2, r3}) 2m24.209327069s ago: executing program 7 (id=652): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000440)="120000001200e7ef007b00000000000000a1", 0x12, 0x4000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000d00)=""/225, 0xe1}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000980)=""/131, 0x83}], 0x6}, 0x9}], 0x2, 0x2000, 0x0) 2m21.760379283s ago: executing program 7 (id=658): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0x17, 0xd, "05605b000d854c0c8263761181"}, &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x8}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) 2m17.333245321s ago: executing program 7 (id=667): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x30000a4, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0x1480a9d1, 0x80, 0x0, 0x203, 0xfffffff9, 0x0, 0x0, 0x4}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', 0x0) 2m14.671949094s ago: executing program 7 (id=673): ioperm(0x1, 0x200, 0x16) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x31000000) 2m12.654148314s ago: executing program 7 (id=677): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m7.511670532s ago: executing program 7 (id=685): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_INIT(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, 0x1b, 0xa01, 0x70bd2b, 0x4000, {0x4}, [@nested={0x18, 0x4, 0x0, 0x1, [@typed={0x11, 0x2b, 0x0, 0x0, @str='@+-\')(%*##$\\\x00'}]}, @nested={0x4, 0x5}]}, 0x30}}, 0x4000800) 2m2.619936451s ago: executing program 8 (id=694): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0086c43, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m59.363311979s ago: executing program 8 (id=699): socket$unix(0x1, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xc8, 0x401) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x802, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) 1m53.414334125s ago: executing program 8 (id=704): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, 0x0) 1m51.810444499s ago: executing program 38 (id=685): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(0x0, 0x0) r1 = dup(0xffffffffffffffff) write$FUSE_INIT(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, 0x1b, 0xa01, 0x70bd2b, 0x4000, {0x4}, [@nested={0x18, 0x4, 0x0, 0x1, [@typed={0x11, 0x2b, 0x0, 0x0, @str='@+-\')(%*##$\\\x00'}]}, @nested={0x4, 0x5}]}, 0x30}}, 0x4000800) 1m51.689197305s ago: executing program 8 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000c40)={[{@auto_da_alloc}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)) 1m50.227882363s ago: executing program 8 (id=712): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@errors_remount}, {@acl}, {@noblock_validity}]}, 0x1, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000007311410000000000851000000200000085000000ab00000095000810000000009500a50500000000e2044545cfbd17576630aefe992b9b4b024760c6ca8428c2d720800b30744162c6c1d68c0859292af9d33dda349f59fe5229ba70f85aa1e78cbd0b64df7aae833db746747ad713088544922241e6faecd35737bacf2916b29ba4c624ccbd7f6eb43098cdccdb01aec0f5687be55f9c47"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m48.887481161s ago: executing program 8 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000004) sched_setscheduler(r0, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}}}}}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f0000000140)={0x80, 0x700, {0x3, 0x1, 0x0, 0x0, 0x4d5}, 0x8000}) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m33.094063846s ago: executing program 39 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000004) sched_setscheduler(r0, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}}}}}, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f0000000140)={0x80, 0x700, {0x3, 0x1, 0x0, 0x0, 0x4d5}, 0x8000}) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m24.057025243s ago: executing program 6 (id=747): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101ac2, 0x33) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYBLOB="675bdee1c1767e7eb206796a611cd31897bd238874f0af484c8962e4125ba4949dcebde58b33eea0dced6e47dc841bbe12987cb53d7f37ec72436001"], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPbxxzsww4Uki8ceD05Ab+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6e3Br8=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000100)="bfc42f6fd7d894d8", 0x8}], 0x1, 0x5412, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x131) write$binfmt_format(r3, &(0x7f0000000000)='1\x00', 0x2400) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1m21.989562118s ago: executing program 6 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x46000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x4004, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r4, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7f", 0x22, 0xc040, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 1m21.025638598s ago: executing program 6 (id=752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x0, 0x200000000000000, 0x1}, 0x5}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0xbc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x30, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bdd7c3", 0x0, 0x33, 0x0, @loopback, @empty}}}}}}}, 0x0) 1m19.871893393s ago: executing program 6 (id=754): socket(0x10, 0x809, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="31914a51", @ANYRES16, @ANYBLOB="010026bd7000fddbdf253b00000008000300", @ANYRES32, @ANYBLOB="4c00330080200500ffffffffffff0802110000005050505050505f00fbffffffffffffff0f"], 0x68}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000200)={0xe, 0x0, [{0x4, 0x0, 0x200003}, {0x81, 0x0, 0x2c13ce6}, {0x1, 0x0, 0x6}, {0x400}, {0xc7b, 0x0, 0x6}, {0x3, 0x0, 0x400}, {0x0, 0x0, 0xffffffff7fffffff}, {0x5, 0x0, 0x5}, {0xf3, 0x0, 0x9}, {0x487, 0x0, 0xfffffffffffffffb}, {0xffff8778, 0x0, 0x200000007}, {0x3, 0x0, 0x4005}, {0x5, 0x0, 0x8}, {0xffffff01, 0x0, 0x44}, {0x767d, 0x0, 0x2}, {0x468e5329, 0x0, 0x3}]}) 1m18.376757292s ago: executing program 6 (id=757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4011) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file1\x00', 0x10000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000000c00)="$eJzs3c9vHGcdB+DPrNeON1TBbZM2QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYXABQQnJA79AwqSbxwQEvegcOFSbr36WAmJS8QhKodFMztr79prr53GaweeJxrP+877Y77zzjsz3nVWG+D/1tVzaT5IkavnXr9f5tfX5tvra/PH6uJ2kjLdSJrdVYrbSfEwWSjLi74lfettPlq+8uanj9Y/6+aa9VLVn9it3RBD6q7WS2br/maHtpzc6y5W6/DyXJJr9XrQ1F77GqhYDtrZeg2HrrPN6n6a7+e6BY6Y3tOp6D43t5lJjieZ3vw9oNIYX4QHY193OQAAAHhGfXLnsCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ0/9/f9FvTTqdWZT9L7/f6q3rU4fQQt7rvngQOMAAAAAAAAAgPH42uM8zv2c6OU7RfU3/zNV5mQ+7yRfynu5l6Xczfncz2JWspK7uZhkpq+jqfuLKyt3L260LA1veWloy0vjOmIAAAAAAAAA+J/0i7Q2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHQZFMdFfVcrJeZyaNZjbLspr8I8nUYce7D8WwjQ/GHwcAAAB8IdNP0ObLj/M493Oil+8U1Wv+l6rXy9N5L7ezkuWspJ2lXK9fQ5ev+hvra/Pt9bX5W+VS5gf7/d6/9hXGVN3DRJUbtufTVY1WbmS52nI+16pgrqfR3ffZ5HQvnr64+nxYxlR8t7bHyJr1sJY7+91O7yI8FYNvRTR2qdnaDC7ZGJG5OrZG/lMXrxXVGzXJ1pEYeXaaA7mZqtfJjT1dTGPjnZ+TBzDmx+t1eTy/PtAx36+NkWikGolL1Xmqxjgv7T4Sydf/8se3brZvv3Pzxr1zR+eQRpjYYfvWOTHfuw6TvPxMj0Rzn/XnqpE4tZG/mh/mxzmX2byRu1nOT7KYlSylU5cv1vO5/Dmz+0gtDOTeGBXJVH1euudsLzHN5gdVajFnqrYnspwid3I9S3mt+ncpF/OtXM7lXOk7w6d2jLs6tuqqb2y96ntn+q9Dgz/7jTpR3t1+s3mXW9jtiHeanU9L995fjuvzfePanfWPNmo933cdzPWN0gu90Zkc2vmT3BubX6kT5T5+OeI5MV4z9UiUF1DvKdGL7sXuSDSrZ9H2ef77Ttku7dudzs3Fd3fof3VL/tV6XU6rta+Oqt0z/FQ8XeV8eSHT9Z1kcHaUZS9u3GX6yjqbc7lbNvjELdudqsqKonel/ih3qgmw/Uqdqn+H297Tpars5aFl81XZ6b6ygd+3ciftXB/D+AHwJP7+1kZyJsenWv9sfdL6uPWr1s3W69PfP/btY69MZfJvk99pzk282nil+HM+zs82X/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP7t77H7yz2G4v3R2eaOxcNJBoZeuWUT1vSRT1F/rsr9XRTUwnGdhSfc/R2MNobQ1jW6Lz82Ts49P7EsHhdX5bJprbZtSwxMLAlj9t7/DDfUZY7O26OMBEI+Pd6USGT4BDvCkBY3Fh5da7F+69/8E3l28tvr309tLtycuXr8xdufza/IUby+2lue7Pw44SOAibD/3DjgQAAAAAAAAAAADYq2EfDDjz3KgPjezpMx7+ZyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVFw9l+aDFLk4d36uzK+vzbfLpZferNlM0mgkxU+T4mGykO6Smb7uivzhYTpD9vPR8pU3P320/tlmX81u/aRRr3e2e2mS1XrJbJKJer2jqVHdDfZ3bVR/IxX/7h1DOWCfdzqdhS/UHzwl/w0AAP//ih7y/g==") close(0xffffffffffffffff) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r1) userfaultfd(0x1) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) 1m16.878353216s ago: executing program 6 (id=762): syz_emit_ethernet(0x76, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000080, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRESHEX], 0xfe, 0x1aa, &(0x7f0000000dc0)="$eJzs279qU1EcB/BfYqtpHZLBSRwuuDiFpk9gkApiQFAyKAgW24D0SsBCQAebzcGX8Al8Dld9DCfHDsKR5DZNW1IRaXIh+XyW/Mg535zfCeTPuXBf3Xl7sNc/7L3sfYtapRLV+ynFcSUaUY2JYQAAy+Q4pfiVUko3hrHxJVJKZXcEAMyb338AWD3Pnr943O50dp5mWS0i/zToDrrFYzHe7sWbyGM/tqIev2P0B+FEUT981NnZysYa8Tk/OskfDbrXzudbUY/G7HyryGfn8+uxeTa/HfW4NTu/fZr/+bXoepS/Hvfunsk3ox4/Xkc/8tiLUXaa/9jKsgdPOhfWvzmeBwAAAMugmZ2aeX5vNi8bL/Ltyj9fH7hwvl6L22vl7h0AVtXh+w8Hu3m+/25STAamz8y5iIjhX+Z831xwP7vZf8Yn79z8O5xXsRFX/8rrUf6+lqfoV+e9RC0ixkU530fA4kw//WV3AgAAAAAAAAAAAAAAXGYRty6VvUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVs+fAAAA//8ty4oG") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008d}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x842, 0x20) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = creat(&(0x7f0000000180)='./file3\x00', 0x200) write$FUSE_CREATE_OPEN(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000180)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b3b373b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d31300d106d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a69508671568ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da0700258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135e0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfe7c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d678d8a600004b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab811905352483b154cdc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb415a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe660a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dd0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) write$UHID_INPUT(r1, &(0x7f000001aa40)={0x8, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r5, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7f", 0x22, 0xc040, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 9.706390094s ago: executing program 9 (id=831): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f0000000940)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c0036b573262ed88dfec7618c03371693a5173bd0bf12d29c0180500a87e3789adea802a90933b243ca225dacfc27597d6e1ce3d9fdc12409748ba4fbde6f1d76e116fd437b79bbcea7fdc682fd0b90334eed137d03ce386950f5e50ff2516eb2b500a9b99e04f2a41864e44cb46101a23835877342485260d4510fa3240a2c9756d388e5861cdeaf4c88bca74fe3ce71eef72c"], 0xfd, 0x2b6, &(0x7f0000000c00)="$eJzs3E9rE08YwPGnaZOmKW1y+PEDBfFBL3pZ2vgKgrQgBpTaiHoQpnajIWtSsjESEdubV19H8ehNsL6BXrx5Fy9FELz0IF3pbtYkZaV/NN22+X6g7HRnnszM7iY8u7Czde/N02rZtcqmKYm0SkJkTbZFcruljpHONuGXU9JrTa5O/vh84c79BzcLxeLcgup8YfFaXlWnL354/vLtpY/Nybvvpt+Py2bu4db3/JfN/zfPbe0shp9eb6rRpXq9aZYcW5crbtVSve3YxrW1UnPtRl992amvrLTV1JanMisN23XV1NpatdvarGuz0Vbz2FRqalmWTmVk2IweOqK0vrBgCgMZDOIwEbWz0SiY0cjK0vpxDAoAAJwsg8j/Rw6Q/z+puFpxtbZf/p8Q8v/B8fP/ncikEWdDcvcGoGAyne9vP/J/AAAAAAAAAAAAAAAAAAAAAABOg23Py3qelw234d+4iKRFJPw/7nFiMI5w/kdiHC7+sZ4X99IizutWqVUKtkF9oSwVccSWmaTIT/966AjK8zeKczPqy8mGs9qJ918SHA/jQ7no+NkgXnviV1ulpGR6+89LVv6Ljs/viU+KSKuUkiuXe+ItycqnR1IXR5b967ob/2pW9fqt4p7+J/x2AAAAAACcBZb+luu//w1Wk7QsDZcN2VMf7Ow+H5DsPs8HVDZS0o0fk/Nj8c0bAAAAAIBh4rZfVI3j2I3TWkh2JnLcvR/10KVE5IQcukMXrHRwrCOq0hLu8TxvdbfR33eaEJGYZvrtz1dU+NDqpJyUwxS+PgvGfpDGcfwaAQAAABikbtIf90gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABheB108LGx/lLXHerob7e998hhnCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMTvVwAAAP//G5URgQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x63ed199c3bbc704c}, 0x1) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) tgkill(r3, 0x0, 0x1a) keyctl$invalidate(0x15, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) epoll_create(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000002b80)}, 0x4040090) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) 8.883490629s ago: executing program 0 (id=832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1818c00, &(0x7f0000000080)=ANY=[@ANYRES8], 0x85, 0x6be, &(0x7f0000000180)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x4e6}], 0x1, 0x120, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002f00)=@raw={'raw\x00', 0xc01, 0x3, 0x1248, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x11b0, 0x3c8, 0x3c8, 0x11b0, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff9, 0x2, [0x7, 0xc, 0x1f, 0x32, 0x2a, 0xa, 0x3d, 0x3e, 0x2d, 0x17, 0x19, 0xc, 0x25, 0xd, 0x3e, 0x79], 0x0, 0x1000, 0x5b5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x12a8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 7.21731653s ago: executing program 0 (id=833): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000440)="120000001200e7ef007b00000000", 0xe, 0x4000000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000d00)=""/225, 0xe1}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000000980)=""/131, 0x83}], 0x6}, 0x9}], 0x2, 0x2000, 0x0) 6.682191926s ago: executing program 0 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x404e0c5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xfec7, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 5.88581958s ago: executing program 0 (id=835): io_uring_setup(0x706a, &(0x7f0000000480)={0x0, 0x641e, 0x1, 0x1, 0x112}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0xffffffffffffffff, {0xf800000000000002, 0x2, 0xfffffffffffffffe, 0x3, 0x2000000, 0xfffffffc, {0x3d, 0x3, 0x7fffffff, 0x9, 0xfffffffffffffffc, 0xf8, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x400, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.448680421s ago: executing program 0 (id=836): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = inotify_init1(0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/76, 0x4c}], 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) prlimit64(r3, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2dfd, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x12424d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19035, 0x100008) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000001000/0x2000)=nil) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006) 0s ago: executing program 0 (id=837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): t=2, SerialNumber=3 [ 411.464982][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 411.472833][ T10] usb 5-1: Product: syz [ 411.490599][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 411.501246][ T10] usb 5-1: Manufacturer: syz [ 411.515551][ T10] usb 5-1: SerialNumber: syz [ 411.533021][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 411.577889][ T10] usb 5-1: config 0 descriptor?? [ 411.588920][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 411.610272][ T7602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.633458][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 411.678665][ T7602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.713869][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 411.755430][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 411.819046][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 411.851478][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 411.936494][ T9] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 411.986975][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.001934][ T7602] warning: `syz.4.374' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 412.013727][ T9] usb 10-1: Product: syz [ 412.013881][ T9] usb 10-1: Manufacturer: syz [ 412.014035][ T9] usb 10-1: SerialNumber: syz [ 412.098162][ T7602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 412.118123][ T9] usb 10-1: config 0 descriptor?? [ 412.160012][ T7602] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 412.183848][ T7605] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 412.269713][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.743521][ T7622] loop8: detected capacity change from 0 to 512 [ 412.851262][ T10] Error reading MAC address [ 412.941404][ T7622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.954823][ T7622] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.030142][ T10] usb 5-1: USB disconnect, device number 11 [ 413.043695][ T7622] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.379: corrupted inode contents [ 413.124145][ T7622] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz.8.379: mark_inode_dirty error [ 413.225475][ T7622] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.379: corrupted inode contents [ 413.323500][ T7622] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.379: mark_inode_dirty error [ 413.452479][ T7629] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #2: comm syz.8.379: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 413.452479][ T7629] [ 413.498384][ T7629] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.379: corrupted inode contents [ 413.576415][ T9] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 413.635026][ T7629] EXT4-fs error (device loop8): ext4_append:88: inode #2: comm syz.8.379: mark_inode_dirty error [ 413.690271][ T7629] EXT4-fs error (device loop8) in ext4_append:100: Corrupt filesystem [ 413.737989][ T9] usb 10-1: USB disconnect, device number 2 [ 414.212498][ T7543] udevd[7543]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.297538][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.523022][ T7640] loop4: detected capacity change from 0 to 512 [ 414.798013][ T7640] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.384: attempt to clear invalid blocks 1 len 1 [ 414.917397][ T7640] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 414.921243][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 414.937174][ C0] EXT4-fs (loop4): initial error at time 1778919903: ext4_clear_blocks:876: inode 13 [ 414.947068][ C0] EXT4-fs (loop4): last error at time 1778919903: ext4_clear_blocks:876: inode 13 [ 414.965453][ T7640] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 415.122742][ T7640] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.384: invalid indirect mapped block 1819239214 (level 0) [ 415.224338][ T7640] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 415.225745][ T7640] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.384: invalid indirect mapped block 1819239214 (level 1) [ 415.365024][ T7640] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 415.378693][ T7640] EXT4-fs (loop4): 1 truncate cleaned up [ 415.492176][ T7640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.699408][ T7648] loop8: detected capacity change from 0 to 4096 [ 415.869488][ T5578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.016690][ T7648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.704781][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.379950][ T7666] loop9: detected capacity change from 0 to 512 [ 417.422517][ T7666] EXT4-fs: Ignoring removed orlov option [ 417.532026][ T7666] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.390: Attempting to read directory block (0) that is past i_size (256) [ 417.614018][ T7666] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 417.621247][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 417.637171][ C1] EXT4-fs (loop9): initial error at time 1778919906: dx_probe:791: inode 2 [ 417.646238][ C1] EXT4-fs (loop9): last error at time 1778919906: dx_probe:791: inode 2 [ 417.686894][ T7666] EXT4-fs (loop9): Remounting filesystem read-only [ 417.741987][ T7666] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 417.772112][ T7666] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.791476][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 418.002192][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 418.040169][ T9] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 418.084786][ T9] usb 5-1: config 0 has no interface number 0 [ 418.130754][ T9] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.158843][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.184297][ T9] usb 5-1: config 0 interface 2 has no altsetting 0 [ 418.239335][ T9] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 418.288082][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.349194][ T9] usb 5-1: Product: syz [ 418.369546][ T9] usb 5-1: Manufacturer: syz [ 418.401338][ T9] usb 5-1: SerialNumber: syz [ 418.465585][ T9] usb 5-1: config 0 descriptor?? [ 418.538398][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 419.732330][ T5227] 8021q: adding VLAN 0 to HW filter on device eth17 [ 420.115124][ T7689] loop9: detected capacity change from 0 to 1764 [ 420.459673][ T7692] loop6: detected capacity change from 0 to 512 [ 420.715710][ T7692] EXT4-fs (loop6): 1 truncate cleaned up [ 420.789677][ T7692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.083109][ T2049] usb 5-1: USB disconnect, device number 12 [ 422.298601][ T6991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.840167][ T7717] loop8: detected capacity change from 0 to 512 [ 423.948727][ T7717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.004894][ T7717] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 424.125532][ T7717] EXT4-fs (loop8): 1 truncate cleaned up [ 424.196376][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 424.213387][ T7717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.491622][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 424.511043][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 424.595253][ T9] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 424.647521][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 424.694754][ T9] usb 10-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 424.750431][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.836007][ T9] usb 10-1: config 0 descriptor?? [ 424.841793][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.406'. [ 424.954656][ T7727] netlink: 5 bytes leftover after parsing attributes in process `syz.6.406'. [ 425.168438][ T7731] loop4: detected capacity change from 0 to 512 [ 425.256398][ T7731] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 425.299966][ T7731] UDF-fs: Scanning with blocksize 512 failed [ 425.348035][ T9] usbhid 10-1:0.0: can't add hid device: -71 [ 425.369928][ T9] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 425.409126][ T7731] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 425.443316][ T9] usb 10-1: USB disconnect, device number 3 [ 425.460096][ T7731] UDF-fs: Scanning with blocksize 1024 failed [ 425.516546][ T7731] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 425.563881][ T7731] UDF-fs: Scanning with blocksize 2048 failed [ 425.620579][ T7731] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 425.649903][ T7730] loop7: detected capacity change from 0 to 2048 [ 425.742077][ T7731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.780917][ T7730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.963273][ T7730] kvm: pic: level sensitive irq not supported [ 425.974844][ T7730] kvm: pic: non byte write [ 426.761456][ T7741] loop6: detected capacity change from 0 to 256 [ 426.975832][ T7741] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 427.376044][ T5227] 8021q: adding VLAN 0 to HW filter on device eth18 [ 427.519295][ T29] audit: type=1326 audit(1778919916.502:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.6.410" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf00c code=0x7fc00000 [ 428.192364][ T7754] loop4: detected capacity change from 0 to 16 [ 428.232172][ T7754] erofs (device loop4): mounted with root inode @ nid 36. [ 428.483791][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.490035][ T7751] loop7: detected capacity change from 0 to 4096 [ 429.606030][ T7751] overlayfs: failed lookup in lower (newroot/9, name='file0', err=-40): overlapping layers [ 429.634349][ T7764] loop9: detected capacity change from 0 to 4096 [ 429.739174][ T7751] overlayfs: failed lookup in lower (newroot/9, name='file0', err=-40): overlapping layers [ 429.846080][ T7764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.556960][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.792118][ T2049] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 430.939025][ T7783] loop4: detected capacity change from 0 to 512 [ 431.003471][ T2049] usb 9-1: Using ep0 maxpacket: 8 [ 431.015517][ T7783] EXT4-fs: Ignoring removed bh option [ 431.065476][ T2049] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 431.174697][ T7783] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.422: invalid block [ 431.201963][ T7783] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 431.205194][ T7783] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.422: invalid indirect mapped block 4294967295 (level 1) [ 431.206009][ T2049] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 431.214906][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 431.214993][ C0] EXT4-fs (loop4): initial error at time 1778919920: ext4_get_branch:178: inode 11: block 4294967295 [ 431.215180][ C0] EXT4-fs (loop4): last error at time 1778919920: ext4_get_branch:178: inode 11: block 4294967295 [ 431.315933][ T7783] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 431.340063][ T7783] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.422: invalid indirect mapped block 4294967295 (level 1) [ 431.391361][ T2049] usb 9-1: config 0 interface 0 has no altsetting 0 [ 431.410451][ T2049] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 431.443466][ T7783] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 431.453231][ T7783] EXT4-fs (loop4): 2 truncates cleaned up [ 431.499919][ T2049] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.564108][ T2049] usb 9-1: config 0 descriptor?? [ 431.666165][ T7783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.893589][ T7783] EXT4-fs error (device loop4): __ext4_iget:5481: inode #13: block 1048320: comm syz.4.422: invalid block [ 431.947777][ T7792] loop9: detected capacity change from 0 to 256 [ 432.063655][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 432.073386][ T7792] exFAT-fs (loop9): error, The cluster chain has a loop [ 432.084669][ T2049] usbhid 9-1:0.0: can't add hid device: -71 [ 432.122626][ T2049] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 432.127846][ T7792] exFAT-fs (loop9): Filesystem has been set read-only [ 432.173381][ T7792] exFAT-fs (loop9): failed to count the number of clusters in root [ 432.204446][ T2049] usb 9-1: USB disconnect, device number 2 [ 432.210647][ T7792] exFAT-fs (loop9): failed to recognize exfat type [ 432.468017][ T5578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.239670][ T7798] loop4: detected capacity change from 0 to 256 [ 433.307010][ T7798] exfat: Bad value for 'uid' [ 433.336333][ T7798] exfat: Bad value for 'uid' [ 433.823519][ T5227] 8021q: adding VLAN 0 to HW filter on device eth19 [ 434.708893][ T5592] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 434.891572][ T5592] usb 5-1: Using ep0 maxpacket: 8 [ 434.930551][ T5592] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 434.980029][ T5592] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 435.004707][ T7818] netlink: 168 bytes leftover after parsing attributes in process `syz.8.431'. [ 435.055806][ T7818] netlink: 164 bytes leftover after parsing attributes in process `syz.8.431'. [ 435.059926][ T5592] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 435.096463][ T5592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.413805][ T5592] usb 5-1: string descriptor 0 read error: -71 [ 436.018851][ T5592] usb 5-1: USB disconnect, device number 13 [ 436.951329][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 437.185531][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 437.233144][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 437.281658][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.311307][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.334921][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 437.397180][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 437.444037][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.504419][ T9] usb 9-1: config 0 descriptor?? [ 437.547798][ T7828] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 438.475858][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 438.684453][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 438.727302][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 438.786236][ T5204] usb 9-1: USB disconnect, device number 3 [ 438.786813][ T5590] Bluetooth: hci2: Opcode 0x0c03 failed: -19 [ 438.840635][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 438.956836][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.009812][ T9] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 439.061298][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.131020][ T9] usb 5-1: config 0 descriptor?? [ 439.707911][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 439.751713][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 439.817927][ T9] usb 5-1: USB disconnect, device number 14 [ 439.990326][ T7851] loop8: detected capacity change from 0 to 128 [ 440.082341][ T7851] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 440.124550][ T7851] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 440.818135][ T7129] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 441.150435][ T7862] loop9: detected capacity change from 0 to 8 [ 441.747885][ T7866] loop8: detected capacity change from 0 to 2048 [ 441.815950][ T7866] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 441.929465][ T7866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.168503][ T7872] loop4: detected capacity change from 0 to 1024 [ 442.226569][ T7872] EXT4-fs: Ignoring removed bh option [ 442.262589][ T7872] EXT4-fs: Ignoring removed i_version option [ 442.295504][ T7872] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 442.295504][ T7872] [ 442.379291][ T7876] loop9: detected capacity change from 0 to 128 [ 442.498279][ T7876] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 442.967936][ T7882] loop6: detected capacity change from 0 to 2048 [ 443.123635][ T7882] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 443.266775][ T7882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.558641][ T7885] loop8: detected capacity change from 0 to 1024 [ 443.642183][ T7885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.843124][ T7885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.715092][ T7896] loop9: detected capacity change from 0 to 2048 [ 444.860685][ T7896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 445.110630][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.649673][ T7909] loop7: detected capacity change from 0 to 1024 [ 445.752454][ T7909] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 445.752454][ T7909] [ 445.913104][ T5227] 8021q: adding VLAN 0 to HW filter on device eth20 [ 448.114664][ T7939] loop6: detected capacity change from 0 to 256 [ 448.287779][ T7936] loop7: detected capacity change from 0 to 2048 [ 448.386198][ T7939] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 448.409720][ T7936] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 448.560337][ T7939] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 448.564951][ T7936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 449.084537][ T7947] loop8: detected capacity change from 0 to 1024 [ 449.186817][ T7947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.330084][ T7947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.587453][ T7956] loop4: detected capacity change from 0 to 512 [ 449.707287][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.714021][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.768517][ T7956] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.469: corrupted in-inode xattr: invalid ea_ino [ 449.796895][ T7956] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 449.801196][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 449.817321][ C0] EXT4-fs (loop4): initial error at time 1778919938: ext4_iget_extra_inode:5128: inode 15 [ 449.827568][ C0] EXT4-fs (loop4): last error at time 1778919938: ext4_iget_extra_inode:5128: inode 15 [ 449.856677][ T7956] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.469: couldn't read orphan inode 15 (err -117) [ 449.922764][ T7956] loop4: lost filesystem error report for type 5 error -117 [ 449.930395][ T7956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.834080][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.836502][ T5578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.739276][ T7973] loop9: detected capacity change from 0 to 4096 [ 451.834359][ T7973] ext3: block size(8192) > page size(4096) not supported by filesystem [ 451.879805][ T7973] EXT4-fs (loop9): bad block size 8192 [ 452.869742][ T7994] loop9: detected capacity change from 0 to 128 [ 453.031197][ T7994] FAT-fs (loop9): bogus number of reserved sectors [ 453.096181][ T7994] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 453.109419][ T5227] 8021q: adding VLAN 0 to HW filter on device eth21 [ 453.147515][ T7994] FAT-fs (loop9): Can't find a valid FAT filesystem [ 453.966488][ T8003] loop8: detected capacity change from 0 to 2048 [ 454.076104][ T8003] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 454.211304][ T8003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.493570][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 454.701605][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 454.784907][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 454.839134][ T9] usb 5-1: config 255 has an invalid interface number: 157 but max is 0 [ 454.898171][ T9] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 454.978906][ T9] usb 5-1: config 255 has no interface number 0 [ 455.026426][ T9] usb 5-1: config 255 interface 157 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 455.094001][ T9] usb 5-1: config 255 interface 157 has no altsetting 0 [ 455.107830][ T8011] loop6: detected capacity change from 0 to 4096 [ 455.124800][ T8011] EXT4-fs: inline encryption not supported [ 455.177894][ T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0121, bcdDevice=83.3f [ 455.255258][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.270365][ T8011] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 455.279071][ T9] usb 5-1: Product: syz [ 455.285861][ T8011] System zones: 0-5 [ 455.295884][ T9] usb 5-1: Manufacturer: syz [ 455.302540][ T9] usb 5-1: SerialNumber: syz [ 455.402329][ T8011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.433311][ T8015] binder: 8013:8015 ioctl c018620c 80000000 returned -22 [ 455.764844][ T9] usb 5-1: USB disconnect, device number 15 [ 456.160364][ T6991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.225056][ T8024] loop7: detected capacity change from 0 to 2048 [ 456.435273][ T8024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.478084][ T8024] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 456.953858][ T8028] loop8: detected capacity change from 0 to 2048 [ 457.056708][ T7204] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.164639][ T8028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.756061][ T8034] loop6: detected capacity change from 0 to 4096 [ 457.835756][ T8034] ext3: block size(8192) > page size(4096) not supported by filesystem [ 457.906239][ T8034] EXT4-fs (loop6): bad block size 8192 [ 459.551913][ T8052] loop8: detected capacity change from 0 to 2048 [ 459.638276][ T8052] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 459.762731][ T8052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.667397][ T5227] 8021q: adding VLAN 0 to HW filter on device eth22 [ 462.837398][ T8082] input: syz0 as /devices/virtual/input/input7 [ 464.141898][ T8098] loop6: detected capacity change from 0 to 2048 [ 464.210868][ T8098] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 464.346135][ T8098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 465.285898][ T8109] loop7: detected capacity change from 0 to 512 [ 465.853449][ T8118] loop9: detected capacity change from 0 to 256 [ 465.934359][ T8118] exfat: Deprecated parameter 'utf8' [ 466.025648][ T8118] exfat: Deprecated parameter 'utf8' [ 466.236178][ T8118] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 466.686621][ T8124] loop8: detected capacity change from 0 to 128 [ 466.791876][ T8124] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 466.932978][ T8124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.126703][ T8139] IPv6: NLM_F_CREATE should be specified when creating new route [ 468.575232][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.8.524'. [ 468.812865][ T8149] loop4: detected capacity change from 0 to 512 [ 468.876357][ T8149] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.998636][ T8149] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.526: corrupted in-inode xattr: e_value size too large [ 469.108457][ T8149] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.115635][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 469.131714][ C0] EXT4-fs (loop4): initial error at time 1778919958: ext4_iget_extra_inode:5128: inode 15 [ 469.142080][ C0] EXT4-fs (loop4): last error at time 1778919958: ext4_iget_extra_inode:5128: inode 15 [ 469.165823][ T8149] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.526: couldn't read orphan inode 15 (err -117) [ 469.231772][ T8149] loop4: lost filesystem error report for type 5 error -117 [ 469.251547][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 469.269224][ T8149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.506020][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.534133][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.543541][ T9] usb 8-1: Product: syz [ 469.547954][ T9] usb 8-1: Manufacturer: syz [ 469.556778][ T9] usb 8-1: SerialNumber: syz [ 469.619219][ T9] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.655224][ T5204] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 469.723955][ T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.839483][ T5204] usb 10-1: too many configurations: 84, using maximum allowed: 8 [ 469.964043][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 469.964871][ T5578] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 470.016068][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.105668][ T5578] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 470.127814][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 470.153079][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.212748][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 470.332436][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.388828][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 470.436261][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.544556][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 470.592092][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.659485][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 470.722460][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.762922][ T24] usb 8-1: USB disconnect, device number 2 [ 470.818709][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 470.857037][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.886290][ T5204] usb 10-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64 [ 470.936925][ T5578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.971608][ T5204] usb 10-1: config 1 interface 0 has no altsetting 0 [ 470.987297][ T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 470.990167][ T55] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.017945][ T5204] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 471.032121][ T10] ath9k_htc: Failed to initialize the device [ 471.068701][ T5204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.081512][ T24] usb 8-1: ath9k_htc: USB layer deinitialized [ 471.100192][ T5204] usb 10-1: Product: syz [ 471.122094][ T5204] usb 10-1: Manufacturer: syz [ 471.151403][ T5204] usb 10-1: SerialNumber: syz [ 471.226471][ T8159] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 471.287475][ T55] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.592559][ T55] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.859442][ T55] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.403549][ T5204] (unnamed net_device) (uninitialized): Assigned a random MAC address: 26:96:75:ce:e0:a6 [ 472.651344][ T5204] rtl8150 10-1:1.0: eth24: rtl8150 is detected [ 472.694954][ T5204] usb 10-1: USB disconnect, device number 4 [ 473.725553][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.762591][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.778024][ T55] bond0 (unregistering): Released all slaves [ 474.390420][ T8177] loop6: detected capacity change from 0 to 512 [ 474.399159][ T8179] loop9: detected capacity change from 0 to 16 [ 474.429206][ T8177] EXT4-fs: Ignoring removed nobh option [ 474.469779][ T8179] erofs (device loop9): mounted with root inode @ nid 36. [ 474.486228][ T8177] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 474.579490][ T8177] EXT4-fs (loop6): 1 truncate cleaned up [ 474.636532][ T8177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.661502][ T55] hsr_slave_0: left promiscuous mode [ 474.705611][ T55] hsr_slave_1: left promiscuous mode [ 474.728786][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.782463][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.855606][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.910274][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.078500][ T55] veth1_macvtap: left promiscuous mode [ 475.126539][ T55] veth0_macvtap: left promiscuous mode [ 475.168091][ T55] veth1_vlan: left promiscuous mode [ 475.198294][ T55] veth0_vlan: left promiscuous mode [ 475.205446][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.537'. [ 475.206850][ T6991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.629116][ T5586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.660756][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.674760][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.695373][ T5586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.709519][ T5586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.899818][ T8196] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 476.457574][ T8203] loop9: detected capacity change from 0 to 512 [ 476.540902][ T8203] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 476.649937][ T8203] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.542: inode has both inline data and extents flags [ 476.695651][ T8203] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 476.697130][ T8203] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.542: couldn't read orphan inode 15 (err -117) [ 476.706839][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 476.706925][ C1] EXT4-fs (loop9): initial error at time 1778919965: ext4_orphan_get:1397: inode 15 [ 476.707079][ C1] EXT4-fs (loop9): last error at time 1778919965: ext4_orphan_get:1397: inode 15 [ 476.762223][ T8205] loop6: detected capacity change from 0 to 256 [ 476.795493][ T8205] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 476.821544][ T8205] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 476.885419][ T8205] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 476.921760][ T8203] loop9: lost filesystem error report for type 5 error -117 [ 476.932300][ T8203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.001829][ T8205] exFAT-fs (loop6): failed to load alloc-bitmap [ 477.020724][ T8205] exFAT-fs (loop6): failed to recognize exfat type [ 477.161418][ T8203] syz.9.542 (pid 8203) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 477.220557][ T8203] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.542: bg 0: block 255: padding at end of block bitmap is not set [ 477.551330][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.647760][ T8209] loop8: detected capacity change from 0 to 4096 [ 477.707912][ T8209] EXT4-fs: Ignoring removed nobh option [ 477.758146][ T8209] EXT4-fs (loop8): Test dummy encryption mode enabled [ 477.774711][ T5586] Bluetooth: hci1: command tx timeout [ 477.844704][ T8209] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 477.855843][ T8209] System zones: 0-5 [ 477.879447][ T55] team0 (unregistering): Port device team_slave_1 removed [ 477.907474][ T8209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.079179][ T55] team0 (unregistering): Port device team_slave_0 removed [ 478.262899][ T8209] fscrypt (loop8): Error allocating 'cts(cbc(aes))' transform: -4 [ 478.691564][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.892507][ T8222] loop9: detected capacity change from 0 to 512 [ 478.920030][ T8224] Bluetooth: MGMT ver 1.23 [ 478.957178][ T8222] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 479.105048][ T8222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.238660][ T8222] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.386071][ T8222] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.547: iget: bad i_size value: 2533274857506816 [ 479.853866][ T5586] Bluetooth: hci1: command tx timeout [ 479.858333][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.931814][ T5586] Bluetooth: hci1: command tx timeout [ 482.873430][ T8267] cgroup: Unknown subsys name 'cpuset' [ 483.595949][ T8278] loop9: detected capacity change from 0 to 128 [ 483.663074][ T8278] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 484.021360][ T5586] Bluetooth: hci1: command tx timeout [ 484.621967][ T8288] loop8: detected capacity change from 0 to 256 [ 484.660021][ T8288] exfat: Deprecated parameter 'utf8' [ 484.710707][ T8288] exfat: Deprecated parameter 'utf8' [ 484.808618][ T8288] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 486.599850][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.640613][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.664538][ T8191] bridge_slave_0: entered allmulticast mode [ 486.735815][ T8191] bridge_slave_0: entered promiscuous mode [ 486.803036][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.846663][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.877088][ T8191] bridge_slave_1: entered allmulticast mode [ 486.919690][ T8191] bridge_slave_1: entered promiscuous mode [ 487.277865][ T5227] 8021q: adding VLAN 0 to HW filter on device eth13 [ 487.381666][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.553684][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.036844][ T8191] team0: Port device team_slave_0 added [ 488.127346][ T8191] team0: Port device team_slave_1 added [ 488.265108][ T8324] loop6: detected capacity change from 0 to 16 [ 488.320931][ T8324] erofs (device loop6): mounted with root inode @ nid 36. [ 488.557907][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.598736][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.678394][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.723432][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.741622][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.809081][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.450256][ T8191] hsr_slave_0: entered promiscuous mode [ 489.515414][ T8191] hsr_slave_1: entered promiscuous mode [ 489.925224][ T8338] loop7: detected capacity change from 0 to 1024 [ 489.984711][ T8338] EXT4-fs: Ignoring removed oldalloc option [ 490.042212][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.9.582'. [ 490.130556][ T8338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 490.146750][ T8338] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.149011][ T8342] loop6: detected capacity change from 0 to 256 [ 491.108741][ T8351] loop6: detected capacity change from 0 to 512 [ 491.132417][ T8345] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 491.166989][ T8351] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 491.195960][ T7208] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 491.256797][ T8351] EXT4-fs (loop6): 1 truncate cleaned up [ 491.296949][ T8351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.447590][ T7208] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.504987][ T7208] usb 10-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 491.557783][ T7208] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.608027][ T7208] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.652858][ T7208] usb 10-1: Product: syz [ 491.669556][ T7208] usb 10-1: Manufacturer: syz [ 491.689458][ T7208] usb 10-1: SerialNumber: syz [ 492.368074][ T6991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.694691][ T8191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 492.817895][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.873210][ T8191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 493.024668][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 493.107148][ T8191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 493.266010][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 493.280244][ T8368] loop8: detected capacity change from 0 to 764 [ 493.326692][ T8191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 493.418177][ T7208] cdc_ncm 10-1:1.0: failed to get mac address [ 493.440460][ T8368] Symlink component flag not implemented [ 493.440754][ T7208] cdc_ncm 10-1:1.0: bind() failure [ 493.477671][ T8191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 493.544798][ T7208] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 493.612235][ T7208] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 493.681733][ T7208] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 493.815270][ T7208] usb 10-1: USB disconnect, device number 5 [ 494.456804][ T8377] loop8: detected capacity change from 0 to 16 [ 494.524834][ T8377] erofs (device loop8): mounted with root inode @ nid 36. [ 495.024295][ T7204] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 495.111197][ T8381] loop6: detected capacity change from 0 to 1024 [ 495.149259][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.173712][ T8381] EXT4-fs: inline encryption not supported [ 495.209630][ T5227] 8021q: adding VLAN 0 to HW filter on device eth14 [ 495.226388][ T8381] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 495.483833][ T8381] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.589: lblock 2 mapped to illegal pblock 2 (length 1) [ 495.514342][ T8381] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 495.516399][ T8381] EXT4-fs (loop6): Remounting filesystem read-only [ 495.525925][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 495.526014][ C1] EXT4-fs (loop6): initial error at time 1778919984: ext4_map_blocks:791: inode 3: block 2 [ 495.526199][ C1] EXT4-fs (loop6): last error at time 1778919984: ext4_map_blocks:791: inode 3: block 2 [ 495.650796][ T8381] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 495.715093][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.769013][ T8381] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 495.865134][ T8381] EXT4-fs (loop6): 1 orphan inode deleted [ 495.903379][ T8381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.903636][ T6673] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.923263][ T6673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.980107][ T8381] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.039294][ T8392] loop7: detected capacity change from 0 to 1024 [ 496.119941][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.127571][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.258486][ T8392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.290235][ T8389] loop9: detected capacity change from 0 to 4096 [ 496.388245][ T8389] EXT4-fs (loop9): Test dummy encryption mode enabled [ 496.482918][ T29] audit: type=1800 audit(1778919985.472:12): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.591" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 496.505895][ T8389] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.545866][ T8392] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.591: bg 0: block 260: invalid block bitmap [ 496.623548][ T8389] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 496.645633][ T8391] EXT4-fs error (device loop7): ext4_free_inode:354: comm syz.7.591: bit already cleared for inode 15 [ 496.883419][ T8397] loop8: detected capacity change from 0 to 512 [ 496.958542][ T8397] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 497.076240][ T8397] EXT4-fs (loop8): 1 truncate cleaned up [ 497.095353][ T8397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.135455][ T7204] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.283131][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.930558][ T8408] loop7: detected capacity change from 0 to 256 [ 498.012451][ T8408] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.103288][ T8408] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 498.231663][ T8410] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 498.281911][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.292836][ T8408] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 498.388881][ T8408] exFAT-fs (loop7): failed to load alloc-bitmap [ 498.456900][ T8408] exFAT-fs (loop7): failed to recognize exfat type [ 499.166658][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 499.434600][ T10] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 499.477485][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.505950][ T10] usb 7-1: Product: syz [ 499.534578][ T10] usb 7-1: Manufacturer: syz [ 499.566297][ T10] usb 7-1: SerialNumber: syz [ 499.658333][ T10] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 499.770271][ T7208] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 499.803646][ T8422] loop7: detected capacity change from 0 to 16 [ 499.916485][ T8422] erofs (device loop7): mounted with root inode @ nid 36. [ 500.824029][ T2049] usb 7-1: USB disconnect, device number 2 [ 501.171483][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 501.214613][ T7208] usb 7-1: Service connection timeout for: 256 [ 501.242371][ T7208] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 501.288306][ T7208] ath9k_htc: Failed to initialize the device [ 501.345184][ T8434] loop7: detected capacity change from 0 to 8 [ 501.359393][ T2049] usb 7-1: ath9k_htc: USB layer deinitialized [ 501.391995][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 501.441536][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 501.497453][ T10] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 501.597368][ T10] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 501.655585][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.707745][ T10] usb 10-1: Product: syz [ 501.737264][ T10] usb 10-1: Manufacturer: syz [ 501.765630][ T10] usb 10-1: SerialNumber: syz [ 501.818157][ T8437] loop8: detected capacity change from 0 to 1764 [ 502.178987][ T10] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 502.267222][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 502.807623][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.072060][ T8446] loop8: detected capacity change from 0 to 512 [ 503.194525][ T8446] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.608: inode has both inline data and extents flags [ 503.281889][ T8446] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 503.290829][ T8446] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.608: couldn't read orphan inode 15 (err -117) [ 503.300540][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 503.300632][ C1] EXT4-fs (loop8): initial error at time 1778919992: ext4_orphan_get:1397: inode 15 [ 503.300788][ C1] EXT4-fs (loop8): last error at time 1778919992: ext4_orphan_get:1397: inode 15 [ 503.358772][ T10] usb 10-1: USB disconnect, device number 6 [ 503.429938][ T8446] loop8: lost filesystem error report for type 5 error -117 [ 503.446719][ T8446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.632028][ T8191] veth0_vlan: entered promiscuous mode [ 503.780199][ T7642] udevd[7642]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.862090][ T8191] veth1_vlan: entered promiscuous mode [ 504.223882][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.590510][ T8191] veth0_macvtap: entered promiscuous mode [ 504.695816][ T8191] veth1_macvtap: entered promiscuous mode [ 504.976933][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.226048][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.340080][ T8464] syzkaller0: entered promiscuous mode [ 505.385808][ T8464] syzkaller0: entered allmulticast mode [ 505.717636][ T1021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.789211][ T1021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.881368][ T1021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.939076][ T1021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.165184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 506.181992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 507.568890][ T8476] loop7: detected capacity change from 0 to 16 [ 507.638826][ T8476] erofs (device loop7): mounted with root inode @ nid 36. [ 507.692671][ T8479] loop6: detected capacity change from 0 to 512 [ 507.804463][ T8479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.449437][ T6991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.870804][ T8492] loop7: detected capacity change from 0 to 1764 [ 511.166402][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.173267][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.471539][ T7208] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 512.664752][ T7208] usb 7-1: Using ep0 maxpacket: 8 [ 512.706889][ T7208] usb 7-1: config 11 has an invalid interface number: 3 but max is 0 [ 512.751725][ T7208] usb 7-1: config 11 has no interface number 0 [ 512.779903][ T7208] usb 7-1: config 11 interface 3 has no altsetting 0 [ 512.816451][ T7208] usb 7-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=fe.03 [ 512.861587][ T7208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.887432][ T7208] usb 7-1: Product: syz [ 512.900645][ T7208] usb 7-1: Manufacturer: syz [ 512.925702][ T7208] usb 7-1: SerialNumber: syz [ 513.356409][ T7208] ftdi_sio 7-1:11.3: FTDI USB Serial Device converter detected [ 513.409192][ T7208] ftdi_sio ttyUSB0: unknown device type: 0xfe03 [ 513.436501][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.496720][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.510197][ T7208] usb 7-1: USB disconnect, device number 3 [ 513.538376][ T8544] loop9: detected capacity change from 0 to 16 [ 513.558965][ T7208] ftdi_sio 7-1:11.3: device disconnected [ 513.620882][ T8544] erofs (device loop9): mounted with root inode @ nid 36. [ 513.801666][ T6673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.847811][ T6673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.742388][ T8552] loop6: detected capacity change from 0 to 256 [ 514.848602][ T8552] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 515.004750][ T8552] exFAT-fs (loop6): start_clu is invalid cluster(0x0) [ 516.161714][ T7208] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 516.207428][ T8573] loop6: detected capacity change from 0 to 512 [ 516.337318][ T8573] EXT4-fs: quotafile must be on filesystem root [ 516.356898][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 516.382464][ T7208] usb 10-1: Using ep0 maxpacket: 8 [ 516.513230][ T7208] usb 10-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 516.530805][ T8576] loop7: detected capacity change from 0 to 512 [ 516.550313][ T7208] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.588253][ T7208] usb 10-1: Product: syz [ 516.641548][ T7208] usb 10-1: Manufacturer: syz [ 516.666924][ T8576] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 516.674745][ T7208] usb 10-1: SerialNumber: syz [ 516.753205][ T8576] EXT4-fs (loop7): 1 truncate cleaned up [ 516.844370][ T8576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.865958][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 