last executing test programs: 14m18.677871331s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x8e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) stat(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x4e20, 0x14, 0x4e21, 0x0, 0x2, 0x80, 0xc0, 0x32, r6, r7}, {0x4, 0x5, 0x8, 0xffffffffffffffff, 0x3, 0x1, 0x8, 0x2}, {0x8001, 0x2, 0xfffffffffffff2b5, 0x5}, 0x9, 0x6e6bb9, 0x3, 0x0, 0x1, 0x1}, {{@in6=@private0, 0x4d6, 0x32}, 0xa, @in=@empty, 0x3506, 0x3, 0x3, 0xe4, 0x5, 0x49374274, 0x5}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket$inet6(0xa, 0x1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 14m15.995789809s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, 0x0, 0x3a) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_open_dev$rtc(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYBLOB='\x00'/13, @ANYBLOB], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) 14m0.856403607s ago: executing program 32 (id=9): mkdirat(0xffffffffffffff9c, 0x0, 0x3a) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_open_dev$rtc(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYBLOB='\x00'/13, @ANYBLOB], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) 12m53.846379226s ago: executing program 5 (id=115): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m52.285187521s ago: executing program 5 (id=118): creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 12m48.413179877s ago: executing program 5 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) readv(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x1, 0x7}}) sendmsg$nl_xfrm(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nogrpid}, {@dioread_lock}, {@noinit_itable}, {@nodioread_nolock}]}, 0x1, 0x635, &(0x7f0000000bc0)="$eJzs3c9vG1UeAPDv2Pmd3U0arXa3e9iNtNptpd0mTdquqtVKtELiVFXlxwGJC6ZJq1L3h5ogSClqIpULEuLCAYkTB8qB/wEqIXHiH+DAhRMqqhDqBVSB0Thj4yaexA6x3cafj+T6vXmTeW+SfPsmz+/NBNC3ptN/ChH7I+JqEjHVUDYQWeH0+n73v79xNn0lUak8+10SN24mq43HSrL38YhIC36aiOTziJgqbq53aeX6xVK5vHgty88uX7o6u7Ry/dCFS6Xzi+cXL8//d/74saPHjs8dbviqc0+1e377GtKnbr386sRbp1/48P0HydxHX51O4kS90el5tXvs7UzHdFQyjdvT7+vx3a6sR4r135NfJRs3bPRkBxtEW2o/v8GI+HNMRLHhpzkRbz7d08YBHVVJot5HAf0mEf/Qp2rXAbW/7Vv7O3iow1clQDfcOxnxr3r8D0bEevyfmM/GBmOkOjYwdj95aJwniYjDu1B/WscXn52+lb6iQ+NwQHOra8PZEPjG/j+pxuZkjFRzY/cLD8V/IRvGnczGD5/ZupqJvILpDfms/uGdng/QutW1iPhLs+v/7eP/xew93f7SDuvPiX8AAAAAAABgB+6cjIj/NPv8r1Cf/zPUZP7PeESc2IX6t//8r3B3F6oBmrh3MuL/Tef/Fmq7TBaz3O+r8wEGk3MXyouHI+IPEXEwBofT/FzjQT9u+OqIOPT21Ht59TfO/0tfaf21uYBZO+4ObJgNtFBaLu3CqUPfu7cW8deB/Pk/af+fNOn/0/i+2mIdU/+8fSavbPv4Bzql8kHEgab9f1LfJ9n6/hyz1euB2dpVwWZ/e/2dT/LqF//QO2n/P7Z1/A8njffrWWrv+EMRcWRloJJXvtPr/6HkuWI0rER8rbS8fG0uYig5tXn7fHtthsfJSOu7vhER1XioxUsa/wf/sfX4X/36vyEOR7N7fLXiTz+Pf51Xpv+H3knjf2Hr/n/y4f6//cT87clP8+o/01L/f7Tapx/Mthj/g621GqC9bicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPI4KEfG7SAoz9XShMDMTMR4Rf4yxQvnK0vK/z1155fJCWlZ9/n+h9qTfifV8Unv+/2RDfn5D/khE7IuId4uj1fzM2SvlhV6fPAAAAAAAAAAAAAAAAAAAADwixtffNq3/T31T7GnTgG4YyN7FO/SfgV43AOgZ8Q/9ayfxP9SBdgDdlx//PzyoVHW1OUAXtdr/V252uCFA1+3w738fF8AeYPwP+tVga7uNdLodQC/o/wEAAAAAYE/Z9/c7XyYRsfq/0eorGqb21z8YHO1V64BOKuQVDHe3HUD3mcML/cvUH+hfLU7+BfawpJ76seli//zZ/0lnGgQAAAAAAAAAAAAAbHJgfwvr/4E9KXf9P7DnNVv/n93up9nCHrcLgD3E+n/oX23c5ssT/2GPql3s5z3p3/p/AAAAAAAAAAAAAHgEjFy/WCqXF68trbScuNnOzr898W3kFT1RS6x1oRmV4u4cZ7XUvW/dY54YjIgNRZWJ9V/bi6Xy89Hd9tQipht1DXWxrpxEj/4/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvklAAD///ouKM0=") 12m39.478515147s ago: executing program 5 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m38.226108069s ago: executing program 5 (id=132): creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 12m37.101111602s ago: executing program 5 (id=136): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd88802917a3fd447c555a145ba9866309516e9c115a50c1b6bc191ce9cabdd5df2c69be704bd72ccb881cc63cb7cb372f95141c4d5c40010aeafe8d3b08956fbacad03"], 0x1, 0x5517, &(0x7f0000000d40)="$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") symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f00000002c0)=@ethtool_rxfh_indir={0x39}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000200)={[{@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@time_offset={'time_offset', 0x3d, 0x5d}}, {@numtail}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uni_xlateno}, {@utf8no}, {@utf8no}]}, 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") 12m21.937513242s ago: executing program 33 (id=136): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f0000000d40)="$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") symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bond_slave_0\x00', &(0x7f00000002c0)=@ethtool_rxfh_indir={0x39}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000200)={[{@numtail}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@time_offset={'time_offset', 0x3d, 0x5d}}, {@numtail}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@uni_xlateno}, {@utf8no}, {@utf8no}]}, 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") 10m57.384993916s ago: executing program 4 (id=303): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 10m57.043951511s ago: executing program 4 (id=304): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, "cb933c", 0x0, 0x32, 0x1, @private0, @local}}}}, 0x0) 10m56.719453365s ago: executing program 4 (id=308): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 10m56.37706216s ago: executing program 4 (id=310): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d63703835302c6e616d65aa7d04743d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c666d61736b3f30303030303430303030303030303030323030383030332c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x1520, &(0x7f0000002280)="$eJzs3Au4TtXWOPAx5pxr23bS204umznnWLzJZdpJkkuSXJIkSZLcEpJ2ciQhscktaZOE5LJJLpuQ3GKn7X6/XxKSpJ0kIbkl8//s8Hc6db5zznf6ju/59vg9z3rM8a415hrrHet937XWg+86D6nRqGbVBkQE/xa8+EcyAMQCwAAAuA4AAgAoG182Pmt9TonJ/95O2J/rkbSrXQG7mrj/2Rv3P3vj/mdv3P/sjfufvXH/szfuf/bG/WcsO9s8rcD1vGTfhZ//Z2f8+/9/SGapMV+tLXVjF4CYfzaF+5+9cf//zwr+mY24/9kb9z+7ir3aBbD/Bfjznx3k+LtruP/ZG/efsezsaj9/vtoLRLL3e3C1zz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY9nDGX+FAoDL46tdF2OMMcYYY4wxxv48PsfVroAxxhhjjDHGGGP/8xAESFAQQAzkgFjICXEgAOBayA3XQQSuh3i4AfLAjZAX8kF+KAAJUBAKgQYDFghCKAxFIAo3QVG4GYpBcSgBJcFBKUiEW6A03Apl4DYoC7dDObgDykMFqAiV4E6oDHdBFbgbqsI9UA2qQw2oCfdCLbgPasP9UAcegLrwINSDh6A+PAwN4BFoCI9CI3gMGsPj0ASaQjNoDi3+W/kvQXd4GXpAT0iGXtAbXoE+0Bf6QX8YAK/CQHgNBsHrkAKDYQi8AUPhTRgGb8FwGAEj4W0YBe/AaBgDY2EcpMJ4mADvwkR4DybBZJgCUyENpsF0eB9mwEyYBR/AbPgQ5sBcmAfzYQF8BAthEaTDx7AYPoEMWAJLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHbATPoVd8Bnshj2wFz6HffDFv5h/+m/yuyAgoECBChXGYAzGYizGYRzmwlyYG3NjBCMYj/GYB/NgXsyL+TE/JmACFsJCaNAgIWFhLIxRjGJRLIrFsBiWwBLo0GEiJmJpvBXLYBksi2WxHJbD8lgBK2AlrISVsTJWwSpYFatiNayGNbAG3ov3Yi+sjbWxDtbBulj38uMpbIANsCE2xEbYCBtjY2yCTbAZNsMW2AJbYktsha2wDbbBttgW22E7TMIkbI/tsQN2wI7YETthJ+yMnbELdsWumS/lAHwZX8aeWE30wt7YG/tgSo5+2B/746s4EF/D1/B1TMHBOATfwDfwTRyGp3A4jsCROBIri3dwNI5BEuMwFVNxAk7AiTgRJ+FknIxTMQ2n4XScjjNwJs7ED3A2fogf4lyci/NxAS7AhbgI0zEdF+NpzMAluBSX4XJcgctxFa7GVbgW1+Fa3IAbcBNuwi24BbfhNtyBO/BTVAD4Ge7BPZiC+3Af7sf9eAAP4EE8iJmYiYfwEB7Gw3gEj+BRPIrH8DiewON4Ek/iKTyNZ/AMnsNzeB5fSPim4afF16SAyKKEEjEiRsSKWBEn4kQukUvkFrlFREREvIgXeUQekVfkFflFfpEgEkQhUUgYYQSJMAYARFRERVFRVBQTxQBECeGEE4kiUZQWpUUZUUaUFbeLcuIOUV5UEK1dJVFJVBZtXBVxt6gqqopqorqoIWqKmqKWqCVqi9qijqgj6oq6op54SNQXvbAfPiKyOtNIDMbGYgg2EU2FvPQN1lIMw1aitWgjnhIjcDi2Ey1dknhWtBejsYP4ixiDz4tOYhx2Fi+KLqKr6CZeEt1FK9dD9BSTsJfoLaZiH9FX9BP9xQysLj7A2TlriNdFihgshog3xHx8UwwTb4nhYoQYKd4Wo8Q7YrQYI8aKcSJVjBcTxLtionhPTBKTxRQxVaSJaWK6eF/MEDPFLPGBmC0+FHPEXDFPzBcLxEdioVgk0sXHYrH4RGSIJWKpWCaWixVipVglVos1Yq1YJ9aLDWKj2CQ2iy1iq9gmtosdYqf4VOwSn4ndYo/YKz4X+8QXYr/4UhwQX4mD4muRKb4Rh8S34rD4ThwR34uj4gdxTBwXJ8SP4qT4SZwSp8UZcVacEz+L8+IXcUF4ARKlkFIqGcgYmUPGypwyTl4jc8ng0rt7vYyXN8g88kaZV+aT+WUBmSALykJSSyOtJBnKwrKIjMqbZFF5sywmi8sSsqR0spRMlLfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzcRzVZXdaQNeW9Mhnuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEYmyWdle+kvnSLPy07yBdlZvii7yK6ym/xFXpBe9pA9JfQC2Vu+IvvIvrKf7C8HyFflQPmaHCRflylysBwi35BD5ZtymHxLDpcj5Ej5thwl35Gj5Rg5Vo6TqXK8nCDflRPle3KSnCynyKkyTU6T/S7NNEvKf5j/7h/kD/p175vkZrlFbpXb5Ha5Q+6Un8pdcpfcLXfLvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7Pyh/lSfmTPCVPy9PyrDwnz8nzl94DUKiEkkqpQMWoHCpW5VRx6hqVS12rcqvrVERdr+LVDSqPulHlVflUflVAJaiCqpDSyiirSIWqsCqiouomvHTCqBKqpHKqlEpUt/wr+aqoulkVU8V/k3+5vuS/U18L1UK1VC1VK9VKtVFtVFvVVrVT7VSSSlLtVXvVQXVQHVVH1Ul1Up1VZ9VFdVHdVDfVXXVXPVQPlaySVW/1iuqj+qp+qr8aoF5VA9VANUgNUikqRQ1RQ9RQNVQNU8PUcDVcjVQj1Sg1So1Wo9VYNValqlQ1QU1QE9VENUlNUlPUFJWm0tR0NV3NUDPULDVLzVaz1Rw1R81T89QCtUAtVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7VK71G61W+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyLrsC0QgAhWoICaICWKD2CAuiAtyBbmC3EHuIBJEgvggPsgT3BjkDfIF+YMCQUJQMCgU6MAENhCXmh4NbgqKBjcHxYLiQYmgZOCCUkFicEtQOrg1KBPcFpQNbg/KBXcE5YMKQcWgUnBnUDm4K6gS3B1UDe4JqgXVgxpBzeDeoFZwX1A7uD+oEzwQ1A0eDOoFDwX1g4eDBsEjQcPg0aBR8FjQOHg8aBI0DZoFzYMWf+r83p/K96TroXvqZN1L99av6D66r+6n++sB+lU9UL+mB+nXdYoerIfoN/RQ/aYept/Sw/UIPVK/rUfpd/RoPUaP1eN0qh6vJ+h39UT9np6kJ+speqpO09P0dP2+nqFn6ln6Az1bf6jn6Ll6np6vF+iP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/RO/anepT/Tu/UevVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/oH/VJ/ZM+pU/rM/qsPqd/1uf1L/qC9lkX91k/70YZZWJMjIk1sSbOxJlcJpfJbXKbiImYeBNv8pg8Jq/Ja/Kb/CbBJJhCppDJQoZMYVPYRE3UFDVFTTFTzJQwJYwzziSaRFPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDuTZJJMe9PedDAdTEfT0XQynUxn09l0MV1MN9PNdDfdTQ/TwySbZNPb9DZ9TB/Tz/QzA8wAM9AMNIPMIJNiUswQM8QMNUPNMDPMDDcjzMisC1XzjhltxpixZpxJNalmgplgJpqJZpKZZKaYKSbNpJnpZrqZYWaYWWaWmW1mmzlmjpln5pkFZoFZaBaadJNuFpvFJsNkmKVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTabJNIfMIXPYHDZHzBFz1Bw1x8wxc8KcMCfNSXPKnDJnzBlzzuS79HvpTazNaePsNTaXvdbmttfZv43z2wI2wRa0hay2eW2+38TGWlvMFrclbEnrbCmbaG/5XVzeVrAVbSV7p61s77JVfhfXsvfZ2vZ+W8c+YGvae38T17UP2nr2MVsfEcA2tQ1tc9vIPmYb28dtE9vUNrPNbVv7tG1nn7FJ9lnb3j73u3ihXWRX2zV2rV1nd9s99ow9aw/b7+w5+7PtYXvaAfZVO9C+ZgfZ122KHfy7eKR9246y79jRdowda8f9Lp5ip9o0O81Ot+/bGXbm7+IF9iM726bbOXaunWfn/xpn1ZRuP7aL7Sc2wwaw1C6zy+0Ku9Ku+v+1LrMb7Ea7ye6yn9mtdpvdbnfYnZcvhO0eu9d+bvfZL+wh+609YL+yB+0Rm2m/+TXOOr4j9nt71P5gj9nj9oT90Z60P6nL2VnH/qP9xV6w3gIhAUlSFFAM5aBYyklxdA3lomspN11HEbqe4ukGykM3Ul7KR/mpACVQQSpEmgxZIgqpMBWhKN1El8srQSXJUSlKpFuoNN1KZeg2Kku3Uzm6g8pTBapIlehOqkx3URW6m6rSPVSNqlMNqkn3Ui26j2rT/VSHHqC69CDVo4eoPj1MDegRakiPUiN6jBrT49SEmlIzak4t6AlqSU9SK2pNbegpaktPUzt6hpLoWWpPz1EH+gt1pOepE71AnelF6kJdqRu9RN3pZepBPSmZelFveoX6UF/qR/1pAL1KA+k1GkSvUwoNpiH0Bg2lN2kYvUXDaQSNpLdpFL1Do2kMjaVxlErjaQK9SxPpPZpEk2kKTaU0mkbT6X2aQTNpFn1As+lDmkNzaR7NpwX0ES2kRZROH9Ni+oQyaAktpWW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO+pR20We0m/bQXvqc9tEXtJ++pAP0FR2krymTvqFD9C0dpu/oCH3ve9IPdIyO0wn6kU7ST3SKTtMZOkvn6Gc6T7/QBfIEIYYilKEKgzAmzBHGhjnDuPCaMFd4bZh1wkTC68P48IYwT3hjmDfMF+YPC4QJYcGwUKhDE9qQwjAsHBYJo+FNYdHw5rBYWDwsEZYMXVgqTAxvCUuHt4ZlwtvCsuHtYbnwjrB8WCF87IFK4Z1h5fCusEp4d1g1vCesFlYPa4Q1w3vDWuF9Ye3w/rBO+EBYJnwwrBc+FNYPHw4bhI+EDcNHw0bhY2Hj8PGwSdg0bBY2D1uET4QtwyfDVmHrsE34VNg2fDpsFz4TJoXPhu3D535d/+Civ78+OewV9g5fCV8Jvb9fzovOjy6IfhRdGF0UTY9+HF0c/SSaEV0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q3RjdFPW+Zg5w6ISTTrnAxbgcLtbldHHuGpfLXetyu+tcxF3v4t0NLo+70eV1+Vx+V8AluIKukNPOOOvIha6wK+Ki7iZX1N3sirniroQr6Zwr5RJdc9fCtXAt3ZOulWvt2rin3FPuafe0e8Y945517d1zroP7i+vonned3AvuBfei6+K6um7uJdfdjc998TOZ7Hq73q6P6+P6uX5ugBvgBrqBbpAb5FJcihvihrihbqgb5oa54W64G+lGulFulBvtRruxbqxLdalugpvgJrqJbpKb5Ka4KS7Npbnpbrqb4Wa4yjMv7mWOm+PmuXlugVvgFrqsa8Z0t9gtdhkuwy11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XQ73S63y+32112c1O1z+91+d8AdcAfd1y7TfeMOuW/dYfedO+K+d0fdD+6YO+5OuB/dSfeTO+VOuzPurDvnfnbn3S/ugvMuNTI+MiHybmRi5L3IpMjkyJTI1EhaZFpkeuT9yIzIzMisyAeR2ZEPI3MicyPzIvMjCB9FFkYWRdIjH0cWRz6JZESWRJZGlkWWR1ZEvC+4NfSFfREf9Tf5ov5mX8wX9yV8Se98KZ/ob/Gl/a2+jL/Nl/W3+3L+Dl/eV/AV/eO+iW/qm/nmvoV/wrf0T/pWvrVv45/ybf3Tvp1/xif5Z317/5zv4P/iO/rnfSf/gu/sX/RdfFffzb/ku/uXfQ/f0yf7Xr63f8X38X19P9/fD/Cv+oH+NT/Iv+5T/GA/xL/hh/o3/TD/lh/uR/iRMW/7UZdvkWGcT/Xj/QT/rp/o3/OT/GQ/xU/1aX6an+7f9zP8TD/Lf+Bn+w/9HD/Xz/Pz/QL/kV/oF/l0/7Ff7D/xGX7J5YfKfqVf5Vf7NX6tX+fX+w1+o9/kN/stfqvf5rf7HX6n/9Tv8p/53X6P3+s/9/v8F36//9If8F/5g/5rn+m/8Yd+ffr3nT/iv/dH/Q/+mD/uT/gf/Un/kz/lT/sz/qw/53/25/0v/gL/mzXGGGOMsX/K+CtD8ds1Fx/n9/qDHPFXG/cGgGu3Fcj86/VZV5Tr814c9xUJbSMA8GzPzo9cXqpVS05OvrRthoSgyNysG8or+TFwJV4CbeBpSILWUPoP6+8rup6jfzB/9HaAuL/KiYUr8ZX5vwTA5D+Y/4mnRi4sF56J/y/mnwtQrMiVnJxwJV4CbX59vtIayvyd+vO1/Af15/wqFaDVX+XkgivxlfoT4Ul4DpJ+syVjjDHGGGOMMXZRX1Gx4+X7z8t/4/OP7s8T1JWcHHAl/kf354wxxhhjjDHGGLv6nu/a7ZknkpJad/zXB1X+W1n/9KAx/E/NzIM/HHgPcPkVBQD/5oQAWQP5nzyKLf+RfaVc+uj87arlZ30A/zta+WcMrvIXE2OMMcYYY+xPd+Wi/7evq6tVEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlg39J/47sat9jIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtjV9v8CAAD//3K3/hI=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) chdir(0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r7, 0x1, 0x0, @void}, 0x10) 10m53.964746428s ago: executing program 4 (id=316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000070000000100010009000000010000", @ANYBLOB], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002400)=@newtfilter={0x10d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xa, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x10ac, 0x2, [@TCA_FW_POLICE={0x10a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xc, 0x0, 0x6, 0x5, 0x0, 0x1ff, 0x7, 0x2, 0xb6a4, 0x3, 0x38, 0xc, 0x1, 0x33, 0x49a31522, 0x4, 0x3, 0x7fffffff, 0x8, 0x4, 0x9, 0x2, 0x1000, 0x0, 0x1, 0x3, 0x7140945b, 0x2, 0x7, 0x3, 0x3, 0x7, 0x5, 0xfffffffa, 0x0, 0x5, 0x9, 0x9, 0x1, 0x1, 0x7, 0x2, 0xffe, 0x8, 0x9, 0x0, 0x9, 0x1, 0x2b, 0x0, 0x2, 0x1, 0xfffffff7, 0x2, 0x8, 0xd6b, 0xa38f, 0x27b, 0x5ce, 0x7, 0x3, 0x0, 0x800, 0x38c000, 0x401, 0xeb5, 0xfffffffe, 0x80, 0x9, 0x8001, 0x0, 0x8000, 0x5, 0xfffffff7, 0x0, 0x401, 0x7, 0x5, 0x2, 0x0, 0x814, 0x5, 0x3, 0x6, 0x7, 0x10001, 0x3, 0x6, 0x3, 0x79, 0x52, 0x401, 0x3, 0x2, 0x1, 0xc, 0x1, 0x9, 0x400, 0x4, 0x7, 0x9, 0x4, 0x2280, 0x9, 0x6, 0xc, 0x9, 0x1, 0x0, 0x60c, 0x0, 0x6, 0x3, 0x7, 0x7, 0x1, 0x7, 0xb, 0x7f, 0x1, 0x8, 0xb72e, 0xff, 0x0, 0x5, 0x0, 0x2, 0x0, 0xb4, 0x7, 0x7, 0x3, 0x7, 0x5, 0x7, 0x400, 0xfffffff8, 0x7, 0x4, 0x5, 0x3, 0x9a0, 0x3, 0x9, 0x3ff, 0x1, 0x0, 0x3df603f, 0xfffffff7, 0x80000000, 0x7f, 0x7e9, 0x10001, 0xffff, 0xb, 0x6, 0x7f, 0xe, 0x80, 0x9, 0x441, 0x800, 0x401, 0x6, 0x400, 0x9, 0x6, 0x80, 0x5, 0xd6, 0xffffffff, 0x5, 0x200, 0x40, 0xffffff80, 0xffff, 0x3, 0x401, 0x4, 0x9, 0x5, 0x7, 0x6, 0x2, 0x0, 0x4, 0x0, 0x8, 0xfffffff9, 0x6, 0xf, 0x4, 0x1, 0xf, 0x200, 0x6, 0xfffff370, 0x2, 0xffffffff, 0x40, 0x9, 0x4, 0x7, 0x3, 0x6, 0x200, 0xf, 0x3e, 0x0, 0x1ff, 0xf7a5, 0x8, 0xa, 0x5, 0x5, 0xf5f, 0x400, 0x0, 0x5, 0x5, 0xff, 0x4, 0x9, 0x1, 0xd, 0x5, 0x200, 0x4, 0x8000, 0x80000000, 0xb367, 0x7, 0x200, 0x7ff, 0x5, 0x9, 0x10001, 0x10000, 0x0, 0x10, 0xb6c, 0x0, 0x0, 0x7, 0x5, 0x4, 0x5, 0x3, 0x2, 0x3ff, 0x28f735ac, 0x5, 0x7fffffff, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x9a4, 0x2, 0xed1, 0x1, 0x7fffffff, 0x4, 0x1, 0x81, 0x6, 0xffff, 0xc3a6, 0x62, 0xa3800000, 0x6, 0x4, 0xbe, 0x48000000, 0x9, 0x9, 0x8, 0x6, 0x84, 0x9, 0x4, 0x7fffffff, 0x949c, 0x80, 0xb8, 0x200, 0x8000, 0x7, 0x9, 0x8, 0x3, 0x5, 0xfffffffc, 0x101, 0x3f, 0x6, 0xfffffffd, 0x2, 0x5, 0x80, 0x8, 0x6, 0x0, 0x6, 0xc, 0x2, 0x8001, 0xf9, 0x6, 0x0, 0x8000, 0x3ff, 0x889, 0x9, 0x0, 0x8, 0x7, 0x9, 0x9, 0x101, 0x5, 0x3, 0x5, 0x5, 0x8, 0x0, 0x1, 0xf, 0x3, 0x8d58, 0x69, 0xc51, 0x1, 0x3, 0x9, 0x8, 0x3, 0x7, 0xca, 0xfff, 0xff, 0x7, 0x4000, 0x8, 0x9, 0x0, 0x7, 0x0, 0xa5, 0xee0, 0xc55, 0x8, 0x7, 0x2e5, 0x8, 0xaf, 0x8, 0x1ff, 0x9, 0x2, 0x0, 0x1a3c, 0x5, 0x8001, 0xebc, 0x1, 0x6, 0x5, 0x375, 0x948, 0x8, 0x9, 0x53b9, 0xfffffeff, 0x1, 0xcc, 0x1, 0x9, 0x2, 0x1, 0x4be6, 0x9, 0x4, 0xff, 0x2b5, 0x7f, 0x1e88, 0x800, 0x3c, 0x6, 0xa, 0x5c62, 0xfd69, 0xffffff27, 0x12d, 0x3cc, 0x0, 0x0, 0x10000000, 0x3, 0x7, 0x2, 0x7, 0x3, 0x80000001, 0xfff, 0x8, 0x2, 0xffffffff, 0xff, 0x7, 0x1, 0x6, 0xfffffffb, 0x2b, 0x1, 0xffffffff, 0x7, 0x5, 0x2, 0x100, 0x3, 0x4, 0x10000, 0x75, 0xa2, 0x2, 0x7, 0x3, 0x8, 0x5, 0x9, 0x9, 0x5, 0xdd, 0x3, 0x8, 0xa6b, 0x8, 0x1, 0x5, 0x0, 0x6, 0x5, 0x8, 0x0, 0x1, 0x668, 0x4, 0xd11, 0x1ff, 0x2, 0x7, 0x3, 0x4, 0x9, 0x6, 0x7, 0x4, 0x8, 0x1, 0x8, 0xfffffffd, 0xfffffffd, 0xf934, 0x8, 0x9, 0x3, 0x5a, 0xffff, 0x9, 0x1, 0x9, 0x3ff, 0x0, 0x3, 0x8, 0xc, 0x0, 0x8, 0x9, 0x2, 0x0, 0xc, 0x8001, 0x7, 0x10f, 0x9, 0x6, 0x1, 0x101, 0x5, 0xe08b, 0x3, 0x9d1, 0x9, 0xf39, 0x3, 0x6, 0x7, 0xe39, 0x8, 0x1, 0x8, 0x1, 0x6, 0x8, 0x9, 0x3, 0x4, 0x8, 0xe27]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x84, 0x10000003, 0x8, 0x6, 0x2, {0x4, 0x0, 0x4, 0x0, 0x8, 0x2}, {0x4, 0x2, 0x1, 0x3, 0x3, 0x7}, 0x4, 0x4, 0xf}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0xca1f, 0xf138, 0x0, 0x8, 0x0, 0x0, 0x2cf75cf4, 0x819b, 0x462, 0x7, 0x80, 0x1, 0x5, 0x80000001, 0x7, 0xffff8001, 0x5, 0x3ff, 0x2d3d, 0x8, 0x3ff, 0x8, 0x6, 0xd, 0xeb, 0xbdc, 0x9, 0x6716, 0x9, 0x24, 0x6, 0x8, 0x6, 0x5, 0x5, 0x8, 0x8, 0x3, 0x282, 0xfffffff6, 0x81, 0x8, 0xf, 0x1, 0xe5b2, 0x6, 0x2, 0x7, 0x4, 0x5, 0xe, 0x7fff, 0x7bca, 0x3, 0x7, 0x4, 0xee1f, 0x1, 0xfffffffd, 0x6, 0x97, 0x8, 0x61, 0x5, 0x409, 0x9, 0x9, 0x9, 0x8, 0x7, 0xffffff15, 0x7, 0x100, 0x800, 0x3, 0x0, 0x9fec, 0x9, 0xfffffffe, 0x800000, 0x0, 0x5, 0xffffffff, 0x6, 0x4, 0x5, 0x9d, 0x4, 0x7, 0xc, 0x7ff, 0xfffff000, 0x1000, 0x9, 0x9, 0x400, 0x2, 0x0, 0x7, 0xc, 0x3000000, 0x10000, 0x7, 0x1, 0x0, 0x7, 0x3, 0x41, 0xa6f, 0x7ce, 0x0, 0x2, 0x81, 0x401, 0x80000000, 0x3, 0x2, 0x0, 0xffff, 0x7ff, 0x2f36, 0x7ff, 0x6, 0x1, 0xd, 0xfffffffc, 0x3, 0x2, 0xfffffff1, 0x2000000, 0x5, 0x570a, 0x8, 0x100, 0x40, 0x9c5d, 0x4, 0x3b09, 0x3, 0x3, 0x6, 0x7f, 0x36, 0xfffffff7, 0x0, 0xfffffe00, 0x5, 0x1, 0xeb, 0x75e, 0x513c, 0x5, 0x7fffffff, 0x4032, 0x40, 0x9, 0x2, 0x3, 0x1395, 0xd, 0x4, 0x4, 0x6, 0xd7b, 0x6, 0x10000000, 0xe2e4, 0x7, 0x1, 0x10000, 0x8, 0x2, 0x3, 0xc, 0x3, 0x0, 0x4, 0x5, 0xe, 0x2, 0x2d0, 0x9, 0x7, 0x4, 0x0, 0xa9, 0xd, 0x64, 0x7fffffff, 0x101, 0x2, 0x3, 0x6, 0x1, 0x400, 0x8000, 0x2, 0x9, 0x1, 0x0, 0x0, 0x6, 0xffff4cf3, 0x5, 0x1, 0x7, 0xff, 0x0, 0x0, 0x2, 0xffffffff, 0x9, 0x101, 0x52, 0x7, 0x9, 0x1, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x5, 0x6, 0xff, 0x9, 