last executing test programs: 1m51.247142043s ago: executing program 3 (id=1353): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1m50.733769764s ago: executing program 3 (id=1357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r2, r2, 0x0, 0x9) 1m49.775809739s ago: executing program 3 (id=1359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4) 1m49.205587172s ago: executing program 3 (id=1366): pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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") r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) 1m48.446144517s ago: executing program 3 (id=1373): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100)=ANY=[]) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x1, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x1, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x48004) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d06, &(0x7f0000000040)={0x200}) 1m47.473682173s ago: executing program 3 (id=1385): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1m46.446072273s ago: executing program 32 (id=1385): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 1m46.285541503s ago: executing program 1 (id=1390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4) 1m45.009701987s ago: executing program 1 (id=1395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m43.93685592s ago: executing program 1 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}, @TCA_STAB={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1m41.729301858s ago: executing program 1 (id=1408): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@bh}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@usrquota}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@nombcache}, {@nodiscard}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffff980, 0xfffffffffffffff7}) 1m40.874223828s ago: executing program 1 (id=1413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x108, 0x108, 0x108, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x3c}, 0x2f2, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0xb}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4e24, 0x4e24, 0x5e21, 0x4e22, 0x2, 0x0, 0x6, 0x100, 0xd}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x4, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xe4, 0x0, 0x1, 0x80000000, 0x5, 0x6, 0x839, 0x1]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/4545, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESDEC=r2, @ANYRES32, @ANYRES64=r2, @ANYRES32=0x0], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000001c0)=0x7, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000001940)={0x1, &(0x7f0000001980)=[{0x6, 0x4, 0x8, 0xffffffff}]}, 0x10) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x82, @remote, 'lo\x00'}}, 0x1e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x1) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/254, 0xfe}, {&(0x7f00000004c0)=""/180, 0xb4}], 0x4, &(0x7f0000000600)=""/166, 0xa6}, 0x42) 1m40.077729885s ago: executing program 1 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 1m39.923576123s ago: executing program 33 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) 7.734980159s ago: executing program 5 (id=1847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5, 0x2, 0x3c, 0x29, 0x9, 0xae, 0x9, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)="bad330fbc9b554", 0x7, 0x2000c005, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0xd8, 0x6, @local}, 0x14) 6.52626633s ago: executing program 5 (id=1852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2007, 0xc3, 0x6, 0x1, 0x401}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 5.095728282s ago: executing program 2 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010103}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x8, 0x86020086, r3}) 4.863865196s ago: executing program 5 (id=1859): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040810) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000001c0)=@arm64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000340), &(0x7f00000003c0)=r3}, 0x20) epoll_create1(0x80000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 4.61370865s ago: executing program 6 (id=1861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x4, 0x0, 0x0, 0x10000000004, 0x80000000, 0x200, 0x1ff}, 0x0, &(0x7f0000000040)={0x18, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x9, 0x2003ff, 0x80000001}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 4.613447261s ago: executing program 2 (id=1862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5, 0x2, 0x3c, 0x29, 0x9, 0xae, 0x9, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)="bad330fbc9b55400040000", 0xb, 0x2000c005, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0xd8, 0x6, @local}, 0x14) 4.360325195s ago: executing program 5 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8no}, {@numtail}, {@utf8}, {@uni_xlate}, {@shortname_mixed}], [{@permit_directio}, {@appraise_type}, {@audit}, {@hash}]}, 0x0, 0x36f, &(0x7f0000002140)="$eJzs3U9oHFUYAPBvO5vdtFCTg1AULKM3QUNb8aCnlJJCcS8qi38O6mJTld0oZHGxOWQbL+JR8Kgnbx704KFnERTx5sGrFaQqHrQHoWBxZHdndyfZ3TYpxhr8/SDLy/e+b96bzLAzGbIvLy1H8/xcXLh27WrMz5eivHxmOa6XYjGSGLoUk+amxACAg+F6lsXv2cAuS0r7PCUAYJ/1r/+vHC1E3v7yZvmZqz8AHHj57/+HR4Ep1/f5WcVv7Nu0AIB9NPH8/4Ft3ZX8K1cu/FUAAHBQPf3c80+crkU8labzEWvvdOqdejw+7j99IV6LVqzGiViIGxGDG4XeS6n/evZcbeVEmqbd+Gkx6r2KTj1irdupD+4UTif9+mqcjIVYzOvzu40sy5Kzn9VWTqZ9EXGp2x8/1kqd+lwcycf//kisxqlI4+6J+ohztZVTab6B+tqwvhuxNX5u0Zv/UizEty/H8Yg4H73a4W1NbWXzZJqeyWrb6jv1aj9vYOYTEAAAAAAAAAAAAAAAAAAAAAAAuC1L6cjiaP2bbLx+z9LSlP7++jiD+nx9oK3B+kBZNYss++2th+vvJrFtfaCd6/N06uU4dGd3HQAAAAAAAAAAAAAAAAAAAP4z2hcr0Wi1VtfbFzeaxUZ3vX3xUET0Iq9//ckXh2My5xaNcj5GoSvNQxvNRpYMk7MkzzkUhfKkN/hwgx9fHs24OER1tBdTp1Gd3dVqHb3/xw/GkfuS4Zb/GuckMX0Hkx3TKDbW7hpMaS8/qFHj1C1yrmRZNqt884XJqihFlPd+4CYb84VI1mt8dfXVex5pH3u0H/k8G3jwoYVnrrz/0S/NRqs3cvSPYGW9fSNrNvLvp59ssxtJ4fwpxaBRKp4J5VnllY1mY2t7VyP57tdn733vm92NnhUjb07JSQa782kv8mIyOrFblUFOb5o7qg5PG2su9npQOrdzKI99uNy4vPnDz7utKrxJTFuo44/j/9RbEAAAAAAAAAAAAAAAAAAAkCt8VjyXf9h37mZVjz25/zMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH/P+P//FxpbE5GZjXJE5JE/uzGZU11db0dU7vRuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/d3AAAA//9JsGhw") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(0x0, &(0x7f0000000280), 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e3100000000000000000000000800070000dc140000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 4.29285503s ago: executing program 2 (id=1867): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3.341246475s ago: executing program 0 (id=1868): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe, r2}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffff, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) open_by_handle_at(r3, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) accept$unix(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000280)={0x7, 0x1, 0x8, {0x7, 0x2}, 0x8, 0x5}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) modify_ldt$write2(0x11, &(0x7f0000000300)={0x2, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.340510925s ago: executing program 2 (id=1869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2007, 0xc3, 0x6, 0x1, 0x401}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3.300697227s ago: executing program 4 (id=1870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcc}]}) 3.098534199s ago: executing program 6 (id=1871): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, 0x0) 3.013808644s ago: executing program 4 (id=1872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0xa0000013}) 2.73199072s ago: executing program 0 (id=1873): write$tun(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="010086ddde00120000000000000063b9e7a900000001fc020000000000000000000000000001ff020000000000000000000000000001"], 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$kcm(0x21, 0x2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000001080)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000103000000fbdbdf25150000000a00060008021100000100000a00060008021100000100000a001a0008021100000100000a001a00080211"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) sendmmsg$alg(r4, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a60da25", 0xbf}, {&(0x7f0000000a40)="a768e2d00ec5757e8f5f433f84c63a269953b038d5817617556310f9ee538468ee62c0d68b6b9fe9ade83c789bd66faf569fc7fbddfc2f6e4275c1df15f3a83eaa316135a25fe4533b1ca0ef0e263cab2f2549bb9e6b5695cbd3dfb61276f7bdee6ed41c81fab79a89034ceb07d274f93dbc4f59593d761520ba31b64e0a2ab5e78fb3667f84e7e29131ec5d39d6eb916df6133993516eaf9ae557d97dc044a88fb00065cb052a6cce15", 0xaa}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8804d", 0xf7}], 0x3, &(0x7f0000000340), 0x47, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f0940cf59647c14b7e6f19ac068f3a0920aed0a27cdd22c711855b5fb9f81ba75787a21c891067a458e010b16fa7d60083beff49c0ad28591", 0x59}, {&(0x7f0000000c00)="11bc0436f24447912dce9afd07fe935ecc6bd5eda7c7802f23cc14c83af658aba7129a55512896099992c8d02253e12016902434d12855df0a9b30e55e8f6259b106445aab46f952998eb7f8da0bad476b3c282f94edbd9aec43c836f227ecbc81a2e8dffb14b537cab2cd95a1351f3cdc2b6343f3521eb5638b256c10f93d4465c51329e7aed07efa4bdabe7b511b77df3e3cba7eac72df9b66860cf3b41a664167c6975937e78a75aa6ca347638a9eb31c60880c389de6a8919a67", 0xbc}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad1253", 0xe5}], 0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000e40)="c4ae7c0462b7d5d0f701a4979574ff8a5d74bf45c9e878972a42062f9b70e92f76ed2c49e2e8a043016efca580e1e24cbf53ef2fdb0d3810e8359c20b3938b1cb8574e51adc3cac209dd1c3b0fa44d9ca5ffbccfd95395", 0x57}, {&(0x7f0000000700)="9af11ddfb8ceb516a838dd3cedbe8ce91e02bfabade423d9a4d0ec122b7037a6bffa4c8dff825b4bb6af22c579faf7cd32f8fa2c632ee236967cf01e81fd58fa7de7dc69417ed5b34378c0cecc6e594591c035a1492419209e9b5aff174a1d1462bd1e5a8b80fbb1ce5c906a977485c7ae6af8991a8adedcede4e0eef2d587cf0504acfc212433c76b69460a6bd59788eff72bb7a32bdadca740aa47e60fc2210d5d4a9547afe26196f225cc9ddde32a2df9cccd74a4ba07a2ce22171a60f564119ed5d9dac59d865c6e1547e2c472e9bd574b1250286c316bd8bcc28407ca0e61b1c0e72349", 0xe6}, {&(0x7f0000000fc0)="26166583e37c8b7d00ab5146a77c416387ef936b5c5d71546721b5fe2369b8b7009262933b2d3280235aff09fc6b0d14ad0d2336b4f21ed53375838ff7f6c567b372b0124a5f1bc6ca1eef4cfdfe8e97b9cadc99cc2a870d680138b4bfe181d8181ce0e924e85ef677049d765a870450b00b1adda0d57413a2acb1d18236df1ea69ffd649198fe0b3bc101341dc23159730ef95cea61efc0cfb62cfef01920dd16c9d37367c185c0b2346dcd9e", 0xad}], 0x3, 0x0, 0x0, 0x84090}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x538833554ef99d02}], 0x4, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.627231516s ago: executing program 6 (id=1874): mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1000001, 0x11, 0xffffffffffffffff, 0xffffc000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'dvmrp0\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 2.509825373s ago: executing program 5 (id=1875): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040810) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f00000001c0)=@arm64) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000340), &(0x7f00000003c0)=r3}, 0x20) epoll_create1(0x80000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 2.445668257s ago: executing program 4 (id=1876): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}], 0x1) 2.299417766s ago: executing program 4 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5, 0x2, 0x3c, 0x29, 0x9, 0xae, 0x9, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)="bad330fbc9b55400040000", 0xb, 0x2000c005, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0xd8, 0x6, @local}, 0x14) 2.291293196s ago: executing program 2 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) 2.253680298s ago: executing program 0 (id=1879): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.252855828s ago: executing program 6 (id=1880): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.445427855s ago: executing program 5 (id=1881): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$eJzs289vFFUcAPDvzG6L/LIrwR/8UIloJP4otCBy8KLRxIMmJnrAY20LQRZqaE2EEC3G4NGQeDceTfgLPOnFqCcTr+rZkBDTC+hpzezO0O2yu/bXdiv7+SQD78287XvfefO2b+Z1AhhYB7J/kogdEfFbRIw0sksLHGj8d3vh8uTfC5cnk6jV3v4rqZe7tXB5sihafG57kSlHpJ8lsa9NvbMXL52dqFanL+T5w3PnPjg8e/HS82fOTZyePj19fvzEiWNHx148Pv7CusSZxXVr78cz+/e8/u61NydPXnvvp+tJEX9LHGtXjqYf3dZTtdr6VbcJ7GxKJ+U+NoQVKeVX61B9/I9EKRY7byRe+7SvjQN6qlar1R7qfHi+BtzDkuh3C4D+KH7RZ/e/xbZBU49N4ebLjRugLO7b+dY4Uo40LzPUcn+7ng5ExMn5f77Ktmh9DrG1R5UCAAPtu2z+81y7+V8azc+F7s/XUCoR8UBE7IqI4xGxOyIejKiXfTgiHllh/a2LJHfPP9MbqwpsmbL530v52tbS+V8x+4tKKc/trMc/lJw6U50+kp+TQzG0JcuPdanj+1d//aLTseb5X7Zl9RdzwbwdN8pbln5mamJuYi0xN7t5JWJvuV38yZ2VgCQi9kTE3lXWceaZb/Z3OtYh/uFl/eB1WGeqfR3xdKP/56Ml/kLSfX3y8H1RnT6yJfKr4m4//3L1rU71/3f/91bW/9vaXv9F/H9Ukub12tmV13H198873lOu9vofTt5Zsu+jibm5C2MRw8kb9Xylef94S7nxxfJZ/IcOth//u2LxTOyLiOwifjQiHouIx5u+u56IiINd4v/xlSffX338vZXFP9W1/6Ol/xcTw9G6p32idPaHb5dUWllJ/Fn/H6unDuV7lvP91645RUTNh9Zy7gAAAOD/Io2IHZGko3fSaTo62vgb/t2xLa3OzM49e2rmw/NTjXcEKjGUFs8/R5qeh47lt/VFfrwlfzR/bvxlaWs9Pzo5U53qd/Aw4LZ3GP+ZP0v9bh3Qc97XgsFl/MPgMv5hcBn/MLjajH+vnsGAaPf7/5M+tAPYeC3jv+uyn4kB3Fvc/8PgMv5hcBn/MJCuRHR/eb+niet5Kzak0jQiVv3xiH6cn82ciHRTNEOiR4k+fzEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsk38DAAD//3893aY=") openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r0, &(0x7f0000002880)={0x2020}, 0x2020) 1.247225507s ago: executing program 0 (id=1882): pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.139803383s ago: executing program 0 (id=1883): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.135596053s ago: executing program 6 (id=1884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x3}}, 0x0, 0x0, 0x7, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.061446838s ago: executing program 4 (id=1885): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x4080, 0x68) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0xbb8d, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {0xffffffff}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r4, 0x800799c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x9}, 0x1c) rt_tgsigqueueinfo(0x0, 0x0, 0x1b, &(0x7f0000000040)={0x2d, 0x5, 0x80}) sendfile(r5, r4, 0x0, 0xfeff) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption}]}, 0x3, 0x45c, &(0x7f0000000580)="$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") 805.724223ms ago: executing program 6 (id=1886): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") r0 = fanotify_init(0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x61, 0x101a, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x40) getdents64(r2, 0xfffffffffffffffe, 0x29) 805.465733ms ago: executing program 2 (id=1887): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0xfffffffffffffff9, 0x4, 0xfff}) 163.77681ms ago: executing program 0 (id=1888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2007, 0xc3, 0x6, 0x1, 0x401}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 0s ago: executing program 4 (id=1889): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000040)={0x0, 0x16, 0x6, "60b033cf2e27"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000180)={0x40, 0x18, 0x7e, "0002000000a47d5053f55bea2f6cfd2af7bf05876901c803fd00ac69fbe18512e9cb2b963f08388e4276cca4f5f677c4b6e990d613fdee74fd80a566d9c560de75e91d01480b2b12edb281c51ef2ba313b20baf2c2b31d57d552f36329275558746280f21de45e587413dd71397197a459258013c180845832d98f1e2884"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 38534][ T7367] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 157.051997][ T7372] loop0: detected capacity change from 0 to 1024 [ 157.089242][ T7372] EXT4-fs (loop0): Ignoring removed orlov option [ 157.128932][ T7372] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 157.155573][ T7372] EXT4-fs (loop0): invalid journal inode [ 