516.882754][ T5204] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 516.959712][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 516.990855][ T10] usb 1-1: can't read configurations, error -71 [ 517.121307][ T5204] usb 7-1: Using ep0 maxpacket: 32 [ 517.167669][ T5204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 517.218718][ T5204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34098, setting to 1024 [ 517.272388][ T5204] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 517.295574][ T7208] usb 10-1: USB disconnect, device number 7 [ 517.329418][ T5204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.425373][ T5204] usb 7-1: config 0 descriptor?? [ 517.454082][ T7204] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.480156][ T8571] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 517.967573][ T5204] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 518.001402][ T5204] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 518.031606][ T5204] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 518.087421][ T5204] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 518.118691][ T5204] savu 0003:1E7D:2D5A.0006: unknown main item tag 0x0 [ 518.146865][ T5204] savu 0003:1E7D:2D5A.0006: unbalanced collection at end of report description [ 518.272971][ T8584] loop7: detected capacity change from 0 to 1024 [ 518.287427][ T5204] savu 0003:1E7D:2D5A.0006: parse failed [ 518.309267][ T5204] savu 0003:1E7D:2D5A.0006: probe with driver savu failed with error -22 [ 518.364961][ T8584] hfsplus: failed to load extents file [ 518.392141][ T5204] usb 7-1: USB disconnect, device number 4 [ 518.476408][ T8587] loop0: detected capacity change from 0 to 16 [ 518.536787][ T8587] erofs (device loop0): mounted with root inode @ nid 36. [ 518.593984][ T8589] loop9: detected capacity change from 0 to 8 [ 518.661946][ T8589] SQUASHFS error: lzo decompression failed, data probably corrupt [ 518.677541][ T8589] SQUASHFS error: Failed to read block 0x28d: -5 [ 518.697991][ T8589] SQUASHFS error: Unable to read metadata cache entry [28b] [ 518.717979][ T8589] SQUASHFS error: Unable to read inode 0x11f [ 519.107827][ T5204] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 519.340975][ T5204] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.405720][ T5204] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.458587][ T5204] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 519.535533][ T5204] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.583548][ T5204] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.674067][ T5204] usb 10-1: config 0 descriptor?? [ 520.418113][ T5204] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 520.971590][ T5204] usb 10-1: USB disconnect, device number 8 [ 521.557926][ T8613] fido_id[8613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 521.694180][ T8602] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 522.148916][ T8619] loop0: detected capacity change from 0 to 2048 [ 522.332299][ T8619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 522.435891][ T8623] loop8: detected capacity change from 0 to 2048 [ 522.562230][ T8623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.604203][ T8636] loop9: detected capacity change from 0 to 8 [ 523.802253][ T7129] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.976533][ T8640] loop0: detected capacity change from 0 to 128 [ 524.063229][ T8640] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 524.167334][ T8640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 524.738139][ T8644] loop8: detected capacity change from 0 to 16 [ 524.805698][ T8644] erofs (device loop8): mounted with root inode @ nid 36. [ 525.676531][ T8648] loop6: detected capacity change from 0 to 2048 [ 525.821707][ T8648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.864615][ T8673] loop9: detected capacity change from 0 to 512 [ 527.974636][ T8673] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 528.000303][ T8669] loop6: detected capacity change from 0 to 2048 [ 528.077966][ T8673] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.661: inode has both inline data and extents flags [ 528.092510][ T8673] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 528.101191][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 528.117358][ C1] EXT4-fs (loop9): initial error at time 1778920017: ext4_orphan_get:1397: inode 15 [ 528.122580][ T8673] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.661: couldn't read orphan inode 15 (err -117) [ 528.127163][ C1] EXT4-fs (loop9): last error at time 1778920017: ext4_orphan_get:1397: inode 15 [ 528.150679][ T2049] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 528.264552][ T8673] loop9: lost filesystem error report for type 5 error -117 [ 528.319262][ T2049] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 528.338053][ T8669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.338260][ T2049] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.368657][ T2049] usb 8-1: config 0 descriptor?? [ 528.399019][ T2049] cp210x 8-1:0.0: cp210x converter detected [ 528.430261][ T8673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.557409][ T8672] loop8: detected capacity change from 0 to 2048 [ 528.839632][ T8672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.190632][ T2049] usb 8-1: cp210x converter now attached to ttyUSB0 [ 529.206980][ T8672] kvm: pic: level sensitive irq not supported [ 529.207974][ T8672] kvm: pic: non byte write [ 529.257044][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.498092][ T55] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 529.623934][ T55] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 529.651534][ T5204] usb 8-1: USB disconnect, device number 3 [ 529.729839][ T5204] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 529.770586][ T55] EXT4-fs (loop6): This should not happen!! Data will be lost [ 529.770586][ T55] [ 529.852587][ T55] EXT4-fs (loop6): Total free blocks count 0 [ 529.877483][ T5204] cp210x 8-1:0.0: device disconnected [ 529.902107][ T55] EXT4-fs (loop6): Free/Dirty block details [ 529.946983][ T55] EXT4-fs (loop6): free_blocks=4096 [ 529.996534][ T55] EXT4-fs (loop6): dirty_blocks=32 [ 530.061005][ T55] EXT4-fs (loop6): Block reservation details [ 530.118273][ T55] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 530.174922][ T6672] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 530.278880][ T6991] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 531.094111][ T8691] loop0: detected capacity change from 0 to 128 [ 531.188444][ T8691] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 531.299961][ T8696] loop9: detected capacity change from 0 to 16 [ 531.311973][ T8691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.366135][ T8696] erofs (device loop9): mounted with root inode @ nid 36. [ 532.317520][ T8704] loop6: detected capacity change from 0 to 1024 [ 532.375027][ T8704] hfsplus: Unknown parameter 'ÿ' [ 532.813192][ T8714] overlayfs: missing 'lowerdir' [ 533.516660][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.725814][ T8743] loop8: detected capacity change from 0 to 1024 [ 539.593358][ T8753] loop0: detected capacity change from 0 to 128 [ 539.645794][ T8751] loop8: detected capacity change from 0 to 2048 [ 539.687722][ T8753] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 539.816169][ T8751] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.906356][ T8753] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.054765][ T8760] loop6: detected capacity change from 0 to 16 [ 541.156263][ T8760] erofs (device loop6): mounted with root inode @ nid 36. [ 542.033105][ T8769] loop7: detected capacity change from 0 to 128 [ 542.359945][ T29] audit: type=1326 audit(1778920031.322:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 542.541512][ T29] audit: type=1326 audit(1778920031.352:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 542.764365][ T29] audit: type=1326 audit(1778920031.362:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 542.922750][ T29] audit: type=1326 audit(1778920031.412:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 543.088453][ T29] audit: type=1326 audit(1778920031.412:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 543.263125][ T29] audit: type=1326 audit(1778920031.412:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 543.417772][ T29] audit: type=1326 audit(1778920031.422:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 543.566830][ T29] audit: type=1326 audit(1778920031.442:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 543.718987][ T29] audit: type=1326 audit(1778920031.422:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8759 comm="syz.9.682" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 544.001686][ T8785] loop8: detected capacity change from 0 to 2048 [ 544.181746][ T8785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.524929][ T8785] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 544.619425][ T8785] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 544.672829][ T8785] EXT4-fs (loop8): This should not happen!! Data will be lost [ 544.672829][ T8785] [ 544.821985][ T8785] EXT4-fs (loop8): Total free blocks count 0 [ 544.872626][ T8785] EXT4-fs (loop8): Free/Dirty block details [ 544.934774][ T8785] EXT4-fs (loop8): free_blocks=2415919504 [ 544.985713][ T8785] EXT4-fs (loop8): dirty_blocks=48 [ 545.026714][ T8785] EXT4-fs (loop8): Block reservation details [ 545.076195][ T8785] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 545.171336][ T8796] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 545.717318][ T7129] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 546.303984][ T8807] loop9: detected capacity change from 0 to 128 [ 546.403732][ T8807] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 546.572457][ T8807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 547.646592][ T8813] loop8: detected capacity change from 0 to 2048 [ 547.897332][ T8817] loop9: detected capacity change from 0 to 16 [ 547.915479][ T8813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 547.997999][ T8817] erofs (device loop9): mounted with root inode @ nid 36. [ 553.705012][ T8836] syz_tun: entered allmulticast mode [ 554.708334][ T8841] netlink: 'syz.9.702': attribute type 11 has an invalid length. [ 554.761444][ T8841] netem: change failed [ 557.129557][ T8860] loop8: detected capacity change from 0 to 128 [ 557.301458][ T8860] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 557.339772][ T8866] loop6: detected capacity change from 0 to 16 [ 557.390324][ T8860] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 557.474096][ T8866] erofs (device loop6): mounted with root inode @ nid 36. [ 557.561747][ T8858] loop9: detected capacity change from 0 to 2048 [ 557.709980][ T8858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.176139][ T7129] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 558.339164][ T29] audit: type=1800 audit(1778920047.332:22): pid=8869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.711" name="/" dev="fuse" ino=4 res=0 errno=0 [ 559.750483][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 559.760411][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 559.773961][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 559.788209][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 559.803177][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.125816][ T8883] sd 0:0:1:0: PR command failed: 1026 [ 560.178872][ T8883] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 560.231399][ T8883] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 561.943155][ T5590] Bluetooth: hci2: command tx timeout [ 564.065775][ T5590] Bluetooth: hci2: command tx timeout [ 564.767130][ T8914] loop6: detected capacity change from 0 to 2048 [ 564.894158][ T8914] udf: Bad value for 'anchor' [ 566.043666][ T8920] loop9: detected capacity change from 0 to 256 [ 566.061885][ T8922] loop0: detected capacity change from 0 to 16 [ 566.091789][ T5590] Bluetooth: hci2: command tx timeout [ 566.158855][ T8922] erofs (device loop0): mounted with root inode @ nid 36. [ 566.613977][ T8920] FAT-fs (loop9): Directory bread(block 64) failed [ 566.659635][ T8920] FAT-fs (loop9): Directory bread(block 65) failed [ 566.683896][ T8920] FAT-fs (loop9): Directory bread(block 66) failed [ 566.741787][ T8920] FAT-fs (loop9): Directory bread(block 67) failed [ 566.842838][ T8920] FAT-fs (loop9): Directory bread(block 68) failed [ 566.917936][ T8920] FAT-fs (loop9): Directory bread(block 69) failed [ 566.974887][ T8920] FAT-fs (loop9): Directory bread(block 70) failed [ 567.040098][ T8920] FAT-fs (loop9): Directory bread(block 71) failed [ 567.090492][ T8920] FAT-fs (loop9): Directory bread(block 72) failed [ 567.146270][ T8920] FAT-fs (loop9): Directory bread(block 73) failed [ 567.625813][ T8931] loop0: detected capacity change from 0 to 512 [ 567.694072][ T8931] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 567.839877][ T8931] EXT4-fs (loop0): 1 truncate cleaned up [ 567.937364][ T8931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.175175][ T5590] Bluetooth: hci2: command tx timeout [ 568.930771][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.005980][ T8941] loop9: detected capacity change from 0 to 1024 [ 569.137673][ T8941] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 569.296761][ T8941] hfsplus: failed to load attributes file [ 571.707266][ T8958] loop6: detected capacity change from 0 to 512 [ 571.777616][ T8958] EXT4-fs: Ignoring removed orlov option [ 571.988519][ T8958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.090720][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.152926][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.190715][ T8881] bridge_slave_0: entered allmulticast mode [ 572.252430][ T8881] bridge_slave_0: entered promiscuous mode [ 572.366389][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.455865][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.488877][ T8881] bridge_slave_1: entered allmulticast mode [ 572.508546][ T6991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.586579][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.599461][ T8881] bridge_slave_1: entered promiscuous mode [ 572.599470][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.676772][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.826668][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.112771][ T8973] loop0: detected capacity change from 0 to 2048 [ 574.168491][ T8973] udf: Bad value for 'anchor' [ 574.683058][ T8881] team0: Port device team_slave_0 added [ 574.692147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 574.816722][ T8977] loop6: detected capacity change from 0 to 512 [ 574.922610][ T8881] team0: Port device team_slave_1 added [ 574.929227][ T8977] EXT4-fs: quotafile must be on filesystem root [ 575.288549][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 