0x7, 0x4, 0x81, 0x6, 0xfffffffb, 0x5, 0x0, 0x0, 0x6, 0x10, 0x7, 0x1, 0x1, 0x1ff, 0x800, 0x7ff, 0x400, 0x1, 0x8a, 0x3, 0x1, 0x2, 0x1, 0x4, 0x200, 0x1, 0x0, 0x0, 0xfffeffff, 0xae, 0xe043]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2000, 0x34c00000, 0x8e, 0x3, 0x3, 0x4, 0x800, 0x81, 0xd03, 0x6, 0x9, 0x10001, 0x4, 0x100, 0x7, 0x1, 0xe, 0xff, 0x5, 0x5, 0xff, 0x4, 0x4, 0x1, 0x3, 0x0, 0xfffffffd, 0x1, 0x5, 0x2, 0x9, 0x2, 0x6, 0xfffffff8, 0x0, 0x4, 0x7, 0x3ff, 0x400, 0x7, 0xfffffff8, 0x80, 0x0, 0x9, 0x76c00000, 0x80, 0x9, 0x9ee, 0x10001, 0x10001, 0x10, 0x4, 0xffffff10, 0xa, 0xfffffe00, 0x5, 0x8, 0xd, 0x9, 0x0, 0x3ff, 0xfcce, 0x9, 0x80000001, 0xffffff3e, 0xfffffffc, 0xffffffff, 0x9, 0x3, 0x1000, 0x3, 0x7ff, 0xb253, 0xd, 0x0, 0x8, 0xbcaf, 0xd, 0x8000, 0x80000000, 0x7, 0xffffffff, 0xfffffffe, 0x21, 0x0, 0x7fff, 0x5, 0x6, 0x291, 0x8, 0xdfd, 0x6, 0x6, 0x2, 0x1, 0x1, 0xa, 0x9, 0x2, 0x5, 0xf9, 0x3ff, 0x2, 0x0, 0x73e, 0xffffff43, 0xfffffffe, 0x5, 0xffffff08, 0x100, 0x5, 0x6, 0x0, 0x0, 0x6, 0x7, 0x40, 0x7, 0xffffffcb, 0x6, 0x0, 0xffff8000, 0x8, 0x9, 0xb3f, 0x9, 0x5, 0x7, 0x4, 0x5, 0x9, 0x6, 0x9, 0xd62, 0x4, 0x7, 0x4, 0x512, 0x10001, 0x3, 0x5, 0x1ff, 0x6, 0x50ca, 0x1, 0x8, 0x0, 0x6, 0x1, 0x6, 0x3, 0xa3, 0xaa4, 0x7fff, 0x3, 0x0, 0x978, 0x0, 0x1, 0x2, 0x7, 0xd, 0x16, 0xfff, 0x9, 0x6, 0x14, 0x68ee, 0xff, 0x80000000, 0xfff, 0x1800, 0x7, 0xfffffffe, 0x55, 0xffffff5e, 0x8, 0x7a, 0x7fff, 0x3, 0x8, 0x8, 0x800, 0x5, 0x1, 0x2, 0x7fffffff, 0x0, 0x8001, 0x729f713e, 0xfff, 0x800, 0x4, 0x7fff, 0x119f, 0xc, 0x10, 0x80000000, 0x4, 0x200, 0x4, 0xffffffff, 0x7c84b32b, 0x5, 0x7, 0x8, 0x9, 0x2e, 0x8, 0x210, 0x5, 0x6, 0x10, 0xffff7fff, 0x5, 0x4, 0x7, 0x0, 0x8, 0x9, 0x3, 0x5, 0xfffffffa, 0x7, 0xfffff801, 0x8, 0x1, 0xe, 0x4, 0x10000, 0x1, 0x8, 0x6, 0x4, 0xffff, 0x80000000, 0x1, 0x7, 0x80000001, 0x9, 0x101, 0x8, 0x2, 0x180000, 0x1000, 0xd, 0xf7a, 0x7f, 0x2, 0x2, 0x4, 0x8, 0x2, 0x2, 0x2, 0x1ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffb, 0x4, 0x6, 0x2, 0x6, {0xdc, 0x0, 0x100, 0x52, 0x766c, 0x98c}, {0x0, 0x2, 0x1, 0x3, 0x0, 0x1f}, 0x100, 0x400, 0x1}}]}]}}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x50}, 0x0) 10m52.797067914s ago: executing program 4 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d95703836352c696f636861727365743d63703836302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c636f6465706167653d3836322c726f6469722c756e695f786c6174653d312c696f636861727365743d63703837344573686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c696f636861727365743d63703933322c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c757466383d312c757466383d312c00"], 0x25, 0x353, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 10m36.687749584s ago: executing program 34 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d95703836352c696f636861727365743d63703836302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c636f6465706167653d3836322c726f6469722c756e695f786c6174653d312c696f636861727365743d63703837344573686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c696f636861727365743d63703933322c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c757466383d312c757466383d312c00"], 0x25, 0x353, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 29.533599469s ago: executing program 1 (id=1689): syz_usb_connect(0x0, 0x52, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000140)=0x6e, 0x80000) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000040)={r7, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) 24.233104692s ago: executing program 1 (id=1697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x30004084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={r5, 0x0, 0x9, 0x0, 0x0, [0x0], [0x9, 0xfffffffd, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 22.592969684s ago: executing program 1 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x30004084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000300)={r5, 0x0, 0x9, 0x0, 0x0, [0x0], [0x9, 0xfffffffd, 0x0, 0x8], [0x3, 0x0, 0x100, 0xd], [0x1000000000000, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 18.554401624s ago: executing program 1 (id=1708): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 16.44863972s ago: executing program 1 (id=1712): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 14.639239355s ago: executing program 1 (id=1718): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x70) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x488, 0x30, 0x12f, 0x70bd29, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x100, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x7, 0x3, 0x8, 0x0, 0x20000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x200, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1000000, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x2000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x7, 0xff, 0x0, 0xfffffeff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0x3, 0xffffc3fd}, {0x0, 0xf6c5d7a4e5a498ca, 0x1000}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x371, &(0x7f0000001280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) 11.841201122s ago: executing program 7 (id=1729): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 11.401036865s ago: executing program 7 (id=1731): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@errors_remount}, {@nombcache}, {@quota}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfshat}, {@subj_type={'subj_type', 0x3d, 'dest_du\"V\xe9\xde]\xa2\x81\xdd++\xc4\xbf-~\xfcf1t\a\xdd*y\xee\x88YDQ\xa3J\'\xa2\x90\x17\x82\nX\xb7\xdc?T\x9bLu|w\x99\vA\xb0q\x895\x98\x15\xa4S\xbe\x83A\x17(\xc1\",ff\x0f\xdaj\xa3\x00\x00\x00\x00\x00\x00\x90\x80&6\xb1;\xf1[q\xa6\xcb\xa9r\xc6\x04\x9e\xcd\xa8QSCl\'i\xbe\x81\xb7\x03u\x16\x8b\xdc\xc4\xa3\x1cr=pa\x83\x16R@\"\xcc\xdf[\xc7\x12Uyn>H\xec\xd7.\x02\x9a=\xcb\xd0\xc1\xc9\xe5M\x9eN\x12\x92.\xb4\x99\xfb.\x183Wd\x8d\xd7\a,\x9a\x9dF1!ql0\x16\x8a\xf01{\x1f\xf1\xa2\x89 \xd3B;`\xc2\xcd&q;\xa3l\x84\xc2\xe2\x9fpQ\xd0\xab\x7f\xf4\xcdn\xa8\\\xcc\xac\xadr\xda\xb6 3\xfe\x1e\xe3p5\xbeZ\xb6\x8faa\xfa\xe1+dd\x0eJn\xc0\xfb\xef5\xc8\a+\xd6\xae\xad\xb4\x9b\xf6\x8b+\x938'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@fowner_lt={'fowner<', 0xee00}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r5, &(0x7f0000019080)={0x2020}, 0x2020) 9.937237583s ago: executing program 6 (id=1735): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0x9, "00004700000040f400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x0, 0xf, 0x28, "bf950aabfc3beac91e3760c3cec13c9bc28c652fef7fc6405cfca47633c80065d7ea6a870797e83a"}, 0x0, 0x0, 0x0, 0x0}) 8.725171463s ago: executing program 2 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xe5ec, 0x80000005, 0x0, 0x0, 0xffffffff}, 0x1f, 0x200000, 0x7, 0xfffffffd, 0x101, 0x14, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, 0x78}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000140)="11460e502ced3507", 0x8}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x0, &(0x7f00000004c0), &(0x7f00000005c0)='syzkaller\x00', 0x3ff, 0x22, &(0x7f0000000600)=""/34, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xb, 0x0, 0x4e4}, 0x10, 0x0, r5, 0x5, 0x0, &(0x7f0000000700)=[{0x0, 0x1, 0x9, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x2, 0x4, 0xb}, {0x5, 0x3, 0x10, 0x5}], 0x10, 0xc6, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f00000008c0), 0x4000) unshare(0x64000600) 7.537515941s ago: executing program 2 (id=1739): getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @rand_addr, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) 7.472241976s ago: executing program 0 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$rds(0x15, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') r1 = io_uring_setup(0x766a, &(0x7f0000000880)={0x0, 0xd277, 0x0, 0x0, 0x128}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x76, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x17a, 0x0, 0x8000}) close_range(r1, 0xffffffffffffffff, 0x0) 7.271808341s ago: executing program 0 (id=1741): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4080) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x26}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x168}}, 0x1d6ec281d8145890) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000180)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8140}}, 0x20}, 0x1, 0x0, 0x0, 0x20004811}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x80000}) 6.133330756s ago: executing program 2 (id=1742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 6.111877587s ago: executing program 0 (id=1743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.777740352s ago: executing program 7 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11fea) socket$inet6(0xa, 0x2, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) socket$pppoe(0x18, 0x1, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) 5.348695084s ago: executing program 6 (id=1745): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 5.294567108s ago: executing program 6 (id=1746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 4.695851292s ago: executing program 2 (id=1747): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x92) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) mkdir(&(0x7f0000000140)='./control\x00', 0x0) 4.625312027s ago: executing program 6 (id=1748): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xfffe) 4.624641837s ago: executing program 7 (id=1749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x6000000}]}}, 0x0, 0x26, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xe5ec, 0x80000005, 0x0, 0x0, 0xffffffff}, 0x1f, 0x200000, 0x7, 0xfffffffd, 0x101, 0x14, 0x0, 0x0, 0x0, 0xfffffffd}}}]}, 0x78}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000140)="11460e502ced3507", 0x8}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x0, &(0x7f00000004c0), &(0x7f00000005c0)='syzkaller\x00', 0x3ff, 0x22, &(0x7f0000000600)=""/34, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x24, r0, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xb, 0x0, 0x4e4}, 0x10, 0x0, r6, 0x5, 0x0, &(0x7f0000000700)=[{0x0, 0x1, 0x9, 0xa}, {0x4, 0x4, 0x8, 0x9}, {0x0, 0x1, 0x9, 0x5}, {0x0, 0x2, 0x4, 0xb}, {0x5, 0x3, 0x10, 0x5}], 0x10, 0xc6, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f00000008c0), 0x4000) unshare(0x64000600) 4.607966169s ago: executing program 0 (id=1750): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x2000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f00000000c0)) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) ioctl$TCFLSH(r0, 0x540b, 0x2) mount$pvfs2(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, 0x400, 0x0) 3.405928508s ago: executing program 6 (id=1751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$rds(0x15, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') r1 = io_uring_setup(0x766a, &(0x7f0000000880)={0x0, 0xd277, 0x0, 0x0, 0x128}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x76, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x80000008, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x17a, 0x0, 0x8000}) close_range(r1, 0xffffffffffffffff, 0x0) 3.281818857s ago: executing program 2 (id=1752): r0 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x408100) 3.275676307s ago: executing program 0 (id=1753): socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @rand_addr, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) 3.068983373s ago: executing program 2 (id=1754): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@errors_remount}, {@nombcache}, {@quota}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfshat}, {@subj_type={'subj_type', 0x3d, 'dest_du\"V\xe9\xde]\xa2\x81\xdd++\xc4\xbf-~\xfcf1t\a\xdd*y\xee\x88YDQ\xa3J\'\xa2\x90\x17\x82\nX\xb7\xdc?T\x9bLu|w\x99\vA\xb0q\x895\x98\x15\xa4S\xbe\x83A\x17(\xc1\",ff\x0f\xdaj\xa3\x00\x00\x00\x00\x00\x00\x90\x80&6\xb1;\xf1[q\xa6\xcb\xa9r\xc6\x04\x9e\xcd\xa8QSCl\'i\xbe\x81\xb7\x03u\x16\x8b\xdc\xc4\xa3\x1cr=pa\x83\x16R@\"\xcc\xdf[\xc7\x12Uyn>H\xec\xd7.\x02\x9a=\xcb\xd0\xc1\xc9\xe5M\x9eN\x12\x92.\xb4\x99\xfb.\x183Wd\x8d\xd7\a,\x9a\x9dF1!ql0\x16\x8a\xf01{\x1f\xf1\xa2\x89 \xd3B;`\xc2\xcd&q;\xa3l\x84\xc2\xe2\x9fpQ\xd0\xab\x7f\xf4\xcdn\xa8\\\xcc\xac\xadr\xda\xb6 3\xfe\x1e\xe3p5\xbeZ\xb6\x8faa\xfa\xe1+dd\x0eJn\xc0\xfb\xef5\xc8\a+\xd6\xae\xad\xb4\x9b\xf6\x8b+\x938'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise_type}, {@fowner_lt={'fowner<', 0xee00}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r5, &(0x7f0000019080)={0x2020}, 0x2020) 3.035240195s ago: executing program 6 (id=1755): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0x9, "00004700000040f400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000840)={0x0, 0xf, 0x28, "bf950aabfc3beac91e3760c3cec13c9bc28c652fef7fc6405cfca47633c80065d7ea6a870797e83a"}, 0x0, 0x0, 0x0, 0x0}) 2.287543141s ago: executing program 7 (id=1756): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4080) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x18}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x26}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x168}}, 0x1d6ec281d8145890) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000180)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8140}}, 0x20}, 0x1, 0x0, 0x0, 0x20004811}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x80000}) 2.244475154s ago: executing program 0 (id=1757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) 0s ago: executing program 7 (id=1758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): or -71 [ 317.693071][ T4299] usb 7-1: USB disconnect, device number 4 [ 317.715587][ T6087] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.775046][ T6196] netlink: 'syz.1.368': attribute type 4 has an invalid length. [ 317.783917][ T6196] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 317.890314][ T6087] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 318.274443][ T4381] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.315116][ T6087] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.394284][ T6210] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 318.655584][ T6087] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 319.074065][ T4381] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.483186][ T4381] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.738128][ T6224] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.023087][ T6232] syz.0.375[6232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.023201][ T6232] syz.0.375[6232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.433191][ T6236] loop2: detected capacity change from 0 to 128 [ 322.486369][ T6238] loop1: detected capacity change from 0 to 256 [ 322.577522][ T6238] exfat: Bad value for 'fmask' [ 322.624480][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.764332][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.783545][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.831943][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.913790][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 322.953780][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.007389][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.014618][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.311604][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.331716][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.440007][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.449321][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.539341][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.551075][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.558242][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.570228][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.065171][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.116973][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.173065][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.191755][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.193437][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.263471][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.293026][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 324.339743][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.459352][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.500744][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.612348][ T6087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.663897][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.685892][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.707353][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.823074][ T4301] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 324.855301][ T4381] tipc: Left network mode [ 324.992261][ T6273] binder: 6272:6273 unknown command 1074553619 [ 325.015228][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 325.022533][ T6273] binder: 6272:6273 ioctl c0306201 400000000640 returned -22 [ 325.035611][ T4301] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.058579][ T4301] usb 2-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 325.091314][ T4301] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.173151][ T4301] usb 2-1: config 1 interface 0 has no altsetting 0 [ 325.197181][ T4301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 325.231024][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.259033][ T4301] usb 2-1: Product: syz [ 325.281286][ T4301] usb 2-1: Manufacturer: syz [ 325.289436][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 325.289453][ T27] audit: type=1326 audit(1739577564.054:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 325.300514][ T4301] usb 2-1: SerialNumber: syz [ 325.365771][ T6261] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 325.387092][ T27] audit: type=1326 audit(1739577564.054:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 325.434033][ T27] audit: type=1326 audit(1739577564.094:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 325.743088][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.750581][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 325.763725][ T27] audit: type=1326 audit(1739577564.094:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 325.792335][ T4301] usb 2-1: USB disconnect, device number 5 [ 325.869410][ T27] audit: type=1326 audit(1739577564.094:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 325.871155][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.971410][ T27] audit: type=1326 audit(1739577564.094:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 326.175967][ T27] audit: type=1326 audit(1739577564.094:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 326.295158][ T27] audit: type=1326 audit(1739577564.094:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 326.348663][ T27] audit: type=1326 audit(1739577564.154:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 327.126987][ T27] audit: type=1326 audit(1739577564.154:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.6.