157.169520][ T7372] EXT4-fs (loop0): can't get journal size [ 157.210688][ T7367] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.986: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 2052(4), depth 0(0) [ 157.237978][ T7372] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,norecovery,inode_readahead_blks=0x0000000000040000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 157.269450][ T7367] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.986: couldn't read orphan inode 16 (err -117) [ 157.331891][ T7367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 157.343248][ T7367] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.470921][ T7385] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 157.652070][ T7393] loop1: detected capacity change from 0 to 1024 [ 157.664640][ T7388] device syzkaller0 entered promiscuous mode [ 157.682025][ T7391] device syzkaller0 entered promiscuous mode [ 157.758720][ T7393] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 157.758720][ T7393] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 157.758720][ T7393] [ 157.822462][ T7393] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,usrquota,nouser_xattr,debug_want_extra_isize=0x000000000000007c,sysvgroups,auto_da_alloc=0xfffffffffffffffe,noauto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 157.894017][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 157.910174][ T7400] tipc: Enabled bearer , priority 0 [ 158.032228][ T7390] tipc: Resetting bearer [ 158.139058][ T7390] tipc: Disabling bearer [ 158.408891][ T7430] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 158.586674][ T7433] device syzkaller0 entered promiscuous mode [ 158.658152][ T7437] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 158.808041][ T7441] device syzkaller0 entered promiscuous mode [ 158.899979][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 158.964162][ T7446] device syzkaller0 entered promiscuous mode [ 159.144403][ T7461] device syzkaller0 entered promiscuous mode [ 159.184516][ T7457] tipc: Enabled bearer , priority 0 [ 159.213826][ T7456] tipc: Resetting bearer [ 159.249966][ T7456] tipc: Disabling bearer [ 159.296837][ T7463] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 159.430707][ T7467] tipc: Enabling of bearer rejected, failed to enable media [ 159.758501][ T7482] device syzkaller0 entered promiscuous mode [ 159.786178][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 160.007807][ T7492] device syzkaller0 entered promiscuous mode [ 160.185483][ T7499] device syzkaller0 entered promiscuous mode [ 160.261098][ T7499] tipc: Enabled bearer , priority 0 [ 160.285180][ T7497] tipc: Resetting bearer [ 160.303379][ T7503] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 160.354522][ T7497] tipc: Disabling bearer [ 160.499688][ T7505] device syzkaller0 entered promiscuous mode [ 160.856012][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 161.181988][ T7545] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 161.255318][ T7543] device syzkaller0 entered promiscuous mode [ 161.294782][ T7547] device syzkaller0 entered promiscuous mode [ 161.338479][ T7551] loop4: detected capacity change from 0 to 128 [ 161.413591][ T7551] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 161.440110][ T7547] tipc: Enabled bearer , priority 0 [ 161.458808][ T7546] tipc: Resetting bearer [ 161.467667][ T7551] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.542314][ T7546] tipc: Disabling bearer [ 161.678140][ T7561] device syzkaller0 entered promiscuous mode [ 161.745245][ T7563] device syzkaller0 entered promiscuous mode [ 161.929295][ T7570] binder_alloc: 7569: pid 7569 spamming oneway? 2 buffers allocated for a total size of 5120 [ 161.934058][ T7565] device syzkaller0 entered promiscuous mode [ 161.947049][ T7570] binder_alloc: 7569: pid 7569 spamming oneway? 3 buffers allocated for a total size of 5128 [ 162.001570][ T7572] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 162.093659][ T7580] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 162.148028][ T7577] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 162.402570][ T7590] device syzkaller0 entered promiscuous mode [ 162.511877][ T7599] device syzkaller0 entered promiscuous mode [ 162.537716][ T7593] tipc: Enabled bearer , priority 0 [ 162.568874][ T7603] device syzkaller0 entered promiscuous mode [ 162.581610][ T7592] tipc: Resetting bearer [ 162.628304][ T7592] tipc: Disabling bearer [ 162.647063][ T7606] loop0: detected capacity change from 0 to 256 [ 162.723618][ T7606] ======================================================= [ 162.723618][ T7606] WARNING: The mand mount option has been deprecated and [ 162.723618][ T7606] and is ignored by this kernel. Remove the mand [ 162.723618][ T7606] option from the mount to silence this warning. [ 162.723618][ T7606] ======================================================= [ 162.758660][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.860830][ T7613] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 162.872462][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1063'. [ 162.883157][ T7606] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 162.913137][ T7616] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 162.979342][ T7606] attempt to access beyond end of device [ 162.979342][ T7606] loop0: rw=524288, want=34359738496, limit=256 [ 162.996259][ T7619] siw: device registration error -23 [ 163.016699][ T7606] attempt to access beyond end of device [ 163.016699][ T7606] loop0: rw=0, want=34359738496, limit=256 [ 163.050197][ T26] audit: type=1800 audit(1770043058.566:2): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1060" name="file1" dev="loop0" ino=1048590 res=0 errno=0 [ 163.071085][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.118413][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 163.150554][ T7626] loop3: detected capacity change from 0 to 1024 [ 163.592658][ T7639] device syzkaller0 entered promiscuous mode [ 163.890581][ T7667] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 163.957672][ T7654] device syzkaller0 entered promiscuous mode [ 164.033709][ T7672] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 164.187461][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 164.587685][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 164.725334][ T7702] device syzkaller0 entered promiscuous mode [ 164.745889][ T7710] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 165.008244][ T7716] device syzkaller0 entered promiscuous mode [ 165.110211][ T7714] device syzkaller0 entered promiscuous mode [ 165.199753][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 165.550111][ T7734] tipc: Enabled bearer , priority 0 [ 165.577538][ T7734] tipc: Resetting bearer [ 165.596921][ T7733] tipc: Disabling bearer [ 165.644376][ T7739] device syzkaller0 entered promiscuous mode [ 165.861933][ T7742] device syzkaller0 entered promiscuous mode [ 165.977202][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1107'. [ 166.115685][ T7753] tipc: Enabled bearer , priority 0 [ 166.132263][ T7753] device syzkaller0 entered promiscuous mode [ 166.242128][ T7752] device syzkaller0 entered promiscuous mode [ 166.271566][ T7753] tipc: Resetting bearer [ 166.383644][ T7751] tipc: Resetting bearer [ 166.417682][ T7751] tipc: Disabling bearer [ 166.535702][ T7766] device syzkaller0 entered promiscuous mode [ 166.561168][ T7766] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 166.724973][ T7780] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 166.826300][ T7785] loop3: detected capacity change from 0 to 128 [ 166.885383][ T7785] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 166.913784][ T7785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.973804][ T7787] device syzkaller0 entered promiscuous mode [ 167.010778][ T5786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.120904][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1121'. [ 167.164068][ T7792] siw: device registration error -23 [ 167.310530][ T5786] usb 2-1: Using ep0 maxpacket: 8 [ 167.410647][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 167.437505][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.486461][ T5786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.540764][ T5786] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 167.576046][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.604052][ T5786] usb 2-1: config 0 descriptor?? [ 167.742744][ T7826] device syzkaller0 entered promiscuous mode [ 167.959589][ T7832] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 168.107565][ T5786] wacom 0003:056A:0000.0001: unbalanced collection at end of report description [ 168.168949][ T5786] wacom 0003:056A:0000.0001: parse failed [ 168.192669][ T7841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1134'. [ 168.210831][ T5786] wacom: probe of 0003:056A:0000.0001 failed with error -22 [ 168.221887][ T7841] siw: device registration error -23 [ 168.311519][ T5786] usb 2-1: USB disconnect, device number 2 [ 168.321467][ T7845] tipc: Enabled bearer , priority 0 [ 168.382973][ T7845] tipc: Resetting bearer [ 168.403033][ T7853] loop3: detected capacity change from 0 to 16 [ 168.413999][ T7844] tipc: Disabling bearer [ 168.551632][ T7853] erofs: (device loop3): mounted with root inode @ nid 36. [ 168.600752][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1138'. [ 168.655803][ T7853] attempt to access beyond end of device [ 168.655803][ T7853] loop3: rw=524288, want=32, limit=16 [ 168.709811][ T7853] erofs: (device loop3): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 168.726275][ T7853] erofs: (device loop3): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 168.736687][ T7853] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 168.758871][ T7853] attempt to access beyond end of device [ 168.758871][ T7853] loop3: rw=524288, want=56, limit=16 [ 168.780045][ T7865] device syzkaller0 entered promiscuous mode [ 168.802094][ T7853] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 168.942137][ T26] audit: type=1800 audit(1770043064.466:3): pid=7853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1139" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 169.158519][ T7877] device syzkaller0 entered promiscuous mode [ 169.568405][ T7906] loop4: detected capacity change from 0 to 512 [ 169.606705][ T7906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 169.618213][ T7906] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.666363][ T7906] EXT4-fs (loop4): shut down requested (2) [ 169.688684][ T7906] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 169.918944][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 170.004748][ T7919] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 170.029239][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 170.186962][ T7921] device syzkaller0 entered promiscuous mode [ 170.227007][ T7925] tipc: Enabled bearer , priority 0 [ 170.239881][ T7928] device syzkaller0 entered promiscuous mode [ 170.397266][ T7925] tipc: Resetting bearer [ 170.413801][ T7938] tipc: Enabled bearer , priority 0 [ 170.432871][ T7924] tipc: Disabling bearer [ 170.457646][ T7937] device syzkaller0 entered promiscuous mode [ 170.475082][ T7934] tipc: Resetting bearer [ 170.534386][ T7932] tipc: Disabling bearer [ 170.564704][ T7942] loop4: detected capacity change from 0 to 256 [ 170.688013][ T7942] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 170.786652][ T7957] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 170.950764][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 171.028497][ T7964] tipc: Enabling of bearer rejected, failed to enable media [ 171.746871][ T7978] device syzkaller0 entered promiscuous mode [ 171.812908][ T7997] tipc: Enabled bearer , priority 0 [ 171.866460][ T7991] device syzkaller0 entered promiscuous mode [ 172.007189][ T7997] tipc: Resetting bearer [ 172.018891][ T7994] tipc: Disabling bearer [ 172.122431][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 172.161012][ T8012] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 172.327104][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 172.433659][ T8027] loop2: detected capacity change from 0 to 1024 [ 172.547635][ T8027] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 172.658141][ T8037] tipc: Enabling of bearer rejected, failed to enable media [ 173.049183][ T8064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1192'. [ 173.067178][ T8064] siw: device registration error -23 [ 173.236697][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 173.360007][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 173.415915][ T8082] loop4: detected capacity change from 0 to 256 [ 173.529737][ T8082] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 173.576375][ T5786] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 173.706641][ T8092] tipc: Enabling of bearer rejected, failed to enable media [ 173.716977][ T8087] loop2: detected capacity change from 0 to 8192 [ 173.830435][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 173.930608][ T6173] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 173.950941][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.976125][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.986624][ T5786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.028175][ T5786] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 174.057750][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.097638][ T5786] usb 4-1: config 0 descriptor?? [ 174.121700][ T8104] device syzkaller0 entered promiscuous mode [ 174.478263][ T6173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.489776][ T6173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.500041][ T6173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.513594][ T6173] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.524101][ T6173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.536064][ T6173] usb 2-1: config 0 descriptor?? [ 174.575219][ T8077] loop3: detected capacity change from 0 to 1024 [ 174.714828][ T8128] loop4: detected capacity change from 0 to 512 [ 174.825894][ T8128] EXT4-fs (loop4): Test dummy encryption mode enabled [ 174.833053][ T8128] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.899976][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1209'. [ 174.999298][ T8077] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 175.020972][ T8128] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 175.035731][ T8128] EXT4-fs (loop4): orphan cleanup on readonly fs [ 175.056450][ T8128] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1207: corrupted xattr entries [ 175.074525][ T8128] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 175.091803][ T8128] EXT4-fs (loop4): 1 orphan inode deleted [ 175.097662][ T8128] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 175.258279][ T8077] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.432317][ T5786] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input5 [ 175.448685][ T6173] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description [ 175.467190][ T6173] plantronics 0003:047F:FFFF.0003: parse failed [ 175.477235][ T6173] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 175.502196][ T8136] tipc: Enabled bearer , priority 0 [ 175.527472][ T8136] tipc: Resetting bearer [ 175.548836][ T5786] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 175.573632][ T8135] tipc: Disabling bearer [ 175.602162][ T5786] usb 4-1: USB disconnect, device number 2 [ 175.637961][ T8140] loop0: detected capacity change from 0 to 512 [ 175.651849][ T4530] usb 2-1: USB disconnect, device number 3 [ 175.750200][ T8140] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.829987][ T8138] fido_id[8138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 175.844944][ T8140] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.988401][ T8151] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 176.179270][ T8158] device syzkaller0 entered promiscuous mode [ 176.311794][ T8161] MPTCP: kernel_bind error, err=-98 [ 176.586792][ T8179] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 176.665678][ T8183] loop0: detected capacity change from 0 to 128 [ 176.698611][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 176.746785][ T8187] loop1: detected capacity change from 0 to 1024 [ 176.799343][ T8183] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.825711][ T8187] EXT4-fs (loop1): Ignoring removed orlov option [ 176.843802][ T8183] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.939178][ T8187] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 177.179109][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1235'. [ 177.262035][ T8207] siw: device registration error -23 [ 177.691122][ T5790] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.814792][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 177.930310][ T5790] usb 2-1: Using ep0 maxpacket: 16 [ 177.984382][ T8260] loop2: detected capacity change from 0 to 128 [ 178.029126][ T8262] loop3: detected capacity change from 0 to 256 [ 178.050985][ T8260] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.067056][ T5790] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 178.083918][ T8262] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.088782][ T5790] usb 2-1: config 0 has no interface number 0 [ 178.110361][ T5790] usb 2-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 178.116692][ T8260] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.121646][ T5790] usb 2-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 178.142750][ T5790] usb 2-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 178.152856][ T8262] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 178.181444][ T8262] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 178.228295][ T8260] EXT4-fs (loop2): shut down requested (2) [ 178.320586][ T5790] usb 2-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 178.347770][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.366818][ T5790] usb 2-1: Product: syz [ 178.376851][ T5790] usb 2-1: Manufacturer: syz [ 178.384266][ T5790] usb 2-1: SerialNumber: syz [ 178.418440][ T5790] usb 2-1: config 0 descriptor?? [ 178.447509][ T8222] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.525080][ T8222] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.581806][ T5790] usb-storage 2-1:0.216: USB Mass Storage device detected [ 178.601920][ T5790] scsi host1: usb-storage 2-1:0.216 [ 178.719959][ T8284] device syzkaller0 entered promiscuous mode [ 178.734049][ T8289] tipc: Enabling of bearer rejected, failed to enable media [ 178.987827][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 179.216952][ T8307] loop0: detected capacity change from 0 to 2048 [ 179.225814][ T4346] usb 2-1: USB disconnect, device number 4 [ 179.349741][ T8307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.532074][ T8321] tipc: Enabling of bearer rejected, failed to enable media [ 179.949091][ T8345] device syzkaller0 entered promiscuous mode [ 180.091716][ T8354] tipc: Enabling of bearer rejected, failed to enable media [ 180.244805][ T8363] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 180.524714][ T8377] tipc: Enabling of bearer rejected, failed to enable media [ 180.719251][ T8381] device syzkaller0 entered promiscuous mode [ 180.824121][ T8395] tipc: Enabling of bearer rejected, failed to enable media [ 181.024103][ T26] audit: type=1326 audit(1770043076.546:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.173868][ T26] audit: type=1326 audit(1770043076.546:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.276262][ T26] audit: type=1326 audit(1770043076.546:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.345358][ T8411] device syzkaller0 entered promiscuous mode [ 181.380358][ T26] audit: type=1326 audit(1770043076.586:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.459571][ T26] audit: type=1326 audit(1770043076.586:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.482723][ T26] audit: type=1326 audit(1770043076.586:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.505402][ T26] audit: type=1326 audit(1770043076.586:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.529934][ T26] audit: type=1326 audit(1770043076.586:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.594133][ T26] audit: type=1326 audit(1770043076.586:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f07590e278e code=0x7ffc0000 [ 181.713915][ T26] audit: type=1326 audit(1770043076.586:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.4.1289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0759121eb9 code=0x7ffc0000 [ 181.750508][ T8426] tipc: Enabling of bearer rejected, failed to enable media [ 181.778987][ T8433] device syzkaller0 entered promiscuous mode [ 181.906551][ T4530] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 181.911014][ T4346] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 181.929064][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1298'. [ 181.978106][ T8441] siw: device registration error -23 [ 182.007301][ T8446] tipc: Enabling of bearer rejected, failed to enable media [ 182.170340][ T4346] usb 3-1: Using ep0 maxpacket: 16 [ 182.179923][ T8453] device syzkaller0 entered promiscuous mode [ 182.290650][ T4346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.310969][ T4346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.340603][ T4530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.350398][ T4346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.372337][ T4530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.376715][ T4346] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.423358][ T4530] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 182.424387][ T4346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.474853][ T4530] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.506999][ T4530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.518678][ T4530] usb 1-1: config 0 descriptor?? [ 182.542603][ T4346] usb 3-1: config 0 descriptor?? [ 182.733516][ T8470] device syzkaller0 entered promiscuous mode [ 182.748471][ T8468] tipc: Enabling of bearer rejected, failed to enable media [ 182.934308][ T8477] device syzkaller0 entered promiscuous mode [ 183.022803][ T4530] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 183.041267][ T8431] loop2: detected capacity change from 0 to 1024 [ 183.057709][ T4530] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 183.106234][ T4530] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 183.207528][ T8486] device syzkaller0 entered promiscuous mode [ 183.224752][ T8431] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 183.270187][ T8431] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.304264][ T8492] tipc: Enabling of bearer rejected, failed to enable media [ 183.359384][ T5786] usb 1-1: USB disconnect, device number 2 [ 183.376421][ T4346] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input7 [ 183.425464][ T8491] device syzkaller0 entered promiscuous mode [ 183.555767][ T4346] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 183.643558][ T4346] usb 3-1: USB disconnect, device number 2 [ 183.685486][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.938890][ T8516] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 183.992756][ T8512] fido_id[8512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 184.037636][ T8516] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 184.069315][ T8519] device syzkaller0 entered promiscuous mode [ 184.136875][ T8522] device syzkaller0 entered promiscuous mode [ 184.306779][ T8527] tipc: Enabling of bearer rejected, failed to enable media [ 184.358893][ T8529] device syzkaller0 entered promiscuous mode [ 184.408091][ T8531] device syzkaller0 entered promiscuous mode [ 184.837208][ T8550] tipc: Enabling of bearer rejected, failed to enable media [ 185.891908][ T8582] device syzkaller0 entered promiscuous mode [ 185.948798][ T8589] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 186.880811][ T8602] tipc: Enabling of bearer rejected, failed to enable media [ 188.273777][ T8612] device syzkaller0 entered promiscuous mode [ 188.510449][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 188.780458][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 188.941035][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.090533][ T23] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 189.098777][ T23] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 189.170858][ T23] usb 5-1: config 4 has no interface number 0 [ 189.307701][ T8647] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 189.460568][ T23] usb 5-1: string descriptor 0 read error: -22 [ 189.481339][ T23] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 189.497646][ T8657] loop0: detected capacity change from 0 to 1024 [ 189.531347][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.630637][ T4535] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.643214][ T23] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 189.658956][ T23] usb 5-1: No streaming interface found for terminal 6. [ 190.011081][ T4535] usb 3-1: Using ep0 maxpacket: 32 [ 190.335667][ T4452] hfsplus: b-tree write err: -5, ino 8 [ 190.355744][ T7] usb 5-1: USB disconnect, device number 2 [ 190.361972][ T4535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.400483][ T4535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.451274][ T4535] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 190.485851][ T4535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.511941][ T4535] usb 3-1: config 0 descriptor?? [ 190.699664][ T8680] tipc: Enabling of bearer rejected, failed to enable media [ 191.047402][ T4535] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 191.177688][ T8700] loop0: detected capacity change from 0 to 512 [ 191.307171][ T8700] EXT4-fs (loop0): Test dummy encryption mode enabled [ 191.314130][ T8700] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.483959][ T8700] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 191.497345][ T8700] EXT4-fs (loop0): orphan cleanup on readonly fs [ 191.511559][ T8700] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.1356: corrupted xattr entries [ 191.527830][ T8700] EXT4-fs (loop0): 1 orphan inode deleted [ 191.533700][ T8700] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 191.809982][ T4535] usb 3-1: USB disconnect, device number 3 [ 191.848283][ T4346] Bluetooth: hci0: command 0x0406 tx timeout [ 191.859330][ T4346] Bluetooth: hci1: command 0x0406 tx timeout [ 191.865699][ T4346] Bluetooth: hci3: command 0x0406 tx timeout [ 191.871843][ T4346] Bluetooth: hci2: command 0x0406 tx timeout [ 192.003131][ T8708] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 192.090031][ T8703] fido_id[8703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 192.302055][ T8723] tipc: Enabled bearer , priority 0 [ 192.369925][ T8732] device syzkaller0 entered promiscuous mode [ 192.457728][ T8723] tipc: Resetting bearer [ 192.503415][ T8738] loop3: detected capacity change from 0 to 512 [ 192.516864][ T8720] tipc: Resetting bearer [ 192.555622][ T8738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.590020][ T8720] tipc: Disabling bearer [ 192.640891][ T8738] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #17: comm syz.3.1366: inline data xattr refers to an external xattr inode [ 192.746495][ T8738] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1366: couldn't read orphan inode 17 (err -117) [ 192.835136][ T8738] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 193.099127][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1370'. [ 193.142175][ T8762] tipc: Enabling of bearer rejected, failed to enable media [ 193.149823][ T4185] VFS: Lookup of '.' in ext4 loop3 would have caused loop [ 193.190431][ T8765] tipc: Enabled bearer , priority 0 [ 193.209057][ T4185] VFS: Lookup of '.' in ext4 loop3 would have caused loop [ 193.234665][ T8765] tipc: Resetting bearer [ 193.306913][ T8772] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 193.317831][ T8764] tipc: Disabling bearer [ 193.667366][ T8792] device syzkaller0 entered promiscuous mode [ 193.792734][ T8790] device syzkaller0 entered promiscuous mode [ 193.988112][ T8808] loop4: detected capacity change from 0 to 256 [ 194.089472][ T8808] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 194.195664][ T8815] loop1: detected capacity change from 0 to 1024 [ 194.221947][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.221997][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.391997][ T8817] attempt to access beyond end of device [ 194.391997][ T8817] loop1: rw=0, want=5780, limit=1024 [ 195.236804][ T8827] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 195.314734][ T4463] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.386957][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 195.588773][ T4463] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.186446][ T4463] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.556092][ T4463] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.271155][ T8863] loop2: detected capacity change from 0 to 128 [ 197.295105][ T8860] device syzkaller0 entered promiscuous mode [ 197.469625][ T8863] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.529155][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'. [ 197.563093][ T8863] ext4 filesystem being mounted at /305/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.635221][ T4463] tipc: Disabling bearer [ 197.708969][ T4463] tipc: Left network mode [ 198.133810][ T8863] fscrypt (loop2, inode 12): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))") [ 198.525773][ T8893] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 198.568965][ T8850] chnl_net:caif_netlink_parms(): no params data found [ 198.642496][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 199.602407][ T8887] device syzkaller0 entered promiscuous mode [ 199.799772][ T8919] capability: warning: `syz.0.1406' uses deprecated v2 capabilities in a way that may be insecure [ 199.894300][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.902048][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.911900][ T8850] device bridge_slave_0 entered promiscuous mode [ 199.924516][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.935116][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.968202][ T8927] loop1: detected capacity change from 0 to 512 [ 199.980759][ T8850] device bridge_slave_1 entered promiscuous mode [ 200.041836][ T8927] EXT4-fs (loop1): Ignoring removed bh option [ 200.141384][ T8927] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1408: inode #1: comm syz.1.1408: iget: illegal inode # [ 200.257846][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.269566][ T8927] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1408: error while reading EA inode 1 err=-117 [ 200.329134][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.369369][ T8927] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 200.397184][ T8927] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1408: inode #1: comm syz.1.1408: iget: illegal inode # [ 200.423153][ T8927] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1408: error while reading EA inode 1 err=-117 [ 200.445580][ T8927] EXT4-fs (loop1): 1 orphan inode deleted [ 200.456811][ T8927] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,stripe=0x0000000000000003,norecovery,noinit_itable,max_batch_time=0x0000000000000004,usrquota,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,nombcache,nodiscard,,errors=continue. Quota mode: writeback. [ 200.503254][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1410'. [ 