last executing test programs: 2m48.793036901s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r6, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16=r7, @ANYRESHEX=r6, @ANYRES64=r5, @ANYRESOCT=r7], 0x81, 0x14ff, &(0x7f0000002a80)="$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") lchown(&(0x7f0000000140)='./file0/file0\x00', 0xee00, r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fdatasync(r4) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r8, 0x0, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @private2}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) alarm(0x8000000000000001) 2m45.774246315s ago: executing program 4 (id=15): socket$xdp(0x2c, 0x3, 0x0) poll(0x0, 0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x400c000) 2m28.229349361s ago: executing program 32 (id=15): socket$xdp(0x2c, 0x3, 0x0) poll(0x0, 0x0, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x400c000) 2m0.336784291s ago: executing program 5 (id=119): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000800)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) syz_clone(0x8000200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x2, 0x7fff, 0x3ff, 0x1, 0x14, "57c382a118943a12bf6f26c923c85cc1fd21d4", 0x9, 0x2d}) write(0xffffffffffffffff, &(0x7f0000000300)="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", 0x178) 1m59.302276813s ago: executing program 5 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000080)=""/2, &(0x7f0000000240)=0x2) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x800) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_FSGETXATTRA(r7, 0x801c582d, &(0x7f0000000300)) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x4, {0xa, 0x4e22, 0x37420000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}}}, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x40000, &(0x7f0000000340)={[{@shortname_lower}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@fat=@check_normal}, {@utf8}, {@utf8}, {@utf8}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8}, {@utf8no}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x38c, &(0x7f00000015c0)="$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") 1m57.78600133s ago: executing program 5 (id=127): dup(0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m56.609497507s ago: executing program 5 (id=130): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000d40)={{}, {0x1, 0x1}, [{0x2, 0x6}, {0x2, 0x2}, {0x2, 0x4}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x5}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x4c, 0x0) 1m52.378233928s ago: executing program 5 (id=140): dup(0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m50.218939156s ago: executing program 5 (id=143): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xbfffffff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2122, 0x0) 1m34.379871189s ago: executing program 33 (id=143): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xbfffffff}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2122, 0x0) 1m31.727050812s ago: executing program 0 (id=184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m30.660912705s ago: executing program 0 (id=186): r0 = socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 1m29.337939346s ago: executing program 0 (id=189): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setpgid(0x0, 0x0) 1m28.25715164s ago: executing program 0 (id=191): io_setup(0x2278, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x80004000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1ffffff, 0x0, 0x2) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x8, 0x0) 1m26.889564113s ago: executing program 0 (id=196): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[], 0x1, 0x150b, &(0x7f0000001580)="$eJzs3QuYjtX6MPD7Xms9jGnwNslhWGvdD28aLJMkOSTJIUmSJMkpIWmSJCEx5JSEJOQ4SQ5DSA4Tk8b5fMg5abIlSRKSU1jfNbXb9v63///++9vtz/723L/req533dd67vWs9d4z73O45vBttxG1m9ap0ZiI4J+Cv7ykAEAMAAwGgPwAEABAhfgK8dn9eSSm/HMHYX+sh9Ku9gzY1cT1z9m4/jkb1z9n4/rnbFz/nI3rn7Nx/XM2rj9jOdm2WUWu5S3nbv/88/+YX174+f//h/j8n7Nx/f/TnM7zj+zN9f9Pctl7/49lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd7efPvF3d7Wp//THGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxnO+SsUAPzavtrzYowxxhhjjDHG2B/H577aM2CMMcYYY4wxxti/HoIACQoCyAW5IQbyQCxcA3GQF/JBfojAtRAP10EBuB4KQiEoDEUgAYpCMdBgwAJBCMWhBEThBigJN0IilILSUAYclIUkuAnKwc1QHm6BCnArVITboBJUhipQFW6HanAHVIc7oQbcBTWhFtSGOnA31IV7oB7cC/XhPmgA90NDeAAawYPQGB6CJvAwNIVHoBk8Cs2hBbSEVtD6/yr/RegFL0Fv6AMp0Bf6wcvQHwbAQBgEg+EVGAKvwlB4DYbBcBgBr8NIeANGwZswGsbAWHgLxsF4mAATYRJMhlR4G6bAOzAV3oVpMB1mwExIg1kwG96DOTAX5sH7MB8+gAWwEBbBYkiHD2EJLIUM+AiWwceQCcthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgGn8B22AE7YRfshj2wFz6FffAZ7IfPIQu++Afzz/6X/O4ICChQoEKFuTAXxmAMxmIsxmEc5sN8GMEIxmM8FsACWBALYmEsjAmYgMWwGBo0SEhYHItjFKNYEktiIiZiaSyNDh0mYRKWw5uxPJbHClgBK2JFrISVsTJWxapYDathdayONbAG1sSaWBtr4914N96D9bAe1sf62AAbYENsiI2wETbGxtgEm2BTbIrNsBk2x+bYEltia2yNbbANtsW22B7bYwfsgB2xIyZjMnbCTtgZO2MX7IJdsSt2w27YHXtgD3wRX8SX8CXsgzVFX+yH/bA/9seBOAgH4Ss4BF/FV/E1HIbDcQS+jq/jGzgKz+BoHINjcSxWE+NxAk5EEpMxFVNxCk7BqTgVp+F0nI4zMQ1n4WycjXNwLs7F93E+foAf4EJciIsxHdNxCS7FDMzAZXgWM3E5rsCVuApX4ypci+twLW7AjbgBN+Nm3Ipb8RP8BHfgDtyFu3AP7sFP8VP8DD/DYZiFWXgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHsfjeAJP4ik8iafxNJ7Bs3gOz+EFvIAX8SJexsvZ3/wimxJK5BK5RIyIEbEiVsSJOJFP5BMRERHxIl4UEAVEQVFQFBaFRYJIEMVEMWGEESRCUVwUF1ERFSVFSZEoEkVpUVo44USSSBLlRDlRXpQXFcStoqK4TVQSlUU7V1VUFdVEe1dd3ClqiBqipqglaos6oo6oK+qKeqKeqC/qiwaigWgoHhCNRF8ciA+J7Mo0FcOxmRiBzUUL0VK0Em/gY6KNGIVtRTvRXjwhxuBo7CjauGTxtOgkJmBn8ayYiM+JrmIydhMviO6ih+gpXhS9RFvXW/QR07Cv6CdmYn8xQAwUg8QcrCWyK1ZbvCaGieFihHhdLMY3xCjxphgtxoix4i0xTowXE8REMUlMFqnibTFFvCOminfFNDFdzBAzRZqYJWZnf7SKuWKeeF/MFx+IBWKhWCQWi3TxoVgilooM8ZFYJj4WmWK5WCFWilVitVgj1op1Yr3YIDaKTQGILWKr2CY+EdvFDrFT7BK7xR6xV3wq9onPxH7xucgSX4gD4k/ioPhSHBJficPia3FEfCOOim/FMfGdOC6+FyfESXFK/CBOix/FGXFWnBPnxQXxk7goLonLwguQKIWUUslA5pK5ZYzMI2PlNTJO5pX5ZH4ZkdfKeHmdLCCvlwVlIVlYFpEJsqgsJrU00kqSoSwuS8iovEGWlDfKRFlKlpZlpJNlZZK8SZaTN8vy8hZZQd4qK8rbZCVZWVaRVeXtspq8Q1aXd8oa8i5ZU9aStWUdebesK++R9eS9sr68TzaQ98uG8gHZSD4oG8uHZBP5sGwqH5HN5KOyuWwhW8pWsrV8TLaRj8u2sp1sL5+QHeSTsqN8SibLp2Un+YzsLJ+VXeRzsqt8XnaTL8jusofsKS/Jy9LL3rKPTJF9ZT/5suwvB8iBcpAcLF+RQ+Srcqh8TQ6Tw+UI+bocKd+Qo+SbcrQcI8fKt+Q4OV5OkBPlJDlZpsq35RT5jpwq35XT5HQ5Q86UaXKWHPjnkeb9L/Lf+Tv5Q38++la5TX4it8sdcqfcJXfLPXKv3Cv3yX1yv9wvs2SWPCAPyIPyoDwkD8nD8rA8Io/Io/KoPCaPyePyuDwhT8rz8gd5Wv4oz8iz8qw8Ly/IC/Lin98DUKiEkkqpQOVSuVWMyqNi1TUqTuVV+VR+FVHXqnh1nSqgrlcFVSFVWBVRCaqoKqa0MsoqUqEqrkqoqLpBlVQ3qkRVSpVWZZRTZVWSuumfzv+9+bVWrVUb1Ua1VW1Ve9VedVAdVEfVUSWrZNVJdVKdVWfVRXVRXVVX1U11U91Vd9VT9VS9VC/lASBFpah+6mXVXw1QA9UgNVi9ooaoIWqoGqqGqWFqhBqhRqqRapQapUar0WqsGqvGqXFqgpqgJqlJKlWlqilqipqqpqppapqaoWaoNJWmZqvZao6ao+apeWq+mq8WqAVqkVqk0lW6WqKWqAyVoZapZSpTLVfL1Uq1Uq1Wq9VatVatV+vVRrVRbVabVab69Qc0d6qdarfarfaqvWqf2qf2q/0qS2WpA+qAOqgOqkPqkDqsDqsj6og6qo6qY+qYOq6OqxPqhDqlTqnT6rQ6o86oc+qcuqAuqIvqorqsLmdf9gUiEIEKVJAryBXEBDFBbBAbxAVxQb4gXxAJIkF8EB8UCK4PCgaFgsJBkSAhKBoUC3RgAhtQEAbFgxJBNLghKBncGCQGpYLSQZnABWWDpOCmoFxwc1A+uCWoENwaVAxuCyoFlYMqQdXg9qBacEdQPbgzqBHcFdQMagW1gzrB3UHd4J6gXnBvUD+4L2gQ3B80DB4IGgUPBo2Dh4ImwcNB0+CRoFnwaNA8aBG0DFoFrf/Q8b0/U+hx11v30Sm6r+6nX9b99QA9UA/Sg/Ureoh+VQ/Vr+lhergeoV/XI/UbepR+U4/WY/RY/ZYep8frCXqinqQn61T9tp6i39FT9bt6mp6uZ+iZOk3P0rP1e3qOnqvn6ff1fP2BXqAX6kV6sU7XH+oleqnO0B/pZfpjnamX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mP9Hb9Q69U+/Su/UevVd/qvfpz/R+/bnO0l/oA/pP+qD+Uh/SX+nD+mt9RH+jj+pv9TH9nT6uv9cn9El9Sv+gT+sf9Rl9Vp/T5/UF/ZO+qC/py9pnX9xnn96NMsrkMrlMjIkxsSbWxJk4k8/kMxETMfEm3hQwBUxBU9AUNoVNgkkwxUwxk40MmeKmuImaqClpSppEk2hKm9LGGWeSTJIpZ8qZ8qa8qWAqmIqmoqlkKpkqJvukebu5w9xh7jR3mrvMXaaWqWXqmDqmrqlr6pl6pr6pbxqYBqahaWgamUamsWlsmpgmpqlpmreZaWaam+ampWlpWpvWpo1pY9qatqa9aW86mA6mo+lokk2y6WQ6mc6ms+liupiupqvpZrqZ7qa76Wl6ml6ml+ltepsUk2L6mX6mv+lvBpqBZrAZbIaYIWaoGWqGmWFmhBlhRpqRZpQZZUabMWasecuMM+PNBDPReO/7pJpUM8VMMVPNVDPNTDMzzAyTZtLMbDPbzDFzzDwzz8w3880Cs8AsMotMukk3S8wSk2EyzDKzzGSaTLPCrDCrzCqzxqwx68w6s8FsMJvMJrPFbDHbzDaz3Ww3O81Os9vsNnvNXrPP7DP7zX6TZbLMAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXPMHDfHzQlzAk+ZU+a0OW3OmDPmnDlnLpifzEVzyVw23sTYPDbWXmPjbF6bz+a3MTZPHwD4S1zYFrEJtqgtZrUtaAv9TWystYm2lC1ty1hny9oke9Nv4kp9K9sqtqq93Vazd9jqtpL927iuvcfWs/fa+vY+W8fe/TdxA3u/bWgfsY3so7axbWGb2Fa2qX3ENrOP2ua2hW1pW9kO9knb0T5lk+3TtpN95jfxErvUrrPr7Qa70e6zn9lz9rw9ar+1F+xPtrftYwfbV+wQ+6odal+zw+zw38Rj7Vt2nB1vJ9iJdpKd/Jt4hp1p0+wsO9u+Z+fYub+J0+2Hdr7NsAvsQrvILv45zp5Thv3ILrMf20y73K6wK+0qu9qusWv/MteVdrPdYrfavfZTu93usDvtLrvb7vk5zl7Hfvu5zbJf2CP2G3vQfmkP2WP2sP365zh7fcfsd/a4/d6esCftKfuDPW1/tGfs2Z/Xn732H+wle9l6C4QkSJKigHJRboqhPBRL11Ac5aV8lJ8idC3F03VUgK6nglSIClMRSqCiVIw0GbJEFFJxKkFRuoFK0o2USKWoNJUhR2UpiW6icnQzladbqALdShXpNqpElakKVaXbqRrdQdXpTqpBd1FNqkW1qQ7dTXXpHqpH91J9uo8a0P3UkB6gRvQgNaaHqAk9TE3pEWpGj1JzakEtqRW1pseoDT1ObakdtacnqAM9SR3pKUqmp6kTPUOd6VnqQs9RV3qeutEL1J16UE96kXrRS9Sb+lAK9aV+9DL1pwE0kAbRYHqFhtCrNJReo2E0nEbQ6zSS3qBR9CaNpjE0lt6icTSeJtBEmkSTKZXepin0Dk2ld2kaTacZNJPSaBbNpvdoDs2lefQ+zacPaAEtpEW0mNLpQ1pCSymDPqJl9DFl0nJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRJ7SddtBO2kW7aQ/tpU9pH31G++lzyqIv6AD9iQ7Sl3SIvqLD9DUdoW/oKH1Lx+g7Ok7f0wk6SafoBzpNP9IZOkvn6DxdoJ/oIl2iy+QJQgxFKEMVBmGuMHcYE+YJY8Nrwrgwb5gvzB9GwmvD+PC6sEB4fVgwLBQWDouECWHRsFioQxPakMIwLB6WCKPhDWHJ8MYwMSwVlg7LhC4sGyaFN4XlwpvD8uEtYYXw1rBieFtYKawcVgmrhreH1cI7wurhnWGN8K6wZlgrrB3WCe8O64b3hPXCe8P64X1h+fD+sGH4QNgofDBsHD4UNgkfDpuGj4TNwkfD5mGLsGXYKmwdPha2CR8P24btwvbhE2GH8MmwY/hUmBw+HXYKn/nd/pSwb9gvfDl8OfT+XrkoujiaHv0wuiS6NJoR/Si6LPpxNDO6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujXqfZ3c4NAJJ51ygcvlcrsYl8fFumtcnMvr8rn8LuKudfHuOlfAXe8KukKusCviElxRV8xpZ5x15EJX3JVwUXeDK+ludImulCvtyjjnyrok18q1dq1dG/e4a+vaufbuCfeEe9I96Z5yT7mnXSf3jOvsnnVd3HOuq3vePe9ecN1dD9fTveh6uZdcb9fHpbgU18/1c/1dfzfQDXSD3WA3xA1xQ91QN8wNcyPcCDfSjXSj3Cg32o12Y91YN86NcxPcBDfJTXKpLtVNcVPcVDfVTXPT3Aw3w6W5NDfbzXZz3Bw3z81z8918t8AtcIvcIpfu0t0St8RluAy3zC1zmS7TrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3zW13291Ot9PtdrvdXrfX7XP73H6332W5LHfAHXAH3UF3yH3lDruv3RH3jTvqvnXH3HfuuPvenXAn3Sn3gzvtfnRn3Fl3zp13F9xP7qK75C4771Ijb0emRN6JTI28G5kWmR6ZEZkZSYvMisyOvBeZE5kbmRd5PzI/8kFkQWRhZFFkcSQ98mFkSWRpJCPyUWRZ5ONIZmR5ZEVkZWRVZHXE+6LbQ1/cl/BRf4Mv6W/0ib6UL+3LeOfL+iR/ky/nb/bl/S2+gr/VV/S3+Uq+sq/iH/XNfQvf0rfyrf1jvo1/3Lf17Xx7/4Tv4J/0Hf1TPtk/7Tv5Z3xn/6zv4p/zXf3zvpt/wXf3PXxP/6Lv5V/yvX0fn+L7+n7+Zd/fD/AD/SA/2L/ih/hX/VD/mh/mh/sR/nU/0r/hR/k3/Wg/xo/1b/lxfryf4Cf6SX6yT/Vv+yn+HT/Vv+un+el+hp/p0/wsP9u/5+f4uX6ef9/P9x/4BX6hX+QX+3T/oV/il/oM/5Ff5j/2mX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m3+E7/d7/A7/S6/2+/xe/2nfp//zO/3n/ss/4U/4P/kD/ov/SH/lT/sv/ZH/Df+qP/WH/Pf+eP+e3/Cn/Sn/A/+tP/Rn/Fn/Tl/3l/wP/mL/pK/zL+zxhhjjDH2vyJ/p7/vf5Mj/tzuBwB5dxQ5/F/7NxX8pT0gd0KHCAA83afbQ79uNWumpKT8ed9MCUGJhQAQuZKfC67Ey6E9PAnJ0A7K/aU/5q+ONUD0uED/0/gAQfRWgNi/ysnO/zW+Mv7Nf3f9A8T4+f/j+BKC6EKAxBJXcvLAlfjK+OX/m/ELtfmd8fN8mQrQ9q9y4uBKfGX8JHgcnoHkv9mTMcYYY4wxxhj7xQBRpcvv3d9m358nqCs5ueFK/PfuzxljjDHGGGOMMfbv5bkePZ96LDm5XRdu/KsaPv8vb/W/y3yuakMAwL/BNLjxu42r/cnEGGOMMcYY+6Nduei/2jNhjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyrv8Xf07s12P93v8aZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxv5T/Z8AAAD//wPEOZg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1m25.593292713s ago: executing program 0 (id=198): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) socket$inet6(0xa, 0x3, 0x7) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m9.98858422s ago: executing program 34 (id=198): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020400) socket$inet6(0xa, 0x3, 0x7) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16.317117072s ago: executing program 6 (id=408): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r3, 0x4004550d, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x20, 0xc, 0x6f, "d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f25ca1276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666cb1952f1177e455fa014ffd83e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, 0x0, 0x0) read$char_usb(r5, &(0x7f0000000100)=""/178, 0xb2) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x6, 0x1cb, 0x0, 0x0) 15.138029989s ago: executing program 2 (id=411): syz_usb_connect(0x2, 0x396, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023ee6f410b40402101b60010203010902840301090130d30904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007baaaa40b10e6866"], 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000140)=""/221) syz_usb_connect(0x3, 0x24, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010003a1cc7e20f4208b64a53f0102030109021200010002c0460904298900ffffff06"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$uac3(0x0, 0x8a, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xa92, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x3, 0x50, 0x0, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x14, 0x401}, [@power_domain={0xa, 0x24, 0x10, 0x10, 0xcb5, 0x7, 0x7f, "89"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, {0xa, 0x25, 0x25, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf, 0x40, 0x94, {0xa, 0x25, 0x25, 0x8000, 0xfe, 0x100}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, &(0x7f0000000300)={0x40, 0x30, 0x1c, {0x1c, 0x22, "871b679278167ead77a230855ac79d2d102cb5771a23db89fb95"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000100)=ANY=[@ANYBLOB="120110019c3d9f08fd0b1b01a1330102030109022b00013507a0ce09046500028bc7ec0d0705c2be1b820f09050202"], 0x0) 13.121438772s ago: executing program 2 (id=416): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xcf, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0x48, 0x80, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0xab}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0xe3, 0xf, "97b5c782d871"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0x40, 0x40, {0xa, 0x25, 0x25, 0x6, 0x81, 0xd6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x0, 0xf, 0xff, 'Va'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf96a, 0x4, 0x6, 0x34}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x0, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x40}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x9, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x3, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x4, {0xa, 0x25, 0x25, 0x0, 0x3, 0x10}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 12.698993965s ago: executing program 6 (id=417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 10.049455127s ago: executing program 7 (id=423): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.045916217s ago: executing program 2 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xff, 0x81, 0xa3, 0x8, 0xa47, 0x9601, 0x195, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xfa, 0x80, 0x6, "", [{{0x9, 0x4, 0x1a, 0x8, 0x0, 0x66, 0x8a, 0x83, 0xdc}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r5, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x640000) syz_usb_disconnect(r6) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r6, 0x40095505, 0x0) syz_usb_connect(0x3, 0x2f3, &(0x7f0000000040)=ANY=[], 0x0) 9.561275972s ago: executing program 6 (id=426): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x4}) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_connect$uac3(0x4, 0xe3, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x499, 0x103b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0xbb, 0x0, 0x80, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2d, 0x62a}, [@multiply_unit={0xb, 0x24, 0xd, 0x9a, 0xd, 0x4, 0x1}, @power_domain={0xb, 0x24, 0x10, 0xf, 0x4, 0x6, 0x5, 'mH'}, @feature_unit={0xd, 0x24, 0x7, 0x6, 0x4, [0xe, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x4, 0x1, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x88, 0x8, 0x7, 0x0, 0x80}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x0, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf8, 0x4, 0xe, 0x5, "3ec2ac"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x80}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x3, 0x3b, {0xa, 0x25, 0x25, 0x4, 0x5, 0xb816}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x42, 0x4, 0x85, 0x44}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff7, 0x40, 0x6, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x11, 0x0, 0x8, {0xa, 0x25, 0x25, 0x4, 0x6, 0x1}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x6, 0x0, 0x0, 0x40, 0xff}, 0xf9, &(0x7f0000000240)={0x5, 0xf, 0xf9, 0x4, [@wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0x9, 0x9, 0xfff}, @generic={0xcb, 0x10, 