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe878cde9 code=0x7ffc0000 [ 327.181865][ T6308] loop6: detected capacity change from 0 to 128 [ 327.359993][ T6314] 9p: Unknown access argument 18446744073709551615: -34 [ 328.475010][ T6326] loop1: detected capacity change from 0 to 256 [ 328.483530][ T6326] exfat: Bad value for 'fmask' [ 329.354714][ T6337] tipc: Started in network mode [ 329.359639][ T6337] tipc: Node identity 3ef4521bc9b5, cluster identity 4711 [ 329.368721][ T6337] tipc: Enabled bearer , priority 0 [ 329.565983][ T6335] tipc: Disabling bearer [ 331.858113][ T4301] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 332.188171][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.207492][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.301793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.341157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.482132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.499624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.621407][ T6366] loop1: detected capacity change from 0 to 256 [ 332.676604][ T6366] exfat: Bad value for 'fmask' [ 333.638393][ T6087] device veth0_vlan entered promiscuous mode [ 333.982135][ T6087] device veth1_vlan entered promiscuous mode [ 334.662903][ T6360] loop6: detected capacity change from 0 to 40427 [ 334.724237][ T6360] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 334.824847][ T6360] F2FS-fs (loop6): invalid crc value [ 334.842179][ T6360] F2FS-fs (loop6): Found nat_bits in checkpoint [ 334.990973][ T6087] device veth0_macvtap entered promiscuous mode [ 335.009021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.021371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.182137][ T27] audit: type=1326 audit(1739577573.944:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 335.213783][ T6087] device veth1_macvtap entered promiscuous mode [ 335.235110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.253806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.265210][ T27] audit: type=1326 audit(1739577573.944:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 335.355863][ T4381] device hsr_slave_0 left promiscuous mode [ 335.370750][ T4381] device hsr_slave_1 left promiscuous mode [ 335.396782][ T27] audit: type=1326 audit(1739577573.944:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 335.438894][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.456762][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.477799][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.518306][ T27] audit: type=1326 audit(1739577573.944:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 335.799524][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.166026][ T27] audit: type=1326 audit(1739577573.944:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 336.189319][ T27] audit: type=1326 audit(1739577573.944:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 336.233766][ T4381] device bridge_slave_1 left promiscuous mode [ 336.251585][ T27] audit: type=1326 audit(1739577573.944:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 336.283727][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.294016][ T4381] device bridge_slave_0 left promiscuous mode [ 336.300286][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.342254][ T27] audit: type=1326 audit(1739577573.944:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 336.442908][ T27] audit: type=1326 audit(1739577573.944:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 336.468406][ T6411] loop2: detected capacity change from 0 to 256 [ 336.501168][ T6411] exfat: Bad value for 'fmask' [ 336.544974][ T27] audit: type=1326 audit(1739577573.944:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 336.623771][ T4381] device veth1_macvtap left promiscuous mode [ 336.660522][ T4381] device veth0_macvtap left promiscuous mode [ 336.672289][ T4381] device veth1_vlan left promiscuous mode [ 336.678731][ T4381] device veth0_vlan left promiscuous mode [ 337.963411][ T4357] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 338.808510][ T4357] usb 3-1: Using ep0 maxpacket: 16 [ 338.816888][ T4357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.826685][ T4357] usb 3-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 338.837825][ T4357] usb 3-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.851047][ T4357] usb 3-1: config 1 interface 0 has no altsetting 0 [ 338.860464][ T4357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 338.869601][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.879111][ T4357] usb 3-1: Product: syz [ 338.883446][ T4357] usb 3-1: Manufacturer: syz [ 338.888062][ T4357] usb 3-1: SerialNumber: syz [ 338.905570][ T6414] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 339.169620][ T4381] team0 (unregistering): Port device team_slave_1 removed [ 339.222571][ T4381] team0 (unregistering): Port device team_slave_0 removed [ 339.270678][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.315258][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.790857][ T4381] bond0 (unregistering): Released all slaves [ 340.352447][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.376774][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.387607][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.404583][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.415261][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.426208][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.446205][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.461694][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.596554][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.795952][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.937329][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.288904][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.417308][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.488646][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.499406][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.509507][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.520379][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.537377][ T6087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.549278][ T6087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.589380][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.611124][ T6439] loop6: detected capacity change from 0 to 256 [ 341.670856][ T6439] exfat: Bad value for 'fmask' [ 341.755416][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 341.773634][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 341.998034][ T6087] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.015826][ T6087] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.028648][ T6087] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.038343][ T6087] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.104055][ T4357] usb 3-1: USB disconnect, device number 3 [ 344.394101][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.402133][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.486729][ T6461] loop1: detected capacity change from 0 to 256 [ 344.513104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.570370][ T6461] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 344.591870][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.608528][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.696576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.706290][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 344.706309][ T27] audit: type=1804 audit(1739577583.474:321): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.422" name="/newroot/103/file2/bus" dev="loop1" ino=1048627 res=1 errno=0 [ 345.939027][ T6458] loop2: detected capacity change from 0 to 40427 [ 346.051656][ T6491] loop1: detected capacity change from 0 to 256 [ 346.062019][ T6491] exfat: Bad value for 'uid' [ 346.309019][ T6458] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 346.662444][ T6458] F2FS-fs (loop2): invalid crc value [ 346.714613][ T6458] F2FS-fs (loop2): Found nat_bits in checkpoint [ 350.079256][ T6528] loop2: detected capacity change from 0 to 256 [ 350.156717][ T6528] exfat: Bad value for 'fmask' [ 350.259450][ T4334] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.238699][ T6557] loop7: detected capacity change from 0 to 128 [ 353.158410][ T6557] xt_bpf: check failed: parse error [ 356.984847][ T6589] loop1: detected capacity change from 0 to 256 [ 356.991954][ T6589] exfat: Bad value for 'uid' [ 359.469176][ T6606] loop1: detected capacity change from 0 to 512 [ 359.496675][ T6606] EXT4-fs: quotafile must be on filesystem root [ 360.005711][ T26] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 360.196309][ T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.238878][ T26] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 360.271081][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.654009][ T26] usb 7-1: config 0 descriptor?? [ 362.074569][ T26] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 362.076398][ T6642] loop2: detected capacity change from 0 to 512 [ 362.132608][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0001/input/input5 [ 364.748589][ T6665] loop7: detected capacity change from 0 to 256 [ 364.758924][ T6665] exfat: Bad value for 'uid' [ 366.780874][ T26] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 366.901621][ T6667] loop6: detected capacity change from 0 to 512 [ 366.973005][ T26] usb 7-1: USB disconnect, device number 5 [ 366.984015][ T6667] ext4: Unknown parameter 'smackfsfloor' [ 367.101362][ T6671] loop1: detected capacity change from 0 to 256 [ 367.207754][ T6671] exfat: Bad value for 'fmask' [ 367.512886][ T4334] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.523360][ T4755] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 367.886881][ T6679] loop0: detected capacity change from 0 to 256 [ 367.940237][ T6679] FAT-fs (loop0): Unrecognized mount option "nnonume=winnt" or missing value [ 368.177629][ T6685] overlayfs: missing 'lowerdir' [ 368.697083][ T4357] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 368.892893][ T4357] usb 2-1: Using ep0 maxpacket: 16 [ 368.906936][ T4357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.936836][ T4357] usb 2-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 368.982487][ T4357] usb 2-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.008656][ T4357] usb 2-1: config 1 interface 0 has no altsetting 0 [ 369.048079][ T4357] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 369.089825][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.112148][ T4357] usb 2-1: Product: syz [ 369.121929][ T4357] usb 2-1: Manufacturer: syz [ 369.231307][ T4357] usb 2-1: SerialNumber: syz [ 369.265783][ T6674] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.365287][ T6698] loop7: detected capacity change from 0 to 128 [ 369.627645][ T4357] usb 2-1: USB disconnect, device number 7 [ 373.509538][ T6726] loop6: detected capacity change from 0 to 256 [ 373.517078][ T6726] exfat: Bad value for 'uid' [ 382.323647][ T6806] loop7: detected capacity change from 0 to 256 [ 382.399661][ T6806] exfat: Bad value for 'fmask' [ 383.547481][ T6821] netlink: 44 bytes leftover after parsing attributes in process `syz.6.490'. [ 383.564658][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.572000][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.384388][ T27] audit: type=1326 audit(1739577623.114:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 384.446140][ T27] audit: type=1326 audit(1739577623.124:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 384.480651][ T27] audit: type=1326 audit(1739577623.124:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 384.524417][ T27] audit: type=1326 audit(1739577623.124:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 384.637556][ T27] audit: type=1326 audit(1739577623.124:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 384.771272][ T27] audit: type=1326 audit(1739577623.144:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 384.844301][ T6845] loop7: detected capacity change from 0 to 128 [ 384.991386][ T6848] loop1: detected capacity change from 0 to 512 [ 384.997952][ T27] audit: type=1326 audit(1739577623.144:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 385.077726][ T27] audit: type=1326 audit(1739577623.144:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 385.102966][ T27] audit: type=1326 audit(1739577623.144:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 385.125712][ T27] audit: type=1326 audit(1739577623.144:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.7.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1b38cde9 code=0x7ffc0000 [ 385.374628][ T6848] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.501: casefold flag without casefold feature [ 386.444632][ T6848] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.501: couldn't read orphan inode 15 (err -117) [ 386.670348][ T6848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 389.956449][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 390.763935][ T6896] loop7: detected capacity change from 0 to 512 [ 391.203277][ T6896] EXT4-fs: quotafile must be on filesystem root [ 391.302215][ T6900] loop0: detected capacity change from 0 to 256 [ 391.309528][ T6900] exfat: Unknown parameter 'nameª}t' [ 391.805795][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 391.812738][ T4756] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 394.225416][ T6919] loop7: detected capacity change from 0 to 128 [ 397.228911][ T6949] loop6: detected capacity change from 0 to 256 [ 397.274311][ T6949] exfat: Bad value for 'fmask' [ 398.350557][ T6966] loop1: detected capacity change from 0 to 256 [ 398.379905][ T6966] exfat: Unknown parameter 'nameª}t' [ 402.817378][ T6993] loop1: detected capacity change from 0 to 256 [ 402.882578][ T6993] exfat: Deprecated parameter 'utf8' [ 402.888162][ T6993] exfat: Deprecated parameter 'namecase' [ 402.894385][ T6993] exfat: Bad value for 'namecase' [ 402.968478][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 403.499700][ T7007] loop0: detected capacity change from 0 to 512 [ 403.553919][ T7007] ext4: Unknown parameter 'smackfsfloor' [ 403.986486][ T7016] overlayfs: missing 'lowerdir' [ 404.731492][ T7023] loop0: detected capacity change from 0 to 256 [ 404.738900][ T7023] exfat: Unknown parameter 'nameª}t' [ 404.829910][ T4413] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.125598][ T7050] 9pnet_fd: Insufficient options for proto=fd [ 409.819002][ T7070] loop1: detected capacity change from 0 to 512 [ 409.857909][ T7070] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.910503][ T7070] EXT4-fs (loop1): orphan cleanup on readonly fs [ 409.931920][ T7070] EXT4-fs error (device loop1): ext4_quota_enable:6982: comm syz.1.551: Bad quota inum: 64, type: 0 [ 409.973332][ T7070] EXT4-fs (loop1): Remounting filesystem read-only [ 409.980018][ T7070] EXT4-fs warning (device loop1): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 410.004803][ T7070] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 410.011606][ T7070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 410.668323][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 411.506174][ T7098] loop0: detected capacity change from 0 to 256 [ 411.519321][ T7095] loop1: detected capacity change from 0 to 256 [ 411.575306][ T7095] exfat: Unknown parameter 'nameª}t' [ 411.647022][ T7098] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 411.916767][ T7104] hub 9-0:1.0: USB hub found [ 411.924447][ T7104] hub 9-0:1.0: 1 port detected [ 417.592523][ T7127] 9pnet_fd: Insufficient options for proto=fd [ 418.558534][ T7132] loop0: detected capacity change from 0 to 512 [ 418.594136][ T7132] EXT4-fs (loop0): filesystem is read-only [ 418.612117][ T7132] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 418.844139][ T7132] EXT4-fs (loop0): filesystem is read-only [ 418.850102][ T7132] EXT4-fs (loop0): orphan cleanup on readonly fs [ 418.976236][ T7132] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.565: bg 0: block 64: padding at end of block bitmap is not set [ 419.283306][ T7143] device vlan1 entered promiscuous mode [ 419.290030][ T7143] device ip6gretap0 entered promiscuous mode [ 419.635120][ T7132] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 419.883545][ T7132] EXT4-fs (loop0): 1 orphan inode deleted [ 419.919919][ T7132] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 420.055062][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 420.055079][ T27] audit: type=1326 audit(1739577658.824:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7131 comm="syz.0.565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53b838cde9 code=0x0 [ 422.203727][ T7164] loop7: detected capacity change from 0 to 512 [ 422.257455][ T7164] ext4: Unknown parameter 'smackfsfloor' [ 423.215830][ T7171] loop1: detected capacity change from 0 to 128 [ 