575.531920][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 575.580704][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.585549][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 575.604574][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.703006][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34098, setting to 1024 [ 575.730307][ T8984] loop0: detected capacity change from 0 to 512 [ 575.752298][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.776682][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 575.810813][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.904003][ T8984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 575.950706][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.994964][ T10] usb 7-1: config 0 descriptor?? [ 576.010114][ T8977] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 576.010942][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.094703][ T8984] EXT4-fs (loop0): 1 truncate cleaned up [ 576.193030][ T8984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.412915][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.612527][ T10] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 576.663487][ T10] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 576.715335][ T10] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 576.794089][ T10] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 576.867185][ T10] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 576.955108][ T10] savu 0003:1E7D:2D5A.0008: unbalanced collection at end of report description [ 577.067119][ T10] savu 0003:1E7D:2D5A.0008: parse failed [ 577.116487][ T10] savu 0003:1E7D:2D5A.0008: probe with driver savu failed with error -22 [ 577.261772][ T10] usb 7-1: USB disconnect, device number 5 [ 577.639301][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.976633][ T8881] hsr_slave_0: entered promiscuous mode [ 578.113835][ T8881] hsr_slave_1: entered promiscuous mode [ 578.182786][ T8881] debugfs: 'hsr0' already exists in 'hsr' [ 578.211682][ T8881] Cannot create hsr debugfs directory [ 578.424223][ T5586] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 578.440728][ T5586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 578.457484][ T5586] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 578.500743][ T5586] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 578.519180][ T5586] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 579.119008][ T8997] loop9: detected capacity change from 0 to 2048 [ 579.256384][ T8997] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 579.441913][ T8997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.329537][ T9007] tmpfs: Unknown parameter 'nr_ino' [ 580.572111][ T5590] Bluetooth: hci6: command tx timeout [ 581.496136][ T5227] 8021q: adding VLAN 0 to HW filter on device eth23 [ 581.832017][ T9014] loop6: detected capacity change from 0 to 2048 [ 581.890877][ T9014] udf: Bad value for 'anchor' [ 582.371699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 582.652165][ T5590] Bluetooth: hci6: command tx timeout [ 582.834198][ T55] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.108551][ T55] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.325831][ T55] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.362879][ T9023] loop6: detected capacity change from 0 to 1024 [ 583.447339][ T9023] hfsplus: failed to load extents file [ 583.630014][ T55] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.240974][ T8881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.330983][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.368158][ T8881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.483872][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.727129][ T9031] loop6: detected capacity change from 0 to 128 [ 584.734140][ T5590] Bluetooth: hci6: command tx timeout [ 584.766083][ T8881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.874405][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.911398][ T9031] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 584.952923][ T9031] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 585.084243][ T8881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 585.219018][ T8881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.530878][ T9037] loop0: detected capacity change from 0 to 512 [ 585.632933][ T9037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 585.737482][ T9037] EXT4-fs (loop0): 1 truncate cleaned up [ 585.807718][ T9037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.971504][ T55] bridge_slave_1: left allmulticast mode [ 585.971608][ T55] bridge_slave_1: left promiscuous mode [ 585.972461][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.047164][ T55] bridge_slave_0: left allmulticast mode [ 586.047261][ T55] bridge_slave_0: left promiscuous mode [ 586.077756][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.327013][ T6991] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 586.498638][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.508060][ T9045] loop9: detected capacity change from 0 to 512 [ 586.563460][ T9045] EXT4-fs: quotafile must be on filesystem root [ 586.812495][ T5590] Bluetooth: hci6: command tx timeout [ 586.951603][ T2049] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 587.163945][ T2049] usb 10-1: Using ep0 maxpacket: 32 [ 587.223238][ T2049] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 47, changing to 9 [ 587.279924][ T2049] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34098, setting to 1024 [ 587.405663][ T2049] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 587.436295][ T2049] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.520724][ T2049] usb 10-1: config 0 descriptor?? [ 587.552527][ T9045] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 587.884405][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.943300][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 587.950647][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.6.752'. [ 587.995146][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 588.016600][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.032899][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.752'. [ 588.083632][ T2049] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 588.099120][ T2049] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 588.148360][ T2049] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 588.152250][ T55] bond0 (unregistering): Released all slaves [ 588.197168][ T9055] loop0: detected capacity change from 0 to 1024 [ 588.225043][ T2049] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 588.249278][ T2049] savu 0003:1E7D:2D5A.000A: unknown main item tag 0x0 [ 588.267186][ T9055] ext4: Bad value for 'resgid' [ 588.290839][ T9055] ext4: Bad value for 'resgid' [ 588.303017][ T2049] savu 0003:1E7D:2D5A.000A: unbalanced collection at end of report description [ 588.421009][ T2049] savu 0003:1E7D:2D5A.000A: parse failed [ 588.467342][ T2049] savu 0003:1E7D:2D5A.000A: probe with driver savu failed with error -22 [ 588.593419][ T2049] usb 10-1: USB disconnect, device number 9 [ 588.939252][ T9063] fido_id[9063]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 589.580010][ T9071] loop0: detected capacity change from 0 to 1024 [ 589.641943][ T9071] hfsplus: failed to load extents file [ 589.722218][ T9073] loop9: detected capacity change from 0 to 1024 [ 589.788624][ T9073] hfsplus: failed to load extents file [ 590.124895][ T55] hsr_slave_0: left promiscuous mode [ 590.195336][ T55] hsr_slave_1: left promiscuous mode [ 590.227360][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.265067][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.297335][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.320551][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.431473][ T55] veth1_macvtap: left promiscuous mode [ 590.457408][ T55] veth0_macvtap: left promiscuous mode [ 590.489292][ T9079] loop0: detected capacity change from 0 to 512 [ 590.497525][ T55] veth1_vlan: left promiscuous mode [ 590.536785][ T55] veth0_vlan: left promiscuous mode [ 590.555566][ T9079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 590.629721][ T9078] loop6: detected capacity change from 0 to 1024 [ 590.656361][ T9079] EXT4-fs (loop0): 1 truncate cleaned up [ 590.720506][ T9078] hfsplus: failed to load extents file [ 590.757045][ T9079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.839737][ T9078] 9p: Bad value for 'wfdno' [ 591.451659][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.912566][ T9088] loop6: detected capacity change from 0 to 128 [ 591.930810][ T9088] vfat: Bad value for 'shortname' [ 592.171436][ T9088] loop6: detected capacity change from 0 to 1024 [ 592.226990][ T9088] hfsplus: Unknown parameter 'utf8' [ 592.675824][ T9094] loop0: detected capacity change from 0 to 512 [ 592.727739][ T9094] EXT4-fs: quotafile must be on filesystem root [ 592.971584][ T5590] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 592.996266][ T55] team0 (unregistering): Port device team_slave_1 removed [ 593.009482][ T9096] loop7: detected capacity change from 128 to 0 [ 593.169430][ T55] team0 (unregistering): Port device team_slave_0 removed [ 593.185705][ T9096] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 593.234368][ T9096] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 593.295353][ T9096] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 595.133421][ T8881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.368704][ T55] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.745061][ T55] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.081972][ T55] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.185546][ T8881] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.348153][ T55] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.530654][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.538188][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.782937][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.790501][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.982789][ T8993] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.062303][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.078959][ T8993] bridge_slave_0: entered allmulticast mode [ 598.146431][ T8993] bridge_slave_0: entered promiscuous mode [ 598.265037][ T55] bridge_slave_1: left allmulticast mode [ 598.287624][ T55] bridge_slave_1: left promiscuous mode [ 598.322525][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.373154][ T55] bridge_slave_0: left allmulticast mode [ 598.391499][ T55] bridge_slave_0: left promiscuous mode [ 598.410633][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.451858][ T9118] loop9: detected capacity change from 0 to 512 [ 599.535427][ T9118] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 599.625527][ T9118] EXT4-fs (loop9): 1 truncate cleaned up [ 599.689515][ T9118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.702842][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.793816][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.884659][ T55] bond0 (unregistering): Released all slaves [ 599.942024][ T8993] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.984487][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.025062][ T8993] bridge_slave_1: entered allmulticast mode [ 600.068289][ T8993] bridge_slave_1: entered promiscuous mode [ 600.252119][ T5586] Bluetooth: hci1: command 0x0406 tx timeout [ 600.337994][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.051033][ T8993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.349513][ T8993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.286651][ T8993] team0: Port device team_slave_0 added [ 602.423879][ T55] hsr_slave_0: left promiscuous mode [ 602.477962][ T55] hsr_slave_1: left promiscuous mode [ 602.479192][ T9133] loop9: detected capacity change from 0 to 512 [ 602.497179][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.505932][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.524201][ T9133] EXT4-fs: Ignoring removed i_version option [ 602.533839][ T9133] EXT4-fs: Ignoring removed nobh option [ 602.537421][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.546305][ T9133] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 602.564971][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.613506][ T9133] EXT4-fs (loop9): 1 truncate cleaned up [ 602.630818][ T9133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.645655][ T55] veth1_macvtap: left promiscuous mode [ 602.658745][ T55] veth0_macvtap: left promiscuous mode [ 602.684875][ T55] veth1_vlan: left promiscuous mode [ 602.706227][ T55] veth0_vlan: left promiscuous mode [ 605.101452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 605.203161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 605.286947][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.784409][ T9138] loop0: detected capacity change from 0 to 512 [ 605.863227][ T9138] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 605.952456][ T9138] FAT-fs (loop0): Filesystem has been set read-only [ 606.104453][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 606.295372][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.316333][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.328978][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 606.344705][ T9] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.361346][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.392202][ T9] usb 10-1: config 0 descriptor?? [ 606.932721][ T9] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 607.748586][ T2049] usb 10-1: USB disconnect, device number 10 [ 607.776979][ T55] team0 (unregistering): Port device team_slave_1 removed [ 607.814949][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 607.830262][ T5586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 607.844565][ T5586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 607.873085][ T5586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 607.890077][ T5586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.993394][ T55] team0 (unregistering): Port device team_slave_0 removed [ 608.835941][ T9149] 9pnet_fd: Insufficient options for proto=fd [ 608.900802][ T8993] team0: Port device team_slave_1 added [ 608.951021][ T9149] loop9: detected capacity change from 0 to 1024 [ 609.026556][ T9149] EXT4-fs: inline encryption not supported [ 609.074622][ T9149] EXT4-fs: Ignoring removed bh option [ 609.142020][ T9149] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 609.142020][ T9149] [ 609.447958][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.499184][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.570475][ T8993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.672844][ T8993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.713141][ T8993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.754657][ T9155] loop0: detected capacity change from 0 to 512 [ 609.808432][ T9155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 