200.590069][ T8850] team0: Port device team_slave_0 added [ 200.653134][ T8850] team0: Port device team_slave_1 added [ 200.680454][ T4535] Bluetooth: hci1: command 0x041b tx timeout [ 200.720529][ T4184] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 200.748392][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.761070][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.842239][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.853261][ T4184] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 200.892181][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.899193][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.940618][ T4184] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extended attribute block 393216 [ 201.010311][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.268630][ T8965] device syzkaller0 entered promiscuous mode [ 201.314000][ T8850] device hsr_slave_0 entered promiscuous mode [ 201.346324][ T8850] device hsr_slave_1 entered promiscuous mode [ 201.361164][ T8850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.375500][ T8850] Cannot create hsr debugfs directory [ 201.403142][ T8971] tipc: Enabled bearer , priority 0 [ 201.445063][ T8969] device syzkaller0 entered promiscuous mode [ 201.453641][ T8964] tipc: Resetting bearer [ 201.520982][ T8964] tipc: Disabling bearer [ 201.945539][ T8978] device syzkaller0 entered promiscuous mode [ 202.050503][ T4463] device batadv0 left promiscuous mode [ 202.059332][ T4463] device macvlan1 left promiscuous mode [ 202.102955][ T4463] device hsr_slave_0 left promiscuous mode [ 202.122939][ T4463] device hsr_slave_1 left promiscuous mode [ 202.146054][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.155989][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.169230][ T4463] device bridge_slave_1 left promiscuous mode [ 202.180118][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.207530][ T4463] device bridge_slave_0 left promiscuous mode [ 202.218357][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.257110][ T4463] device veth1_macvtap left promiscuous mode [ 202.271907][ T4463] device veth0_macvtap left promiscuous mode [ 202.278124][ T4463] device veth1_vlan left promiscuous mode [ 202.292868][ T4463] device veth0_vlan left promiscuous mode [ 202.503317][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 202.518433][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 202.535440][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.551673][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.625487][ T4463] bond0 (unregistering): Released all slaves [ 202.763043][ T4535] Bluetooth: hci1: command 0x040f tx timeout [ 203.061652][ T8850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.074055][ T8850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.109498][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1422'. [ 203.164438][ T8850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.191923][ T8850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 203.289799][ T9009] loop0: detected capacity change from 0 to 512 [ 203.435838][ T9009] EXT4-fs (loop0): Test dummy encryption mode enabled [ 203.442833][ T9009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.543507][ T9009] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 203.558241][ T9009] EXT4-fs (loop0): orphan cleanup on readonly fs [ 203.573140][ T9009] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.1423: corrupted xattr entries [ 203.591886][ T9009] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 203.606063][ T9009] EXT4-fs (loop0): 1 orphan inode deleted [ 203.611982][ T9009] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 204.016161][ T8989] chnl_net:caif_netlink_parms(): no params data found [ 204.171444][ T9024] device syzkaller0 entered promiscuous mode [ 204.200600][ T4535] Bluetooth: hci0: command 0x0409 tx timeout [ 204.258492][ T9035] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 204.382653][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.407385][ T9038] device syzkaller0 entered promiscuous mode [ 204.430065][ T8850] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.471398][ T8850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.484700][ T8850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.500413][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.507530][ T8989] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.540448][ T8989] device bridge_slave_0 entered promiscuous mode [ 204.549568][ T9038] tipc: Enabled bearer , priority 0 [ 204.560405][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.571873][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.581071][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.591966][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.601722][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.608916][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.617160][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.626155][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.635816][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.642983][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.652500][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.662934][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.672873][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.683278][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.704663][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.725340][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.741311][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.781149][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.801085][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.811147][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.832028][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.850768][ T6173] Bluetooth: hci1: command 0x0419 tx timeout [ 204.857259][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.875829][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.911571][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.931405][ T8989] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.970128][ T8989] device bridge_slave_1 entered promiscuous mode [ 205.037601][ T9037] tipc: Resetting bearer [ 205.131914][ T9037] tipc: Disabling bearer [ 205.213497][ T9043] device syzkaller0 entered promiscuous mode [ 205.395252][ T8989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.419917][ T8989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.514620][ T8989] team0: Port device team_slave_0 added [ 205.591186][ T8989] team0: Port device team_slave_1 added [ 205.807746][ T9078] loop4: detected capacity change from 0 to 512 [ 205.936717][ T9078] EXT4-fs (loop4): Test dummy encryption mode enabled [ 205.943734][ T9078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.057721][ T9078] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 206.073584][ T9078] EXT4-fs (loop4): orphan cleanup on readonly fs [ 206.085694][ T9078] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1431: corrupted xattr entries [ 206.103773][ T9078] EXT4-fs (loop4): 1 orphan inode deleted [ 206.109693][ T9078] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 206.305128][ T6173] Bluetooth: hci0: command 0x041b tx timeout [ 206.438992][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.458009][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.613817][ T8989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.627549][ T8989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.634604][ T8989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.661060][ T8989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.766330][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.784323][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.870926][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.970604][ T9092] loop4: detected capacity change from 0 to 512 [ 207.060721][ T9092] EXT4-fs (loop4): Test dummy encryption mode enabled [ 207.067723][ T9092] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.209309][ T9092] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 207.227016][ T9092] EXT4-fs (loop4): orphan cleanup on readonly fs [ 207.239354][ T9092] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1433: corrupted xattr entries [ 207.255347][ T9092] EXT4-fs (loop4): 1 orphan inode deleted [ 207.261322][ T9092] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 207.576210][ T9097] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 207.763134][ T8989] device hsr_slave_0 entered promiscuous mode [ 207.802448][ T8989] device hsr_slave_1 entered promiscuous mode [ 207.810439][ T4535] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.830503][ T8989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.838173][ T8989] Cannot create hsr debugfs directory [ 208.000735][ T9106] device syzkaller0 entered promiscuous mode [ 208.007251][ T9106] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 208.200650][ T4535] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 208.225016][ T4535] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 208.244858][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.261007][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.269292][ T4535] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 208.299749][ T4535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.313785][ T9124] device syzkaller0 entered promiscuous mode [ 208.334715][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.342836][ T4535] usb 3-1: config 0 descriptor?? [ 208.351740][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.360649][ T6173] Bluetooth: hci0: command 0x040f tx timeout [ 208.433794][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.452730][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.491152][ T8850] device veth0_vlan entered promiscuous mode [ 208.508183][ T8989] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.531706][ T8989] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.560824][ T8989] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.604269][ T8850] device veth1_vlan entered promiscuous mode [ 208.626703][ T8989] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.683646][ T9130] device syzkaller0 entered promiscuous mode [ 208.723949][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.739829][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.836271][ T4535] wacom 0003:056A:0043.0007: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 208.871137][ T4535] wacom 0003:056A:0043.0007: hidraw0: USB HID v0.06 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 208.893019][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.902325][ T4535] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0007/input/input8 [ 208.913145][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.948899][ T8850] device veth0_macvtap entered promiscuous mode [ 208.992523][ T8850] device veth1_macvtap entered promiscuous mode [ 209.047452][ T4535] usb 3-1: USB disconnect, device number 4 [ 209.057743][ T9143] device syzkaller0 entered promiscuous mode [ 209.112374][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.169175][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.196219][ T8850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.220956][ T8850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.247270][ T9150] fido_id[9150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 209.263425][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.303881][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.385562][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.394510][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.423186][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.451920][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.471593][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.507563][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.522567][ T8850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.557864][ T8850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.629965][ T8850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.662025][ T8850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.527712][ T9169] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 210.552444][ T6173] Bluetooth: hci0: command 0x0419 tx timeout [ 210.578947][ T8989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.677064][ T8989] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.741139][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.769900][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.822942][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.844650][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.872066][ T9173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1447'. [ 210.883998][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.891217][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.919733][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.943106][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.961000][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.979943][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.987170][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.011834][ T9181] device syzkaller0 entered promiscuous mode [ 211.050528][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.071475][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.089399][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.108196][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.117014][ T9178] siw: device registration error -23 [ 211.128258][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.150072][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.172568][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.192578][ T4436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.230862][ T4436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.281550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.291891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.302249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.310986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.319704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.352999][ T8989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.388708][ T9191] tipc: Enabled bearer , priority 0 [ 211.405426][ T4436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.435196][ T4436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.449856][ T9191] tipc: Resetting bearer [ 211.494553][ T9190] tipc: Disabling bearer [ 211.518553][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.587535][ T9196] device syzkaller0 entered promiscuous mode [ 211.915320][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.960756][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.034172][ T8989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.188092][ T9217] loop2: detected capacity change from 0 to 512 [ 212.474360][ T9217] EXT4-fs (loop2): Test dummy encryption mode enabled [ 212.481296][ T9217] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.616331][ T9217] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 212.629605][ T9217] EXT4-fs (loop2): orphan cleanup on readonly fs [ 212.645266][ T9217] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1453: corrupted xattr entries [ 212.660564][ T9217] EXT4-fs (loop2): 1 orphan inode deleted [ 212.666462][ T9217] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 213.055721][ T9227] loop2: detected capacity change from 0 to 128 [ 213.105077][ T9221] device syzkaller0 entered promiscuous mode [ 213.227128][ T9227] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.262837][ T9227] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.371988][ T9239] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 213.401074][ T9227] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 213.575503][ T9246] device syzkaller0 entered promiscuous mode [ 213.700346][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.709264][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.817616][ T8989] device veth0_vlan entered promiscuous mode [ 213.867187][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.882146][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.941324][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.949314][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.998937][ T9255] device syzkaller0 entered promiscuous mode [ 214.023423][ T8989] device veth1_vlan entered promiscuous mode [ 214.105077][ T9212] loop5: detected capacity change from 0 to 512 [ 214.131377][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.139988][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.159839][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.175578][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.201369][ T8989] device veth0_macvtap entered promiscuous mode [ 214.226058][ T8989] device veth1_macvtap entered promiscuous mode [ 214.271269][ T9212] EXT4-fs (loop5): Test dummy encryption mode enabled [ 214.281343][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.302653][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.319848][ T9212] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 214.329986][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.344278][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.387050][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.412684][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.424023][ T9212] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 214.437041][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.445689][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.454595][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.464697][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.474698][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.491558][ T8989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.502628][ T8989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.516568][ T8989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.524787][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.537080][ T9212] EXT4-fs (loop5): orphan cleanup on readonly fs [ 214.569267][ T9212] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.1454: corrupted xattr entries [ 214.589332][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.599690][ T9212] EXT4-fs (loop5): 1 orphan inode deleted [ 214.617602][ T9212] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 214.694646][ T9272] device syzkaller0 entered promiscuous mode [ 214.709971][ T8989] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.720114][ T8989] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.734621][ T8989] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.747754][ T8989] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.769088][ T9282] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 215.213417][ T9295] loop4: detected capacity change from 0 to 512 [ 215.314837][ T9295] EXT4-fs (loop4): Test dummy encryption mode enabled [ 215.322155][ T9295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.415520][ T9295] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 215.429164][ T9295] EXT4-fs (loop4): orphan cleanup on readonly fs [ 215.443118][ T9295] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1466: corrupted xattr entries [ 215.460116][ T9295] EXT4-fs (loop4): 1 orphan inode deleted [ 215.466155][ T9295] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 215.882462][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.959715][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.008339][ T9300] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 216.028735][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.050959][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.142395][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.161358][ T9305] device syzkaller0 entered promiscuous mode [ 216.207252][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.293973][ T9310] loop4: detected capacity change from 0 to 16 [ 216.365675][ T9310] erofs: (device loop4): mounted with root inode @ nid 36. [ 216.425606][ T9310] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 216.488450][ T9310] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 216.498748][ T9316] device syzkaller0 entered promiscuous mode [ 216.705896][ T9325] loop4: detected capacity change from 0 to 16 [ 216.735431][ T9325] erofs: (device loop4): mounted with root inode @ nid 36. [ 216.784185][ T9325] erofs: (device loop4): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 216.828661][ T9325] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 216.871584][ T9325] attempt to access beyond end of device [ 216.871584][ T9325] loop4: rw=524288, want=3321170072, limit=16 [ 216.938251][ T9325] attempt to access beyond end of device [ 216.938251][ T9325] loop4: rw=524288, want=24, limit=16 [ 217.162622][ T9338] loop0: detected capacity change from 0 to 512 [ 217.336098][ T9337] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1478'. [ 217.922838][ T9338] EXT4-fs (loop0): Test dummy encryption mode enabled [ 217.929681][ T9338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.999700][ T9338] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 218.008700][ T9338] EXT4-fs (loop0): orphan cleanup on readonly fs [ 218.015801][ T9338] EXT4-fs error (device loop0): xattr_find_entry:297: inode #15: comm syz.0.1477: corrupted xattr entries [ 218.028869][ T9338] EXT4-fs (loop0): 1 orphan inode deleted [ 218.034713][ T9338] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 218.083660][ T9345] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 218.410449][ T5790] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 218.447151][ T9361] loop0: detected capacity change from 0 to 1024 [ 218.462239][ T9362] device syzkaller0 entered promiscuous mode [ 218.638205][ T9361] hfsplus: xattr searching failed [ 218.813099][ T9372] loop5: detected capacity change from 0 to 512 [ 218.892009][ T9372] EXT4-fs (loop5): Test dummy encryption mode enabled [ 218.898940][ T9372] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 219.079156][ T9372] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 219.092823][ T9372] EXT4-fs (loop5): orphan cleanup on readonly fs [ 219.106203][ T9372] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.1486: corrupted xattr entries [ 219.124926][ T9372] EXT4-fs (loop5): 1 orphan inode deleted [ 219.130849][ T9372] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 219.540315][ T5790] usb 7-1: Using ep0 maxpacket: 32 [ 219.564792][ T9379] device syzkaller0 entered promiscuous mode [ 219.667140][ T5790] usb 7-1: config 4 has an invalid interface number: 246 but max is 1 [ 219.685634][ T5790] usb 7-1: config 4 has an invalid interface number: 36 but max is 1 [ 219.726141][ T5790] usb 7-1: config 4 has no interface number 0 [ 219.755533][ T5790] usb 7-1: config 4 has no interface number 1 [ 219.767160][ T9387] loop5: detected capacity change from 0 to 512 [ 219.780320][ T5790] usb 7-1: config 4 interface 246 has no altsetting 0 [ 219.804064][ T5790] usb 7-1: config 4 interface 36 has no altsetting 0 [ 219.857649][ T9387] EXT4-fs (loop5): Ignoring removed bh option [ 219.922702][ T9387] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 219.990698][ T5790] usb 7-1: New USB device found, idVendor=1199, idProduct=9063, bcdDevice=52.cb [ 219.999956][ T5790] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.021121][ T9387] EXT4-fs (loop5): 1 truncate cleaned up [ 220.030446][ T9387] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 220.098095][ T5790] usb 7-1: Product: syz [ 220.120787][ T5790] usb 7-1: Manufacturer: syz [ 220.285195][ T9387] EXT4-fs error (device loop5): ext4_ind_map_blocks:604: inode #12: comm syz.5.1490: Can't allocate blocks for non-extent mapped inodes with bigalloc [ 220.327689][ T5790] usb 7-1: SerialNumber: syz [ 221.570885][ T9398] EXT4-fs error (device loop5): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 221.660567][ T5790] usb 7-1: can't set config #4, error -71 [ 221.686756][ T5790] usb 7-1: USB disconnect, device number 2 [ 221.824104][ T9421] loop6: detected capacity change from 0 to 128 [ 221.864033][ T9419] device syzkaller0 entered promiscuous mode [ 221.884020][ T9417] device syzkaller0 entered promiscuous mode [ 221.905963][ T9421] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 221.931286][ T9421] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.000561][ T9426] device syzkaller0 entered promiscuous mode [ 222.136102][ T9427] device syzkaller0 entered promiscuous mode [ 222.487518][ T9437] loop6: detected capacity change from 0 to 2048 [ 224.287170][ T9463] loop6: detected capacity change from 0 to 1024 [ 224.458961][ T9463] EXT4-fs (loop6): Ignoring removed orlov option [ 224.841840][ T9463] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,auto_da_alloc,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 226.435078][ T9489] device syzkaller0 entered promiscuous mode [ 226.858830][ T9499] loop6: detected capacity change from 0 to 512 [ 227.033873][ T9499] EXT4-fs (loop6): Test dummy encryption mode enabled [ 227.040932][ T9499] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 227.186111][ T9499] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 227.199438][ T9499] EXT4-fs (loop6): orphan cleanup on readonly fs [ 227.212694][ T9499] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.1516: corrupted xattr entries [ 227.228211][ T9499] EXT4-fs (loop6): 1 orphan inode deleted [ 227.234200][ T9499] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 227.592762][ T9512] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 227.923636][ T9535] device syzkaller0 entered promiscuous mode [ 229.103135][ T9541] loop2: detected capacity change from 0 to 2048 [ 229.243890][ T9541] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 229.321720][ T9554] device syzkaller0 entered promiscuous mode [ 229.347260][ T9541] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 229.395552][ T9556] loop4: detected capacity change from 0 to 256 [ 229.416494][ T9541] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 229.436652][ T9559] device syzkaller0 entered promiscuous mode [ 229.464813][ T9541] UDF-fs: Scanning with blocksize 512 failed [ 229.486046][ T9541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.636621][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 229.636638][ T26] audit: type=1800 audit(1770043125.156:57): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1524" name="file1" dev="loop2" ino=838 res=0 errno=0 [ 229.759374][ T9570] device syzkaller0 entered promiscuous mode [ 230.150009][ T9587] device syzkaller0 entered promiscuous mode [ 230.411565][ T9594] loop2: detected capacity change from 0 to 512 [ 230.522416][ T9594] EXT4-fs (loop2): Test dummy encryption mode enabled [ 230.529397][ T9594] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.649912][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1540'. [ 230.668993][ T9594] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 230.683009][ T9594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 230.696586][ T9594] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1536: corrupted xattr entries [ 230.718781][ T9594] EXT4-fs (loop2): 1 orphan inode deleted [ 230.724682][ T9594] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 230.969625][ T9592] siw: device registration error -23 [ 231.096116][ T9600] device syzkaller0 entered promiscuous mode [ 231.175102][ T9602] device syzkaller0 entered promiscuous mode [ 231.352603][ T9607] loop2: detected capacity change from 0 to 2048 [ 231.414283][ T9607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.544996][ T26] audit: type=1800 audit(1770043127.066:58): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1543" name="file0" dev="loop2" ino=1368 res=0 errno=0 [ 231.588153][ T9615] loop6: detected capacity change from 0 to 2048 [ 231.823221][ T9615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.842102][ T9626] device syzkaller0 entered promiscuous mode [ 233.112818][ T9651] loop2: detected capacity change from 0 to 2048 [ 234.015439][ T9651] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 234.042686][ T9651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.108919][ T9660] device syzkaller0 entered promiscuous mode [ 234.149219][ T9665] tipc: Enabling of bearer rejected, failed to enable media [ 234.247975][ T9671] device syzkaller0 entered promiscuous mode [ 234.432362][ T9682] loop2: detected capacity change from 0 to 2048 [ 234.575205][ T9682] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.659418][ T9699] loop5: detected capacity change from 0 to 128 [ 234.719114][ T9699] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 234.987277][ T9707] device syzkaller0 entered promiscuous mode [ 236.111372][ T9721] loop0: detected capacity change from 0 to 1024 [ 236.185379][ T9721] hfsplus: invalid file type 0120411 for inode 2 [ 236.229880][ T9721] hfsplus: failed to load root directory [ 236.287399][ T9731] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 236.371700][ T9735] tipc: Enabling of bearer rejected, failed to enable media [ 237.458881][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 237.471058][ T9771] loop5: detected capacity change from 0 to 1024 [ 237.621134][ T9771] EXT4-fs (loop5): Ignoring removed oldalloc option [ 237.805944][ T9771] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,auto_da_alloc=0x00000000000000e6,oldalloc,nobarrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 237.884810][ T9771] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.033074][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1590'. [ 240.071359][ T9821] tipc: Enabled bearer , priority 0 [ 240.148951][ T9819] siw: device registration error -23 [ 240.262123][ T9826] loop2: detected capacity change from 0 to 512 [ 240.377307][ T9814] tipc: Disabling bearer [ 240.408683][ T9826] EXT4-fs (loop2): Test dummy encryption mode enabled [ 240.415788][ T9826] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 240.545401][ T9826] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 240.558768][ T9826] EXT4-fs (loop2): orphan cleanup on readonly fs [ 240.572150][ T9826] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1592: corrupted xattr entries [ 240.590957][ T9826] EXT4-fs (loop2): 1 orphan inode deleted [ 240.596840][ T9826] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 241.963965][ T9864] device syzkaller0 entered promiscuous mode [ 243.287679][ T9877] tipc: Enabled bearer , priority 0 [ 244.043184][ T9885] loop2: detected capacity change from 0 to 4096 [ 244.091378][ T9881] device syzkaller0 entered promiscuous mode [ 244.174026][ T9885] EXT4-fs (loop2): Test dummy encryption mode enabled [ 244.343657][ T9885] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 244.609951][ T9877] tipc: Resetting bearer [ 244.789451][ T9874] tipc: Resetting bearer [ 244.872309][ T9874] tipc: Disabling bearer [ 245.034497][ T9898] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.267122][ T4238] tipc: Node number set to 2400456146 [ 245.803429][ T9919] loop0: detected capacity change from 0 to 8 [ 246.860200][ C0] sched: RT throttling activated [ 247.363552][ T9930] device syzkaller0 entered promiscuous mode [ 247.372242][ T9932] loop6: detected capacity change from 0 to 1024 [ 247.415821][ T9932] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.464603][ T9933] loop5: detected capacity change from 0 to 2048 [ 247.548881][ T9932] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,usrquota,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000. Quota mode: writeback. [ 247.594186][ T9933] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,inode_readahead_blks=0x0000000000002000,. Quota mode: writeback. [ 247.670606][ T9933] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.700456][ T9932] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1617: missing EA_INODE flag [ 247.717305][ T9932] EXT4-fs (loop6): Remounting filesystem read-only [ 247.725096][ T9932] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1617: error while reading EA inode 11 err=-117 [ 247.752614][ T9932] EXT4-fs (loop6): Remounting filesystem read-only [ 247.821361][ T9933] EXT4-fs (loop5): re-mounted. Opts: (null). Quota mode: writeback. [ 247.868152][ T9957] tipc: Enabling of bearer rejected, failed to enable media [ 247.893067][ T9932] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 248.065138][ T9965] loop0: detected capacity change from 0 to 512 [ 248.144387][ T9970] device syzkaller0 entered promiscuous mode [ 248.272295][ T9965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.373005][ T9965] EXT4-fs (loop0): 1 truncate cleaned up [ 248.378732][ T9965] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.417819][ T9976] device syzkaller0 entered promiscuous mode [ 248.575220][ T9985] loop4: detected capacity change from 0 to 1024 [ 248.584658][ T9984] loop5: detected capacity change from 0 to 256 [ 248.669451][ T9985] EXT4-fs (loop4): filesystem is read-only [ 248.694697][ T9984] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 248.730706][ T9985] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 248.786975][ T9985] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 248.835215][ T9985] EXT4-fs error (device loop4): ext4_get_journal_inode:5185: comm syz.4.1627: inode #1: comm syz.4.1627: iget: illegal inode # [ 248.856853][ T9994] loop0: detected capacity change from 0 to 2048 [ 248.858763][ T26] audit: type=1800 audit(1770043144.376:59): pid=9984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1626" name="file1" dev="loop5" ino=1048611 res=0 errno=0 [ 248.891478][ T9998] loop6: detected capacity change from 0 to 16 [ 248.936747][ T9985] EXT4-fs (loop4): no journal found [ 248.953234][ T9985] EXT4-fs (loop4): can't get journal size [ 248.961450][ T9994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.975637][ T9998] erofs: (device loop6): mounted with root inode @ nid 36. [ 248.987339][ T9985] EXT4-fs error (device loop4): ext4_fill_super:4866: inode #2: comm syz.4.1627: iget: special inode unallocated [ 249.020668][ T9985] EXT4-fs (loop4): get root inode failed [ 249.029828][ T9985] EXT4-fs (loop4): mount failed [ 249.035513][ T26] audit: type=1800 audit(1770043144.556:60): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1629" name="file0" dev="loop0" ino=1368 res=0 errno=0 [ 250.167389][T10022] fuse: Bad value for 'fd' [ 250.358551][T10031] device syzkaller0 entered promiscuous mode [ 250.430174][T10030] loop0: detected capacity change from 0 to 4096 [ 250.603145][T10038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1640'. [ 250.640951][T10030] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 250.765710][T10038] siw: device registration error -23 [ 250.852973][T10043] loop2: detected capacity change from 0 to 512 [ 250.934961][T10043] EXT4-fs (loop2): Test dummy encryption mode enabled [ 250.942065][T10043] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.079636][T10043] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 251.093688][T10043] EXT4-fs (loop2): orphan cleanup on readonly fs [ 251.106647][T10043] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1639: corrupted xattr entries [ 251.125028][T10043] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 251.139323][T10043] EXT4-fs (loop2): 1 orphan inode deleted [ 251.145180][T10043] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 251.445016][T10047] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 251.961551][T10064] loop4: detected capacity change from 0 to 2048 [ 252.017891][T10064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.107061][ T26] audit: type=1800 audit(1770043147.626:61): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1646" name="file0" dev="loop4" ino=1368 res=0 errno=0 [ 252.168208][T10068] loop5: detected capacity change from 0 to 8192 [ 252.698580][T10085] fuse: Bad value for 'fd' [ 253.099128][T10101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (1420284373 ns) > initial count (164304968 ns). Using initial count to start timer. [ 253.122064][T10092] device syzkaller0 entered promiscuous mode [ 253.145630][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1653'. [ 253.157000][T10107] device syzkaller0 entered promiscuous mode [ 253.226605][T10105] siw: device registration error -23 [ 253.269636][T10109] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 253.430355][ T4245] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 253.467580][T10113] loop5: detected capacity change from 0 to 512 [ 253.476823][T10111] device syzkaller0 entered promiscuous mode [ 253.557067][T10113] EXT4-fs (loop5): Ignoring removed oldalloc option [ 253.579153][T10113] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 253.829041][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1657: corrupted inode contents [ 253.949172][T10113] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #16: comm syz.5.1657: mark_inode_dirty error [ 253.950142][ T4245] usb 3-1: config index 0 descriptor too short (expected 22564, got 36) [ 253.969018][ T4245] usb 3-1: config 180 has too many interfaces: 74, using maximum allowed: 32 [ 253.977903][ T4245] usb 3-1: config 180 has an invalid descriptor of length 40, skipping remainder of the config [ 253.989587][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1657: corrupted inode contents [ 254.001832][ T4245] usb 3-1: config 180 has 0 interfaces, different from the descriptor's value: 74 [ 254.020288][T10113] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.1657: mark_inode_dirty error [ 254.031687][ T4245] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 254.060543][ T4245] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.069875][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1657: corrupted inode contents [ 254.102464][T10113] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 254.119481][T10113] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #16: comm syz.5.1657: corrupted inode contents [ 254.146243][T10113] EXT4-fs error (device loop5): ext4_truncate:4279: inode #16: comm syz.5.1657: mark_inode_dirty error [ 254.159384][T10113] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 254.183413][T10113] EXT4-fs (loop5): 1 truncate cleaned up [ 254.189213][T10113] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,oldalloc,data=journal,resgid=0x0000000000000000,grpjquota=./mnt,,errors=continue. Quota mode: writeback. [ 254.208008][T10113] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.310455][ T4250] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 254.374708][ T4245] usb 3-1: string descriptor 0 read error: -71 [ 254.402872][ T4245] usb 3-1: USB disconnect, device number 5 [ 254.409596][T10113] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1657: iget: bad i_size value: 360287970189639690 [ 254.737983][T10136] fuse: Bad value for 'fd' [ 254.790503][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 36454, setting to 64 [ 254.809191][ T4250] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.818661][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.997731][ T4250] usb 1-1: config 0 descriptor?? [ 255.019903][T10144] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 255.029963][T10128] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 255.051958][ T4250] hub 1-1:0.0: USB hub found [ 256.124835][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.145830][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.260466][ T4250] hub 1-1:0.0: 1 port detected [ 256.546599][T10152] device syzkaller0 entered promiscuous mode [ 256.651855][T10160] loop4: detected capacity change from 0 to 512 [ 257.962405][T10161] hub 8-0:1.0: USB hub found [ 257.969779][T10161] hub 8-0:1.0: 1 port detected [ 258.684593][T10160] EXT4-fs (loop4): Test dummy encryption mode enabled [ 258.691474][T10160] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 258.708843][T10160] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 258.727353][ T4346] usb 1-1: USB disconnect, device number 3 [ 258.745676][T10160] EXT4-fs (loop4): orphan cleanup on readonly fs [ 258.752945][T10160] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1669: corrupted xattr entries [ 258.765041][T10160] EXT4-fs (loop4): 1 orphan inode deleted [ 258.771753][T10160] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 258.902536][T10163] tipc: Enabled bearer , priority 0 [ 259.051837][T10169] device syzkaller0 entered promiscuous mode [ 259.301791][T10162] tipc: Resetting bearer [ 259.367391][T10162] tipc: Disabling bearer [ 259.404888][T10179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1678'. [ 259.694961][T10194] loop6: detected capacity change from 0 to 1024 [ 259.819842][T10202] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 260.078238][T10194] hfsplus: invalid file type 0120411 for inode 2 [ 260.489393][T10194] hfsplus: failed to load root directory [ 260.551976][T10205] loop4: detected capacity change from 0 to 16 [ 260.690328][T10205] erofs: (device loop4): mounted with root inode @ nid 36. [ 260.804924][T10205] erofs: (device loop4): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 260.996628][T10209] loop2: detected capacity change from 0 to 512 [ 261.205633][T10209] EXT4-fs (loop2): Test dummy encryption mode enabled [ 261.212829][T10209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 261.304266][T10209] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 261.318522][T10209] EXT4-fs (loop2): orphan cleanup on readonly fs [ 261.338184][T10209] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1687: corrupted xattr entries [ 261.356912][T10209] EXT4-fs (loop2): 1 orphan inode deleted [ 261.363080][T10209] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 261.625978][T10218] device syzkaller0 entered promiscuous mode [ 261.834606][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1693'. [ 261.866872][T10225] device syzkaller0 entered promiscuous mode [ 261.907739][T10230] device syzkaller0 entered promiscuous mode [ 261.924223][T10225] tipc: Started in network mode [ 261.944668][T10225] tipc: Node identity 52862ebfdf18, cluster identity 4711 [ 262.002169][T10225] tipc: Enabled bearer , priority 0 [ 262.185610][T10224] tipc: Resetting bearer [ 262.232908][T10224] tipc: Disabling bearer [ 262.753789][T10252] loop4: detected capacity change from 0 to 164 [ 262.838723][T10252] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 263.886529][T10263] loop4: detected capacity change from 0 to 512 [ 264.007199][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 264.406429][T10262] device syzkaller0 entered promiscuous mode [ 264.795789][T10263] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 264.827395][T10263] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.160480][T10286] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 265.278712][T10288] device syzkaller0 entered promiscuous mode [ 265.564556][T10297] loop2: detected capacity change from 0 to 1024 [ 266.529177][T10298] fuse: Bad value for 'fd' [ 266.546487][T10301] tipc: Enabling of bearer rejected, failed to enable media [ 266.586608][ T4307] kernel write not supported for file [eventfd] (pid: 4307 comm: kworker/0:8) [ 266.621687][ T4448] hfsplus: b-tree write err: -5, ino 3 [ 266.651013][T10304] device syzkaller0 entered promiscuous mode [ 266.710690][T10303] loop5: detected capacity change from 0 to 2048 [ 266.927956][T10303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.502510][ T26] audit: type=1800 audit(1770043163.026:62): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1716" name="file0" dev="loop5" ino=1368 res=0 errno=0 [ 268.872779][T10325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1719'. [ 269.338138][T10323] loop2: detected capacity change from 0 to 1024 [ 269.687616][T10323] EXT4-fs (loop2): Ignoring removed orlov option [ 269.732171][T10330] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 269.762961][T10328] device syzkaller0 entered promiscuous mode [ 269.795516][T10323] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 269.923794][T10336] loop5: detected capacity change from 0 to 512 [ 270.088856][T10336] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.5.1724: corrupted xattr block 95 [ 270.115328][T10339] loop4: detected capacity change from 0 to 2048 [ 270.134649][T10336] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 270.163974][T10342] device syzkaller0 entered promiscuous mode [ 270.212487][T10336] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1724: bg 0: block 7: invalid block bitmap [ 270.250426][T10336] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 270.273625][T10336] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2922: inode #11: comm syz.5.1724: corrupted xattr block 95 [ 270.320575][T10336] EXT4-fs warning (device loop5): ext4_evict_inode:302: xattr delete (err -117) [ 270.321172][T10339] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.340061][T10336] EXT4-fs (loop5): 1 orphan inode deleted [ 270.359647][T10336] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.450471][ T26] audit: type=1800 audit(1770043165.976:63): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1725" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 270.593756][T10345] device syzkaller0 entered promiscuous mode [ 270.613888][T10350] loop6: detected capacity change from 0 to 256 [ 270.682868][T10350] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value [ 271.759415][ T4448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.893459][T10368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1734'. [ 271.920565][T10369] tipc: Enabling of bearer rejected, failed to enable media [ 272.036639][ T4448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.100101][T10377] loop2: detected capacity change from 0 to 2048 [ 272.165089][ T4448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.192455][T10377] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.251947][ T26] audit: type=1800 audit(1770043167.776:64): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1736" name="file0" dev="loop2" ino=1368 res=0 errno=0 [ 272.285045][T10380] loop5: detected capacity change from 0 to 1024 [ 272.526377][ T4448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.570042][T10380] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.590382][ T4245] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 272.701206][T10380] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.828110][ T4448] tipc: Left network mode [ 272.874457][T10380] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1737: inode has both inline data and extents flags [ 272.964041][ T4245] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 272.994983][ T4245] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 273.012920][T10394] loop6: detected capacity change from 0 to 256 [ 273.047635][ T4245] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 273.060623][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.126194][T10394] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 273.147871][T10395] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.1737: inode has both inline data and extents flags [ 273.196157][T10394] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 273.245833][T10394] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 