423.442465][ T7178] loop7: detected capacity change from 0 to 256 [ 423.470122][ T7178] exfat: Bad value for 'fmask' [ 423.547402][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.724385][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 424.563517][ T7193] 9pnet_fd: Insufficient options for proto=fd [ 427.313333][ T4268] Bluetooth: hci5: command 0x0406 tx timeout [ 427.370892][ T7228] loop1: detected capacity change from 0 to 512 [ 427.378784][ T7228] ext4: Unknown parameter 'smackfsfloor' [ 427.436236][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 427.768068][ T7231] overlayfs: missing 'lowerdir' [ 428.387811][ T7233] loop6: detected capacity change from 0 to 256 [ 428.496944][ T7233] FAT-fs (loop6): bogus sectors per cluster 255 [ 428.509971][ T7236] loop0: detected capacity change from 0 to 512 [ 428.542898][ T7233] FAT-fs (loop6): Can't find a valid FAT filesystem [ 428.694679][ T7233] loop6: detected capacity change from 0 to 128 [ 429.154412][ T7236] EXT4-fs (loop0): 1 orphan inode deleted [ 429.175216][ T7233] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 429.262974][ T7236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 429.327743][ T7233] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 429.386140][ T7236] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.922868][ T22] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 430.145431][ T22] usb 7-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 430.196606][ T22] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.305297][ T22] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 430.331051][ T4338] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 430.379723][ T4338] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:7: Failed to release dquot type 1 [ 430.392561][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 430.444198][ T22] usb 7-1: SerialNumber: syz [ 430.698554][ T22] usb 7-1: 0:2 : does not exist [ 430.764611][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 430.819720][ T22] usb 7-1: USB disconnect, device number 6 [ 430.986091][ T14] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.027919][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 431.045008][ T14] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 431.071892][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.109061][ T14] usb 2-1: config 0 descriptor?? [ 431.361168][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 431.480497][ T7277] netlink: 80 bytes leftover after parsing attributes in process `syz.2.592'. [ 431.626754][ T14] uclogic 0003:28BD:0078.0002: interface is invalid, ignoring [ 432.915238][ T7281] loop6: detected capacity change from 0 to 128 [ 433.037071][ T22] usb 2-1: USB disconnect, device number 8 [ 433.246847][ T7264] loop7: detected capacity change from 0 to 40427 [ 433.308656][ T7264] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 433.367246][ T7264] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 433.460400][ T7264] F2FS-fs (loop7): Found nat_bits in checkpoint [ 433.857023][ T7264] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 433.877171][ T7264] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 434.236725][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 435.154674][ T7300] loop1: detected capacity change from 0 to 128 [ 435.571385][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 435.858286][ T7310] loop7: detected capacity change from 0 to 512 [ 436.633254][ T7310] ext4: Unknown parameter 'smackfsfloor' [ 437.631033][ T7321] loop6: detected capacity change from 0 to 512 [ 437.832098][ T7330] overlayfs: missing 'lowerdir' [ 438.053221][ T7321] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.603: casefold flag without casefold feature [ 438.159561][ T7321] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.603: couldn't read orphan inode 15 (err -117) [ 438.389746][ T7338] loop0: detected capacity change from 0 to 128 [ 438.409368][ T7334] netlink: 80 bytes leftover after parsing attributes in process `syz.2.605'. [ 438.444713][ T7321] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 442.879461][ T7360] loop7: detected capacity change from 0 to 512 [ 442.954444][ T7360] EXT4-fs: quotafile must be on filesystem root [ 442.965406][ T7365] loop1: detected capacity change from 0 to 128 [ 443.090452][ T7367] loop0: detected capacity change from 0 to 512 [ 443.522929][ T7367] EXT4-fs (loop0): 1 orphan inode deleted [ 443.543760][ T6233] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 443.547330][ T7367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 443.578899][ T6233] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:26: Failed to release dquot type 1 [ 443.636771][ T7367] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.655645][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 444.429189][ T7395] xt_bpf: check failed: parse error [ 445.099717][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.106204][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.033600][ T7409] loop6: detected capacity change from 0 to 256 [ 446.061067][ T7409] exfat: Deprecated parameter 'utf8' [ 446.099320][ T7409] exfat: Deprecated parameter 'namecase' [ 446.119479][ T7409] exfat: Bad value for 'namecase' [ 446.203044][ T7409] netlink: 80 bytes leftover after parsing attributes in process `syz.6.618'. [ 446.455813][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 446.469971][ T7414] loop6: detected capacity change from 0 to 256 [ 446.477455][ T7414] FAT-fs (loop6): Unrecognized mount option "uoi_xlate=0" or missing value [ 446.565949][ T4413] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.585149][ T7414] loop6: detected capacity change from 0 to 256 [ 446.591888][ T7414] exfat: Deprecated parameter 'namecase' [ 446.629836][ T7414] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 447.180153][ T7430] loop1: detected capacity change from 0 to 128 [ 448.059193][ T7437] loop6: detected capacity change from 0 to 512 [ 448.456516][ T7437] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #3: comm syz.6.622: corrupted inode contents [ 448.484054][ T7437] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #3: comm syz.6.622: mark_inode_dirty error [ 448.506298][ T7437] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #3: comm syz.6.622: corrupted inode contents [ 448.520559][ T7437] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.622: mark_inode_dirty error [ 448.540505][ T7437] Quota error (device loop6): write_blk: dquota write failed [ 448.548548][ T7437] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 448.558873][ T7437] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.622: Failed to acquire dquot type 0 [ 448.601525][ T7437] EXT4-fs (loop6): 1 orphan inode deleted [ 448.607448][ T7437] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 448.617877][ T4631] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 448.628359][ T7437] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.685040][ T4631] EXT4-fs error (device loop6): ext4_release_dquot:6818: comm kworker/u4:17: Failed to release dquot type 1 [ 449.314772][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 449.807528][ T7453] loop1: detected capacity change from 0 to 128 [ 450.022575][ T7456] loop6: detected capacity change from 0 to 512 [ 450.073612][ T7456] EXT4-fs: quotafile must be on filesystem root [ 450.305917][ T4413] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 451.568093][ T7479] loop1: detected capacity change from 0 to 512 [ 451.708239][ T7483] loop6: detected capacity change from 0 to 256 [ 451.761476][ T7479] EXT4-fs (loop1): 1 orphan inode deleted [ 451.764307][ T7483] exfat: Deprecated parameter 'utf8' [ 451.772607][ T7483] exfat: Deprecated parameter 'namecase' [ 451.863270][ T7479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 451.987806][ T7479] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.000383][ T7483] exfat: Bad value for 'namecase' [ 452.498253][ T7483] netlink: 80 bytes leftover after parsing attributes in process `syz.6.631'. [ 452.625756][ T4338] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 452.727416][ T4338] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:7: Failed to release dquot type 1 [ 452.761746][ T7489] loop6: detected capacity change from 0 to 256 [ 452.770474][ T7489] FAT-fs (loop6): Unrecognized mount option "uoi_xlate=0" or missing value [ 452.861696][ T7489] loop6: detected capacity change from 0 to 256 [ 452.868495][ T7489] exfat: Deprecated parameter 'namecase' [ 452.881812][ T7489] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 453.343103][ T7496] loop7: detected capacity change from 0 to 1024 [ 453.352635][ T7496] EXT4-fs (loop7): barriers disabled [ 453.358503][ T7496] JBD2: no valid journal superblock found [ 453.364424][ T7496] EXT4-fs (loop7): error loading journal [ 454.544701][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 454.640115][ T7510] loop6: detected capacity change from 0 to 256 [ 454.680348][ T7510] FAT-fs (loop6): Unrecognized mount option "nnonume=winnt" or missing value [ 455.631678][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 455.710100][ T7517] device bridge_slave_1 left promiscuous mode [ 455.752513][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.847884][ T7517] device bridge_slave_0 left promiscuous mode [ 455.866395][ T7517] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.908102][ T7523] loop6: detected capacity change from 0 to 128 [ 456.839031][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 456.985752][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 457.477174][ T7538] loop6: detected capacity change from 0 to 512 [ 457.537726][ T7538] EXT4-fs: quotafile must be on filesystem root [ 458.037862][ T7546] loop7: detected capacity change from 0 to 256 [ 458.061753][ T7546] exfat: Deprecated parameter 'utf8' [ 458.067338][ T7546] exfat: Deprecated parameter 'namecase' [ 458.074235][ T7546] exfat: Bad value for 'namecase' [ 458.562303][ T7546] netlink: 80 bytes leftover after parsing attributes in process `syz.7.644'. [ 459.119642][ T7557] loop7: detected capacity change from 0 to 256 [ 459.126892][ T7557] FAT-fs (loop7): Unrecognized mount option "uoi_xlate=0" or missing value [ 459.185434][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 459.251888][ T7564] loop7: detected capacity change from 0 to 256 [ 459.258700][ T7564] exfat: Deprecated parameter 'namecase' [ 459.272393][ T7564] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 459.700861][ T7575] loop0: detected capacity change from 0 to 256 [ 460.051137][ T7575] FAT-fs (loop0): bogus sectors per cluster 223 [ 460.218602][ T7575] FAT-fs (loop0): Can't find a valid FAT filesystem [ 461.952897][ T4413] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 462.108857][ T7592] loop7: detected capacity change from 0 to 512 [ 462.309997][ T7592] EXT4-fs (loop7): 1 orphan inode deleted [ 462.318976][ T7592] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 462.338168][ T4541] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 462.338926][ T7592] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.422266][ T4541] EXT4-fs error (device loop7): ext4_release_dquot:6818: comm kworker/u4:14: Failed to release dquot type 1 [ 462.817439][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 464.899694][ T7625] loop6: detected capacity change from 0 to 256 [ 464.956687][ T7625] exfat: Deprecated parameter 'utf8' [ 464.982296][ T7625] exfat: Deprecated parameter 'namecase' [ 465.008695][ T7625] exfat: Bad value for 'namecase' [ 465.175835][ T4413] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 465.187966][ T7625] netlink: 80 bytes leftover after parsing attributes in process `syz.6.658'. [ 465.190263][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 467.224843][ T7639] loop0: detected capacity change from 0 to 512 [ 470.209397][ T7655] loop7: detected capacity change from 0 to 512 [ 470.293483][ T7655] ext4: Unknown parameter 'seclabel' [ 470.333210][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.350611][ T7655] loop7: detected capacity change from 0 to 256 [ 470.370967][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 470.405756][ T4413] Buffer I/O error on dev loop7, logical block 0, async page read [ 470.411203][ T7672] loop1: detected capacity change from 0 to 1024 [ 470.422459][ T7655] FAT-fs (loop7): Unrecognized mount option "errors=remounTéÙÔ™:Œú©ügt-ro" or missing value [ 470.458129][ T7672] EXT4-fs: Ignoring removed nobh option [ 470.474143][ T7672] EXT4-fs: Ignoring removed bh option [ 470.497766][ T7672] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 470.628240][ T7672] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 470.813371][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 472.871121][ T7694] loop1: detected capacity change from 0 to 512 [ 473.015710][ T7694] EXT4-fs (loop1): 1 orphan inode deleted [ 473.035812][ T7694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 473.050920][ T6055] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 473.080324][ T6055] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:24: Failed to release dquot type 1 [ 473.124072][ T7694] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.622648][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 475.760573][ T7712] loop7: detected capacity change from 0 to 256 [ 475.812143][ T7712] exfat: Deprecated parameter 'utf8' [ 475.848713][ T7712] exfat: Deprecated parameter 'namecase' [ 475.877311][ T7712] exfat: Bad value for 'namecase' [ 476.364374][ T7718] loop6: detected capacity change from 0 to 512 [ 476.388335][ T7718] ext4: Unknown parameter 'smackfsfloor' [ 476.728605][ T7720] overlayfs: missing 'lowerdir' [ 477.479991][ T7712] netlink: 80 bytes leftover after parsing attributes in process `syz.7.675'. [ 477.787609][ T7732] loop7: detected capacity change from 0 to 256 [ 477.794721][ T7732] FAT-fs (loop7): Unrecognized mount option "uoi_xlate=0" or missing value [ 477.869512][ T7733] loop7: detected capacity change from 0 to 256 [ 477.876348][ T7733] exfat: Deprecated parameter 'namecase' [ 477.901870][ T7733] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 482.270507][ T7748] loop7: detected capacity change from 0 to 256 [ 482.327792][ T7748] FAT-fs (loop7): bogus sectors per cluster 255 [ 482.373448][ T7748] FAT-fs (loop7): Can't find a valid FAT filesystem [ 482.625918][ T7748] loop7: detected capacity change from 0 to 128 [ 482.746658][ T7748] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 482.777258][ T27] audit: type=1326 audit(1739577721.544:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 482.802070][ T7748] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 482.925599][ T27] audit: type=1326 audit(1739577721.644:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 482.979083][ T27] audit: type=1326 audit(1739577721.644:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 483.010148][ T27] audit: type=1326 audit(1739577721.644:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 483.104552][ T27] audit: type=1326 audit(1739577721.644:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 483.290151][ T7764] xt_bpf: check failed: parse error [ 483.407940][ T27] audit: type=1326 audit(1739577721.644:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 483.902571][ T7765] loop1: detected capacity change from 0 to 128 [ 483.933269][ T7765] ext4: Unknown parameter 'mask' [ 483.942641][ T27] audit: type=1326 audit(1739577721.644:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 483.997741][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 484.016696][ T27] audit: type=1326 audit(1739577721.644:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 484.039691][ T27] audit: type=1326 audit(1739577721.644:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 484.086562][ T27] audit: type=1326 audit(1739577721.644:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7753 comm="syz.1.