609.836905][ T8993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.931759][ T5590] Bluetooth: hci3: command tx timeout [ 609.945839][ T9155] EXT4-fs (loop0): 1 truncate cleaned up [ 610.026649][ T9155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.434762][ T8993] hsr_slave_0: entered promiscuous mode [ 610.510655][ T8993] hsr_slave_1: entered promiscuous mode [ 610.572301][ T8993] debugfs: 'hsr0' already exists in 'hsr' [ 610.605148][ T8993] Cannot create hsr debugfs directory [ 610.695706][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.597570][ T9168] loop0: detected capacity change from 0 to 1024 [ 611.729478][ T9168] hfsplus: failed to load extents file [ 612.012693][ T5590] Bluetooth: hci3: command tx timeout [ 612.640199][ T9177] loop9: detected capacity change from 0 to 1024 [ 612.700189][ T9177] EXT4-fs: inline encryption not supported [ 612.742609][ T9177] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 612.742609][ T9177] [ 612.922372][ T29] audit: type=1326 audit(1778920101.922:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.039302][ T29] audit: type=1326 audit(1778920101.952:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.165801][ T29] audit: type=1326 audit(1778920101.952:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.289416][ T29] audit: type=1326 audit(1778920101.922:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.453734][ T29] audit: type=1326 audit(1778920102.002:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.639550][ T29] audit: type=1326 audit(1778920101.952:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.785990][ T29] audit: type=1326 audit(1778920102.012:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.855341][ T9184] loop0: detected capacity change from 0 to 512 [ 613.885875][ T9184] EXT4-fs: Ignoring removed i_version option [ 613.943944][ T29] audit: type=1326 audit(1778920102.002:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 613.971399][ T9184] EXT4-fs: Ignoring removed oldalloc option [ 614.092181][ T5590] Bluetooth: hci3: command tx timeout [ 614.156880][ T29] audit: type=1326 audit(1778920102.012:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 614.193511][ T9184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.285119][ T29] audit: type=1326 audit(1778920102.022:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.782" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71561ab code=0x7ffc0000 [ 615.215403][ T9195] loop9: detected capacity change from 0 to 1024 [ 615.271006][ T9195] hfsplus: Unknown parameter 'ÿ' [ 615.395767][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.171559][ T5590] Bluetooth: hci3: command tx timeout [ 616.215230][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.560654][ T8993] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 616.689678][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.738427][ T8993] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.850583][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.946594][ T163] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.981493][ T9218] loop9: detected capacity change from 0 to 512 [ 617.018813][ T8993] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 617.038469][ T9218] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 617.125275][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 617.130995][ T9218] EXT4-fs (loop9): 1 truncate cleaned up [ 617.170465][ T9218] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.307107][ T8993] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 617.420465][ T8993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.578597][ T163] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.751347][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.007313][ T163] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.036447][ T9227] loop0: detected capacity change from 0 to 512 [ 618.080700][ T9227] EXT4-fs: Ignoring removed i_version option [ 618.118844][ T9227] EXT4-fs: Ignoring removed oldalloc option [ 618.256049][ T9227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.303252][ T163] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.475031][ T5586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.486556][ T5586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.495951][ T5586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.518015][ T5586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.531373][ T5586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.217702][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.919239][ T163] bridge_slave_1: left allmulticast mode [ 619.958918][ T163] bridge_slave_1: left promiscuous mode [ 619.981883][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.038286][ T163] bridge_slave_0: left allmulticast mode [ 620.089029][ T163] bridge_slave_0: left promiscuous mode [ 620.113953][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.468812][ T9252] Bluetooth: MGMT ver 1.23 [ 620.575089][ T5586] Bluetooth: hci0: command tx timeout [ 620.595505][ T9252] loop9: detected capacity change from 0 to 512 [ 620.727181][ T9252] EXT4-fs (loop9): orphan cleanup on readonly fs [ 620.804201][ T9252] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #11: block 1728053262: comm syz.9.792: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 620.862476][ T9252] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 620.872260][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 620.888008][ C1] EXT4-fs (loop9): initial error at time 1778920109: ext4_map_blocks:791: inode 11: block 1728053262 [ 620.899096][ C1] EXT4-fs (loop9): last error at time 1778920109: ext4_map_blocks:791: inode 11: block 1728053262 [ 620.911510][ T9252] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 620.925269][ T9252] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.792: corrupted inode contents [ 620.951417][ T9252] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 620.964655][ T9252] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #15: comm syz.9.792: mark_inode_dirty error [ 621.036455][ T9252] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.038689][ T9252] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.792: corrupted inode contents [ 621.152294][ T9252] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.162155][ T9252] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.792: mark_inode_dirty error [ 621.216496][ T9252] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.219899][ T9252] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.792: mark inode dirty (error -117) [ 621.330680][ T9252] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.332188][ T9252] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 621.397193][ T9252] EXT4-fs (loop9): 1 orphan inode deleted [ 621.444841][ T9252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 621.730711][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.036968][ T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.099949][ T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.163743][ T163] bond0 (unregistering): Released all slaves [ 622.187012][ T9263] loop9: detected capacity change from 0 to 1024 [ 622.217594][ T9263] EXT4-fs: Ignoring removed mblk_io_submit option [ 622.273313][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.316796][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.348742][ T9263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.385822][ T9144] bridge_slave_0: entered allmulticast mode [ 622.425433][ T9263] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 622.435876][ T9263] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 622.448711][ T9144] bridge_slave_0: entered promiscuous mode [ 622.465375][ T9263] EXT4-fs (loop9): can't enable nombcache during remount [ 622.665470][ T5586] Bluetooth: hci0: command tx timeout [ 622.741426][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.769280][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.800338][ T9144] bridge_slave_1: entered allmulticast mode [ 622.863214][ T9144] bridge_slave_1: entered promiscuous mode [ 622.948899][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.556891][ T9272] loop9: detected capacity change from 0 to 1024 [ 623.582019][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.604705][ T9272] hfsplus: Unknown parameter 'ÿ' [ 623.894680][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.460030][ T163] hsr_slave_0: left promiscuous mode [ 624.486993][ T163] hsr_slave_1: left promiscuous mode [ 624.497204][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.507050][ T163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.518350][ T163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.541721][ T163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.602089][ T163] veth1_macvtap: left promiscuous mode [ 624.608017][ T163] veth0_macvtap: left promiscuous mode [ 624.618627][ T163] veth1_vlan: left promiscuous mode [ 624.628486][ T163] veth0_vlan: left promiscuous mode [ 624.731534][ T5586] Bluetooth: hci0: command tx timeout [ 625.458801][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 625.495374][ T163] team0 (unregistering): Port device team_slave_1 removed [ 625.534378][ T163] team0 (unregistering): Port device team_slave_0 removed [ 625.809265][ T9144] team0: Port device team_slave_0 added [ 625.834166][ T5227] 8021q: adding VLAN 0 to HW filter on device eth25 [ 625.941481][ T9144] team0: Port device team_slave_1 added [ 626.346076][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.379105][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.438777][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 626.438851][ T29] audit: type=1326 audit(1778920115.432:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.480524][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.524526][ T9297] loop0: detected capacity change from 0 to 1024 [ 626.545884][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.558923][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.588722][ T29] audit: type=1326 audit(1778920115.472:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.609181][ T5586] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 626.636181][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.653434][ T29] audit: type=1326 audit(1778920115.492:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.678642][ T29] audit: type=1326 audit(1778920115.492:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.709588][ T29] audit: type=1326 audit(1778920115.492:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.743301][ T29] audit: type=1326 audit(1778920115.492:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.786301][ T9296] syz.9.799 uses obsolete (PF_INET,SOCK_PACKET) [ 626.816976][ T5586] Bluetooth: hci0: command tx timeout [ 626.823980][ T29] audit: type=1326 audit(1778920115.522:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.849917][ T29] audit: type=1326 audit(1778920115.532:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.875949][ T29] audit: type=1326 audit(1778920115.542:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 626.961410][ T29] audit: type=1326 audit(1778920115.512:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9294 comm="syz.9.799" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5500c code=0x7ffc0000 [ 627.700839][ T8993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.134372][ T9144] hsr_slave_0: entered promiscuous mode [ 628.153204][ T9144] hsr_slave_1: entered promiscuous mode [ 628.164191][ T9144] debugfs: 'hsr0' already exists in 'hsr' [ 628.170417][ T9144] Cannot create hsr debugfs directory [ 628.404021][ T8993] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.962054][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.969379][ T5767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.574545][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.582054][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.613284][ T7316] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 630.634884][ T163] bridge_slave_1: left allmulticast mode [ 630.662305][ T163] bridge_slave_1: left promiscuous mode [ 630.678730][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.697364][ T163] bridge_slave_0: left allmulticast mode [ 630.705790][ T163] bridge_slave_0: left promiscuous mode [ 630.713139][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.786811][ T7316] usb 10-1: device descriptor read/64, error -71 [ 631.041442][ T7316] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 631.203039][ T7316] usb 10-1: device descriptor read/64, error -71 [ 631.338093][ T7316] usb usb10-port1: attempt power cycle [ 631.400364][ T163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.506902][ T163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.572594][ T163] bond0 (unregistering): Released all slaves [ 632.285689][ T9344] loop9: detected capacity change from 0 to 1024 [ 632.330837][ T9344] hfsplus: Unknown parameter 'ÿ' [ 632.865071][ T163] hsr_slave_0: left promiscuous mode [ 632.919349][ T163] hsr_slave_1: left promiscuous mode [ 632.939458][ T163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.960352][ T163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.937717][ T163] team0 (unregistering): Port device team_slave_1 removed [ 633.981362][ T163] team0 (unregistering): Port device team_slave_0 removed [ 634.025675][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.035361][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.156583][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.197420][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.250455][ T9234] bridge_slave_0: entered allmulticast mode [ 636.329894][ T9234] bridge_slave_0: entered promiscuous mode [ 636.555086][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.584939][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.622101][ T9234] bridge_slave_1: entered allmulticast mode [ 636.671478][ T9234] bridge_slave_1: entered promiscuous mode [ 636.757936][ T9383] loop0: detected capacity change from 0 to 128 [ 636.797256][ T9383] vfat: Unknown parameter '1844674407370955161501777777777777777777777' [ 637.315942][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 637.329336][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 637.341296][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 637.372159][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.373878][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 637.399787][ T5590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 637.519049][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.107706][ T9234] team0: Port device team_slave_0 added [ 638.219052][ T9234] team0: Port device team_slave_1 added [ 638.414627][ T9144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.596798][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.821988][ T9144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.916364][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.994015][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.025612][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.175031][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.228743][ T9144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 639.356904][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.426556][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.456472][ T5586] Bluetooth: hci2: command tx timeout [ 639.477067][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.545501][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.608596][ T9144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 639.686287][ T9144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 640.490090][ T9406] loop9: detected capacity change from 0 to 256 [ 640.576532][ T9406] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 640.800656][ T9234] hsr_slave_0: entered promiscuous mode [ 640.846610][ T9234] hsr_slave_1: entered promiscuous mode [ 640.879696][ T9234] debugfs: 'hsr0' already exists in 'hsr' [ 640.907798][ T9234] Cannot create hsr debugfs directory [ 641.534659][ T5586] Bluetooth: hci2: command tx timeout [ 642.443622][ T9417] loop9: detected capacity change from 0 to 512 [ 642.470254][ T9417] EXT4-fs: Ignoring removed i_version option [ 642.489476][ T9417] EXT4-fs: Ignoring removed oldalloc option [ 642.563236][ T9417] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.434355][ T6672] bridge_slave_1: left allmulticast mode [ 643.441496][ T6672] bridge_slave_1: left promiscuous mode [ 643.448468][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.470261][ T6672] bridge_slave_0: left allmulticast mode [ 643.476473][ T6672] bridge_slave_0: left promiscuous mode [ 643.487642][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.563963][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.616960][ T5586] Bluetooth: hci2: command tx timeout [ 644.188340][ T6672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.224525][ T6672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.248557][ T6672] bond0 (unregistering): Released all slaves [ 644.673635][ T6672] hsr_slave_0: left promiscuous mode [ 644.703582][ T6672] hsr_slave_1: left promiscuous mode [ 644.723367][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.743244][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.888548][ T9425] loop9: detected capacity change from 0 to 1024 [ 644.939885][ T9425] hfsplus: Unknown parameter 'ÿ' [ 645.692621][ T5586] Bluetooth: hci2: command tx timeout [ 646.020389][ T6672] team0 (unregistering): Port device team_slave_1 removed [ 646.066978][ T6672] team0 (unregistering): Port device team_slave_0 removed [ 647.336916][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.065908][ T9144] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.102008][ T9234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 648.179658][ T9234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.207176][ T9234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 648.271995][ T9234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.302496][ T9234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 648.389115][ T9234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 648.433910][ T9234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 648.490944][ T9234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 648.547553][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.555101][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.731264][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.738823][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.297689][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.307508][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.318268][ T9387] bridge_slave_0: entered allmulticast mode [ 649.349183][ T9387] bridge_slave_0: entered promiscuous mode [ 649.399298][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.408417][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.436898][ T9387] bridge_slave_1: entered allmulticast mode [ 649.462628][ T9387] bridge_slave_1: entered promiscuous mode [ 650.130217][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.169417][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.177037][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.217291][ T9451] loop0: detected capacity change from 0 to 512 [ 650.238330][ T9451] EXT4-fs: Ignoring removed i_version option [ 650.247249][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.265320][ T9451] EXT4-fs: Ignoring removed nobh option [ 650.300678][ T9451] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 650.350253][ T9451] EXT4-fs (loop0): 1 truncate cleaned up [ 650.364581][ T9451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.632189][ T9387] team0: Port device team_slave_0 added [ 653.400565][ T9387] team0: Port device team_slave_1 added [ 653.542847][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.782574][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.809431][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.892363][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.965262][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.977995][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.056194][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.386008][ T9463] loop0: detected capacity change from 0 to 1024 [ 654.434577][ T9463] hfsplus: Unknown parameter 'ÿ' [ 654.781441][ T9387] hsr_slave_0: entered promiscuous mode [ 654.823403][ T9387] hsr_slave_1: entered promiscuous mode [ 654.870842][ T9387] debugfs: 'hsr0' already exists in 'hsr' [ 654.894469][ T9387] Cannot create hsr debugfs directory [ 655.517556][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.628131][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.866527][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.010639][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.018208][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.189047][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.196706][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.493142][ T9489] loop9: detected capacity change from 0 to 512 [ 657.582489][ T9489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.616450][ T9489] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.650728][ T9489] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 657.720476][ T9387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 657.755189][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.810310][ T9387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 657.842704][ T7148] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.865409][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.930916][ T9144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.944627][ T9387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 657.987402][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 658.049810][ T9387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 658.112689][ T9387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 658.918912][ T9502] loop9: detected capacity change from 0 to 128 [ 659.065745][ T9144] veth0_vlan: entered promiscuous mode [ 659.304294][ T9144] veth1_vlan: entered promiscuous mode [ 659.542606][ T9504] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 659.569586][ T9504] FAT-fs (loop9): Filesystem has been set read-only [ 659.964861][ T9508] loop0: detected capacity change from 0 to 1024 [ 660.013619][ T9508] hfsplus: Unknown parameter 'ÿ' [ 660.030678][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.205697][ T9144] veth0_macvtap: entered promiscuous mode [ 660.379294][ T9144] veth1_macvtap: entered promiscuous mode [ 660.649557][ T9387] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.918753][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.926164][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.036309][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.077348][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.084780][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.332615][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.568088][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.598080][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.684306][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.735558][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.817102][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.374633][ T9234] veth0_vlan: entered promiscuous mode [ 664.441976][ T9545] loop0: detected capacity change from 0 to 512 [ 664.478965][ T9545] EXT4-fs: Ignoring removed i_version option [ 664.524265][ T9545] EXT4-fs: Ignoring removed nobh option [ 664.621790][ T9545] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 664.715950][ T9545] EXT4-fs (loop0): 1 truncate cleaned up [ 664.723976][ T9545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.766831][ T9234] veth1_vlan: entered promiscuous mode [ 668.049255][ T9234] veth0_macvtap: entered promiscuous mode [ 668.122842][ T8191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.226795][ T9234] veth1_macvtap: entered promiscuous mode [ 668.845809][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.001486][ T9563] ===================================================== [ 669.009140][ T9563] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 669.017510][ T9563] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 669.023444][ T9563] do_xdp_generic+0xe07/0x17b0 [ 669.028288][ T9563] tun_get_user+0x52df/0x6fe0 [ 669.033181][ T9563] tun_chr_write_iter+0x3e9/0x5c0 [ 669.038281][ T9563] vfs_write+0xbe1/0x15c0 [ 669.042752][ T9563] ksys_write+0x1d9/0x470 [ 669.047163][ T9563] __ia32_sys_write+0x9a/0xf0 [ 669.052047][ T9563] ia32_sys_call+0x37a7/0x4360 [ 669.056937][ T9563] do_int80_emulation+0x15a/0x360 [ 669.062142][ T9563] asm_int80_emulation+0x1f/0x30 [ 669.067149][ T9563] [ 669.069488][ T9563] Uninit was stored to memory at: [ 669.074797][ T9563] pskb_expand_head+0x497/0x1a40 [ 669.079824][ T9563] do_xdp_generic+0xb30/0x17b0 [ 669.084734][ T9563] tun_get_user+0x52df/0x6fe0 [ 669.089488][ T9563] tun_chr_write_iter+0x3e9/0x5c0 [ 669.094643][ T9563] vfs_write+0xbe1/0x15c0 [ 669.099171][ T9563] ksys_write+0x1d9/0x470 [ 669.103727][ T9563] __ia32_sys_write+0x9a/0xf0 [ 669.108500][ T9563] ia32_sys_call+0x37a7/0x4360 [ 669.113425][ T9563] do_int80_emulation+0x15a/0x360 [ 669.118543][ T9563] asm_int80_emulation+0x1f/0x30 [ 669.123608][ T9563] [ 669.125953][ T9563] Uninit was created at: [ 669.130321][ T9563] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 669.137009][ T9563] __alloc_skb+0x90d/0x1190 [ 669.141660][ T9563] alloc_skb_with_frags+0xc5/0x990 [ 669.146858][ T9563] sock_alloc_send_pskb+0xacb/0xc60 [ 669.152199][ T9563] tun_get_user+0xefa/0x6fe0 [ 669.156864][ T9563] tun_chr_write_iter+0x3e9/0x5c0 [ 669.162027][ T9563] vfs_write+0xbe1/0x15c0 [ 669.166441][ T9563] ksys_write+0x1d9/0x470 [ 669.170855][ T9563] __ia32_sys_write+0x9a/0xf0 [ 669.175680][ T9563] ia32_sys_call+0x37a7/0x4360 [ 669.180536][ T9563] do_int80_emulation+0x15a/0x360 [ 669.185721][ T9563] asm_int80_emulation+0x1f/0x30 [ 669.190728][ T9563] [ 669.193156][ T9563] CPU: 0 UID: 0 PID: 9563 Comm: syz.0.837 Tainted: G W L syzkaller #0 PREEMPT(full) [ 669.204079][ T9563] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 669.209303][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.219505][ T9563] ===================================================== [ 669.226555][ T9563] Disabling lock debugging due to kernel taint [ 669.232818][ T9563] Kernel panic - not syncing: kmsan.panic set ... [ 669.239292][ T9563] CPU: 0 UID: 0 PID: 9563 Comm: syz.0.837 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 669.250159][ T9563] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 669.256609][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.266714][ T9563] Call Trace: [ 669.270027][ T9563] [ 669.272989][ T9563] __dump_stack+0x26/0x30 [ 669.277409][ T9563] dump_stack_lvl+0x50/0x1c0 [ 669.282077][ T9563] ? dump_stack+0x12/0x25 [ 669.286483][ T9563] dump_stack+0x1e/0x25 [ 669.290707][ T9563] vpanic+0x7b4/0x1430 [ 669.294885][ T9563] panic+0x15d/0x160 [ 669.298901][ T9563] kmsan_report+0x31a/0x320 [ 669.303513][ T9563] ? __msan_warning+0x1b/0x30 [ 669.308335][ T9563] ? bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 669.314328][ T9563] ? do_xdp_generic+0xe07/0x17b0 [ 669.319360][ T9563] ? tun_get_user+0x52df/0x6fe0 [ 669.324282][ T9563] ? tun_chr_write_iter+0x3e9/0x5c0 [ 669.329548][ T9563] ? vfs_write+0xbe1/0x15c0 [ 669.334130][ T9563] ? ksys_write+0x1d9/0x470 [ 669.338720][ T9563] ? __ia32_sys_write+0x9a/0xf0 [ 669.343655][ T9563] ? ia32_sys_call+0x37a7/0x4360 [ 669.348692][ T9563] ? do_int80_emulation+0x15a/0x360 [ 669.353985][ T9563] ? asm_int80_emulation+0x1f/0x30 [ 669.359179][ T9563] ? ___bpf_prog_run+0xe95c/0xea90 [ 669.364412][ T9563] ? kmsan_get_metadata+0xf1/0x160 [ 669.369621][ T9563] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 669.376043][ T9563] ? kmsan_get_metadata+0x146/0x160 [ 669.381362][ T9563] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 669.387797][ T9563] ? kmsan_get_metadata+0xf1/0x160 [ 669.393011][ T9563] __msan_warning+0x1b/0x30 [ 669.397608][ T9563] bpf_prog_run_generic_xdp+0x19a5/0x20d0 [ 669.403459][ T9563] do_xdp_generic+0xe07/0x17b0 [ 669.408314][ T9563] ? filter_irq_stacks+0x49/0x190 [ 669.413469][ T9563] ? tun_get_user+0x525e/0x6fe0 [ 669.418396][ T9563] tun_get_user+0x52df/0x6fe0 [ 669.423162][ T9563] ? stack_depot_save_flags+0x35/0x790 [ 669.428742][ T9563] ? kmsan_get_metadata+0xf1/0x160 [ 669.433960][ T9563] ? kmsan_get_metadata+0xf1/0x160 [ 669.439178][ T9563] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 669.445456][ T9563] ? kmsan_get_metadata+0xf1/0x160 [ 669.450670][ T9563] tun_chr_write_iter+0x3e9/0x5c0 [ 669.455797][ T9563] vfs_write+0xbe1/0x15c0 [ 669.460228][ T9563] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 669.465858][ T9563] ksys_write+0x1d9/0x470 [ 669.470288][ T9563] __ia32_sys_write+0x9a/0xf0 [ 669.475056][ T9563] ia32_sys_call+0x37a7/0x4360 [ 669.479923][ T9563] do_int80_emulation+0x15a/0x360 [ 669.485042][ T9563] ? clear_bhb_loop+0x50/0xa0 [ 669.489791][ T9563] ? clear_bhb_loop+0x50/0xa0 [ 669.494542][ T9563] asm_int80_emulation+0x1f/0x30 [ 669.499551][ T9563] RIP: 0023:0xf71861ab [ 669.503663][ T9563] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 669.523436][ T9563] RSP: 002b:00000000f544644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 669.531930][ T9563] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 669.539964][ T9563] RDX: 0000000000010e80 RSI: 0000000000000000 RDI: 0000000000000000 [ 669.547982][ T9563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 669.556000][ T9563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 669.564020][ T9563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 669.572068][ T9563] [ 669.575421][ T9563] Kernel Offset: disabled [ 669.579797][ T9563] Rebooting in 86400 seconds..