0xb, "5f1e12f6fcf907595e26a73d2cc18a6e9b123bbdd7a6d7869ebe8fb0e22bed7cc71970d4a278605150f46b11733c1405a43770f3e3b9e5e670243929ce3bd956ef6be1602f750c3b64e26210f33cb53c8fb1f86f494316cb8525c42d8cfe4ca4d93a761662b19402f3937eaab829877a65b9df59a9ba7581b37615c977d94660085efb68b8efa084de7e95f389e7c52fc4dd4cb0ac5b77a282d1d1fcb669a528bab9d7c76d2ad430a0e5bd7a7ab49158f2509ca221d139911b09aeecd05d05727375b8991d458eb5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x4, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xf7, "8582aa397963696fcc38e0d5bdda8ad3"}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x439}}, {0x73, &(0x7f00000003c0)=@string={0x73, 0x3, "3b39ec88ad6d49668b99b89fdf14e4082b27fee0641f876d77f8dfb579313c38beb79e8d475464496d88c8420fd326c3b15071f2c44a9ac822dbc233804c886d39fe96084bc1e64df491b681d4ee77cc5fb6e4178c3225a6047160cc0b545eae7d473df7eb34b08fd57376b65599b3075e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x861}}, {0x79, &(0x7f00000004c0)=@string={0x79, 0x3, "113df074b5819158c5cdc864233d830fcf54538fd1a7a9e7f87b581cb8be4059493d1a481cae1c492e28f360ff978671002c53567cc72d310002a872f15771343b7075eb95ced3e11a636c6a60662b8801e405ca1a0102778790f0821b433152b4220101bd7449934bc4914ccf54e94b35640c4e2eae47"}}, {0x5c, &(0x7f0000000540)=@string={0x5c, 0x3, "e6880385df19505fc0115c135340dab09efa43b547c6b1e9d496c27d4831625387d29e2daca0b8334a46351968f0551a6da9de634f8e08c6a178c1d3393d77fc473370af7b39492469acbf1ed5ca8cdf7230ab66bf2077e6d421"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x8, &(0x7f0000000280)=ANY=[]) syz_usb_control_io(r2, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.341366992s ago: executing program 2 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r6, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16=r7, @ANYRESHEX=r6, @ANYRES64=r5, @ANYRESOCT=r7], 0x81, 0x14ff, &(0x7f0000002a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x3a) alarm(0x8000000000000001) 7.161514317s ago: executing program 6 (id=433): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d0001010000090904000d020301010509210500770122b10f0905810320"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.923589254s ago: executing program 7 (id=436): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x4, 0x4) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40000) 6.922360194s ago: executing program 2 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000800)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) syz_clone(0x8000200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x2, 0x7fff, 0x3ff, 0x1, 0x14, "57c382a118943a12bf6f26c923c85cc1fd21d4", 0x9, 0x2d}) write(0xffffffffffffffff, &(0x7f0000000300)="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", 0x178) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.805382781s ago: executing program 7 (id=438): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188110203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)=ANY=[], 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0}, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002100)=ANY=[], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x80000000002, 0x30004) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x7) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="0003c1000000102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f"], 0x0, 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) 4.784035061s ago: executing program 3 (id=440): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x18, 0xe, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 4.654956236s ago: executing program 3 (id=441): io_setup(0x2278, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x80004000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1ffffff, 0x0, 0x2) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x8, 0x0) 4.067223154s ago: executing program 3 (id=442): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b000100001000090433"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3.989567286s ago: executing program 6 (id=443): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000b00)={0x0, 0x8, 0x88, "60f086d9abd285cfba2ed4e7bfb7889c00ca9cb4c4745b286359886a07057b6685821c6c63b119b8d5da21ae68c2a4dbb31884f708b27d70518906a812395904000a51532271a4c1979778745cc3ab11d39bec75851816519ab23d75875fc64beddd53c7f905524f7850b38f35c89326e5a08529d09d5e08c4cdba621fafd96f3356039e8217a0ff"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.930423238s ago: executing program 2 (id=444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0xb9, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x48, 0x80, 0x5, {0x8, 0xb, 0x1, 0x1, 0x1, 0x24, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0xab}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x4, 0xe3, 0xf, "97b5c782d871"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x1, 0x4, 0x9}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x2, 0xc, 0x1, "", "fa66"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x4, 0x9, 0x5, "b3"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xf, 0x40, 0x40, {0xa, 0x25, 0x25, 0x6, 0x81, 0xd6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x0, 0xf, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x9, 0x4, {0xa, 0x25, 0x25, 0x0, 0x3, 0x10}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.839995831s ago: executing program 1 (id=445): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x21, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x8000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xe, 0x10, {0xa, 0x25, 0x25, 0x8, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0xe3, 0x9, {0xa, 0x25, 0x25, 0x2, 0xb, 0x1}}}}}}}}]}}, 0x0) 3.255450439s ago: executing program 1 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.712049636s ago: executing program 1 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r2) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x8000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8c0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000180)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000100)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x3a) alarm(0x8000000000000001) 2.516475672s ago: executing program 1 (id=448): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000780)='gid_map\x00') read$FUSE(r3, &(0x7f0000001480)={0x2020}, 0x2020) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x4, 0x4) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x40000) 2.417411625s ago: executing program 7 (id=449): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000880)={[{@dioread_nolock}, {@data_ordered}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0xffffffffffff4f5b}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2007f9, &(0x7f0000000c40)={[{@prjquota}, {@nogrpid}, {@discard}, {@errors_remount}, {@init_itable, 0x0}, {@orlov}, {@jqfmt_vfsv1}, {@nolazytime}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@mblk_io_submit}, {@abort}], [], 0x2c}, 0xfe, 0x50a, &(0x7f00000005c0)="$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") 1.525483323s ago: executing program 3 (id=450): ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x150e, &(0x7f0000002fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r5 = epoll_create(0x628) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x30000009}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000014) unshare(0x2040400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x50) 1.407851697s ago: executing program 1 (id=451): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x18, 0xe, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 1.31686746s ago: executing program 1 (id=452): io_setup(0x2278, &(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x80004000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1ffffff, 0x0, 0x2) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x8, 0x0) 525.057494ms ago: executing program 7 (id=453): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 416.559837ms ago: executing program 6 (id=454): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000800)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) syz_clone(0x8000200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x2, 0x7fff, 0x3ff, 0x1, 0x14, "57c382a118943a12bf6f26c923c85cc1fd21d4", 0x9, 0x2d}) write(0xffffffffffffffff, &(0x7f0000000300)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171faa19b3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01c592688acaefe150f0ffd163d3d54d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d7609819a02fd202762975b2bf49910e57aea28e3632353f29711d460d5e85c5881f265e2372722654532bfb30b7ee54d40cafe09c96e65a6304a570ea8069fa0649f1bd6cbe5b2d8e42fa0ab835b4eae46e983df2fefa0b5e5bec1594ba224b6acef03fc561a86959e3b928c552b", 0x178) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 294.622351ms ago: executing program 3 (id=455): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) 417.18µs ago: executing program 3 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file7/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000110001002bbd700010dbdf257f000001000000000000000000000000000004d402006c003a58804973169c3e3a5577c4f041e38a157199464733be70b744b602f2913e85b9c4c522957c16"], 0x28}}, 0x0) 0s ago: executing program 7 (id=457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ================ [ 73.200569][ T1654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.222647][ T1654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.234765][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.245063][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.255373][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.265407][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.301793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.338997][ T4188] device veth1_macvtap entered promiscuous mode [ 73.348556][ T4273] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 73.372483][ T4273] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 73.457056][ T4273] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 3391 (only 1 groups) [ 73.468223][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.505794][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.516596][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.524825][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.537472][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.549383][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.560162][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.570941][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.580826][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.592343][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.604492][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.629506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.645194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.655019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.692863][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.695099][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.714397][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.725936][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.745261][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.765153][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.773482][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.784440][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.798337][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.812651][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.828676][ T4278] loop3: detected capacity change from 0 to 1024 [ 73.835303][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.846072][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.861826][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.881506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.897610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.905653][ T4278] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 73.909048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.915610][ T4278] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.936415][ T4278] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (40000) [ 73.947937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.963227][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.978059][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.988879][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.004515][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.074466][ T1654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.085580][ T1654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.174808][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.267597][ T1654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.281788][ T1654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.301035][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.342130][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.351163][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.401174][ T4290] futex_wake_op: syz.0.7 tries to shift op by 144; fix this program [ 74.642387][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.673226][ T4201] Bluetooth: hci1: command 0x0419 tx timeout [ 74.744328][ T4201] Bluetooth: hci0: command 0x0419 tx timeout [ 74.946575][ T4201] Bluetooth: hci2: command 0x0419 tx timeout [ 75.212997][ T4201] Bluetooth: hci3: command 0x0419 tx timeout [ 75.219258][ T4201] Bluetooth: hci4: command 0x0419 tx timeout [ 75.385629][ T4296] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.537375][ T4292] loop3: detected capacity change from 0 to 4096 [ 75.927987][ T4292] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 76.373107][ T4292] EXT4-fs (loop3): inline encryption not supported [ 76.380546][ T4292] EXT4-fs (loop3): Test dummy encryption mode enabled [ 76.398747][ T4303] Zero length message leads to an empty skb [ 76.476023][ T4303] loop4: detected capacity change from 0 to 512 [ 76.533210][ T4292] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 76.562332][ T4292] System zones: 0-5 [ 76.600969][ T4292] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 76.625914][ T4308] loop1: detected capacity change from 0 to 1024 [ 76.652448][ T4303] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.5: iget: bad i_size value: 38620345925642 [ 76.711410][ T4308] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 76.725708][ T4303] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 76.787072][ T4303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.825965][ T4308] EXT4-fs (loop1): inline encryption not supported [ 77.240782][ T4308] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 77.922822][ T4303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.5: bg 0: block 5: invalid block bitmap [ 77.978729][ T4303] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 120 with error 28 [ 78.067302][ T4322] loop0: detected capacity change from 0 to 256 [ 78.067837][ T4303] EXT4-fs (loop4): This should not happen!! Data will be lost [ 78.067837][ T4303] [ 78.079070][ T4305] EXT4-fs (loop4): shut down requested (1) [ 78.093985][ T4303] EXT4-fs (loop4): Total free blocks count 0 [ 78.100007][ T4303] EXT4-fs (loop4): Free/Dirty block details [ 78.109498][ T4303] EXT4-fs (loop4): free_blocks=0 [ 78.118282][ T4303] EXT4-fs (loop4): dirty_blocks=124 [ 78.184993][ T4303] EXT4-fs (loop4): Block reservation details [ 78.352445][ T4303] EXT4-fs (loop4): i_reserved_data_blocks=124 [ 78.792668][ T4327] fuse: blksize only supported for fuseblk [ 78.809293][ T4327] loop3: detected capacity change from 0 to 256 [ 78.870357][ T4327] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.995007][ T4327] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 79.335211][ T4327] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 81.232022][ C0] sched: RT throttling activated [ 81.514066][ T4332] loop1: detected capacity change from 0 to 40427 [ 81.619092][ T4332] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.822283][ T4201] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.927647][ T4332] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 81.980092][ T4332] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 82.020659][ T4332] F2FS-fs (loop1): Start checkpoint disabled! [ 82.062302][ T4201] usb 3-1: Using ep0 maxpacket: 32 [ 82.182359][ T4201] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 82.209134][ T4201] usb 3-1: config 0 has no interface number 0 [ 82.240128][ T4201] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 82.271411][ T4201] usb 3-1: config 0 interface 196 has no altsetting 0 [ 82.472588][ T4201] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 82.530141][ T4201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.566904][ T4201] usb 3-1: Product: syz [ 82.571120][ T4201] usb 3-1: Manufacturer: syz [ 82.760629][ T4201] usb 3-1: SerialNumber: syz [ 82.771714][ T4201] usb 3-1: config 0 descriptor?? [ 82.802739][ T4352] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 82.980401][ T4360] loop3: detected capacity change from 0 to 256 [ 83.855377][ T4364] loop1: detected capacity change from 0 to 512 [ 83.996273][ T4351] netlink: 'syz.2.19': attribute type 2 has an invalid length. [ 84.067770][ T4201] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 84.188130][ T4364] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 84.327033][ T4366] tipc: Started in network mode [ 84.332331][ T4366] tipc: Node identity 36df30f8ab25, cluster identity 4711 [ 84.340713][ T4366] tipc: Enabled bearer , priority 0 [ 84.374466][ T4366] +: renamed from syzkaller0 [ 84.491817][ T4366] tipc: Disabling bearer [ 85.769264][ T4364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.21: iget: bad extra_isize 58 (inode size 256) [ 85.909811][ T4364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.21: error while reading EA inode 18 err=-117 [ 85.956110][ T4236] usb 3-1: USB disconnect, device number 2 [ 86.072556][ T4364] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 86.197653][ T4364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.21: iget: bad extra_isize 58 (inode size 256) [ 86.312638][ T4236] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 86.371900][ T4364] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.21: error while reading EA inode 11 err=-117 [ 86.493467][ T4372] loop2: detected capacity change from 0 to 4096 [ 86.639629][ T4372] EXT4-fs (loop2): inline encryption not supported [ 86.673713][ T4364] EXT4-fs (loop1): 1 orphan inode deleted [ 86.723389][ T4364] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,mblk_io_submit,nouid32,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,dioread_lock,,errors=continue. Quota mode: none. [ 86.783365][ T7] cfg80211: failed to load regulatory.db [ 86.863779][ T4372] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 86.871985][ T4372] System zones: 0-5 [ 87.051669][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.066534][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.177230][ T4372] [ 87.287653][ T4372] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 87.836348][ T4379] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.138282][ T4386] loop3: detected capacity change from 0 to 1024 [ 88.215058][ T4386] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 88.258504][ T4386] EXT4-fs (loop3): inline encryption not supported [ 89.080797][ T4395] loop1: detected capacity change from 0 to 1024 [ 89.196801][ T4386] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 89.574822][ T4395] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.261010][ T4407] loop0: detected capacity change from 0 to 512 [ 90.308336][ T4407] EXT4-fs (loop0): Ignoring removed orlov option [ 90.318547][ T4407] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 90.441592][ T4407] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.29: corrupted in-inode xattr [ 90.551064][ T4407] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.29: couldn't read orphan inode 15 (err -117) [ 90.876251][ T4407] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 91.530011][ T4419] loop2: detected capacity change from 0 to 256 [ 91.830946][ T4424] loop0: detected capacity change from 0 to 4096 [ 91.903074][ T4424] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 91.952206][ T4424] EXT4-fs (loop0): inline encryption not supported [ 91.976028][ T4424] EXT4-fs (loop0): Test dummy encryption mode enabled [ 92.396279][ T4424] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 92.748233][ T4424] System zones: 0-5 [ 92.865382][ T4424] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 93.087874][ T4457] loop2: detected capacity change from 0 to 512 [ 93.193789][ T4457] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.256805][ T4473] loop1: detected capacity change from 0 to 256 [ 96.559805][ T4473] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.658622][ T4473] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.731591][ T4473] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.832399][ T26] audit: type=1800 audit(1781113690.610:2): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.42" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 96.870170][ T4473] syz.1.42 (4473) used greatest stack depth: 19888 bytes left [ 99.029968][ T4514] loop1: detected capacity change from 0 to 128 [ 99.047425][ T4499] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 99.986501][ T4514] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 100.014979][ T4514] System zones: 1-3, 19-19, 35-36 [ 100.083508][ T4266] Bluetooth: hci5: command 0x0409 tx timeout [ 100.105309][ T4514] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 100.168630][ T4514] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.625714][ T4493] chnl_net:caif_netlink_parms(): no params data found [ 100.741732][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.755816][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.770390][ T4493] device bridge_slave_0 entered promiscuous mode [ 100.779134][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.795426][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.809322][ T4493] device bridge_slave_1 entered promiscuous mode [ 100.924830][ T4493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.985047][ T4493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.111582][ T4493] team0: Port device team_slave_0 added [ 101.165165][ T4493] team0: Port device team_slave_1 added [ 101.241512][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.255388][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.326552][ T4551] futex_wake_op: syz.3.59 tries to shift op by 144; fix this program [ 101.711811][ T4493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.810705][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.850388][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.962079][ T4493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.079306][ T4493] device hsr_slave_0 entered promiscuous mode [ 102.112150][ T1106] Bluetooth: hci5: command 0x041b tx timeout [ 102.180605][ T4558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.835094][ T4493] device hsr_slave_1 entered promiscuous mode [ 103.023653][ T4493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.031253][ T4493] Cannot create hsr debugfs directory [ 104.192468][ T1106] Bluetooth: hci5: command 0x040f tx timeout [ 104.523286][ T4574] loop2: detected capacity change from 0 to 128 [ 104.729376][ T4493] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.811646][ T4577] tipc: Enabled bearer , priority 0 [ 104.829785][ T4578] device syzkaller0 entered promiscuous mode [ 104.854873][ T4493] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.911229][ T4493] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.292901][ T4493] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.522285][ T26] audit: type=1800 audit(1781113699.240:3): pid=4580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.65" name="file1" dev="loop2" ino=1048594 res=0 errno=0 [ 105.599195][ T4576] tipc: Resetting bearer [ 105.747107][ T4575] tipc: Resetting bearer [ 105.810662][ T4575] tipc: Disabling bearer [ 106.272496][ T4236] Bluetooth: hci5: command 0x0419 tx timeout [ 106.502376][ T4493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.603151][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.611192][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.704649][ T4493] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.760393][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.776003][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.835349][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.842497][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.901596][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.954252][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.009147][ T4587] loop3: detected capacity change from 0 to 512 [ 107.010982][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.076819][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.084155][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.117707][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.143842][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.155762][ T4587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.210398][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.246036][ T4587] EXT4-fs (loop3): 1 truncate cleaned up [ 107.251822][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 107.274058][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.284831][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.293849][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.303444][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.369288][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.407471][ T4587] EXT4-fs (loop3): shut down requested (1) [ 107.427569][ T4493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.465113][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.510442][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.531931][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.565526][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.825419][ T4612] loop2: detected capacity change from 0 to 1024 [ 108.841979][ T4615] loop0: detected capacity change from 0 to 256 [ 108.873726][ T4614] loop3: detected capacity change from 0 to 1024 [ 108.889226][ T4612] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 108.914826][ T4612] EXT4-fs (loop2): inline encryption not supported [ 108.929094][ T4614] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 108.972290][ T4614] EXT4-fs (loop3): inline encryption not supported [ 109.028129][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 109.072263][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.079813][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.104535][ T4614] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 109.345878][ T4493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.772398][ T4235] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.212293][ T4235] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.220986][ T4235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.289696][ T4235] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.343478][ T4235] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.400060][ T4404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.674481][ T4235] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.674736][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.674797][ T4235] usb 3-1: Product: syz [ 110.674854][ T4235] usb 3-1: Manufacturer: syz [ 111.007659][ T4235] cdc_wdm 3-1:1.0: skipping garbage [ 111.007838][ T4235] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 111.557947][ T4404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.745408][ T4404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.861697][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.882751][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.936800][ T4404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.998908][ T4234] usb 3-1: USB disconnect, device number 3 [ 112.129526][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.160323][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.212202][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.253933][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.286531][ T4493] device veth0_vlan entered promiscuous mode [ 112.409005][ T4493] device veth1_vlan entered promiscuous mode [ 112.457269][ T4655] loop3: detected capacity change from 0 to 512 [ 112.515863][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.531220][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.547260][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.559899][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.596868][ T4493] device veth0_macvtap entered promiscuous mode [ 112.633177][ T4655] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 112.662865][ T4493] device veth1_macvtap entered promiscuous mode [ 112.678612][ T4655] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 112.712714][ T4655] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 112.731520][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.771241][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.782152][ T4655] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 112.809447][ T4662] loop2: detected capacity change from 0 to 128 [ 112.842351][ T4655] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=4002e02c, mo2=0000] [ 112.851240][ T4655] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.858282][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.869586][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.880244][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.890833][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.901845][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.913034][ T4662] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.918503][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.925006][ T4662] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.944420][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.954898][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.961418][ T4655] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.85: bg 0: block 34: padding at end of block bitmap is not set [ 112.968760][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.990565][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.018995][ T4662] fscrypt (loop2, inode 12): Unsupported encryption flags (0x08) [ 113.030067][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.059579][ T4655] EXT4-fs (loop3): Remounting filesystem read-only [ 113.088424][ T4655] Quota error (device loop3): write_blk: dquota write failed [ 113.128807][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.142318][ T4655] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 113.171214][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.198388][ T4655] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.85: Failed to acquire dquot type 1 [ 113.212323][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.233510][ T4655] EXT4-fs (loop3): Remounting filesystem read-only [ 113.241970][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.297243][ T4655] EXT4-fs (loop3): 1 truncate cleaned up [ 113.423801][ T4655] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noinit_itable,barrier=0x0000000000000003,noblock_validity,errors=remount-ro,nodioread_nolock,journal_ioprio=0x0000000000000000,. Quota mode: writeback. [ 113.595795][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.759285][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.915917][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.102589][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.112931][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.171648][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.184951][ T4493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.212087][ T4493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.243999][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.487779][ T4670] tipc: Started in network mode [ 114.512216][ T4670] tipc: Node identity 7f000001, cluster identity 4711 [ 114.529794][ T4670] tipc: Enabled bearer , priority 10 [ 114.545511][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.591862][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.766627][ T4493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.898083][ T4493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.193536][ T4493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.242073][ T4493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.507397][ T4700] loop3: detected capacity change from 0 to 512 [ 115.564777][ T4700] EXT4-fs (loop3): Ignoring removed orlov option [ 115.600804][ T4700] EXT4-fs (loop3): Ignoring removed oldalloc option [ 115.627895][ T4704] loop2: detected capacity change from 0 to 128 [ 115.758798][ T4704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 115.766966][ T4700] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.93: inode has both inline data and extents flags [ 115.784792][ T4712] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.798989][ T21] tipc: Node number set to 2130706433 [ 115.815408][ T4704] System zones: 1-3, 19-19, 35-36 [ 115.823635][ T4704] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 115.835973][ T4704] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.858054][ T4700] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.93: couldn't read orphan inode 15 (err -117) [ 115.965189][ T4714] loop1: detected capacity change from 0 to 256 [ 116.477693][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.532242][ T4700] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,resgid=0x000000000000ee00,oldalloc,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 116.557174][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.653771][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.688284][ T4720] loop1: detected capacity change from 0 to 512 [ 117.189655][ T4506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.244584][ T4720] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.99: iget: bad i_size value: 38620345925642 [ 117.269731][ T4506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.358070][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.366779][ T4720] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.99: couldn't read orphan inode 15 (err -117) [ 117.450367][ T4720] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.640836][ T4716] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.99: bg 0: block 5: invalid block bitmap [ 117.664129][ T4716] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 504 with error 28 [ 117.696671][ T4717] EXT4-fs (loop1): shut down requested (1) [ 117.712923][ T4716] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.712923][ T4716] [ 117.770281][ T4716] EXT4-fs (loop1): Total free blocks count 0 [ 117.823778][ T4716] EXT4-fs (loop1): Free/Dirty block details [ 117.829949][ T4716] EXT4-fs (loop1): free_blocks=0 [ 117.836592][ T4716] EXT4-fs (loop1): dirty_blocks=504 [ 117.871356][ T4716] EXT4-fs (loop1): Block reservation details [ 118.687124][ T4716] EXT4-fs (loop1): i_reserved_data_blocks=504 [ 120.683952][ T4772] loop5: detected capacity change from 0 to 256 [ 121.514938][ T26] audit: type=1326 audit(1781113715.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 121.771917][ T26] audit: type=1326 audit(1781113715.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 121.853498][ T26] audit: type=1326 audit(1781113715.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 121.884659][ T26] audit: type=1326 audit(1781113715.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 122.115478][ T26] audit: type=1326 audit(1781113715.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 122.424810][ T26] audit: type=1326 audit(1781113715.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 122.988977][ T26] audit: type=1326 audit(1781113715.330:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 123.070977][ T4793] loop1: detected capacity change from 0 to 512 [ 123.090507][ T26] audit: type=1326 audit(1781113715.330:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 123.127965][ T4796] loop3: detected capacity change from 0 to 128 [ 123.188122][ T26] audit: type=1326 audit(1781113715.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6534effe59 code=0x7ffc0000 [ 123.219971][ T4796] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 123.266881][ T4793] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.114: iget: bad i_size value: 38620345925642 [ 123.280118][ T26] audit: type=1326 audit(1781113715.430:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4774 comm="syz.3.110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6534effe59 code=0x0 [ 123.314939][ T4793] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.114: couldn't read orphan inode 15 (err -117) [ 123.410136][ T4793] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.442897][ T4404] device hsr_slave_0 left promiscuous mode [ 123.499221][ T4404] device hsr_slave_1 left promiscuous mode [ 123.558759][ T4804] loop5: detected capacity change from 0 to 256 [ 123.604672][ T4803] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.114: bg 0: block 5: invalid block bitmap [ 123.618267][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.634828][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.662930][ T4808] EXT4-fs (loop1): shut down requested (1) [ 123.674391][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.681836][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.746026][ T4804] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 123.774681][ T4404] device bridge_slave_1 left promiscuous mode [ 123.781848][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.801813][ T4806] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 123.826780][ T4404] device bridge_slave_0 left promiscuous mode [ 123.853896][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.859189][ T4806] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 123.984091][ T4404] device veth1_macvtap left promiscuous mode [ 124.026130][ T4404] device veth0_macvtap left promiscuous mode [ 124.055106][ T4404] device veth1_vlan left promiscuous mode [ 124.061220][ T4404] device veth0_vlan left promiscuous mode [ 125.373485][ T4819] loop5: detected capacity change from 0 to 256 [ 125.876583][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.222284][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 126.512437][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 24, changing to 8 [ 126.667081][ T4842] loop0: detected capacity change from 0 to 1024 [ 126.732050][ T4236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.752265][ T4236] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 126.761350][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.937315][ T4842] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 127.031508][ T4236] usb 4-1: config 0 descriptor?? [ 127.061002][ T4842] EXT4-fs (loop0): inline encryption not supported [ 127.584206][ T4842] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 127.627983][ T4848] loop1: detected capacity change from 0 to 1024 [ 127.730732][ T4848] EXT4-fs (loop1): Ignoring removed bh option [ 127.749058][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 127.799990][ T4848] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,data_err=abort,noquota,barrier,auto_da_alloc,nobarrier,bh,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 127.821648][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.839767][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.857738][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.872104][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.886625][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 127.889666][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.911145][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.921303][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.938663][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.944146][ T4848] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.956332][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956389][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956414][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956448][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956476][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956499][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956550][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956573][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956602][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956630][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956653][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956676][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956698][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956721][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956744][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956767][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956789][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956812][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956835][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956857][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956880][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956903][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956925][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956948][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956971][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 127.956994][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 128.148260][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.156997][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 128.157009][ T26] audit: type=1800 audit(1781113721.930:44): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 128.252383][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.256705][ T4854] 9pnet: Insufficient options for proto=fd [ 128.450092][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 128.473631][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 128.480964][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 128.494877][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 128.505535][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 128.516455][ T4236] cypress 0003:04B4:0001.0001: unknown main item tag 0x0 [ 128.549087][ T4236] cypress 0003:04B4:0001.0001: hidraw0: USB HID v10.04 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0 [ 128.580874][ T4856] loop5: detected capacity change from 0 to 512 [ 128.817473][ T4856] EXT4-fs (loop5): Ignoring removed orlov option [ 128.823979][ T4856] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.092000][ T4856] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #16: comm syz.5.130: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 130.110983][ T4856] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.130: couldn't read orphan inode 16 (err -117) [ 130.125756][ T4856] EXT4-fs (loop5): 1 orphan inode deleted [ 130.131859][ T4856] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,lazytime,,errors=continue. Quota mode: none. [ 130.196420][ T4404] bond0 (unregistering): Released all slaves [ 130.342283][ T4862] loop1: detected capacity change from 0 to 512 [ 130.432064][ T4862] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.131: iget: bad i_size value: 38620345925642 [ 130.466074][ T4862] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.131: couldn't read orphan inode 15 (err -117) [ 130.879856][ T4862] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.353130][ T4234] usb 4-1: USB disconnect, device number 2 [ 131.487096][ T26] audit: type=1326 audit(1781113725.270:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 131.562535][ T4862] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.131: bg 0: block 5: invalid block bitmap [ 131.621876][ T4878] EXT4-fs (loop1): shut down requested (1) [ 131.633255][ T26] audit: type=1326 audit(1781113725.270:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 131.839257][ T26] audit: type=1326 audit(1781113725.330:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 131.904615][ T26] audit: type=1326 audit(1781113725.330:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 131.980781][ T26] audit: type=1326 audit(1781113725.330:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 132.110233][ T26] audit: type=1326 audit(1781113725.330:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 132.962911][ T26] audit: type=1326 audit(1781113725.330:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 133.004034][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.010372][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.557997][ T26] audit: type=1326 audit(1781113725.330:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.003250][ T26] audit: type=1326 audit(1781113725.330:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.107945][ T4910] loop2: detected capacity change from 0 to 1024 [ 134.138701][ T4912] loop5: detected capacity change from 0 to 128 [ 134.174041][ T26] audit: type=1326 audit(1781113725.520:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.198288][ T26] audit: type=1326 audit(1781113725.520:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.223780][ T26] audit: type=1326 audit(1781113725.530:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.248259][ T26] audit: type=1326 audit(1781113725.530:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.287745][ T26] audit: type=1326 audit(1781113725.530:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.323915][ T4910] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 134.331127][ T4910] EXT4-fs (loop2): inline encryption not supported [ 134.377659][ T4912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 134.438704][ T26] audit: type=1326 audit(1781113725.530:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 134.529942][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.540799][ T4920] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.581289][ T4912] System zones: 1-3, 19-19, 35-36 [ 134.876370][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 135.023771][ T4912] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 135.302189][ T4912] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.387953][ T4920] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 135.514029][ T26] audit: type=1326 audit(1781113725.530:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 135.651900][ T26] audit: type=1326 audit(1781113725.530:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4876 comm="syz.2.136" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 137.107699][ T4955] tipc: Started in network mode [ 137.120839][ T4955] tipc: Node identity f24d4345e7ef, cluster identity 4711 [ 137.176177][ T4955] tipc: Enabled bearer , priority 0 [ 137.221208][ T4958] device syzkaller0 entered promiscuous mode [ 137.273815][ T4959] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 137.334993][ T4955] tipc: Resetting bearer [ 137.386617][ T4954] tipc: Resetting bearer [ 137.481466][ T4954] tipc: Disabling bearer [ 137.556640][ T4963] loop3: detected capacity change from 0 to 512 [ 137.796208][ T4963] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.149: iget: bad i_size value: 38620345925642 [ 137.835648][ T4963] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.149: couldn't read orphan inode 15 (err -117) [ 137.929745][ T4963] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.160350][ T4973] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.149: bg 0: block 5: invalid block bitmap [ 138.213093][ T4978] EXT4-fs (loop3): shut down requested (1) [ 138.492309][ T4234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.762177][ T4234] usb 1-1: Using ep0 maxpacket: 8 [ 138.922313][ T4234] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.952073][ T4234] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.065793][ T4996] process 'syz.3.155' launched 'éq‰Y’3aK' with NULL argv: empty string added [ 139.764085][ T4234] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.777059][ T4234] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.842048][ T4234] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 139.851132][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.987974][ T4234] usb 1-1: config 0 descriptor?? [ 140.501585][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 140.528690][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 140.548911][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 140.615340][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 140.686196][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 140.818223][ T5017] loop3: detected capacity change from 0 to 256 [ 141.546194][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.554016][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.560764][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.567551][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.574300][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.582435][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.589170][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.622174][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.628912][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.668315][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.685442][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.712154][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.730170][ T5022] netlink: 51 bytes leftover after parsing attributes in process `syz.0.160'. [ 141.739296][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.759594][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.766978][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.781655][ T5021] tipc: Enabled bearer , priority 0 [ 141.799752][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.813011][ T5021] device syzkaller0 entered promiscuous mode [ 141.819995][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.850509][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.872259][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.882969][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.892540][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.908580][ T5021] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 141.917909][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.932058][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.942370][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.955676][ T5021] tipc: Resetting bearer [ 141.973955][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 141.980697][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 142.022107][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 142.028937][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 142.056318][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 142.102136][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 142.160123][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 142.173491][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 142.998901][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 143.006012][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 143.014745][ T4234] kye 0003:0458:5019.0002: unknown main item tag 0x0 [ 143.034463][ T4234] kye 0003:0458:5019.0002: hidraw0: USB HID v0.6d Device [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 143.045423][ T4234] kye 0003:0458:5019.0002: tablet-enabling feature report not found [ 143.062168][ T4234] kye 0003:0458:5019.0002: tablet enabling failed [ 143.163256][ T5019] tipc: Resetting bearer [ 143.199736][ T4234] usb 1-1: USB disconnect, device number 2 [ 143.310183][ T5019] tipc: Disabling bearer [ 143.373192][ T7] tipc: Node number set to 2650419448 [ 143.466508][ T5037] fido_id[5037]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 143.651742][ T5049] device bridge0 entered promiscuous mode [ 143.727946][ T5049] bridge0: port 1(macsec1) entered blocking state [ 143.792600][ T5049] bridge0: port 1(macsec1) entered disabled state [ 144.333183][ T5049] device bridge0 left promiscuous mode [ 146.400956][ T5064] loop2: detected capacity change from 0 to 128 [ 150.489167][ T5101] tipc: Enabling of bearer rejected, failed to enable media [ 151.511337][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 151.591685][ T5128] loop2: detected capacity change from 0 to 1024 [ 151.626113][ T5127] loop1: detected capacity change from 0 to 256 [ 151.958198][ T5127] FAT-fs (loop1): Directory bread(block 64) failed [ 152.015882][ T5128] EXT4-fs (loop2): Ignoring removed bh option [ 152.058401][ T5127] FAT-fs (loop1): Directory bread(block 65) failed [ 152.359284][ T5127] FAT-fs (loop1): Directory bread(block 66) failed [ 152.403467][ T5127] FAT-fs (loop1): Directory bread(block 67) failed [ 152.434332][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,data_err=abort,noquota,barrier,auto_da_alloc,nodioread_nolock,bh,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 152.527418][ T5127] FAT-fs (loop1): Directory bread(block 68) failed [ 152.560515][ T5128] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.571195][ T5127] FAT-fs (loop1): Directory bread(block 69) failed [ 152.584204][ T5127] FAT-fs (loop1): Directory bread(block 70) failed [ 152.590774][ T5127] FAT-fs (loop1): Directory bread(block 71) failed [ 152.631347][ T4236] Bluetooth: hci0: command 0x0409 tx timeout [ 152.639305][ T5127] FAT-fs (loop1): Directory bread(block 72) failed [ 152.681126][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.688412][ T5127] FAT-fs (loop1): Directory bread(block 73) failed [ 152.700034][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.768099][ T5097] device bridge_slave_0 entered promiscuous mode [ 153.151398][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.403593][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.574206][ T5097] device bridge_slave_1 entered promiscuous mode [ 153.607058][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.645411][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.759586][ T5097] team0: Port device team_slave_0 added [ 153.810007][ T5097] team0: Port device team_slave_1 added [ 153.848614][ T5153] loop2: detected capacity change from 0 to 128 [ 153.867479][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.910450][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.054018][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.118934][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.126191][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.159177][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.791665][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 154.965063][ T5097] device hsr_slave_0 entered promiscuous mode [ 155.033480][ T5097] device hsr_slave_1 entered promiscuous mode [ 155.098194][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.137563][ T5097] Cannot create hsr debugfs directory [ 155.225909][ T5158] loop1: detected capacity change from 0 to 8192 [ 155.559509][ T5158] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 155.645611][ T5158] FAT-fs (loop1): Filesystem has been set read-only [ 156.105260][ T5097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.369201][ T5097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.912439][ T4201] Bluetooth: hci0: command 0x040f tx timeout [ 157.078320][ T5097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 157.188091][ T5097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 157.931753][ T5192] loop2: detected capacity change from 0 to 256 [ 158.546534][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.623345][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.645261][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.725020][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.900783][ T5204] loop2: detected capacity change from 0 to 512 [ 158.968974][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.022783][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.061806][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.069019][ T4738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.112403][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.137429][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.186097][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.193318][ T4738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.250996][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.268355][ T4762] Bluetooth: hci0: command 0x0419 tx timeout [ 160.242571][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 160.272672][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.311098][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 160.355198][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 160.677726][ T5097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.774969][ T5221] loop1: detected capacity change from 0 to 256 [ 160.781391][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.910309][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.012580][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.027284][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.052611][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.068222][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.109894][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.164663][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.719086][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.328100][ T5246] loop1: detected capacity change from 0 to 256 [ 163.255791][ T5249] loop2: detected capacity change from 0 to 256 [ 163.373447][ T5246] FAT-fs (loop1): Unrecognized mount option "uid=0x000000000000ee00000000000000000001290x000000000000ee00ÿÿÿÿ" or missing value [ 164.266304][ T5246] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.344566][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 164.344628][ T26] audit: type=1326 audit(1781113758.090:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 165.264060][ T26] audit: type=1326 audit(1781113758.090:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 165.740954][ T5260] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 165.789277][ T5260] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 165.899536][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.209'. [ 165.910227][ T26] audit: type=1326 audit(1781113758.100:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 165.942711][ T26] audit: type=1326 audit(1781113758.100:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 165.978149][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.998523][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.033807][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.090505][ T26] audit: type=1326 audit(1781113758.110:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 166.269768][ T26] audit: type=1326 audit(1781113758.110:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 166.304685][ T26] audit: type=1326 audit(1781113758.110:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 167.085574][ T5274] loop2: detected capacity change from 0 to 128 [ 167.317086][ T26] audit: type=1326 audit(1781113758.110:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 167.625009][ T26] audit: type=1326 audit(1781113758.120:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a26196aeb code=0x7ffc0000 [ 167.659015][ T26] audit: type=1326 audit(1781113758.120:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.1.206" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a26196e59 code=0x7ffc0000 [ 167.958854][ T5292] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 168.449380][ T5274] attempt to access beyond end of device [ 168.449380][ T5274] loop2: rw=2049, want=250, limit=128 [ 168.546746][ T5271] attempt to access beyond end of device [ 168.546746][ T5271] loop2: rw=524288, want=250, limit=128 [ 168.559209][ T5271] attempt to access beyond end of device [ 168.559209][ T5271] loop2: rw=0, want=146, limit=128 [ 168.642310][ T5271] attempt to access beyond end of device [ 168.642310][ T5271] loop2: rw=0, want=146, limit=128 [ 168.763048][ T5274] attempt to access beyond end of device [ 168.763048][ T5274] loop2: rw=0, want=146, limit=128 [ 168.802904][ T5274] attempt to access beyond end of device [ 168.802904][ T5274] loop2: rw=0, want=146, limit=128 [ 168.873210][ T5274] attempt to access beyond end of device [ 168.873210][ T5274] loop2: rw=0, want=146, limit=128 [ 168.959523][ T5274] attempt to access beyond end of device [ 168.959523][ T5274] loop2: rw=0, want=146, limit=128 [ 168.998029][ T5313] loop3: detected capacity change from 0 to 256 [ 169.918022][ T4404] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.961551][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.981807][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.108980][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.123579][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.163335][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.205031][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.253750][ T4404] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.313868][ T5097] device veth0_vlan entered promiscuous mode [ 170.376536][ T5097] device veth1_vlan entered promiscuous mode [ 170.428992][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.460326][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.486541][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.542692][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.556159][ T5097] device veth0_macvtap entered promiscuous mode [ 170.590467][ T4404] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.371081][ T5097] device veth1_macvtap entered promiscuous mode [ 171.545226][ T4404] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.632015][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.642852][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.672225][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.725552][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.766778][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.824171][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.877865][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.929874][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.012369][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.056240][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.068378][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.080396][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.092232][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.102717][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.210202][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.222566][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.235171][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.246735][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.258932][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.337131][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.916373][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.938152][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.014287][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.025091][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.074734][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.134025][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.653470][ T5374] loop2: detected capacity change from 0 to 256 [ 174.247232][ T5097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.342758][ T5097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.432277][ T5097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.441768][ T5097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.768375][ T5388] futex_wake_op: syz.3.236 tries to shift op by 144; fix this program [ 175.095359][ T4736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.145368][ T4736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.268699][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 176.122589][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.161102][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.217123][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 176.267225][ T5398] loop3: detected capacity change from 0 to 512 [ 176.403781][ T5398] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.238: iget: bad i_size value: 38620345925642 [ 176.451491][ T5398] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.238: couldn't read orphan inode 15 (err -117) [ 176.464173][ T5398] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.724108][ T5398] EXT4-fs (loop3): shut down requested (1) [ 177.532954][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 178.206728][ T5392] chnl_net:caif_netlink_parms(): no params data found [ 178.346893][ T5430] loop6: detected capacity change from 0 to 256 [ 178.435315][ T5430] exfat: Deprecated parameter 'namecase' [ 178.470083][ T5430] exfat: Deprecated parameter 'namecase' [ 178.476360][ T5430] exfat: Deprecated parameter 'namecase' [ 179.086894][ T5430] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 179.305811][ T5436] device syzkaller0 entered promiscuous mode [ 179.393674][ T5445] futex_wake_op: syz.1.246 tries to shift op by 144; fix this program [ 179.765756][ T4266] Bluetooth: hci5: command 0x041b tx timeout [ 179.802402][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.815975][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.855542][ T5392] device bridge_slave_0 entered promiscuous mode [ 180.757413][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.776709][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.822225][ T5392] device bridge_slave_1 entered promiscuous mode [ 181.057585][ T5464] loop2: detected capacity change from 0 to 256 [ 181.090906][ T4404] device hsr_slave_0 left promiscuous mode [ 181.315132][ T4404] device hsr_slave_1 left promiscuous mode [ 181.331960][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.339750][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.182833][ T1109] Bluetooth: hci5: command 0x040f tx timeout [ 182.277146][ T5476] loop6: detected capacity change from 0 to 16 [ 182.480619][ T5476] erofs: (device loop6): mounted with root inode @ nid 36. [ 182.552652][ T146] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 182.731924][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 182.731940][ T26] audit: type=1800 audit(1781113776.510:115): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.252" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 184.251834][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.332561][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.570174][ T4404] device bridge_slave_1 left promiscuous mode [ 185.066115][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 185.078236][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.131914][ T4404] device bridge_slave_0 left promiscuous mode [ 185.151095][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.207462][ T4404] device veth1_macvtap left promiscuous mode [ 185.225765][ T4404] device veth0_macvtap left promiscuous mode [ 185.242218][ T4404] device veth1_vlan left promiscuous mode [ 185.248399][ T4404] device veth0_vlan left promiscuous mode [ 185.300849][ T5499] futex_wake_op: syz.1.257 tries to shift op by 144; fix this program [ 185.395969][ T5497] loop6: detected capacity change from 0 to 8192 [ 186.373419][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 186.398086][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 186.421496][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.465008][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.656677][ T4404] bond0 (unregistering): Released all slaves [ 186.676355][ T5518] loop6: detected capacity change from 0 to 1024 [ 186.691707][ T5518] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 186.699204][ T5518] EXT4-fs (loop6): inline encryption not supported [ 186.720470][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.752739][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.753305][ T5518] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 186.941184][ T5392] team0: Port device team_slave_0 added [ 186.978033][ T5392] team0: Port device team_slave_1 added [ 187.057319][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.082447][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.182020][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.214636][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.221642][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.349026][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.550866][ T5392] device hsr_slave_0 entered promiscuous mode [ 188.337532][ T5543] futex_wake_op: syz.1.267 tries to shift op by 144; fix this program [ 188.399061][ T5392] device hsr_slave_1 entered promiscuous mode [ 188.444610][ T5392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.475746][ T5392] Cannot create hsr debugfs directory [ 188.600142][ T5551] loop2: detected capacity change from 0 to 256 [ 188.759333][ T5551] FAT-fs (loop2): Directory bread(block 64) failed [ 188.781097][ T5551] FAT-fs (loop2): Directory bread(block 65) failed [ 188.806939][ T5555] binder: BC_ACQUIRE_RESULT not supported [ 188.819630][ T5555] binder: 5552:5555 ioctl c0306201 2000000012c0 returned -22 [ 188.834212][ T5551] FAT-fs (loop2): Directory bread(block 66) failed [ 188.840797][ T5551] FAT-fs (loop2): Directory bread(block 67) failed [ 188.868054][ T5551] FAT-fs (loop2): Directory bread(block 68) failed [ 188.895903][ T5551] FAT-fs (loop2): Directory bread(block 69) failed [ 188.989872][ T5392] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 189.062411][ T5551] FAT-fs (loop2): Directory bread(block 70) failed [ 189.069063][ T5551] FAT-fs (loop2): Directory bread(block 71) failed [ 189.130557][ T5551] FAT-fs (loop2): Directory bread(block 72) failed [ 189.164286][ T5551] FAT-fs (loop2): Directory bread(block 73) failed [ 189.332550][ T5392] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 189.369185][ T5392] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 190.354993][ T26] audit: type=1800 audit(1781113784.140:116): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.270" name="bus" dev="loop2" ino=1048611 res=0 errno=0 [ 190.992141][ T1106] Bluetooth: hci2: command 0x0406 tx timeout [ 191.244280][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 191.250344][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 191.449346][ T5392] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 191.598575][ T5576] futex_wake_op: syz.3.277 tries to shift op by 144; fix this program [ 191.680622][ T5580] IPv6: addrconf: prefix option has invalid lifetime [ 191.896949][ T5587] loop6: detected capacity change from 0 to 1024 [ 191.916964][ T5587] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 191.924265][ T5587] EXT4-fs (loop6): inline encryption not supported [ 192.594265][ T5587] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 193.136065][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.271762][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.292724][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.355731][ T5603] loop2: detected capacity change from 0 to 128 [ 193.372903][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.441102][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.451308][ T5603] EXT4-fs (loop2): Test dummy encryption mode enabled [ 193.500846][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.510403][ T5603] EXT4-fs (loop2): inline encryption not supported [ 193.572802][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.579911][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.590523][ T5603] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 193.689277][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.699648][ T5603] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.732892][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.822931][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.831378][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.838537][ T4291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.012550][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.095589][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.152653][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.211830][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.240793][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252052][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.268828][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 194.445604][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 194.511916][ T5392] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.612081][ T5392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.675593][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.712970][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 194.793704][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 194.845169][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 194.885364][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 194.944205][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.520661][ T5642] futex_wake_op: syz.2.288 tries to shift op by 144; fix this program [ 195.611258][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.637256][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.663919][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.528766][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.820283][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.425301][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.549967][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.586686][ T5392] device veth0_vlan entered promiscuous mode [ 197.628599][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.694098][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.764255][ T5392] device veth1_vlan entered promiscuous mode [ 198.516768][ T5392] device veth0_macvtap entered promiscuous mode [ 198.584970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.733044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.895133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.965671][ T5392] device veth1_macvtap entered promiscuous mode [ 201.233911][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.256725][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.266643][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.278125][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.348936][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.361805][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.371853][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.383701][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.412101][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.442315][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.454676][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.476113][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.512397][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.549828][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.573503][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.596959][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.657914][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.701557][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.745490][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.770371][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.783485][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.796120][ T5392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.809250][ T5392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.821189][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.847156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.865265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.943936][ T5392] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.969101][ T5392] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.990792][ T5392] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.006919][ T5392] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.183865][ T5736] loop2: detected capacity change from 0 to 128 [ 202.469795][ T5736] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.778427][ T5736] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.189516][ T4738] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 203.272132][ T4319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.286627][ T4319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.325473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.384330][ T5751] futex_wake_op: syz.3.310 tries to shift op by 144; fix this program [ 203.415613][ T5752] loop2: detected capacity change from 0 to 1024 [ 203.430436][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.449381][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.463118][ T5755] loop6: detected capacity change from 0 to 512 [ 203.500710][ T5752] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 203.511808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.529173][ T5755] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 203.550212][ T5752] EXT4-fs (loop2): inline encryption not supported [ 203.635706][ T5755] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 203.635706][ T5755] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 203.635706][ T5755] [ 203.666814][ T5752] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 203.704156][ T4404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.845482][ T4404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.870548][ T5755] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 203.990090][ T5755] EXT4-fs (loop6): 1 truncate cleaned up [ 204.014426][ T4404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.032193][ T5755] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000009,bsddf,nomblk_io_submit,nouser_xattr,sysvgroups,,errors=continue. Quota mode: none. [ 204.180142][ T4404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.753938][ T5802] loop6: detected capacity change from 0 to 1024 [ 205.819123][ T5802] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 205.830422][ T4404] tipc: Disabling bearer [ 205.836190][ T5802] EXT4-fs (loop6): inline encryption not supported [ 205.838173][ T4404] tipc: Left network mode [ 206.079181][ T5802] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 206.164271][ T5814] mmap: syz.1.325 (5814) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 208.081633][ T5819] loop6: detected capacity change from 0 to 256 [ 208.157536][ T5824] loop7: detected capacity change from 0 to 1024 [ 208.191181][ T5819] FAT-fs (loop6): Directory bread(block 64) failed [ 208.224428][ T5819] FAT-fs (loop6): Directory bread(block 65) failed [ 208.256640][ T5824] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 208.262933][ T5819] FAT-fs (loop6): Directory bread(block 66) failed [ 208.271133][ T5819] FAT-fs (loop6): Directory bread(block 67) failed [ 208.292223][ T5819] FAT-fs (loop6): Directory bread(block 68) failed [ 208.304324][ T5819] FAT-fs (loop6): Directory bread(block 69) failed [ 208.328262][ T5824] EXT4-fs (loop7): orphan cleanup on readonly fs [ 208.335351][ T5819] FAT-fs (loop6): Directory bread(block 70) failed [ 208.343157][ T5819] FAT-fs (loop6): Directory bread(block 71) failed [ 208.349903][ T5819] FAT-fs (loop6): Directory bread(block 72) failed [ 208.358420][ T5819] FAT-fs (loop6): Directory bread(block 73) failed [ 208.447773][ T5824] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.328: bg 0: block 10: padding at end of block bitmap is not set [ 208.474946][ T5824] Quota error (device loop7): write_blk: dquota write failed [ 208.489453][ T5824] Quota error (device loop7): find_free_dqentry: Can't remove block (3) from entry free list [ 208.500051][ T5824] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 208.516878][ T5824] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.328: Failed to acquire dquot type 0 [ 208.548487][ T5824] Quota error (device loop7): write_blk: dquota write failed [ 208.589531][ T5824] Quota error (device loop7): find_free_dqentry: Can't remove block (3) from entry free list [ 208.620739][ T5824] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 209.073373][ T5824] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.328: Failed to acquire dquot type 0 [ 209.143515][ T5824] EXT4-fs error (device loop7): ext4_free_blocks:6231: comm syz.7.328: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.223777][ T5824] Quota error (device loop7): write_blk: dquota write failed [ 209.282237][ T5824] Quota error (device loop7): find_free_dqentry: Can't remove block (3) from entry free list [ 209.522266][ T5824] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 209.570930][ T5824] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.328: Failed to acquire dquot type 0 [ 209.623877][ T5824] EXT4-fs (loop7): 1 orphan inode deleted [ 209.645017][ T5824] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.767389][ T5824] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.328: iget: bad extended attribute block 6 [ 211.073345][ T5856] loop2: detected capacity change from 0 to 1024 [ 211.398333][ T5856] EXT4-fs (loop2): Unrecognized mount option "seclabel" or missing