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762318cde9 code=0x7ffc0000 [ 484.165458][ T7769] loop6: detected capacity change from 0 to 512 [ 484.188660][ T7769] ext4: Unknown parameter 'smackfsfloor' [ 484.224796][ T14] usb 8-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 484.243758][ T14] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.294631][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.049258][ T7776] overlayfs: missing 'lowerdir' [ 485.055731][ T7756] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 485.748528][ T7779] loop1: detected capacity change from 0 to 256 [ 485.879018][ T14] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.892655][ T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 485.969574][ T14] usb 8-1: can't set config #1, error -71 [ 485.991589][ T14] usb 8-1: USB disconnect, device number 2 [ 486.066413][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 486.369496][ T7783] loop6: detected capacity change from 0 to 2048 [ 486.432483][ T7783] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 486.548307][ T7783] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.696: bg 0: block 234: padding at end of block bitmap is not set [ 486.571549][ T7783] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 374 with error 28 [ 486.601595][ T7783] EXT4-fs (loop6): This should not happen!! Data will be lost [ 486.601595][ T7783] [ 486.620483][ T7783] EXT4-fs (loop6): Total free blocks count 0 [ 486.627099][ T7783] EXT4-fs (loop6): Free/Dirty block details [ 486.639640][ T7783] EXT4-fs (loop6): free_blocks=0 [ 486.647782][ T7783] EXT4-fs (loop6): dirty_blocks=384 [ 486.659764][ T7783] EXT4-fs (loop6): Block reservation details [ 486.667014][ T7783] EXT4-fs (loop6): i_reserved_data_blocks=24 [ 486.801847][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 487.375210][ T7792] loop7: detected capacity change from 0 to 256 [ 487.454386][ T7792] exfat: Deprecated parameter 'utf8' [ 487.522837][ T7792] exfat: Deprecated parameter 'namecase' [ 487.528595][ T7792] exfat: Bad value for 'namecase' [ 487.770787][ T7792] netlink: 80 bytes leftover after parsing attributes in process `syz.7.695'. [ 488.191897][ T7807] loop7: detected capacity change from 0 to 256 [ 488.199844][ T7807] FAT-fs (loop7): Unrecognized mount option "uoi_xlate=0" or missing value [ 488.705803][ T7811] loop7: detected capacity change from 0 to 256 [ 488.717430][ T7811] exfat: Deprecated parameter 'namecase' [ 489.137962][ T7811] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 489.817825][ T7821] xt_bpf: check failed: parse error [ 490.349890][ T7823] overlayfs: missing 'lowerdir' [ 490.896992][ T7814] Zero length message leads to an empty skb [ 491.451372][ T7831] loop1: detected capacity change from 0 to 128 [ 491.463841][ T7826] ipt_CLUSTERIP: Please specify destination IP [ 491.904301][ T7837] netlink: 104 bytes leftover after parsing attributes in process `syz.1.711'. [ 491.957204][ T7837] loop1: detected capacity change from 0 to 1024 [ 492.110233][ T7837] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 493.299375][ T7856] loop7: detected capacity change from 0 to 128 [ 493.807961][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 494.031851][ T7865] loop7: detected capacity change from 0 to 256 [ 494.073682][ T7865] exfat: Deprecated parameter 'utf8' [ 494.079069][ T7865] exfat: Deprecated parameter 'namecase' [ 494.113037][ T7865] exfat: Bad value for 'namecase' [ 494.286860][ T7865] netlink: 80 bytes leftover after parsing attributes in process `syz.7.719'. [ 495.487784][ T7865] loop7: detected capacity change from 0 to 256 [ 495.500995][ T7865] FAT-fs (loop7): Unrecognized mount option "uoi_xlate=0" or missing value [ 496.067130][ T7876] loop7: detected capacity change from 0 to 128 [ 496.101277][ T7877] overlayfs: missing 'lowerdir' [ 499.718395][ T7903] netlink: 80 bytes leftover after parsing attributes in process `syz.0.732'. [ 500.132518][ T7908] loop6: detected capacity change from 0 to 512 [ 500.168369][ T7908] ext4: Unknown parameter 'smackfsfloor' [ 500.281753][ T7915] loop7: detected capacity change from 0 to 128 [ 500.762160][ T7918] overlayfs: missing 'lowerdir' [ 501.456993][ T7919] overlayfs: failed to resolve './file0': -2 [ 502.214729][ T7930] loop1: detected capacity change from 0 to 512 [ 502.304920][ T7930] EXT4-fs (loop1): Test dummy encryption mode enabled [ 502.311755][ T7930] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 502.383699][ T7930] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.740: bad orphan inode 131083 [ 502.400184][ T7930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 503.565060][ T7922] loop7: detected capacity change from 0 to 40427 [ 503.703170][ T7922] F2FS-fs (loop7): Found nat_bits in checkpoint [ 503.712490][ T7937] loop6: detected capacity change from 0 to 40427 [ 503.720809][ T7937] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 503.727947][ T7937] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 503.736596][ T7937] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3ffff [ 503.745264][ T7937] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8 [ 503.757422][ T7937] F2FS-fs (loop6): invalid crc value [ 503.772804][ T7930] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 503.834281][ T7940] xt_CT: No such helper "snmp" [ 503.968765][ T7922] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 503.999682][ T7937] F2FS-fs (loop6): Found nat_bits in checkpoint [ 504.226313][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 504.226353][ T27] audit: type=1800 audit(1739577742.984:366): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.736" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 504.366748][ T7937] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 504.374427][ T7937] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 504.924049][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 505.037975][ T6087] syz-executor: attempt to access beyond end of device [ 505.037975][ T6087] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 505.053934][ T5117] syz-executor: attempt to access beyond end of device [ 505.053934][ T5117] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 505.119028][ T7959] netlink: 80 bytes leftover after parsing attributes in process `syz.2.745'. [ 506.450874][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.474968][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.726558][ T7986] loop7: detected capacity change from 0 to 512 [ 506.804820][ T7986] EXT4-fs (loop7): 1 orphan inode deleted [ 506.813877][ T7986] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 506.828724][ T9] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 506.843162][ T7986] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.861421][ T9] EXT4-fs error (device loop7): ext4_release_dquot:6818: comm kworker/u4:0: Failed to release dquot type 1 [ 507.234401][ T7992] loop6: detected capacity change from 0 to 1024 [ 507.288621][ T7992] EXT4-fs: Ignoring removed orlov option [ 507.342791][ T7992] EXT4-fs: Ignoring removed orlov option [ 507.489409][ T7992] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 507.575631][ T7992] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2739: inode #15: comm syz.6.754: corrupted in-inode xattr [ 508.364864][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 508.665799][ T8012] loop6: detected capacity change from 0 to 256 [ 508.673112][ T8012] exfat: Deprecated parameter 'utf8' [ 508.678498][ T8012] exfat: Deprecated parameter 'namecase' [ 508.772104][ T8012] exfat: Bad value for 'namecase' [ 508.823068][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 509.792823][ T8019] loop1: detected capacity change from 0 to 1024 [ 510.693457][ T8019] EXT4-fs (loop1): barriers disabled [ 510.699281][ T8019] JBD2: no valid journal superblock found [ 510.705201][ T8019] EXT4-fs (loop1): error loading journal [ 510.894918][ T8025] loop7: detected capacity change from 0 to 512 [ 510.912959][ T4413] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 511.442137][ T8012] netlink: 80 bytes leftover after parsing attributes in process `syz.6.757'. [ 511.458200][ T8012] loop6: detected capacity change from 0 to 256 [ 511.465302][ T8012] FAT-fs (loop6): Unrecognized mount option "uoi_xlate=0" or missing value [ 511.469343][ T8025] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 511.521778][ T8012] loop6: detected capacity change from 0 to 256 [ 511.528607][ T8012] exfat: Deprecated parameter 'namecase' [ 511.532472][ T8025] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.584159][ T8012] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 513.181087][ T8042] loop1: detected capacity change from 0 to 40427 [ 514.410799][ T8042] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 514.419140][ T8042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 514.481022][ T8039] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 514.603923][ T8042] F2FS-fs (loop1): invalid crc value [ 514.675340][ T8042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 514.739995][ T8042] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 514.747181][ T8042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 516.007040][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 517.680385][ T8074] loop6: detected capacity change from 0 to 512 [ 519.051419][ T8074] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 519.061871][ T8085] netlink: 80 bytes leftover after parsing attributes in process `syz.0.780'. [ 519.070745][ T8074] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.429318][ T8094] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 519.964673][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 520.171602][ T8103] devpts: called with bogus options [ 520.302700][ T8088] loop1: detected capacity change from 0 to 40427 [ 520.644581][ T8088] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 521.136316][ T8088] F2FS-fs (loop1): invalid crc value [ 521.218832][ T8088] F2FS-fs (loop1): Found nat_bits in checkpoint [ 521.456651][ T8116] devpts: called with bogus options [ 521.498922][ T8088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 523.045438][ T8124] netlink: 80 bytes leftover after parsing attributes in process `syz.2.793'. [ 523.382039][ T8129] kvm [8128]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 523.520443][ T8143] devpts: called with bogus options [ 523.678715][ T8145] loop1: detected capacity change from 0 to 512 [ 523.749633][ T8151] loop6: detected capacity change from 0 to 256 [ 523.750091][ T8145] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 523.773187][ T8145] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.874855][ T8151] exfat: Unknown parameter 'nameª}t' [ 524.084641][ T4413] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 527.104490][ T8176] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 527.228782][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 529.124082][ T8192] devpts: called with bogus options [ 529.391691][ T8200] loop7: detected capacity change from 0 to 256 [ 529.419317][ T8200] exfat: Unknown parameter 'nameª}t' [ 529.576111][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 530.869300][ T8214] loop1: detected capacity change from 0 to 512 [ 531.378421][ T8214] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 531.772888][ T8214] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.480951][ T8230] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 533.597996][ T8240] overlayfs: failed to clone upperpath [ 535.149101][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 535.811893][ T8253] loop1: detected capacity change from 0 to 1024 [ 535.856013][ T8253] EXT4-fs (loop1): barriers disabled [ 535.861742][ T8253] JBD2: no valid journal superblock found [ 535.867593][ T8253] EXT4-fs (loop1): error loading journal [ 536.256465][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 536.668038][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.831'. [ 536.677062][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.7.831'. [ 537.497388][ T8264] loop1: detected capacity change from 0 to 256 [ 537.506760][ T8264] exfat: Unknown parameter 'nameª}t' [ 537.587237][ T8268] loop6: detected capacity change from 0 to 512 [ 538.012546][ T8268] EXT4-fs: Mount option(s) incompatible with ext2 [ 539.301576][ T4334] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 540.962249][ T8300] loop6: detected capacity change from 0 to 512 [ 541.157445][ T8300] EXT4-fs (loop6): 1 orphan inode deleted [ 541.182816][ T8300] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 541.206383][ T8300] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.208325][ T5329] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 541.257364][ T5329] EXT4-fs error (device loop6): ext4_release_dquot:6818: comm kworker/u4:22: Failed to release dquot type 1 [ 541.551294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 541.562722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.570984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.579247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.587510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.595838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.604114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.612355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.620629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 541.628892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 542.002847][ T4301] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 542.786885][ T4301] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.804501][ T4301] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 543.005137][ T4301] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.032817][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.061489][ T8315] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 544.107357][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 545.049192][ T4357] usb 2-1: USB disconnect, device number 9 [ 546.347004][ T8347] block nbd1: server does not support multiple connections per device. [ 546.365031][ T8346] block nbd1: shutting down sockets [ 546.699735][ T8363] loop1: detected capacity change from 0 to 256 [ 546.754823][ T8363] exfat: Unknown parameter 'nameª}t' [ 548.115255][ T8376] Cannot find add_set index 0 as target [ 549.228580][ T8389] loop6: detected capacity change from 0 to 256 [ 549.298624][ T8389] exfat: Bad value for 'fmask' [ 549.631061][ T4413] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 549.978006][ T8399] loop7: detected capacity change from 0 to 512 [ 549.985242][ T8399] EXT4-fs: Ignoring removed oldalloc option [ 550.019338][ T8399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 550.119650][ T8399] EXT4-fs (loop7): orphan cleanup on readonly fs [ 550.140665][ T8399] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 550.150689][ T8399] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 550.160689][ T8399] EXT4-fs error (device loop7): ext4_acquire_dquot:6795: comm syz.7.871: Failed to acquire dquot type 1 [ 550.199222][ T8399] EXT4-fs (loop7): 1 truncate cleaned up [ 550.213067][ T8399] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 553.041978][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 553.431050][ T8413] loop7: detected capacity change from 0 to 512 [ 553.438163][ T8413] EXT4-fs: Ignoring removed oldalloc option [ 553.445384][ T126] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 553.789004][ T8413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 555.264423][ T8413] EXT4-fs (loop7): orphan cleanup on readonly fs [ 555.288584][ T8413] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 555.298558][ T8413] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 555.308072][ T8413] EXT4-fs error (device loop7): ext4_acquire_dquot:6795: comm syz.7.874: Failed to acquire dquot type 1 [ 555.352985][ T8413] EXT4-fs (loop7): 1 truncate cleaned up [ 555.546778][ T8413] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 557.405002][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 557.616447][ T8431] nbd: must specify an index to disconnect [ 557.649754][ T8433] loop6: detected capacity change from 0 to 512 [ 557.771959][ T8433] EXT4-fs (loop6): 1 orphan inode deleted [ 557.788475][ T4321] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 557.847776][ T8433] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 557.857338][ T4321] EXT4-fs error (device loop6): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 557.889433][ T8433] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.806207][ T8446] loop7: detected capacity change from 0 to 128 [ 558.884551][ T8446] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 558.913715][ T8446] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 559.290068][ T126] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 560.413331][ T8461] loop1: detected capacity change from 0 to 256 [ 560.440467][ T126] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.479612][ T8461] FAT-fs (loop1): Unrecognized mount option "nnonume=winnt" or missing value [ 560.495293][ T126] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.539726][ T126] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.566793][ T126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.589146][ T126] usb 8-1: SerialNumber: syz [ 560.842664][ T126] usb 8-1: 0:2 : does not exist [ 560.928458][ T126] usb 8-1: USB disconnect, device number 3 [ 561.664220][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 561.799358][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 561.846055][ T4413] udevd[4413]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.731049][ T8492] ax25_connect(): syz.7.894 uses autobind, please contact jreuter@yaina.de [ 565.314406][ T4270] Bluetooth: hci4: command 0xfc11 tx timeout [ 565.320956][ T4268] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 565.658825][ T8497] netlink: 48 bytes leftover after parsing attributes in process `syz.1.898'. [ 565.767489][ T8497] device vlan0 entered promiscuous mode [ 565.955188][ T8504] loop7: detected capacity change from 0 to 512 [ 567.292444][ T8504] EXT4-fs (loop7): 1 orphan inode deleted [ 567.298715][ T8504] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 567.312807][ T8504] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.318509][ T6139] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 567.528283][ T6139] EXT4-fs error (device loop7): ext4_release_dquot:6818: comm kworker/u4:25: Failed to release dquot type 1 [ 567.943925][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.955392][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.624714][ T8514] kvm [8511]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 568.913363][ T4257] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 569.009530][ T8527] virtio-fs: tag not found [ 570.006073][ T4257] usb 7-1: Using ep0 maxpacket: 8 [ 570.013931][ T4257] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 570.043497][ T4257] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 570.053608][ T4257] usb 7-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 570.105501][ T4257] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 570.130407][ T4257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.172817][ T4257] usb 7-1: Product: syz [ 570.177076][ T4257] usb 7-1: Manufacturer: syz [ 570.181699][ T4257] usb 7-1: SerialNumber: syz [ 570.212072][ T4257] hso 7-1:6.0: Can't find BULK IN endpoint [ 570.551304][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.573726][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.608781][ T4350] usb 7-1: USB disconnect, device number 8 [ 571.651091][ T8555] loop1: detected capacity change from 0 to 256 [ 571.674055][ T8555] FAT-fs (loop1): Unrecognized mount option "nnonume=winnt" or missing value [ 