273.380382][ T4245] usb 1-1: string descriptor 0 read error: -71 [ 273.520034][ T4245] usb 1-1: USB disconnect, device number 4 [ 273.964132][T10415] loop2: detected capacity change from 0 to 512 [ 274.071091][T10415] EXT4-fs (loop2): Test dummy encryption mode enabled [ 274.078054][T10415] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 274.205722][T10415] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 274.219128][T10415] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.232753][T10415] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.1744: corrupted xattr entries [ 274.247552][T10415] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 274.261904][T10415] EXT4-fs (loop2): 1 orphan inode deleted [ 274.267933][T10415] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 274.667277][ T8497] udevd[8497]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.782242][T10423] loop6: detected capacity change from 0 to 1024 [ 274.869414][T10425] device syzkaller0 entered promiscuous mode [ 274.887298][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 275.203693][ T4448] device hsr_slave_0 left promiscuous mode [ 275.212578][ T4448] device hsr_slave_1 left promiscuous mode [ 275.222832][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.280362][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.293339][ T4448] device bridge_slave_1 left promiscuous mode [ 275.313116][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.359461][ T4448] device bridge_slave_0 left promiscuous mode [ 275.559637][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.625945][ T4448] device veth1_macvtap left promiscuous mode [ 275.670351][ T4448] device veth0_macvtap left promiscuous mode [ 275.690827][ T4448] device veth1_vlan left promiscuous mode [ 275.697046][ T4448] device veth0_vlan left promiscuous mode [ 275.733998][T10442] loop4: detected capacity change from 0 to 2048 [ 275.875101][T10442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.932120][T10444] loop5: detected capacity change from 0 to 512 [ 275.956540][ T26] audit: type=1800 audit(1770043171.476:65): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1752" name="file0" dev="loop4" ino=1368 res=0 errno=0 [ 276.175223][T10444] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,inode_readahead_blks=0x0000000000000004,discard,grpid,bsdgroups,user_xattr,resgid=0x0000000000000000,nodelalloc,,errors=continue. Quota mode: writeback. [ 276.197737][T10444] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.406219][ T4448] team0 (unregistering): Port device team_slave_1 removed [ 276.440056][ T4448] team0 (unregistering): Port device team_slave_0 removed [ 276.486762][ T4448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.556503][ T4448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.349536][ T4448] bond0 (unregistering): Released all slaves [ 277.558214][T10459] loop6: detected capacity change from 0 to 512 [ 277.569191][T10456] device syzkaller0 entered promiscuous mode [ 277.721644][T10466] device syzkaller0 entered promiscuous mode [ 277.778169][T10459] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2756: inode #11: comm syz.6.1757: corrupted xattr block 95 [ 277.791708][T10459] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 277.894296][ T4245] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 277.940877][T10459] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1757: bg 0: block 7: invalid block bitmap [ 278.003291][T10473] tipc: Enabled bearer , priority 0 [ 278.034146][T10475] hub 8-0:1.0: USB hub found [ 278.046960][T10475] hub 8-0:1.0: 1 port detected [ 278.054521][T10459] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 278.088319][T10472] tipc: Disabling bearer [ 278.106122][T10459] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2922: inode #11: comm syz.6.1757: corrupted xattr block 95 [ 278.149803][T10459] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117) [ 278.167174][ T4245] usb 1-1: Using ep0 maxpacket: 16 [ 278.174050][T10459] EXT4-fs (loop6): 1 orphan inode deleted [ 278.179902][T10459] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.290700][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.335080][T10485] loop2: detected capacity change from 0 to 512 [ 278.345856][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.417486][ T4245] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 278.580463][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.756711][ T4245] usb 1-1: config 0 descriptor?? [ 278.869294][T10485] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1764: iget: bad i_size value: 38620345925642 [ 279.002893][T10459] EXT4-fs error (device loop6): ext4_search_dir:1549: inode #2: block 13: comm syz.6.1757: bad entry in directory: inode out of bounds - offset=60, inode=15, rec_len=16, size=1024 fake=0 [ 279.190644][T10485] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1764: couldn't read orphan inode 15 (err -117) [ 279.218348][T10491] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 279.273016][T10485] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 279.437830][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.457269][T10485] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1764: bg 0: block 5: invalid block bitmap [ 279.465742][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.514191][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.520849][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 279.566800][T10496] device syzkaller0 entered promiscuous mode [ 279.570617][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.574658][T10485] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1 with error 28 [ 279.625502][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.650304][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.676160][T10485] EXT4-fs (loop2): This should not happen!! Data will be lost [ 279.676160][T10485] [ 279.710906][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.727196][T10485] EXT4-fs (loop2): Total free blocks count 0 [ 279.738449][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.743962][T10485] EXT4-fs (loop2): Free/Dirty block details [ 279.764267][T10485] EXT4-fs (loop2): free_blocks=0 [ 279.769327][T10485] EXT4-fs (loop2): dirty_blocks=2 [ 279.780325][ T4245] apple 0003:05AC:0247.0008: unknown main item tag 0x0 [ 279.800235][T10485] EXT4-fs (loop2): Block reservation details [ 279.818269][ T4245] apple 0003:05AC:0247.0008: item 0 2 0 11 parsing failed [ 279.820415][T10485] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 279.837397][T10504] device syzkaller0 entered promiscuous mode [ 279.843754][ T4245] apple 0003:05AC:0247.0008: parse failed [ 279.884662][ T4245] apple: probe of 0003:05AC:0247.0008 failed with error -22 [ 279.940488][ T4245] usb 1-1: USB disconnect, device number 5 [ 280.023047][ T4463] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 280.043402][ T4463] EXT4-fs (loop2): This should not happen!! Data will be lost [ 280.043402][ T4463] [ 280.073588][T10507] device syzkaller0 entered promiscuous mode [ 280.279490][T10512] device syzkaller0 entered promiscuous mode [ 280.475619][T10517] device syzkaller0 entered promiscuous mode [ 280.486109][T10520] hub 8-0:1.0: USB hub found [ 280.518579][T10520] hub 8-0:1.0: 1 port detected [ 281.698374][T10539] tipc: Enabling of bearer rejected, failed to enable media [ 281.731634][T10539] device syzkaller0 entered promiscuous mode [ 281.803852][T10538] device syzkaller0 entered promiscuous mode [ 281.943590][ T4238] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 282.200478][ T4238] usb 3-1: Using ep0 maxpacket: 32 [ 282.255685][T10565] device syzkaller0 entered promiscuous mode [ 282.320807][ T4238] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 282.357772][ T4238] usb 3-1: config 4 has no interface number 0 [ 282.434317][ T4238] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.517779][ T4238] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.652811][ T4238] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.803898][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.173097][ T4238] hub 3-1:4.128: USB hub found [ 283.193611][T10575] loop5: detected capacity change from 0 to 512 [ 283.250427][ T4238] hub 3-1:4.128: 2 ports detected [ 283.255592][ T4238] hub 3-1:4.128: Using single TT (err -22) [ 283.468961][T10575] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 283.485429][ T4238] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 283.508862][ T4238] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 283.560114][T10575] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 283.662978][ T4238] usb 3-1: USB disconnect, device number 6 [ 283.686488][T10593] loop4: detected capacity change from 0 to 512 [ 283.760548][ T26] audit: type=1800 audit(1770043179.266:66): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1789" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 283.781364][ T4245] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 283.969926][T10593] EXT4-fs (loop4): Test dummy encryption mode enabled [ 283.976928][T10593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 284.112990][T10593] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 284.122533][T10593] EXT4-fs (loop4): orphan cleanup on readonly fs [ 284.133611][T10593] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1791: corrupted xattr entries [ 284.148763][T10593] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 284.162323][T10593] EXT4-fs (loop4): 1 orphan inode deleted [ 284.168085][T10593] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 284.310993][ T4245] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 284.475808][T10599] device syzkaller0 entered promiscuous mode [ 284.547786][T10599] tipc: Enabled bearer , priority 0 [ 284.565334][ T4245] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.588868][ T4245] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.633797][ T4245] usb 7-1: Product: syz [ 284.642415][ T4245] usb 7-1: Manufacturer: syz [ 284.647088][ T4245] usb 7-1: SerialNumber: syz [ 284.694839][T10598] tipc: Resetting bearer [ 284.800161][T10598] tipc: Disabling bearer [ 284.915312][T10608] device syzkaller0 entered promiscuous mode [ 284.949292][T10589] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 284.979284][T10617] device syzkaller0 entered promiscuous mode [ 285.129806][T10624] device syzkaller0 entered promiscuous mode [ 285.438898][T10589] loop6: detected capacity change from 0 to 1024 [ 285.583412][T10638] device syzkaller0 entered promiscuous mode [ 285.689011][T10641] loop5: detected capacity change from 0 to 256 [ 285.970542][ T4245] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed [ 286.032586][ T4245] cdc_ncm 7-1:1.0: bind() failure [ 286.097937][T10650] loop4: detected capacity change from 0 to 512 [ 286.161119][ T4245] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 286.168401][ T4245] cdc_ncm 7-1:1.1: bind() failure [ 286.338691][ T4245] usb 7-1: USB disconnect, device number 3 [ 286.910879][T10650] EXT4-fs (loop4): Test dummy encryption mode enabled [ 286.917783][T10650] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.004229][T10650] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 287.013554][T10650] EXT4-fs (loop4): orphan cleanup on readonly fs [ 287.021004][T10650] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1805: corrupted xattr entries [ 287.034565][T10650] EXT4-fs (loop4): 1 orphan inode deleted [ 287.040426][T10650] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 287.417877][T10667] device syzkaller0 entered promiscuous mode [ 287.469657][T10670] loop4: detected capacity change from 0 to 512 [ 287.508193][T10667] tipc: Started in network mode [ 287.533084][T10670] EXT4-fs (loop4): Ignoring removed oldalloc option [ 287.576494][T10667] tipc: Node identity 2a42f047851f, cluster identity 4711 [ 287.610686][T10667] tipc: Enabled bearer , priority 0 [ 287.617766][T10670] EXT4-fs (loop4): 1 truncate cleaned up [ 287.656024][T10665] tipc: Resetting bearer [ 287.690673][T10670] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,usrquota,. Quota mode: writeback. [ 287.718473][T10681] fuse: Bad value for 'fd' [ 287.836988][T10665] tipc: Disabling bearer [ 288.065906][ T4245] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 288.077985][T10687] device syzkaller0 entered promiscuous mode [ 288.194038][T10691] device syzkaller0 entered promiscuous mode [ 288.214835][T10692] loop2: detected capacity change from 0 to 2048 [ 288.275835][T10697] binder: 10696:10697 ioctl 4018620d 0 returned -22 [ 288.320972][T10697] binder: 10696:10697 ioctl c0306201 200000000180 returned -11 [ 288.351399][T10692] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 288.406475][T10700] loop6: detected capacity change from 0 to 128 [ 288.413459][T10692] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.490374][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.510359][ T4245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.525135][ T4245] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.538815][ T4245] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.548221][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.558615][ T4245] usb 1-1: config 0 descriptor?? [ 288.720407][T10716] loop4: detected capacity change from 0 to 512 [ 288.767973][T10700] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.834105][T10700] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.077335][T10716] EXT4-fs (loop4): Test dummy encryption mode enabled [ 289.084558][T10716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.150035][ T4245] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 289.231836][T10716] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 289.241015][T10716] EXT4-fs (loop4): orphan cleanup on readonly fs [ 289.251502][T10716] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1821: corrupted xattr entries [ 289.266747][T10716] EXT4-fs (loop4): 1 orphan inode deleted [ 289.272589][T10716] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 289.412911][ T4245] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 289.428224][ T4245] usb 1-1: USB disconnect, device number 6 [ 289.693873][T10726] loop4: detected capacity change from 0 to 128 [ 289.735291][T10730] fuse: Bad value for 'fd' [ 289.785511][T10728] fido_id[10728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 289.808851][T10726] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.850948][T10726] ext4 filesystem being mounted at /406/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.999390][T10750] device syzkaller0 entered promiscuous mode [ 291.042397][T10754] loop6: detected capacity change from 0 to 1024 [ 291.285516][T10766] input: syz0 as /devices/virtual/input/input14 [ 291.498909][T10768] loop5: detected capacity change from 0 to 512 [ 291.561503][T10768] EXT4-fs (loop5): Test dummy encryption mode enabled [ 291.568352][T10768] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 291.711791][T10770] hfsplus: failed to extend attributes file [ 291.821947][T10768] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 291.838005][T10768] EXT4-fs (loop5): orphan cleanup on readonly fs [ 292.201144][T10768] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.1834: corrupted xattr entries [ 292.213496][T10768] EXT4-fs (loop5): 1 orphan inode deleted [ 292.219268][T10768] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 292.660667][T10778] loop6: detected capacity change from 0 to 2048 [ 292.677356][T10784] loop5: detected capacity change from 0 to 512 [ 292.744593][ T4346] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 292.873204][T10778] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.149956][T10784] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 293.302105][ T4346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.416444][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.535234][ T26] audit: type=1800 audit(1770043189.016:67): pid=10778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1839" name="file0" dev="loop6" ino=1368 res=0 errno=0 [ 293.588897][ T4346] usb 3-1: Product: syz [ 293.593529][ T4346] usb 3-1: Manufacturer: syz [ 293.598168][ T4346] usb 3-1: SerialNumber: syz [ 293.603152][T10784] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.705631][T10795] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz.5.1838: directory missing '.' [ 293.809519][T10801] fuse: Bad value for 'fd' [ 294.607670][T10816] loop6: detected capacity change from 0 to 512 [ 294.857785][T10816] EXT4-fs (loop6): Test dummy encryption mode enabled [ 294.864959][T10816] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 294.893588][T10813] device syzkaller0 entered promiscuous mode [ 294.923235][T10816] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 294.932389][T10816] EXT4-fs (loop6): orphan cleanup on readonly fs [ 294.939965][T10816] EXT4-fs error (device loop6): xattr_find_entry:297: inode #15: comm syz.6.1849: corrupted xattr entries [ 294.952537][T10816] EXT4-fs (loop6): 1 orphan inode deleted [ 294.958312][T10816] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 295.100471][ T4346] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 295.271782][ T4346] cdc_ncm 3-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 295.279696][ T4346] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 295.326419][ T4346] cdc_ncm 3-1:1.0: setting tx_max = 32 [ 295.328944][T10828] device syzkaller0 entered promiscuous mode [ 295.360678][T10829] loop4: detected capacity change from 0 to 512 [ 295.397336][ T4346] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 295.420561][T10829] EXT4-fs (loop4): Test dummy encryption mode enabled [ 295.427400][T10829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 295.453484][T10829] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 295.504258][T10829] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.532768][T10829] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1851: corrupted xattr entries [ 295.551366][T10829] EXT4-fs (loop4): 1 orphan inode deleted [ 295.557162][T10829] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 295.632875][ T4346] usb 3-1: USB disconnect, device number 7 [ 295.817390][ T4346] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 296.714554][T10851] device syzkaller0 entered promiscuous mode [ 296.947654][T10870] fuse: Bad value for 'fd' [ 297.034911][T10859] device syzkaller0 entered promiscuous mode [ 297.048301][T10859] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 297.080799][T10875] device syzkaller0 entered promiscuous mode [ 297.308642][T10886] loop5: detected capacity change from 0 to 256 [ 297.348446][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1867'. [ 297.381684][T10886] FAT-fs (loop5): Unrecognized mount option "permit_directio" or missing value [ 299.251246][T10934] fuse: Bad value for 'fd' [ 299.408674][T10937] device syzkaller0 entered promiscuous mode [ 299.456411][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1880'. [ 299.557464][T10948] hub 8-0:1.0: USB hub found [ 299.564629][T10948] hub 8-0:1.0: 1 port detected [ 300.478720][T10956] loop5: detected capacity change from 0 to 512 [ 300.611873][T10956] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 300.810329][T10956] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1881: inode has both inline data and extents flags [ 300.907255][T10974] loop4: detected capacity change from 0 to 512 [ 300.956113][T10974] EXT4-fs (loop4): Test dummy encryption mode enabled [ 300.963080][T10974] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 301.066458][T10974] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 301.075619][T10974] EXT4-fs (loop4): orphan cleanup on readonly fs [ 301.086058][T10974] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.1885: corrupted xattr entries [ 301.104498][T10974] EXT4-fs (loop4): 1 orphan inode deleted [ 301.110346][T10974] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 301.244746][T10956] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1881: couldn't read orphan inode 15 (err -117) [ 301.475330][T10973] loop2: detected capacity change from 0 to 1024 [ 301.555209][T10978] loop6: detected capacity change from 0 to 512 [ 301.591418][T10956] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 301.655405][T10983] device syzkaller0 entered promiscuous mode [ 301.685467][T10973] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.697869][T10978] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 301.740752][ C0] ================================================================== [ 301.749384][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 301.757009][ C0] Read of size 2 at addr ffff88802c114c2a by task kworker/0:9/4530 [ 301.764933][ C0] [ 301.767309][ C0] CPU: 0 PID: 4530 Comm: kworker/0:9 Not tainted syzkaller #0 [ 301.774799][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.784892][ C0] Workqueue: rcu_gp process_srcu [ 301.789911][ C0] Call Trace: [ 301.793240][ C0] [ 301.796117][ C0] dump_stack_lvl+0x188/0x250 [ 301.800850][ C0] ? show_regs_print_info+0x20/0x20 [ 301.806100][ C0] ? _printk+0xda/0x130 [ 301.810318][ C0] ? rose_timer_expiry+0x470/0x490 [ 301.815477][ C0] ? load_image+0x400/0x400 [ 301.820040][ C0] print_address_description+0x60/0x2d0 [ 301.825814][ C0] ? rose_timer_expiry+0x470/0x490 [ 301.830981][ C0] kasan_report+0xdf/0x130 [ 301.835442][ C0] ? rose_timer_expiry+0x470/0x490 [ 301.840610][ C0] rose_timer_expiry+0x470/0x490 [ 301.845594][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 301.850670][ C0] call_timer_fn+0x17b/0x540 [ 301.855309][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 301.860381][ C0] ? __run_timers+0x7f0/0x7f0 [ 301.865117][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 301.870368][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 301.875615][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 301.880820][ C0] __run_timers+0x53a/0x7f0 [ 301.885436][ C0] ? detach_timer+0x2b0/0x2b0 [ 301.890196][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 301.896228][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 301.901131][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 301.906468][ C0] run_timer_softirq+0x63/0xf0 [ 301.911277][ C0] handle_softirqs+0x339/0x830 [ 301.916093][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 301.921001][ C0] ? do_softirq+0x210/0x210 [ 301.925564][ C0] __irq_exit_rcu+0x13b/0x230 [ 301.930296][ C0] ? irq_exit_rcu+0x20/0x20 [ 301.934868][ C0] irq_exit_rcu+0x5/0x20 [ 301.939153][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 301.944837][ C0] [ 301.947800][ C0] [ 301.950771][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 301.956816][ C0] RIP: 0010:delay_tsc+0x57/0xc0 [ 301.961721][ C0] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 d6 e0 48 fd 65 8b 05 57 ed f8 7b 85 c0 74 1c f3 90 01 00 00 00 e8 2f df 48 fd e8 4a 76 b2 05 39 c5 75 0e 0f 01 f9 [ 301.981379][ C0] RSP: 0018:ffffc900034efac0 EFLAGS: 00000286 [ 301.987497][ C0] RAX: 0000000080000000 RBX: 0000000000002af9 RCX: 0000000000000000 [ 301.995637][ C0] RDX: 000000000000009c RSI: ffffffff8a79f760 RDI: 00000000ffffffff [ 302.003656][ C0] RBP: 0000000000000000 R08: ffffc900034ef927 R09: 1ffff9200069df24 [ 302.011687][ C0] R10: dffffc0000000000 R11: fffff5200069df25 R12: dffffc0000000000 [ 302.019714][ C0] R13: ffffffff96342800 R14: 0000009c8d934edb R15: 00000000000022f1 [ 302.027751][ C0] try_check_zero+0x2c7/0x340 [ 302.032486][ C0] process_srcu+0x195/0xc10 [ 302.037048][ C0] ? read_lock_is_recursive+0x10/0x10 [ 302.042474][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 302.048426][ C0] ? _raw_spin_unlock+0x40/0x40 [ 302.053320][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.058575][ C0] process_one_work+0x85f/0x1010 [ 302.063578][ C0] ? worker_detach_from_pool+0x240/0x240 [ 302.069256][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 302.074595][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 302.079665][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 302.085261][ C0] ? wq_worker_running+0x97/0x170 [ 302.090343][ C0] worker_thread+0xaa6/0x1290 [ 302.095091][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 302.100336][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 302.106301][ C0] kthread+0x436/0x520 [ 302.110416][ C0] ? rcu_lock_release+0x20/0x20 [ 302.115304][ C0] ? kthread_blkcg+0xd0/0xd0 [ 302.119936][ C0] ret_from_fork+0x1f/0x30 [ 302.124407][ C0] [ 302.127457][ C0] [ 302.129806][ C0] Allocated by task 8497: [ 302.134178][ C0] __kasan_kmalloc+0xb5/0xf0 [ 302.138813][ C0] kernfs_fop_open+0x3da/0xbf0 [ 302.143614][ C0] do_dentry_open+0x7ff/0xf80 [ 302.148332][ C0] path_openat+0x26f5/0x2fa0 [ 302.152964][ C0] do_filp_open+0x1e2/0x410 [ 302.157502][ C0] do_sys_openat2+0x150/0x4b0 [ 302.162216][ C0] __x64_sys_openat+0x135/0x160 [ 302.167111][ C0] do_syscall_64+0x4c/0xa0 [ 302.171573][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.177515][ C0] [ 302.179877][ C0] The buggy address belongs to the object at ffff88802c114c00 [ 302.179877][ C0] which belongs to the cache kmalloc-512 of size 512 [ 302.193967][ C0] The buggy address is located 42 bytes inside of [ 302.193967][ C0] 512-byte region [ffff88802c114c00, ffff88802c114e00) [ 302.207198][ C0] The buggy address belongs to the page: [ 302.212874][ C0] page:ffffea0000b04500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802c115000 pfn:0x2c114 [ 302.224370][ C0] head:ffffea0000b04500 order:2 compound_mapcount:0 compound_pincount:0 [ 302.232738][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 302.240767][ C0] raw: 00fff00000010200 ffffea00017f7308 ffffea0000971708 ffff888016c41c80 [ 302.249408][ C0] raw: ffff88802c115000 0000000000100006 00000001ffffffff 0000000000000000 [ 302.258038][ C0] page dumped because: kasan: bad access detected [ 302.264513][ C0] page_owner tracks the page as allocated [ 302.270258][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 20587100405, free_ts 0 [ 302.287666][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 302.293273][ C0] __alloc_pages+0x1ee/0x480 [ 302.297911][ C0] alloc_page_interleave+0x24/0x1e0 [ 302.303148][ C0] new_slab+0xc0/0x4b0 [ 302.307265][ C0] ___slab_alloc+0x80a/0xdd0 [ 302.311896][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 302.317739][ C0] pskb_expand_head+0x127/0x10f0 [ 302.322712][ C0] netlink_trim+0x180/0x220 [ 302.327258][ C0] netlink_broadcast_filtered+0x7c/0x1170 [ 302.333040][ C0] netlink_broadcast+0x33/0x40 [ 302.337850][ C0] genlmsg_multicast_allns+0x2bb/0x490 [ 302.343347][ C0] genl_ctrl_event+0x7d5/0xa50 [ 302.348147][ C0] genl_register_family+0xe6d/0x10f0 [ 302.353584][ C0] dp_register_genl+0x4b/0x150 [ 302.358389][ C0] dp_init+0x118/0x140 [ 302.362494][ C0] do_one_initcall+0x272/0x730 [ 302.367292][ C0] page_owner free stack trace missing [ 302.372967][ C0] [ 302.375317][ C0] Memory state around the buggy address: [ 302.380972][ C0] ffff88802c114b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 302.389066][ C0] ffff88802c114b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 302.397264][ C0] >ffff88802c114c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.405428][ C0] ^ [ 302.410837][ C0] ffff88802c114c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.418938][ C0] ffff88802c114d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.427043][ C0] ================================================================== [ 302.435147][ C0] Disabling lock debugging due to kernel taint [ 302.441404][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 302.448628][ C0] CPU: 0 PID: 4530 Comm: kworker/0:9 Tainted: G B syzkaller #0 [ 302.457511][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.467603][ C0] Workqueue: rcu_gp process_srcu [ 302.472593][ C0] Call Trace: [ 302.475902][ C0] [ 302.478768][ C0] dump_stack_lvl+0x188/0x250 [ 302.483586][ C0] ? show_regs_print_info+0x20/0x20 [ 302.488828][ C0] ? load_image+0x400/0x400 [ 302.493378][ C0] panic+0x2e5/0x810 [ 302.497313][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 302.501857][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 302.507807][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 302.513849][ C0] ? _raw_spin_unlock+0x40/0x40 [ 302.518750][ C0] ? print_memory_metadata+0x314/0x400 [ 302.524251][ C0] ? rose_timer_expiry+0x470/0x490 [ 302.529406][ C0] check_panic_on_warn+0x80/0xa0 [ 302.534389][ C0] ? rose_timer_expiry+0x470/0x490 [ 302.539546][ C0] end_report+0x6d/0xf0 [ 302.543765][ C0] kasan_report+0x102/0x130 [ 302.548319][ C0] ? rose_timer_expiry+0x470/0x490 [ 302.553501][ C0] rose_timer_expiry+0x470/0x490 [ 302.558489][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 302.563560][ C0] call_timer_fn+0x17b/0x540 [ 302.568195][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 302.573262][ C0] ? __run_timers+0x7f0/0x7f0 [ 302.577989][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.583234][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 302.588483][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 302.593557][ C0] __run_timers+0x53a/0x7f0 [ 302.598116][ C0] ? detach_timer+0x2b0/0x2b0 [ 302.602916][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 302.608936][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 302.613924][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 302.619250][ C0] run_timer_softirq+0x63/0xf0 [ 302.624065][ C0] handle_softirqs+0x339/0x830 [ 302.628875][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 302.633772][ C0] ? do_softirq+0x210/0x210 [ 302.638321][ C0] __irq_exit_rcu+0x13b/0x230 [ 302.643047][ C0] ? irq_exit_rcu+0x20/0x20 [ 302.647592][ C0] irq_exit_rcu+0x5/0x20 [ 302.651869][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 302.657550][ C0] [ 302.660615][ C0] [ 302.663570][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 302.669605][ C0] RIP: 0010:delay_tsc+0x57/0xc0 [ 302.674597][ C0] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 d6 e0 48 fd 65 8b 05 57 ed f8 7b 85 c0 74 1c f3 90 01 00 00 00 e8 2f df 48 fd e8 4a 76 b2 05 39 c5 75 0e 0f 01 f9 [ 302.694235][ C0] RSP: 0018:ffffc900034efac0 EFLAGS: 00000286 [ 302.700340][ C0] RAX: 0000000080000000 RBX: 0000000000002af9 RCX: 0000000000000000 [ 302.708349][ C0] RDX: 000000000000009c RSI: ffffffff8a79f760 RDI: 00000000ffffffff [ 302.716362][ C0] RBP: 0000000000000000 R08: ffffc900034ef927 R09: 1ffff9200069df24 [ 302.724376][ C0] R10: dffffc0000000000 R11: fffff5200069df25 R12: dffffc0000000000 [ 302.732531][ C0] R13: ffffffff96342800 R14: 0000009c8d934edb R15: 00000000000022f1 [ 302.740560][ C0] try_check_zero+0x2c7/0x340 [ 302.745376][ C0] process_srcu+0x195/0xc10 [ 302.749929][ C0] ? read_lock_is_recursive+0x10/0x10 [ 302.755346][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 302.761284][ C0] ? _raw_spin_unlock+0x40/0x40 [ 302.766183][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.771431][ C0] process_one_work+0x85f/0x1010 [ 302.776418][ C0] ? worker_detach_from_pool+0x240/0x240 [ 302.782095][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 302.787433][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 302.792522][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 302.798110][ C0] ? wq_worker_running+0x97/0x170 [ 302.803179][ C0] worker_thread+0xaa6/0x1290 [ 302.807899][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 302.813145][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 302.819087][ C0] kthread+0x436/0x520 [ 302.823194][ C0] ? rcu_lock_release+0x20/0x20 [ 302.828088][ C0] ? kthread_blkcg+0xd0/0xd0 [ 302.832721][ C0] ret_from_fork+0x1f/0x30 [ 302.837328][ C0] [ 302.840853][ C0] Kernel Offset: disabled [ 302.854094][ C0] Rebooting in 86400 seconds..