value [ 211.450792][ T5863] loop3: detected capacity change from 0 to 1024 [ 211.507326][ T5863] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 211.536698][ T5863] EXT4-fs (loop3): inline encryption not supported [ 211.683403][ T5868] loop2: detected capacity change from 0 to 256 [ 211.739522][ T26] audit: type=1326 audit(1781113805.520:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.2.334" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa487214e59 code=0x7ffc0000 [ 211.741817][ T5863] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 211.763590][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.794538][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.761019][ T5896] futex_wake_op: syz.2.342 tries to shift op by 144; fix this program [ 212.818044][ T5898] loop7: detected capacity change from 0 to 1024 [ 212.909950][ T5898] EXT4-fs (loop7): Ignoring removed oldalloc option [ 212.927325][ T5898] EXT4-fs (loop7): Ignoring removed oldalloc option [ 212.963541][ T5898] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 213.059028][ T5898] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 213.235366][ T5908] loop3: detected capacity change from 0 to 256 [ 213.343849][ T4404] device hsr_slave_0 left promiscuous mode [ 213.364189][ T4404] device hsr_slave_1 left promiscuous mode [ 213.402729][ T5908] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa81a85aa, utbl_chksum : 0xe619d30d) [ 213.445563][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.526333][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.548320][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.621782][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.674778][ T4404] device bridge_slave_1 left promiscuous mode [ 213.727837][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.802854][ T4404] device veth1_macvtap left promiscuous mode [ 213.817585][ T4404] device veth0_macvtap left promiscuous mode [ 213.826121][ T4404] device veth1_vlan left promiscuous mode [ 213.832404][ T4404] device veth0_vlan left promiscuous mode [ 214.708406][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 214.778297][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 214.838795][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.886361][ T5898] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.345: bg 0: block 32: padding at end of block bitmap is not set [ 214.894778][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.056446][ T4404] bond0 (unregistering): Released all slaves [ 217.139216][ T5945] loop2: detected capacity change from 0 to 1024 [ 217.218778][ T5945] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 217.274787][ T5947] loop6: detected capacity change from 0 to 2048 [ 217.354658][ T5945] EXT4-fs (loop2): inline encryption not supported [ 217.493406][ T5947] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,block_validity,grpid,,errors=continue. Quota mode: writeback. [ 217.510230][ T5945] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 217.593274][ T5947] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.304687][ T5979] tipc: Started in network mode [ 219.330955][ T5979] tipc: Node identity 0677d22043f8, cluster identity 4711 [ 219.395175][ T5979] tipc: Enabled bearer , priority 0 [ 219.445440][ T5979] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 219.551156][ T5979] tipc: Resetting bearer [ 219.571217][ T5988] device syzkaller0 entered promiscuous mode [ 219.577834][ T5988] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 219.607531][ T5976] tipc: Resetting bearer [ 219.783013][ T5976] tipc: Disabling bearer [ 220.203581][ T6013] loop7: detected capacity change from 0 to 256 [ 220.349241][ T6013] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xa81a85aa, utbl_chksum : 0xe619d30d) [ 221.915606][ T6050] loop6: detected capacity change from 0 to 256 [ 222.054017][ T6050] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 222.297094][ T6054] loop2: detected capacity change from 0 to 1024 [ 222.482191][ T6054] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 222.505681][ T6054] EXT4-fs (loop2): inline encryption not supported [ 222.575376][ T6054] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 223.103449][ T6074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.112243][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.048013][ T6074] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 224.670438][ T6098] futex_wake_op: syz.1.390 tries to shift op by 144; fix this program [ 225.388936][ T6113] loop2: detected capacity change from 0 to 1024 [ 225.498042][ T6113] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 225.563445][ T6113] EXT4-fs (loop2): inline encryption not supported [ 225.808778][ T6113] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 226.229917][ T6132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.238825][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.299971][ T6132] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 226.828415][ T6145] loop7: detected capacity change from 0 to 256 [ 226.971360][ T6145] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xa81a85aa, utbl_chksum : 0xe619d30d) [ 228.302124][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 228.552163][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 228.672753][ T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 228.853443][ T21] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 228.873019][ T21] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 228.881247][ T21] usb 7-1: Product: syz [ 228.916276][ T21] usb 7-1: Manufacturer: syz [ 228.920925][ T21] usb 7-1: SerialNumber: syz [ 228.957365][ T21] usb 7-1: config 0 descriptor?? [ 228.992521][ T6177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.012864][ T21] hub 7-1:0.0: bad descriptor, ignoring hub [ 229.018821][ T21] hub: probe of 7-1:0.0 failed with error -5 [ 229.445577][ T21] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 229.693230][ T6203] udc-core: couldn't find an available UDC or it's busy [ 229.700231][ T6203] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 229.782802][ T21] usb 3-1: not running at top speed; connect to a high speed hub [ 229.803077][ T4232] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 229.873014][ T21] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 230.052614][ T21] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 230.072255][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.096104][ T21] usb 3-1: Product: syz [ 230.100325][ T21] usb 3-1: Manufacturer: syz [ 230.112268][ T21] usb 3-1: SerialNumber: syz [ 230.172598][ T4232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.204509][ T4232] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.223265][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.237462][ T6220] udc-core: couldn't find an available UDC or it's busy [ 230.257759][ T6237] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 230.276219][ T4232] usb 8-1: config 0 descriptor?? [ 230.281752][ T6220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.393129][ T6202] udc-core: couldn't find an available UDC or it's busy [ 230.409761][ T6202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.423337][ T6202] udc-core: couldn't find an available UDC or it's busy [ 230.430984][ T6243] futex_wake_op: syz.1.414 tries to shift op by 144; fix this program [ 230.450866][ T6202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.476182][ T6202] udc-core: couldn't find an available UDC or it's busy [ 230.492414][ T6202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.500844][ T6202] udc-core: couldn't find an available UDC or it's busy [ 230.516796][ T6202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.533511][ T6202] udc-core: couldn't find an available UDC or it's busy [ 230.540765][ T6202] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 230.616582][ T21] usb 3-1: USB disconnect, device number 4 [ 230.622800][ T4232] usbhid 8-1:0.0: can't add hid device: -71 [ 230.628823][ T4232] usbhid: probe of 8-1:0.0 failed with error -71 [ 230.659756][ T4232] usb 8-1: USB disconnect, device number 2 [ 230.673971][ T1106] usb 7-1: USB disconnect, device number 2 [ 230.882455][ T1106] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 231.140420][ T4232] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 231.393479][ T1109] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 231.602251][ T1106] usb 7-1: device descriptor read/all, error -71 [ 231.802967][ T1109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.821531][ T1109] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 231.846879][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.867924][ T1109] usb 3-1: config 0 descriptor?? [ 231.873212][ T4232] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.873261][ T4232] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 231.873287][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.904403][ T4232] usb 8-1: config 0 descriptor?? [ 231.942970][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.992097][ T1106] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 232.016074][ T6277] device bridge_slave_1 left promiscuous mode [ 232.028485][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.312997][ T1109] usbhid 3-1:0.0: can't add hid device: -71 [ 232.319049][ T1109] usbhid: probe of 3-1:0.0 failed with error -71 [ 232.542542][ T1106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.627020][ T1106] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.821055][ T1106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.099601][ T1106] usb 7-1: config 0 descriptor?? [ 233.104994][ T4232] aiptek 8-1:0.0: Aiptek using 400 ms programming speed [ 233.145250][ T4232] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input6 [ 233.502441][ T1106] usbhid 7-1:0.0: can't add hid device: -71 [ 233.508486][ T1106] usbhid: probe of 7-1:0.0 failed with error -71 [ 233.562391][ T1106] usb 7-1: USB disconnect, device number 4 [ 233.764512][ T4762] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 234.015118][ T1106] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 234.132578][ T4762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.174169][ T4762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.242965][ T1109] usb 3-1: USB disconnect, device number 5 [ 234.256027][ T4762] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.306128][ T4762] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.320669][ T4762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.346668][ T4762] usb 4-1: config 0 descriptor?? [ 234.382299][ T1106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.425229][ T1106] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 234.455648][ T1106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.487151][ T4232] usb 8-1: USB disconnect, device number 3 [ 234.493090][ C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 234.528906][ T1106] usb 7-1: config 0 descriptor?? [ 234.598605][ T6318] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 234.652253][ T1106] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 234.679884][ T1106] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input7 [ 234.736076][ T1106] usb 7-1: USB disconnect, device number 5 [ 234.742054][ C1] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 234.837925][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.856967][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.869755][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.878885][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.892073][ T1109] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 234.895237][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.913538][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.921181][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.935824][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.944951][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.957609][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.968292][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.980922][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 234.990041][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 235.002007][ T4232] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 235.016123][ T4762] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 235.026045][ T4762] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 235.050699][ T4762] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 235.162140][ T1109] usb 3-1: Using ep0 maxpacket: 32 [ 235.162175][ T1106] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 235.180479][ T4234] usb 4-1: USB disconnect, device number 3 [ 235.302677][ T1109] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.319456][ T1109] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.338622][ T1109] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 235.348061][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.365452][ T1109] usb 3-1: config 0 descriptor?? [ 235.376003][ T4232] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.388661][ T4232] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.398912][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.417542][ T4232] usb 8-1: config 0 descriptor?? [ 235.419638][ T1109] hub 3-1:0.0: bad descriptor, ignoring hub [ 235.432266][ T1106] usb 7-1: Using ep0 maxpacket: 8 [ 235.448973][ T1109] hub: probe of 3-1:0.0 failed with error -5 [ 235.464430][ T4232] pwc: Askey VC010 type 2 USB webcam detected. [ 235.474073][ T1109] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 235.554142][ T1106] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 235.562569][ T1106] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.572665][ T1106] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.589118][ T1106] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.599355][ T1106] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.618698][ T1106] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.628067][ T1106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.692137][ T4232] pwc: send_video_command error -71 [ 235.697408][ T4232] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 235.710263][ T4232] Philips webcam: probe of 8-1:0.0 failed with error -71 [ 235.741686][ T4232] usb 8-1: USB disconnect, device number 4 [ 236.068868][ T6357] udc-core: couldn't find an available UDC or it's busy [ 236.145080][ T6322] udc-core: couldn't find an available UDC or it's busy [ 236.155724][ T6357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.174099][ T6322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.216182][ T6322] udc-core: couldn't find an available UDC or it's busy [ 236.255702][ T1106] usb 7-1: GET_CAPABILITIES returned 0 [ 236.261252][ T1106] usbtmc 7-1:16.0: can't read capabilities [ 236.278123][ T6322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.441254][ T6367] tipc: Enabling of bearer rejected, failed to enable media [ 236.471263][ T6367] device syzkaller0 entered promiscuous mode [ 236.485909][ T6367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 236.536323][ T6322] udc-core: couldn't find an available UDC or it's busy [ 236.555601][ T6322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 236.573458][ T13] usb 7-1: USB disconnect, device number 6 [ 236.612108][ T4232] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 236.928099][ T6379] loop2: detected capacity change from 0 to 512 [ 236.984594][ T4232] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.999928][ T6379] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.432: iget: bad i_size value: 38620345925642 [ 237.019422][ T6379] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.432: couldn't read orphan inode 15 (err -117) [ 237.039799][ T4232] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.049238][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.063884][ T6379] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.082153][ T4762] usb 3-1: USB disconnect, device number 6 [ 237.112343][ T4232] usb 8-1: config 0 descriptor?? [ 237.194799][ T4232] pwc: Askey VC010 type 2 USB webcam detected. [ 237.237688][ T6388] EXT4-fs (loop2): shut down requested (1) [ 237.315170][ T4232] pwc: send_video_command error -71 [ 237.325249][ T4232] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 237.353692][ T6391] loop3: detected capacity change from 0 to 256 [ 237.370253][ T4232] Philips webcam: probe of 8-1:0.0 failed with error -71 [ 237.407002][ T4232] usb 8-1: USB disconnect, device number 5 [ 237.416839][ T6391] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa81a85aa, utbl_chksum : 0xe619d30d) [ 237.452060][ T13] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 239.567790][ T6410] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 239.632556][ T13] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.649402][ T13] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.661365][ T13] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.684965][ T13] usb 7-1: config 1 interface 0 has no altsetting 0 [ 239.982693][ T13] usb 7-1: string descriptor 0 read error: -22 [ 239.998066][ T13] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.008076][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.079549][ T4762] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 240.312235][ T13] usbhid 7-1:1.0: can't add hid device: -71 [ 240.318407][ T13] usbhid: probe of 7-1:1.0 failed with error -71 [ 240.322595][ T4762] usb 8-1: Using ep0 maxpacket: 8 [ 240.354942][ T13] usb 7-1: USB disconnect, device number 7 [ 240.442145][ T4762] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 240.450330][ T4762] usb 8-1: config 6 has no interface number 0 [ 240.456893][ T4762] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 240.467513][ T4762] usb 8-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 240.482087][ T4238] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 240.632197][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 240.643221][ T4762] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 240.653018][ T4762] usb 8-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 240.661143][ T4762] usb 8-1: Product: syz [ 240.665842][ T4762] usb 8-1: Manufacturer: syz [ 240.670463][ T4762] usb 8-1: SerialNumber: syz [ 240.712810][ T4762] hso 8-1:6.2: Failed to find INT IN ep [ 240.722204][ T4238] usb 4-1: Using ep0 maxpacket: 32 [ 240.754172][ T13] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 240.842169][ T4238] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 240.850452][ T4238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.860799][ T4238] usb 4-1: config 0 has no interface number 0 [ 240.918845][ T6404] udc-core: couldn't find an available UDC or it's busy [ 240.926494][ T6404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 240.966092][ T6431] tipc: Enabling of bearer rejected, failed to enable media [ 240.992216][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.007162][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.016710][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.025192][ T4238] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 241.037693][ T23] usb 3-1: config 0 descriptor?? [ 241.043210][ T4238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.051830][ T4238] usb 4-1: Product: syz [ 241.056410][ T4238] usb 4-1: Manufacturer: syz [ 241.061692][ T4238] usb 4-1: SerialNumber: syz [ 241.078316][ T4238] usb 4-1: config 0 descriptor?? [ 241.133855][ T4238] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 241.143560][ T6404] udc-core: couldn't find an available UDC or it's busy [ 241.150536][ T6404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 241.165734][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.192186][ T13] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 241.200973][ T6404] udc-core: couldn't find an available UDC or it's busy [ 241.213054][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.222377][ T6404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 241.231521][ T6404] udc-core: couldn't find an available UDC or it's busy [ 241.239110][ T13] usb 7-1: config 0 descriptor?? [ 241.248833][ T6404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 241.260208][ T4762] usb 8-1: USB disconnect, device number 6 [ 241.352232][ T4238] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 241.360733][ T4238] quatech2: probe of 4-1:0.51 failed with error -8 [ 241.394421][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 241.400451][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 241.414109][ T23] usb 3-1: USB disconnect, device number 7 [ 241.562912][ T4762] usb 4-1: USB disconnect, device number 4 [ 241.622250][ T13] usbhid 7-1:0.0: can't add hid device: -71 [ 241.628284][ T13] usbhid: probe of 7-1:0.0 failed with error -71 [ 241.643906][ T13] usb 7-1: USB disconnect, device number 8 [ 241.869553][ T6451] loop7: detected capacity change from 0 to 512 [ 241.943339][ T6451] EXT4-fs (loop7): Mount option "dioread_nolock" incompatible with ext2 [ 241.992181][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 242.392542][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.494163][ T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 242.716473][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.781467][ T6461] loop3: detected capacity change from 0 to 256 [ 242.805169][ T23] usb 3-1: config 0 descriptor?? [ 242.910345][ T6461] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xa81a85aa, utbl_chksum : 0xe619d30d) [ 242.931786][ T6451] loop7: detected capacity change from 0 to 512 [ 242.938287][ T13] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 243.992344][ T13] usb 7-1: device descriptor read/all, error -71 [ 244.074581][ T6477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.083550][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.116639][ T6469] udc-core: couldn't find an available UDC or it's busy [ 244.134649][ T6477] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 244.144758][ T6469] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 244.252280][ T23] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 244.260825][ T6484] tipc: Enabling of bearer rejected, failed to enable media [ 244.270489][ T23] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 244.382956][ T6484] device syzkaller0 entered promiscuous mode [ 244.431858][ T6484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 244.872015][ C1] ================================================================================ [ 244.881685][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 244.890311][ C1] index 547 is out of range for type 'const int[34]' [ 244.897023][ C1] CPU: 1 PID: 6491 Comm: syz.3.456 Not tainted syzkaller #0 [ 244.904347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.914446][ C1] Call Trace: [ 244.917947][ C1] [ 244.920826][ C1] dump_stack_lvl+0x188/0x250 [ 244.925563][ C1] ? show_regs_print_info+0x20/0x20 [ 244.930783][ C1] ? load_image+0x400/0x400 [ 244.935305][ C1] ubsan_epilogue+0xa/0x30 [ 244.939734][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 244.945470][ C1] aiptek_irq+0x1eaa/0x28f0 [ 244.949998][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 244.955392][ C1] dummy_timer+0x880/0x30b0 [ 244.959929][ C1] ? mark_lock+0x94/0x320 [ 244.964299][ C1] ? dummy_free_streams+0x530/0x530 [ 244.969525][ C1] ? dummy_free_streams+0x530/0x530 [ 244.974827][ C1] call_timer_fn+0x17b/0x540 [ 244.979450][ C1] ? dummy_free_streams+0x530/0x530 [ 244.984674][ C1] ? __run_timers+0x800/0x800 [ 244.989398][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.994630][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 244.999858][ C1] ? dummy_free_streams+0x530/0x530 [ 245.005209][ C1] __run_timers+0x53e/0x800 [ 245.009761][ C1] ? detach_timer+0x2b0/0x2b0 [ 245.014457][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 245.020467][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 245.025333][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 245.030645][ C1] run_timer_softirq+0x63/0xf0 [ 245.035431][ C1] handle_softirqs+0x339/0x830 [ 245.040220][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 245.045087][ C1] ? do_softirq+0x210/0x210 [ 245.049618][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 245.054925][ C1] __irq_exit_rcu+0x13b/0x230 [ 245.059619][ C1] ? irq_exit_rcu+0x20/0x20 [ 245.064166][ C1] irq_exit_rcu+0x5/0x20 [ 245.068427][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 245.074078][ C1] [ 245.077021][ C1] [ 245.079966][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 245.085977][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 245.092495][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 4f 9d 8b f7 65 8b 05 70 86 3b 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 245.112119][ C1] RSP: 0018:ffffc900039075c0 EFLAGS: 00000206 [ 245.118211][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 577cad2042642500 [ 245.126228][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: 0000000000000001 [ 245.134210][ C1] RBP: ffffc90003907650 R08: ffffffff901d8177 R09: 1ffffffff203b02e [ 245.142194][ C1] R10: dffffc0000000000 R11: fffffbfff203b02f R12: dffffc0000000000 [ 245.150178][ C1] R13: 0000000000000000 R14: ffff888029fcd6c0 R15: 1ffff92000720eb8 [ 245.158181][ C1] ? _raw_spin_unlock+0x40/0x40 [ 245.163060][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 245.168117][ C1] __wake_up_sync_key+0x128/0x190 [ 245.173166][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 245.179163][ C1] ? sock_load_diag_module+0x130/0x130 [ 245.184650][ C1] __unix_dgram_recvmsg+0x4c0/0xd90 [ 245.189875][ C1] ? unix_unhash+0x10/0x10 [ 245.194309][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.199528][ C1] ? mark_lock+0x94/0x320 [ 245.203886][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 245.208940][ C1] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 245.214327][ C1] ____sys_recvmsg+0x2cd/0x5e0 [ 245.219118][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 245.224172][ C1] ? import_iovec+0x6f/0xa0 [ 245.228693][ C1] ___sys_recvmsg+0x21a/0x5c0 [ 245.233394][ C1] ? __sys_recvmsg+0x280/0x280 [ 245.238187][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 245.243237][ C1] ? __might_fault+0x4c/0x110 [ 245.247927][ C1] ? __might_fault+0xb3/0x110 [ 245.252618][ C1] do_recvmmsg+0x382/0x850 [ 245.257059][ C1] ? __sys_recvmmsg+0x290/0x290 [ 245.261933][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 245.266983][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 245.272027][ C1] ? do_recvmmsg+0x850/0x850 [ 245.276639][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.281858][ C1] do_syscall_64+0x4c/0xa0 [ 245.286288][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.290984][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.295679][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.301587][ C1] RIP: 0033:0x7f6534effe59 [ 245.306047][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.325682][ C1] RSP: 002b:00007f6533138028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 245.334110][ C1] RAX: ffffffffffffffda RBX: 00007f6535179090 RCX: 00007f6534effe59 [ 245.342093][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 245.350077][ C1] RBP: 00007f6534f95d6f R08: 0000000000000000 R09: 0000000000000000 [ 245.358056][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 245.366038][ C1] R13: 00007f6535179128 R14: 00007f6535179090 R15: 00007ffc9ce083c8 [ 245.374035][ C1] [ 245.377066][ C1] ================================================================================ [ 245.386364][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 245.393564][ C1] CPU: 1 PID: 6491 Comm: syz.3.456 Not tainted syzkaller #0 [ 245.400870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 245.410933][ C1] Call Trace: [ 245.414239][ C1] [ 245.417093][ C1] dump_stack_lvl+0x188/0x250 [ 245.421787][ C1] ? show_regs_print_info+0x20/0x20 [ 245.427002][ C1] ? load_image+0x400/0x400 [ 245.431535][ C1] panic+0x2e5/0x810 [ 245.435448][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 245.439979][ C1] check_panic_on_warn+0x80/0xa0 [ 245.444929][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 245.450668][ C1] aiptek_irq+0x1eaa/0x28f0 [ 245.455201][ C1] __usb_hcd_giveback_urb+0x35f/0x520 [ 245.460592][ C1] dummy_timer+0x880/0x30b0 [ 245.465125][ C1] ? mark_lock+0x94/0x320 [ 245.469494][ C1] ? dummy_free_streams+0x530/0x530 [ 245.474709][ C1] ? dummy_free_streams+0x530/0x530 [ 245.479919][ C1] call_timer_fn+0x17b/0x540 [ 245.484523][ C1] ? dummy_free_streams+0x530/0x530 [ 245.489730][ C1] ? __run_timers+0x800/0x800 [ 245.494426][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 245.499639][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.504856][ C1] ? dummy_free_streams+0x530/0x530 [ 245.510068][ C1] __run_timers+0x53e/0x800 [ 245.514597][ C1] ? detach_timer+0x2b0/0x2b0 [ 245.519291][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 245.525293][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 245.530168][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 245.535568][ C1] run_timer_softirq+0x63/0xf0 [ 245.540351][ C1] handle_softirqs+0x339/0x830 [ 245.545132][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 245.550000][ C1] ? do_softirq+0x210/0x210 [ 245.554608][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 245.559822][ C1] __irq_exit_rcu+0x13b/0x230 [ 245.564525][ C1] ? irq_exit_rcu+0x20/0x20 [ 245.569073][ C1] irq_exit_rcu+0x5/0x20 [ 245.573348][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 245.579023][ C1] [ 245.581976][ C1] [ 245.584919][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 245.590944][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 245.597491][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 4f 9d 8b f7 65 8b 05 70 86 3b 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 245.617108][ C1] RSP: 0018:ffffc900039075c0 EFLAGS: 00000206 [ 245.623189][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 577cad2042642500 [ 245.631292][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b3180 RDI: 0000000000000001 [ 245.639288][ C1] RBP: ffffc90003907650 R08: ffffffff901d8177 R09: 1ffffffff203b02e [ 245.647287][ C1] R10: dffffc0000000000 R11: fffffbfff203b02f R12: dffffc0000000000 [ 245.655280][ C1] R13: 0000000000000000 R14: ffff888029fcd6c0 R15: 1ffff92000720eb8 [ 245.663279][ C1] ? _raw_spin_unlock+0x40/0x40 [ 245.668156][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 245.673202][ C1] __wake_up_sync_key+0x128/0x190 [ 245.678244][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 245.684260][ C1] ? sock_load_diag_module+0x130/0x130 [ 245.689745][ C1] __unix_dgram_recvmsg+0x4c0/0xd90 [ 245.694967][ C1] ? unix_unhash+0x10/0x10 [ 245.699405][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.704632][ C1] ? mark_lock+0x94/0x320 [ 245.708980][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 245.714019][ C1] ? unix_dgram_sendmsg+0x18a0/0x18a0 [ 245.719406][ C1] ____sys_recvmsg+0x2cd/0x5e0 [ 245.724197][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 245.729252][ C1] ? import_iovec+0x6f/0xa0 [ 245.733774][ C1] ___sys_recvmsg+0x21a/0x5c0 [ 245.738479][ C1] ? __sys_recvmsg+0x280/0x280 [ 245.743276][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 245.748318][ C1] ? __might_fault+0x4c/0x110 [ 245.753011][ C1] ? __might_fault+0xb3/0x110 [ 245.757701][ C1] do_recvmmsg+0x382/0x850 [ 245.762144][ C1] ? __sys_recvmmsg+0x290/0x290 [ 245.767018][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 245.772064][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 245.777107][ C1] ? do_recvmmsg+0x850/0x850 [ 245.781713][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 245.786933][ C1] do_syscall_64+0x4c/0xa0 [ 245.791365][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.796061][ C1] ? clear_bhb_loop+0x30/0x80 [ 245.800752][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 245.806656][ C1] RIP: 0033:0x7f6534effe59 [ 245.811086][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.830716][ C1] RSP: 002b:00007f6533138028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 245.839154][ C1] RAX: ffffffffffffffda RBX: 00007f6535179090 RCX: 00007f6534effe59 [ 245.847145][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 245.855131][ C1] RBP: 00007f6534f95d6f R08: 0000000000000000 R09: 0000000000000000 [ 245.863115][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 245.871098][ C1] R13: 00007f6535179128 R14: 00007f6535179090 R15: 00007ffc9ce083c8 [ 245.879101][ C1] [ 245.882448][ C1] Kernel Offset: disabled [ 245.887000][ C1] Rebooting in 86400 seconds..