573.043363][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 573.066157][ T8566] loop1: detected capacity change from 0 to 256 [ 573.116614][ T8566] exfat: Bad value for 'fmask' [ 573.262885][ T8571] raw_sendmsg: syz.7.921 forgot to set AF_INET. Fix it! [ 573.368954][ T8568] kvm [8567]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 574.106024][ T8583] loop7: detected capacity change from 0 to 512 [ 574.177072][ T8585] overlayfs: missing 'lowerdir' [ 575.893412][ T8583] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 575.902975][ T8583] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.419062][ T8597] hub 2-0:1.0: USB hub found [ 578.424422][ T8597] hub 2-0:1.0: 1 port detected [ 579.529066][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 579.755584][ T8608] loop1: detected capacity change from 0 to 512 [ 579.770248][ T8609] overlayfs: failed to clone upperpath [ 579.850777][ T8608] EXT4-fs (loop1): 1 orphan inode deleted [ 579.883077][ T8297] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 579.903815][ T8608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 579.927453][ T8297] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:28: Failed to release dquot type 1 [ 579.960587][ T8608] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.767894][ T8632] overlayfs: missing 'lowerdir' [ 582.962531][ T8620] kvm [8619]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 584.692178][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 584.694858][ T8643] input: syz0 as /devices/virtual/input/input7 [ 584.704724][ T8643] input: failed to attach handler leds to device input7, error: -6 [ 584.783047][ T14] libceph: connect (1)[c::]:6789 error -101 [ 584.791229][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 584.843800][ T8650] loop1: detected capacity change from 0 to 256 [ 584.850942][ T8650] exfat: Bad value for 'fmask' [ 584.925600][ T8643] ceph: No mds server is up or the cluster is laggy [ 585.676695][ T8660] loop7: detected capacity change from 0 to 256 [ 585.781346][ T8660] FAT-fs (loop7): Directory bread(block 64) failed [ 585.789654][ T8660] FAT-fs (loop7): Directory bread(block 65) failed [ 585.796849][ T8660] FAT-fs (loop7): Directory bread(block 66) failed [ 585.803635][ T8660] FAT-fs (loop7): Directory bread(block 67) failed [ 585.810657][ T8660] FAT-fs (loop7): Directory bread(block 68) failed [ 585.817440][ T8660] FAT-fs (loop7): Directory bread(block 69) failed [ 585.824676][ T8660] FAT-fs (loop7): Directory bread(block 70) failed [ 585.831411][ T8660] FAT-fs (loop7): Directory bread(block 71) failed [ 585.838593][ T8660] FAT-fs (loop7): Directory bread(block 72) failed [ 585.845387][ T8660] FAT-fs (loop7): Directory bread(block 73) failed [ 588.510683][ T8677] loop6: detected capacity change from 0 to 512 [ 588.667544][ T8677] ext4: Unknown parameter 'smackfsfloor' [ 589.678500][ T8683] overlayfs: missing 'lowerdir' [ 591.009627][ T8693] kvm [8692]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 594.922200][ T8728] device vlan2 entered promiscuous mode [ 595.058255][ T8733] fuse: Bad value for 'fd' [ 596.762925][ T4350] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 596.962824][ T4350] usb 8-1: Using ep0 maxpacket: 16 [ 596.977956][ T4350] usb 8-1: unable to get BOS descriptor or descriptor too short [ 597.005384][ T4350] usb 8-1: config 1 interface 0 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 597.032230][ T4350] usb 8-1: config 1 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.071693][ T4350] usb 8-1: config 1 interface 0 has no altsetting 0 [ 597.106793][ T4350] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 597.129817][ T4350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.162143][ T4350] usb 8-1: Product: syz [ 597.172970][ T4350] usb 8-1: Manufacturer: syz [ 597.189235][ T4350] usb 8-1: SerialNumber: syz [ 597.212046][ T8743] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 599.788485][ T8774] device vlan1 entered promiscuous mode [ 599.862476][ T4350] usb 8-1: USB disconnect, device number 4 [ 605.585806][ T8818] tty tty1: ldisc open failed (-12), clearing slot 0 [ 607.519338][ T8840] kvm [8839]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 611.033696][ T8860] loop6: detected capacity change from 0 to 1024 [ 611.044881][ T8860] EXT4-fs (loop6): barriers disabled [ 611.093044][ T8860] JBD2: no valid journal superblock found [ 611.098924][ T8860] EXT4-fs (loop6): error loading journal [ 612.587772][ T8863] delete_channel: no stack [ 612.595916][ T8863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.121087][ T8882] netlink: set zone limit has 8 unknown bytes [ 615.464616][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1006'. [ 617.097944][ T8900] netlink: 'syz.0.1010': attribute type 3 has an invalid length. [ 618.061642][ T8907] loop1: detected capacity change from 0 to 512 [ 618.232026][ T8894] kvm [8890]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 618.310637][ T8907] EXT4-fs (loop1): 1 orphan inode deleted [ 618.322188][ T8907] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 618.331580][ T4598] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 618.637254][ T8907] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.722432][ T4598] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:16: Failed to release dquot type 1 [ 622.352307][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 623.924120][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 625.321162][ T8980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.333326][ T8980] bond0: (slave rose0): Enslaving as an active interface with an up link [ 625.474350][ T6055] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 627.313467][ T9003] loop1: detected capacity change from 0 to 256 [ 628.442182][ T8997] tc_dump_action: action bad kind [ 628.475341][ T9003] FAT-fs (loop1): Directory bread(block 64) failed [ 628.482110][ T9003] FAT-fs (loop1): Directory bread(block 65) failed [ 628.489875][ T9003] FAT-fs (loop1): Directory bread(block 66) failed [ 628.496801][ T9003] FAT-fs (loop1): Directory bread(block 67) failed [ 628.503903][ T9003] FAT-fs (loop1): Directory bread(block 68) failed [ 628.510559][ T9003] FAT-fs (loop1): Directory bread(block 69) failed [ 628.517611][ T9003] FAT-fs (loop1): Directory bread(block 70) failed [ 628.524290][ T9003] FAT-fs (loop1): Directory bread(block 71) failed [ 628.531331][ T9003] FAT-fs (loop1): Directory bread(block 72) failed [ 628.538004][ T9003] FAT-fs (loop1): Directory bread(block 73) failed [ 629.442732][ T126] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 629.460678][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.467089][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.014810][ T126] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 630.057749][ T126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.839832][ T126] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.850722][ T126] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 630.946414][ T126] usb 8-1: string descriptor 0 read error: -71 [ 630.962727][ T126] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 630.992314][ T126] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 631.054725][ T126] usb 8-1: config 0 descriptor?? [ 631.117356][ T126] usb 8-1: can't set config #0, error -71 [ 632.846372][ T9026] loop7: detected capacity change from 0 to 1024 [ 633.481341][ T9026] EXT4-fs (loop7): barriers disabled [ 633.487245][ T9026] JBD2: no valid journal superblock found [ 633.493100][ T9026] EXT4-fs (loop7): error loading journal [ 633.529749][ T126] usb 8-1: USB disconnect, device number 5 [ 636.693628][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1049'. [ 639.148430][ T9075] loop6: detected capacity change from 0 to 8192 [ 639.488769][ T9089] loop1: detected capacity change from 0 to 512 [ 639.495821][ T9089] EXT4-fs: Ignoring removed oldalloc option [ 639.605613][ T9091] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 639.614700][ T9091] FAT-fs (loop6): Filesystem has been set read-only [ 639.621795][ T9091] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 641.532754][ T9089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.167450][ T9089] EXT4-fs: failed to create workqueue [ 642.173022][ T9089] EXT4-fs (loop1): mount failed [ 647.321875][ T9147] fuse: Bad value for 'fd' [ 647.625736][ T9154] loop1: detected capacity change from 0 to 512 [ 647.723052][ T9154] EXT4-fs (loop1): 1 orphan inode deleted [ 647.741069][ T9154] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 647.758459][ T9154] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.778709][ T6055] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 648.586253][ T6055] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:24: Failed to release dquot type 1 [ 650.347245][ T9192] fuse: Bad value for 'fd' [ 651.778976][ T9202] loop6: detected capacity change from 0 to 256 [ 652.221810][ T9202] FAT-fs (loop6): Unrecognized mount option "nnonume=winnt" or missing value [ 652.471892][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 659.808218][ T9258] loop1: detected capacity change from 0 to 512 [ 659.833647][ T9258] ext4: Unknown parameter 'smackfsfloor' [ 662.915683][ T4306] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 662.943078][ T9275] Process accounting resumed [ 663.072270][ T9279] capability: warning: `syz.2.1108' uses deprecated v2 capabilities in a way that may be insecure [ 663.302741][ T4306] usb 7-1: Using ep0 maxpacket: 32 [ 663.310643][ T4306] usb 7-1: config 0 interface 0 has no altsetting 0 [ 663.327589][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 663.350753][ T4306] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 663.428313][ T4306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.665563][ T4306] usb 7-1: Product: syz [ 663.794702][ T4306] usb 7-1: Manufacturer: syz [ 664.045917][ T4306] usb 7-1: SerialNumber: syz [ 664.064354][ T4306] usb 7-1: config 0 descriptor?? [ 664.133420][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 664.214494][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'. [ 664.934086][ T4306] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 664.962783][ T4306] gs_usb: probe of 7-1:0.0 failed with error -71 [ 664.998730][ T9300] loop7: detected capacity change from 0 to 256 [ 665.009287][ T9297] device vlan0 entered promiscuous mode [ 665.018577][ T9300] FAT-fs (loop7): Unrecognized mount option "nnonume=winnt" or missing value [ 665.044343][ T4306] usb 7-1: USB disconnect, device number 9 [ 667.934824][ T9331] loop1: detected capacity change from 0 to 1024 [ 668.016514][ T9331] EXT4-fs (loop1): barriers disabled [ 668.022119][ T9331] JBD2: no valid journal superblock found [ 668.027982][ T9331] EXT4-fs (loop1): error loading journal [ 668.614942][ T9339] loop7: detected capacity change from 0 to 512 [ 668.783551][ T9339] ext4: Unknown parameter 'smackfsfloor' [ 669.688298][ T4268] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 669.697597][ T4268] Bluetooth: hci2: Injecting HCI hardware error event [ 669.707631][ T4268] Bluetooth: hci2: hardware error 0x00 [ 671.467817][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 671.483030][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1128'. [ 671.686610][ T9378] loop1: detected capacity change from 0 to 256 [ 671.728124][ T9378] FAT-fs (loop1): Unrecognized mount option "nnonume=winnt" or missing value [ 673.413003][ T4268] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 674.207505][ T9395] 9p: Unknown access argument 18446744073709551615: -34 [ 674.700568][ T9401] loop7: detected capacity change from 0 to 1024 [ 675.246616][ T9401] EXT4-fs (loop7): barriers disabled [ 675.252221][ T9401] JBD2: no valid journal superblock found [ 675.259089][ T9401] EXT4-fs (loop7): error loading journal [ 675.863910][ T4334] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 676.773264][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1141'. [ 676.816182][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1141'. [ 677.590152][ T9424] loop6: detected capacity change from 0 to 256 [ 677.643531][ T9424] FAT-fs (loop6): Unrecognized mount option "nnonume=winnt" or missing value [ 677.691982][ T9426] loop7: detected capacity change from 0 to 512 [ 677.729024][ T9426] ext4: Unknown parameter 'smackfsfloor' [ 682.044689][ T9456] loop1: detected capacity change from 0 to 1024 [ 682.256913][ T9456] EXT4-fs (loop1): barriers disabled [ 682.280283][ T9456] JBD2: no valid journal superblock found [ 682.286253][ T9456] EXT4-fs (loop1): error loading journal [ 682.607718][ T4413] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 682.624065][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1155'. [ 683.048400][ T9469] overlayfs: failed to clone upperpath [ 686.689857][ T9476] loop6: detected capacity change from 0 to 256 [ 686.942086][ T9493] 9p: Unknown access argument 18446744073709551615: -34 [ 688.787625][ T9507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1168'. [ 690.786872][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.793273][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.807872][ T9533] 9p: Unknown access argument 18446744073709551615: -34 [ 692.076333][ T9537] xt_bpf: check failed: parse error [ 699.069546][ T9594] loop7: detected capacity change from 0 to 512 [ 699.110534][ T9594] ext4: Unknown parameter 'smackfsfloor' [ 699.183864][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 700.451077][ T9607] loop1: detected capacity change from 0 to 256 [ 701.272840][ T9607] FAT-fs (loop1): bogus sectors per cluster 255 [ 701.309807][ T9607] FAT-fs (loop1): Can't find a valid FAT filesystem [ 702.484689][ T9607] loop1: detected capacity change from 0 to 128 [ 702.843869][ T9607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 702.871711][ T9607] ext4 filesystem being mounted at /254/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 704.337415][ T9621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 704.926481][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 707.173629][ T9648] 9p: Unknown access argument 18446744073709551615: -34 [ 707.442019][ T9658] loop7: detected capacity change from 0 to 512 [ 707.455267][ T9658] ext4: Unknown parameter 'smackfsfloor' [ 707.726993][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 707.962597][ T9664] loop6: detected capacity change from 0 to 256 [ 709.554274][ T9664] FAT-fs (loop6): Directory bread(block 64) failed [ 709.561048][ T9664] FAT-fs (loop6): Directory bread(block 65) failed [ 709.568256][ T9664] FAT-fs (loop6): Directory bread(block 66) failed [ 709.575145][ T9664] FAT-fs (loop6): Directory bread(block 67) failed [ 709.582597][ T9664] FAT-fs (loop6): Directory bread(block 68) failed [ 709.590314][ T9664] FAT-fs (loop6): Directory bread(block 69) failed [ 709.597707][ T9664] FAT-fs (loop6): Directory bread(block 70) failed [ 709.604469][ T9664] FAT-fs (loop6): Directory bread(block 71) failed [ 709.611633][ T9664] FAT-fs (loop6): Directory bread(block 72) failed [ 709.618379][ T9664] FAT-fs (loop6): Directory bread(block 73) failed [ 712.543334][ T9687] loop6: detected capacity change from 0 to 128 [ 714.156483][ T9696] 9p: Unknown access argument 18446744073709551615: -34 [ 714.582932][ T4306] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 714.852965][ T4306] usb 7-1: Using ep0 maxpacket: 8 [ 714.869660][ T4306] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 714.973056][ T4306] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 715.032385][ T4306] usb 7-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 715.133074][ T9705] sctp: failed to load transform for md5: -4 [ 715.140157][ T9712] loop7: detected capacity change from 0 to 512 [ 715.141141][ T9712] ext4: Unknown parameter 'smackfsfloor' [ 715.331417][ T4306] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 715.352716][ T4306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.360852][ T4306] usb 7-1: Product: syz [ 715.369115][ T4306] usb 7-1: Manufacturer: syz [ 716.436311][ T4306] usb 7-1: SerialNumber: syz [ 717.032029][ T4306] hso 7-1:6.0: Can't find BULK IN endpoint [ 717.352796][ T4306] usb 7-1: USB disconnect, device number 10 [ 717.424093][ T4413] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 720.658799][ T9748] loop1: detected capacity change from 0 to 128 [ 722.942963][ T14] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 723.158832][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 723.170889][ T14] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 723.238686][ T14] usb 8-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 723.258551][ T9776] netlink: 'syz.0.1247': attribute type 1 has an invalid length. [ 723.462754][ T14] usb 8-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.494007][ T9776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 723.495408][ T14] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 723.511196][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.521188][ T14] usb 8-1: Product: syz [ 723.525481][ T14] usb 8-1: Manufacturer: syz [ 723.530103][ T14] usb 8-1: SerialNumber: syz [ 723.555285][ T14] hso 8-1:6.0: Can't find BULK IN endpoint [ 723.578665][ T9782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 723.591168][ T9782] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 723.655251][ T9782] bond1: (slave ipip0): Error -95 calling set_mac_address [ 723.759704][ T14] usb 8-1: USB disconnect, device number 6 [ 723.766287][ T9776] bond1: (slave ip6erspan0): making interface the new active one [ 723.777329][ T9776] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 724.195675][ T9790] loop1: detected capacity change from 0 to 128 [ 727.923012][ T9807] loop1: detected capacity change from 0 to 1024 [ 728.339393][ T9807] EXT4-fs (loop1): barriers disabled [ 728.350068][ T9807] JBD2: no valid journal superblock found [ 728.356193][ T9807] EXT4-fs (loop1): error loading journal [ 730.463158][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1266'. [ 730.606408][ T9836] loop1: detected capacity change from 0 to 128 [ 735.012448][ T9885] loop1: detected capacity change from 0 to 128 [ 738.946735][ T9926] loop6: detected capacity change from 0 to 128 [ 745.096489][ T9973] loop6: detected capacity change from 0 to 128 [ 746.648494][ T9983] dlm: non-version read from control device 36 [ 752.569322][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.575764][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.812456][T10026] loop7: detected capacity change from 0 to 128 [ 759.831770][T10089] loop7: detected capacity change from 0 to 128 [ 766.288233][T10144] loop7: detected capacity change from 0 to 128 [ 769.495315][T10166] input: syz0 as /devices/virtual/input/input11 [ 769.501642][T10166] input: failed to attach handler leds to device input11, error: -6 [ 773.101934][ T6475] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 773.553977][ T6475] usb 8-1: Using ep0 maxpacket: 8 [ 773.567091][ T6475] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 773.603965][ T6475] usb 8-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 773.630885][ T6475] usb 8-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 773.680187][ T6475] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 773.701101][ T6475] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.714398][ T6475] usb 8-1: Product: syz [ 773.718678][ T6475] usb 8-1: Manufacturer: syz [ 773.729199][ T6475] usb 8-1: SerialNumber: syz [ 774.052737][ T6475] hso 8-1:6.0: Can't find BULK IN endpoint [ 774.717694][ T6475] usb 8-1: USB disconnect, device number 7 [ 776.482221][T10237] xt_bpf: check failed: parse error [ 777.111474][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1379'. [ 778.427960][T10255] loop6: detected capacity change from 0 to 8192 [ 780.148138][T10266] loop1: detected capacity change from 0 to 1024 [ 780.241660][T10266] EXT4-fs (loop1): barriers disabled [ 780.250454][T10266] JBD2: no valid journal superblock found [ 780.256580][T10266] EXT4-fs (loop1): error loading journal [ 780.928660][T10020] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 780.978124][T10273] fuse: Bad value for 'fd' [ 781.181913][T10277] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 781.202377][T10277] FAT-fs (loop6): Filesystem has been set read-only [ 781.292365][T10277] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 782.610147][T10289] xt_bpf: check failed: parse error [ 782.692163][T10288] loop1: detected capacity change from 0 to 512 [ 782.871931][T10288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 782.909843][T10288] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.363030][T10298] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 783.809211][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 784.480620][T10315] loop6: detected capacity change from 0 to 256 [ 784.511362][T10315] FAT-fs (loop6): Unrecognized mount option "nnonume=winnt" or missing value [ 785.067384][T10320] tipc: Started in network mode [ 785.072466][T10320] tipc: Node identity , cluster identity 4711 [ 785.079573][T10320] tipc: Failed to obtain node identity [ 785.085149][T10320] tipc: Enabling of bearer rejected, failed to enable media [ 785.098271][T10320] syz.1.1399 sent an empty control message without MSG_MORE. [ 787.993999][T10339] loop6: detected capacity change from 0 to 512 [ 788.039766][T10336] xt_bpf: check failed: parse error [ 788.225096][T10339] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 788.242893][T10339] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.572701][ T4257] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 788.779813][ T4257] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.920416][T10351] EXT4-fs: error -4 creating inode table initialization thread [ 788.928654][T10351] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 788.984115][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 789.046197][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 789.147506][ T4257] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 789.240561][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 789.282389][ T4257] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 789.316908][ T4257] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 789.367771][ T4257] usb 2-1: Manufacturer: syz [ 789.397494][ T4257] usb 2-1: config 0 descriptor?? [ 789.407751][T10357] netlink: set zone limit has 8 unknown bytes [ 790.392947][ T4257] rc_core: IR keymap rc-hauppauge not found [ 790.404731][ T4257] Registered IR keymap rc-empty [ 790.425738][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.478444][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.531379][ T4257] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 790.556157][T10366] loop7: detected capacity change from 0 to 256 [ 790.591701][T10366] FAT-fs (loop7): Unrecognized mount option "nnonume=winnt" or missing value [ 790.601479][ T4257] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 790.883301][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 790.921846][ C1] rc rc0: IR event FIFO is full! [ 790.926907][ C1] rc rc0: IR event FIFO is full! [ 790.931878][ C1] rc rc0: IR event FIFO is full! [ 790.936837][ C1] rc rc0: IR event FIFO is full! [ 790.942177][ C1] rc rc0: IR event FIFO is full! [ 790.947142][ C1] rc rc0: IR event FIFO is full! [ 790.952097][ C1] rc rc0: IR event FIFO is full! [ 790.957058][ C1] rc rc0: IR event FIFO is full! [ 790.962032][ C1] rc rc0: IR event FIFO is full! [ 791.063868][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.073094][ C1] rc rc0: IR event FIFO is full! [ 791.078077][ C1] rc rc0: IR event FIFO is full! [ 791.083042][ C1] rc rc0: IR event FIFO is full! [ 791.088018][ C1] rc rc0: IR event FIFO is full! [ 791.097891][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.520760][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.582742][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.637176][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.733087][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.772956][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.815092][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.868176][ T4257] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 791.921088][ T4257] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 791.941303][ T4257] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 792.013064][ T4257] usb 2-1: USB disconnect, device number 10 [ 792.522858][ T4257] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 792.728652][ T4257] usb 2-1: Using ep0 maxpacket: 8 [ 792.736886][ T4257] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 792.793628][ T4257] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 792.837035][ T4257] usb 2-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 792.851354][T10373] loop7: detected capacity change from 0 to 40427 [ 792.900236][ T4257] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 792.904724][T10373] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff [ 792.948321][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.972727][T10373] F2FS-fs (loop7): invalid crc value [ 792.981605][ T4257] usb 2-1: Product: syz [ 793.106855][T10373] F2FS-fs (loop7): Found nat_bits in checkpoint [ 793.178133][ T4257] usb 2-1: Manufacturer: syz [ 793.183131][ T4257] usb 2-1: SerialNumber: syz [ 793.192340][ T4257] hso 2-1:6.0: Can't find BULK IN endpoint [ 793.921109][ T4306] usb 2-1: USB disconnect, device number 11 [ 794.049829][T10373] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 795.616932][T10392] xt_bpf: check failed: parse error [ 795.640658][T10397] loop6: detected capacity change from 0 to 512 [ 795.852410][T10397] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 795.890332][T10397] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.623819][T10404] syz.1.1422[10404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 796.623930][T10404] syz.1.1422[10404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 796.734298][T10408] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 797.041976][ T5117] EXT4-fs (loop6): unmounting filesystem. [ 797.281489][T10417] loop6: detected capacity change from 0 to 8192 [ 798.853091][T10417] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 798.861925][T10417] FAT-fs (loop6): Filesystem has been set read-only [ 798.868686][T10417] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 799.750508][T10448] Invalid ELF header len 8 [ 799.940774][ T26] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 799.960851][T10447] xt_bpf: check failed: parse error [ 800.144076][ T26] usb 8-1: Using ep0 maxpacket: 8 [ 800.182408][ T26] usb 8-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 800.538998][ T27] audit: type=1800 audit(1739578039.304:367): pid=10444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.1429" name="/newroot/236/bus" dev="tmpfs" ino=1346 res=0 errno=0 [ 800.650306][ T26] usb 8-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 800.862698][ T26] usb 8-1: config 6 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.919964][ T26] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 800.950837][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.975310][ T26] usb 8-1: Product: syz [ 801.006385][ T26] usb 8-1: Manufacturer: syz [ 801.011101][ T26] usb 8-1: SerialNumber: syz [ 801.223499][ T26] hso 8-1:6.0: Can't find BULK IN endpoint [ 801.722873][ T6475] usb 8-1: USB disconnect, device number 8 [ 802.008231][T10466] loop1: detected capacity change from 0 to 512 [ 802.226849][T10466] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 802.242890][T10466] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.276106][T10470] syz.2.1436[10470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.276227][T10470] syz.2.1436[10470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 803.805639][T10489] xt_bpf: check failed: parse error [ 803.917128][T10490] netlink: set zone limit has 8 unknown bytes [ 806.480909][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1446'. [ 806.682311][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 806.697654][T10505] netlink: 'syz.7.1446': attribute type 2 has an invalid length. [ 806.945278][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1449'. [ 807.507261][T10510] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 807.535266][T10510] bridge0: port 3(batadv1) entered blocking state [ 807.541916][T10510] bridge0: port 3(batadv1) entered disabled state [ 807.728070][T10510] device batadv1 entered promiscuous mode [ 808.498758][ T4354] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 808.509002][ T4354] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 808.622499][T10510] bridge0: port 3(batadv1) entered blocking state [ 808.629149][T10510] bridge0: port 3(batadv1) entered forwarding state [ 808.865823][T10527] loop1: detected capacity change from 0 to 512 [ 811.999950][T10527] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 812.162702][T10534] xt_bpf: check failed: parse error [ 813.635627][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.641981][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.059998][T10551] syz.0.1459[10551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.060093][T10551] syz.0.1459[10551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 817.993200][T10577] xt_bpf: check failed: parse error [ 819.233975][T10580] loop7: detected capacity change from 0 to 512 [ 819.548201][T10580] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 819.557281][T10580] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 819.649709][ T4268] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 819.649824][ T4268] Bluetooth: hci0: Malformed LE Event: 0x02 [ 820.123632][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 821.378108][T10600] syz.6.1473[10600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 821.378224][T10600] syz.6.1473[10600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 824.873500][T10624] xt_bpf: check failed: parse error [ 824.934629][T10629] input: syz0 as /devices/virtual/input/input13 [ 824.952125][T10629] input: failed to attach handler leds to device input13, error: -6 [ 825.392961][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 825.902736][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 825.976579][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.390436][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 826.426769][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 826.500963][ T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 826.602951][ T14] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 826.615579][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.659246][ T14] hub 2-1:1.0: bad descriptor, ignoring hub [ 826.677442][ T14] hub: probe of 2-1:1.0 failed with error -5 [ 826.708122][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 826.726052][ T14] cdc_wdm 2-1:1.0: skipping garbage [ 826.826043][ T14] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 826.872885][ T14] cdc_wdm 2-1:1.0: Unknown control protocol [ 827.685402][ T14] usb 2-1: USB disconnect, device number 12 [ 827.952094][T10649] syz.0.1487[10649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 827.952205][T10649] syz.0.1487[10649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 831.061497][T10672] loop1: detected capacity change from 0 to 1024 [ 831.862091][T10672] EXT4-fs (loop1): barriers disabled [ 831.871273][T10672] JBD2: no valid journal superblock found [ 831.877389][T10672] EXT4-fs (loop1): error loading journal [ 834.135131][T10693] syz.7.1500[10693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.135244][T10693] syz.7.1500[10693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 836.146151][T10707] xt_bpf: check failed: parse error [ 836.602760][T10714] input: syz0 as /devices/virtual/input/input14 [ 836.619433][T10714] input: failed to attach handler leds to device input14, error: -6 [ 837.256880][T10723] loop7: detected capacity change from 0 to 1024 [ 837.497676][T10723] EXT4-fs (loop7): barriers disabled [ 837.504976][T10723] JBD2: no valid journal superblock found [ 837.511046][T10723] EXT4-fs (loop7): error loading journal [ 838.256187][T10727] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1510'. [ 838.937128][T10020] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 841.317882][T10744] loop7: detected capacity change from 0 to 128 [ 844.601503][T10752] input: syz0 as /devices/virtual/input/input15 [ 844.614716][T10752] input: failed to attach handler leds to device input15, error: -6 [ 845.055511][ T4257] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 845.763214][ T4257] usb 7-1: Using ep0 maxpacket: 32 [ 845.814617][ T4257] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 846.053622][ T4257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.284170][ T4257] usb 7-1: config 0 descriptor?? [ 846.368078][ T4257] gspca_main: sunplus-2.14.0 probing 041e:400b [ 847.621837][ T4257] gspca_sunplus: reg_r err -110 [ 847.668941][ T4257] sunplus: probe of 7-1:0.0 failed with error -110 [ 848.417939][ T4306] usb 7-1: USB disconnect, device number 11 [ 850.188688][T10803] loop1: detected capacity change from 0 to 128 [ 853.012718][ T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 854.316357][ T14] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 854.365525][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.406088][ T14] usb 2-1: Product: syz [ 854.432738][ T14] usb 2-1: Manufacturer: syz [ 854.487530][ T14] usb 2-1: SerialNumber: syz [ 854.560698][ T14] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 854.781408][ T14] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 855.823930][ T4306] usb 2-1: USB disconnect, device number 13 [ 855.895303][ T14] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 855.904532][ T14] ath9k_htc: Failed to initialize the device [ 855.940489][ T4306] usb 2-1: ath9k_htc: USB layer deinitialized [ 857.613156][T10866] syz.1.1550[10866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.613277][T10866] syz.1.1550[10866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.003222][T10906] input: syz0 as /devices/virtual/input/input16 [ 861.437454][T10906] input: failed to attach handler leds to device input16, error: -6 [ 864.988181][T10973] syz.2.1577[10973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 864.988277][T10973] syz.2.1577[10973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 865.972748][ T4306] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 865.997780][T10984] loop1: detected capacity change from 0 to 256 [ 866.022926][T10984] FAT-fs (loop1): bogus sectors per cluster 255 [ 866.037934][T10984] FAT-fs (loop1): Can't find a valid FAT filesystem [ 866.182086][T10984] loop1: detected capacity change from 0 to 128 [ 866.202987][ T4306] usb 7-1: Using ep0 maxpacket: 16 [ 866.217820][ T4306] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.269354][ T4306] usb 7-1: config 0 interface 0 has no altsetting 0 [ 866.302404][T10984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 866.332622][T10984] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 866.352790][ T4306] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 866.364596][ C0] vkms_vblank_simulate: vblank timer overrun [ 866.856063][ T4306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.873954][ T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 866.892271][T10996] input: syz0 as /devices/virtual/input/input17 [ 866.898737][T10996] input: failed to attach handler leds to device input17, error: -6 [ 867.051990][ T4306] usb 7-1: config 0 descriptor?? [ 867.095653][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.112642][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.869705][ T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 867.909849][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 868.023970][ T14] usb 2-1: SerialNumber: syz [ 868.729932][T11012] syz.2.1592[11012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.730814][T11012] syz.2.1592[11012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.789914][T10991] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 869.162135][ T14] usb 2-1: invalid UAC_HEADER (v1) [ 869.181213][ T14] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 869.197378][ T14] usb 2-1: USB disconnect, device number 14 [ 869.413615][T10020] udevd[10020]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 870.166190][T11021] loop7: detected capacity change from 0 to 256 [ 870.253622][T11021] FAT-fs (loop7): Directory bread(block 64) failed [ 870.260707][T11021] FAT-fs (loop7): Directory bread(block 65) failed [ 870.267511][T11021] FAT-fs (loop7): Directory bread(block 66) failed [ 870.274334][T11021] FAT-fs (loop7): Directory bread(block 67) failed [ 870.281535][T11021] FAT-fs (loop7): Directory bread(block 68) failed [ 870.288665][T11021] FAT-fs (loop7): Directory bread(block 69) failed [ 870.295388][T11021] FAT-fs (loop7): Directory bread(block 70) failed [ 870.301986][T11021] FAT-fs (loop7): Directory bread(block 71) failed [ 870.308620][T11021] FAT-fs (loop7): Directory bread(block 72) failed [ 870.315200][T11021] FAT-fs (loop7): Directory bread(block 73) failed [ 870.941239][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 871.285246][ T4306] usbhid 7-1:0.0: can't add hid device: -71 [ 871.302695][ T4306] usbhid: probe of 7-1:0.0 failed with error -71 [ 871.317767][ T4306] usb 7-1: USB disconnect, device number 12 [ 874.414327][T11047] mmap: syz.1.1601 (11047) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 876.133233][T11060] xt_bpf: check failed: parse error [ 876.153258][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.167811][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.033061][T11056] syz.6.1604[11056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.033176][T11056] syz.6.1604[11056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.788089][T11067] loop7: detected capacity change from 0 to 256 [ 877.889244][T11067] FAT-fs (loop7): bogus sectors per cluster 255 [ 877.896801][T11067] FAT-fs (loop7): Can't find a valid FAT filesystem [ 878.088646][T11067] loop7: detected capacity change from 0 to 128 [ 878.364005][T11071] loop6: detected capacity change from 0 to 256 [ 878.436339][T11071] FAT-fs (loop6): Directory bread(block 64) failed [ 878.443047][T11071] FAT-fs (loop6): Directory bread(block 65) failed [ 878.450730][T11071] FAT-fs (loop6): Directory bread(block 66) failed [ 878.457439][T11071] FAT-fs (loop6): Directory bread(block 67) failed [ 878.464152][T11071] FAT-fs (loop6): Directory bread(block 68) failed [ 878.470690][T11071] FAT-fs (loop6): Directory bread(block 69) failed [ 878.477345][T11071] FAT-fs (loop6): Directory bread(block 70) failed [ 878.484055][T11071] FAT-fs (loop6): Directory bread(block 71) failed [ 878.490665][T11071] FAT-fs (loop6): Directory bread(block 72) failed [ 878.497256][T11071] FAT-fs (loop6): Directory bread(block 73) failed [ 878.701928][T11067] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 878.746244][T11067] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 879.252977][ T26] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 880.304912][ T26] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 880.332752][ T26] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 880.355596][ T26] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 880.416371][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 880.487371][ T26] usb 8-1: SerialNumber: syz [ 881.783392][T11106] xt_bpf: check failed: parse error [ 883.576215][T11078] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 883.713507][T11109] overlayfs: failed to clone upperpath [ 883.794014][ T26] usb 8-1: can't set config #1, error -71 [ 883.843057][ T26] usb 8-1: USB disconnect, device number 9 [ 883.900655][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 887.211467][T11141] Bluetooth: MGMT ver 1.22 [ 888.085846][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1633'. [ 888.948755][T11163] xt_bpf: check failed: parse error [ 890.357539][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.364885][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.207454][T11192] loop7: detected capacity change from 0 to 1024 [ 891.295741][T11192] EXT4-fs (loop7): barriers disabled [ 891.310810][T11192] JBD2: no valid journal superblock found [ 891.317054][T11192] EXT4-fs (loop7): error loading journal [ 892.302354][T11201] loop7: detected capacity change from 0 to 256 [ 892.340582][T11201] FAT-fs (loop7): Unrecognized mount option "nnonume=winnt" or missing value [ 892.342028][T11204] loop1: detected capacity change from 0 to 256 [ 892.397355][T11204] FAT-fs (loop1): bogus sectors per cluster 255 [ 892.412481][T11204] FAT-fs (loop1): Can't find a valid FAT filesystem [ 892.472459][T11204] loop1: detected capacity change from 0 to 128 [ 892.631230][T11204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 894.061801][T11204] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 894.482719][ T126] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 896.322665][ T126] usb 2-1: device descriptor read/all, error -71 [ 896.552146][T11237] overlayfs: failed to clone upperpath [ 896.561648][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 899.574782][T11268] loop6: detected capacity change from 0 to 256 [ 901.728999][T11268] FAT-fs (loop6): Directory bread(block 64) failed [ 901.735750][T11268] FAT-fs (loop6): Directory bread(block 65) failed [ 901.742393][T11268] FAT-fs (loop6): Directory bread(block 66) failed [ 901.749233][T11268] FAT-fs (loop6): Directory bread(block 67) failed [ 901.755923][T11268] FAT-fs (loop6): Directory bread(block 68) failed [ 901.762501][T11268] FAT-fs (loop6): Directory bread(block 69) failed [ 901.769156][T11268] FAT-fs (loop6): Directory bread(block 70) failed [ 901.775803][T11268] FAT-fs (loop6): Directory bread(block 71) failed [ 901.782450][T11268] FAT-fs (loop6): Directory bread(block 72) failed [ 901.789391][T11268] FAT-fs (loop6): Directory bread(block 73) failed [ 902.754756][ T126] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 902.995371][ T126] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 903.015197][ T126] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 903.029132][T11295] loop1: detected capacity change from 0 to 256 [ 903.040769][T11295] FAT-fs (loop1): Unrecognized mount option "nnonume=winnt" or missing value [ 903.106660][ T126] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 903.116054][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 903.141385][ T126] usb 7-1: SerialNumber: syz [ 904.295650][ T126] usb 7-1: 0:2 : does not exist [ 904.336609][ T126] usb 7-1: USB disconnect, device number 13 [ 904.790415][T11314] loop1: detected capacity change from 0 to 512 [ 904.797543][T11314] EXT4-fs: Ignoring removed oldalloc option [ 905.873006][T11314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 905.908467][T11110] udevd[11110]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.050012][T11314] EXT4-fs (loop1): orphan cleanup on readonly fs [ 906.073398][T11314] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 906.083231][T11314] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 906.092807][T11314] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1679: Failed to acquire dquot type 1 [ 906.114922][T11314] EXT4-fs (loop1): 1 truncate cleaned up [ 906.236617][T11314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 908.459444][ T4250] EXT4-fs (loop1): unmounting filesystem. [ 908.634736][T11328] input: syz0 as /devices/virtual/input/input18 [ 908.664380][T11328] input: failed to attach handler leds to device input18, error: -6 [ 914.893057][T11380] loop7: detected capacity change from 0 to 512 [ 914.900055][T11380] EXT4-fs: Ignoring removed oldalloc option [ 914.909255][T11380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 915.029805][T11380] EXT4-fs (loop7): orphan cleanup on readonly fs [ 915.047622][T11380] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 915.058187][T11380] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 915.067641][T11380] EXT4-fs error (device loop7): ext4_acquire_dquot:6795: comm syz.7.1694: Failed to acquire dquot type 1 [ 915.103728][T11380] EXT4-fs (loop7): 1 truncate cleaned up [ 915.289696][T11380] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 916.279485][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 922.775514][T11431] loop7: detected capacity change from 0 to 512 [ 922.782595][T11431] EXT4-fs: Ignoring removed oldalloc option [ 922.791960][T11431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 922.814524][T11431] EXT4-fs (loop7): orphan cleanup on readonly fs [ 922.829707][T11431] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 922.839259][T11431] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 922.848973][T11431] EXT4-fs error (device loop7): ext4_acquire_dquot:6795: comm syz.7.1710: Failed to acquire dquot type 1 [ 922.992904][T11436] loop6: detected capacity change from 0 to 512 [ 923.000268][T11436] ext4: Unknown parameter 'smackfsfloor' [ 923.070432][T11431] EXT4-fs (loop7): 1 truncate cleaned up [ 923.076477][T11431] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 923.253208][ T6087] EXT4-fs (loop7): unmounting filesystem. [ 923.308046][T11110] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 924.962411][T11468] loop1: detected capacity change from 0 to 256 [ 925.011473][T11468] FAT-fs (loop1): Directory bread(block 64) failed [ 925.018390][T11468] FAT-fs (loop1): Directory bread(block 65) failed [ 925.043955][T11468] FAT-fs (loop1): Directory bread(block 66) failed [ 925.050572][T11468] FAT-fs (loop1): Directory bread(block 67) failed [ 925.162806][T11468] FAT-fs (loop1): Directory bread(block 68) failed [ 925.210828][T11468] FAT-fs (loop1): Directory bread(block 69) failed [ 925.271333][T11468] FAT-fs (loop1): Directory bread(block 70) failed [ 925.278550][T11468] FAT-fs (loop1): Directory bread(block 71) failed [ 925.285296][T11468] FAT-fs (loop1): Directory bread(block 72) failed [ 925.291936][T11468] FAT-fs (loop1): Directory bread(block 73) failed [ 928.100790][T11504] loop7: detected capacity change from 0 to 512 [ 928.841541][T11504] ext4: Unknown parameter 'smackfsfloor' [ 930.692720][ T8418] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 931.662696][ T8418] usb 7-1: Using ep0 maxpacket: 32 [ 931.674324][ T8418] usb 7-1: config 0 interface 0 has no altsetting 0 [ 931.699653][ T8418] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 931.730691][ T8418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.754303][ T8418] usb 7-1: Product: syz [ 931.762960][ T8418] usb 7-1: Manufacturer: syz [ 931.767609][ T8418] usb 7-1: SerialNumber: syz [ 931.803460][ T8418] usb 7-1: config 0 descriptor?? [ 932.378720][ T8418] gs_usb 7-1:0.0: Couldn't get device config: (err=-121) [ 932.447538][ T8418] gs_usb: probe of 7-1:0.0 failed with error -121 [ 933.688102][ T26] usb 7-1: USB disconnect, device number 14 [ 936.793118][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.799536][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.879113][ T126] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 937.152766][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 937.159956][ T126] usb 7-1: config 0 interface 0 has no altsetting 0 [ 937.174221][ T126] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 939.075213][ T8297] ------------[ cut here ]------------ [ 939.081256][ T8297] WARNING: CPU: 1 PID: 8297 at io_uring/io_uring.c:2809 io_ring_exit_work+0x31d/0x794 [ 939.091266][ T8297] Modules linked in: [ 939.095313][ T8297] CPU: 1 PID: 8297 Comm: kworker/u4:28 Not tainted 6.1.128-syzkaller #0 [ 939.095489][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.103695][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 939.103775][ T8297] Workqueue: events_unbound io_ring_exit_work [ 939.103810][ T8297] RIP: 0010:io_ring_exit_work+0x31d/0x794 [ 939.103839][ T8297] Code: 78 23 e8 cb 30 db f6 48 8b 7c 24 30 48 8b 74 24 18 e8 1c 19 0a 00 48 85 c0 75 3f e8 b2 30 db f6 e9 f9 fd ff ff e8 a8 30 db f6 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb cf 48 8b 4c 24 10 80 e1 07 [ 939.103856][ T8297] RSP: 0018:ffffc90005667ae0 EFLAGS: 00010293 [ 939.103876][ T8297] RAX: ffffffff8aaf6248 RBX: 000000010000f8c3 RCX: ffff88802e943b80 [ 939.103892][ T8297] RDX: 0000000000000000 RSI: ffffffffffffffc3 RDI: 0000000000000000 [ 939.103906][ T8297] RBP: ffffc90005667c50 R08: ffffffff8aaf621b R09: fffff52000accf4d [ 939.103922][ T8297] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000010000f900 [ 939.103938][ T8297] R13: ffff88805690b260 R14: 1ffff1100ad2164c R15: dffffc0000000000 [ 939.103954][ T8297] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 939.103973][ T8297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.103988][ T8297] CR2: 000055557a2945c8 CR3: 0000000031a91000 CR4: 00000000003506e0 [ 939.104006][ T8297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 939.104020][ T8297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 939.104034][ T8297] Call Trace: [ 939.104042][ T8297] [ 939.104051][ T8297] ? __warn+0x15a/0x520 [ 939.112423][ T126] usb 7-1: Product: syz [ 939.122160][ T8297] ? io_ring_exit_work+0x31d/0x794 [ 939.128583][ T126] usb 7-1: Manufacturer: syz [ 939.134031][ T8297] ? report_bug+0x2af/0x500 [ 939.153777][ T126] usb 7-1: SerialNumber: syz [ 939.156086][ T126] usb 7-1: config 0 descriptor?? [ 939.159982][ T8297] ? io_ring_exit_work+0x31d/0x794 [ 939.160022][ T8297] ? handle_bug+0x3d/0x70 [ 939.288738][ T8297] ? exc_invalid_op+0x16/0x40 [ 939.293515][ T8297] ? asm_exc_invalid_op+0x16/0x20 [ 939.298577][ T8297] ? io_ring_exit_work+0x2f0/0x794 [ 939.303775][ T8297] ? io_ring_exit_work+0x31d/0x794 [ 939.308939][ T8297] ? io_ring_exit_work+0x31d/0x794 [ 939.314145][ T8297] ? io_ring_ctx_wait_and_kill+0x314/0x314 [ 939.320012][ T8297] ? do_raw_spin_unlock+0x137/0x8a0 [ 939.325302][ T8297] ? process_one_work+0x806/0x1260 [ 939.330450][ T8297] process_one_work+0x917/0x1260 [ 939.335476][ T8297] ? worker_detach_from_pool+0x260/0x260 [ 939.341153][ T8297] ? _raw_spin_lock_irqsave+0x120/0x120 [ 939.346779][ T8297] ? kthread_data+0x4e/0xc0 [ 939.351330][ T8297] ? wq_worker_running+0x97/0x190 [ 939.356421][ T8297] worker_thread+0xa47/0x1200 [ 939.361136][ T8297] ? _raw_spin_unlock+0x40/0x40 [ 939.366067][ T8297] ? release_firmware_map_entry+0x18b/0x18b [ 939.371999][ T8297] ? _raw_spin_unlock+0x40/0x40 [ 939.376945][ T8297] kthread+0x28d/0x320 [ 939.381044][ T8297] ? worker_clr_flags+0x190/0x190 [ 939.386138][ T8297] ? kthread_blkcg+0xd0/0xd0 [ 939.390774][ T8297] ret_from_fork+0x1f/0x30 [ 939.395285][ T8297] [ 939.395506][ T126] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 939.398309][ T8297] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 939.398322][ T8297] CPU: 1 PID: 8297 Comm: kworker/u4:28 Not tainted 6.1.128-syzkaller #0 [ 939.398343][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 939.398357][ T8297] Workqueue: events_unbound io_ring_exit_work [ 939.398391][ T8297] Call Trace: [ 939.398401][ T8297] [ 939.398410][ T8297] dump_stack_lvl+0x1e3/0x2cb [ 939.398450][ T8297] ? nf_tcp_handle_invalid+0x642/0x642 [ 939.398486][ T8297] ? panic+0x764/0x764 [ 939.398510][ T8297] ? 0xffffffffa0006300 [ 939.398541][ T8297] ? vscnprintf+0x59/0x80 [ 939.398569][ T8297] panic+0x318/0x764 [ 939.398594][ T8297] ? __warn+0x169/0x520 [ 939.398628][ T8297] ? memcpy_page_flushcache+0xfc/0xfc [ 939.398662][ T8297] ? ret_from_fork+0x1f/0x30 [ 939.398700][ T8297] __warn+0x348/0x520 [ 939.398725][ T8297] ? io_ring_exit_work+0x31d/0x794 [ 939.398759][ T8297] report_bug+0x2af/0x500 [ 939.398792][ T8297] ? io_ring_exit_work+0x31d/0x794 [ 939.398827][ T8297] handle_bug+0x3d/0x70 [ 939.398858][ T8297] exc_invalid_op+0x16/0x40 [ 939.398892][ T8297] asm_exc_invalid_op+0x16/0x20 [ 939.398915][ T8297] RIP: 0010:io_ring_exit_work+0x31d/0x794 [ 939.398945][ T8297] Code: 78 23 e8 cb 30 db f6 48 8b 7c 24 30 48 8b 74 24 18 e8 1c 19 0a 00 48 85 c0 75 3f e8 b2 30 db f6 e9 f9 fd ff ff e8 a8 30 db f6 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb cf 48 8b 4c 24 10 80 e1 07 [ 939.398964][ T8297] RSP: 0018:ffffc90005667ae0 EFLAGS: 00010293 [ 939.398984][ T8297] RAX: ffffffff8aaf6248 RBX: 000000010000f8c3 RCX: ffff88802e943b80 [ 939.399001][ T8297] RDX: 0000000000000000 RSI: ffffffffffffffc3 RDI: 0000000000000000 [ 939.399017][ T8297] RBP: ffffc90005667c50 R08: ffffffff8aaf621b R09: fffff52000accf4d [ 939.399035][ T8297] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000010000f900 [ 939.399051][ T8297] R13: ffff88805690b260 R14: 1ffff1100ad2164c R15: dffffc0000000000 [ 939.399078][ T8297] ? io_ring_exit_work+0x2f0/0x794 [ 939.399104][ T8297] ? io_ring_exit_work+0x31d/0x794 [ 939.399152][ T8297] ? io_ring_ctx_wait_and_kill+0x314/0x314 [ 939.399195][ T8297] ? do_raw_spin_unlock+0x137/0x8a0 [ 939.399229][ T8297] ? process_one_work+0x806/0x1260 [ 939.399256][ T8297] process_one_work+0x917/0x1260 [ 939.399301][ T8297] ? worker_detach_from_pool+0x260/0x260 [ 939.399334][ T8297] ? _raw_spin_lock_irqsave+0x120/0x120 [ 939.399368][ T8297] ? kthread_data+0x4e/0xc0 [ 939.399408][ T8297] ? wq_worker_running+0x97/0x190 [ 939.399435][ T8297] worker_thread+0xa47/0x1200 [ 939.399465][ T8297] ? _raw_spin_unlock+0x40/0x40 [ 939.399499][ T8297] ? release_firmware_map_entry+0x18b/0x18b [ 939.399531][ T8297] ? _raw_spin_unlock+0x40/0x40 [ 939.399579][ T8297] kthread+0x28d/0x320 [ 939.399599][ T8297] ? worker_clr_flags+0x190/0x190 [ 939.399633][ T8297] ? kthread_blkcg+0xd0/0xd0 [ 939.399658][ T8297] ret_from_fork+0x1f/0x30 [ 939.399704][ T8297] [ 939.405312][ T8297] Kernel Offset: disabled [ 939.685994][ T8297] Rebooting in 86400 seconds..